Re: securing bind in todays hostile environment

2020-01-18 Thread John W. Blue
Some things to think about .. 1. What is your/teams plan B to fix this type of ansible environment should it get horked up? There is a ton of stuff that is being configured for you all under the hood and by your own admission your a novice. The laws of unintended consequences apply. 2. Why

Re: securing bind in todays hostile environment

2020-01-18 Thread Grant Taylor via bind-users
On 1/18/20 7:06 AM, N. Max Pierson wrote: Hi List, Hi M, First off, I should note that I am a novice with administering Bind, so please bear with me. We all started somewhere. Hopefully we all continue to learn new things. ;-) We are looking to be more pro-active and security minded in

securing bind in todays hostile environment

2020-01-18 Thread N. Max Pierson
Hi List, First off, I should note that I am a novice with administering Bind, so please bear with me. We are looking to be more pro-active and security minded in our network in general and while we are getting ready to completely replace/upgrade our current instances of Bind, I would like to

RE: Slow recursive query performance on Windows x64

2020-01-18 Thread Steve Farr via bind-users
Hi Ondřej, I don't have IPv6 connectivity through my ISP, and don't use it on my LAN, so I have it unchecked/not bound in Windows, though I tried reversing that and it didn't seem to make a difference… Below is a text summary of a wireshark capture showing my client at 192.168.65.40 querying

Re: BIND Workaround for Broken DNS

2020-01-18 Thread Matus UHLAR - fantomas
On 17.01.20 22:03, Crist Clark wrote: We have a service vendor with broken DNS. It looks like a well known problem of F5 load balancers. For the name, efederation.wip.ceridian.com (you get redirected there from https://iam.ceridian.com) The DNS "servers" return an answer for a A request, bu