Re: Value of a DNSSEC validating resolver

2024-02-11 Thread Mark Andrews
> On 9 Feb 2024, at 21:40, Petr Menšík wrote: > > Hello Mark, > > allow me here to correct your statement. We spent in Red Hat some time > thinking and testing validating clients. Validating resolver is *not* > necessary for validating clients to work. They are better and recommended, > but

Running systems for years without restart (was: I am provoked ...)

2024-02-11 Thread Ralph Seichter via bind-users
* Tim Daneliuk via bind-users: > But it did "provoke" a question. Does anyone think not restarting > *anything* for 10 years is a good idea? This isn't really BIND-related, so a different mailing list might be better suited for discussing the issue of ultra high availability. If you are interest

Re: secure statistics page

2024-02-11 Thread Fred Morris
There used to be an example in a directory in the BIND tarball, in contrib/dnspriv/ Here's a link to it from 9.12.3: http://athena.m3047.net/pub/bind/dnspriv/ -- Fred Morris On Sun, 11 Feb 2024, Andrew Latham wrote: I have seen this question a few times so would a note or example in https:/

Re: feature request for improving named-compilezone

2024-02-11 Thread marki
We're using dynamic updates. Update files are generated mostly through scripts so you know exactly who did what and when. On February 11, 2024 6:31:38 PM GMT+01:00, Andrew Latham wrote: >If you are using a version control system like GIT then I would suggest you >have a zonefile.md next to the

Re: feature request for improving named-compilezone

2024-02-11 Thread Andrew Latham
If you are using a version control system like GIT then I would suggest you have a zonefile.md next to the zone with any specific notes and maybe a history/changelog. This may not answer your problem case but documentation as markdown or even just a TXT next to the zone is handy. On Thu, Jan 18, 2

Re: secure statistics page

2024-02-11 Thread Andrew Latham
I have seen this question a few times so would a note or example in https://kb.isc.org/docs/aa-01123 (or other related documentation) be a good idea? On Thu, Jan 18, 2024 at 7:36 AM Ondřej Surý wrote: > Hi, > > put a real webserver in front of it. Both Apache and Nginx can work as > proxy. > > O

Re: I am provoked by ISC for the 10 years statement that ISC refuse to fulfill (Re: DNSSEC setup for stealth master and multi slave/recursive - Multiple DS keys?)

2024-02-11 Thread marki
It's hilarious. Who says python3 is going to be a thing in 10y ... or 20 🤣 On February 11, 2024 5:41:34 PM GMT+01:00, Tim Daneliuk via bind-users wrote: >On 2/11/24 02:07, Ole Aamot wrote: >> "This whole “we support everything for 10 years” is just a sales pitch, not >> a something that can be

Re: I am provoked by ISC for the 10 years statement that ISC refuse to fulfill (Re: DNSSEC setup for stealth master and multi slave/recursive - Multiple DS keys?)

2024-02-11 Thread Tim Daneliuk via bind-users
On 2/11/24 02:07, Ole Aamot wrote: "This whole “we support everything for 10 years” is just a sales pitch, not a something that can be fulfilled." – Ondřej Surý — ISC I realize that there was a whole kerfuffle here that I mercifully missed and have absolutely no interest in. But it did "pro

Ole Almot - banned from the list

2024-02-11 Thread Ondřej Surý
Folks, Ole Almot has been removed from the list and banned from re-subscribing. Sorry it took so long, I wanted to give this a benefit of the doubt. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply out

Re: WikiDNS 2.2.2

2024-02-11 Thread sthaug
> I respect the ISC.ORG, but you are not treating me or Karl Auer with respect > in trying to censor work on WikiDNS and asking us to stop the next generation > of DNS software with JSON records written in Python 3. You are posting on the "bind-users" mailing list. See https://lists.isc.org/m

I am provoked by ISC for the 10 years statement that ISC refuse to fulfill (Re: DNSSEC setup for stealth master and multi slave/recursive - Multiple DS keys?)

2024-02-11 Thread Ole Aamot
"This whole “we support everything for 10 years” is just a sales pitch, not a something that can be fulfilled." – Ondřej Surý — ISC 10+ year support is effectively done by domainameshop.com and is not just a sales pitch. I worked with Ståle Schumacher's company between 2003-2015 who celebrated