Re: named hangs when trying to sign a large zone after upgrading to 9.18.28

2024-07-25 Thread Ondřej Surý
Hi Brian, here are some hints what can you do to get more information of of the running `named` process: https://kb.isc.org/docs/aa-00341 Basically pstack / eu-stack and or gcore (or attaching gdb). It's important to have debugging symbols present, without them it's virtually impossible to deb

named hangs when trying to sign a large zone after upgrading to 9.18.28

2024-07-25 Thread Sebby, Brian A. via bind-users
I upgraded our DNS servers when the 9.18.28 release came out, and ran into a problem today that I wanted to know if anyone else had seen or had any suggestions about how to debug. We have our DNS configured in a hidden primary configuration, where the primary has internal and external views and

Re: informing about potentially breaking security fixes

2024-07-25 Thread Petr Špaček
Hi, we are always trying to improve! We thought that mentioning it in the release announcement e-mail and in the release notes is enough. What other channel we failed to consider? Thank you for constructive suggestions. Petr Špaček Internet Systems Consortium On 25. 07. 24 15:08, Veronique

Re: bind-users Digest, Vol 4516, Issue 1

2024-07-25 Thread James Stegemeyer
Veronique, There are two restrictions: max-types-per-name 100; (Unlikely to cause issues) max-records-per-type 100; So to list the counts of each each name you could use the following command: dig -t axfr $zone  @$server | awk '{print $1,$4}' | sort | uniq -c | sort -n Where $zone is zone FQ

Re: bind-users Digest, Vol 4516, Issue 1

2024-07-25 Thread Veronique Lefebure
Hi, We had the same issue as James, fortunately with no impact on production. But I agree that , although I finally found the warning at the very bottom of the mail announcing the new release, this MAJOR change should have been announced more clearly. How do you find out whether or not you have