Re: Docker image

2023-01-28 Thread Elias Pereira
al working hours. > > On 27. 1. 2023, at 19:07, Elias Pereira wrote: > >  > hi, > > Is this docker image official? > > https://hub.docker.com/r/internetsystemsconsortium/bind9 > > -- > Elias Pereira > -- > Visit https://lists.isc.org/mailman/listinfo/bind-use

Docker image

2023-01-27 Thread Elias Pereira
hi, Is this docker image official? https://hub.docker.com/r/internetsystemsconsortium/bind9 -- Elias Pereira -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at

Re: address/prefix length mismatch

2022-08-24 Thread Elias Pereira
>> >> First deny the two addresses you want not to be part of the *ACL* and >> then accept the whole network. >> >> First match is used, so 10.60.0.0 would match !10.60.0.0 and be rejected >> before the next are tested. >> >> Thanks >> >>

Re: address/prefix length mismatch

2022-08-24 Thread Elias Pereira
t, I would be just repeating their > answers. Ok. Thanks!!! On Wed, Aug 24, 2022 at 11:05 AM Ondřej Surý wrote: > > On 24. 8. 2022, at 15:58, Elias Pereira wrote: > > hello Ondrej, > > Not completely wrong, because 255 is the broadcast. > > > No, it's not. Thi

Re: address/prefix length mismatch

2022-08-24 Thread Elias Pereira
AM Ondřej Surý wrote: > > > On 24. 8. 2022, at 15:26, Elias Pereira wrote: > >  > Hello Greg, > > Why doesn't bind work with networks/subnets in the conventional way? > > > It does. > > If the private subnet is 10.60.0.0/23, then it means that

Re: address/prefix length mismatch

2022-08-24 Thread Elias Pereira
at 9:31 AM Anand Buddhdev wrote: > On 24/08/2022 14:16, Elias Pereira wrote: > > Hi Elias, > > > Oh, sorry... :D > > > > here it is > > > > # cat named.conf.local > > # ACL das redes internas > > # Ultima modificação: 24/08/2022 > >

Re: address/prefix length mismatch

2022-08-24 Thread Elias Pereira
I changed all the networks from x.x.x.1/x to x.x.x.0/x and it seems to me that it now works. On Wed, Aug 24, 2022 at 9:16 AM Elias Pereira wrote: > Oh, sorry... :D > > here it is > > # cat named.conf.local > # ACL das redes internas > # Ultima modificação: 24/08/2

Re: address/prefix length mismatch

2022-08-24 Thread Elias Pereira
.40.0.1/22; 10.56.0.1/22; }; On Wed, Aug 24, 2022 at 9:14 AM Anand Buddhdev wrote: > On 24/08/2022 14:08, Elias Pereira wrote: > > Hi Elias, > > > I upgraded my AD, debian 10 to 11 and bind upgraded to version 9.16.27. > > > > Now I get the address/prefix length misma

address/prefix length mismatch

2022-08-24 Thread Elias Pereira
9.16.x? -- Elias Pereira -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users

CNAME for google sites

2021-10-25 Thread Elias Pereira
Hi, Google sites use a domain in the following way for their free sites. https://sites.google.com/company.com/mysite/ How can I create a CNAME for a site in this format? Is there another way? -- Elias Pereira ___ Please visit https://lists.isc.org

bind vulnerabilities

2021-05-01 Thread Elias Pereira
According to the article below, only the: "BIND 9.11.31, 9.16.15, and 9.17.12 all contain patches and the appropriate update should be applied" https://www.zdnet.com/google-amp/article/isc-urges-updates-of-dns-servers-to-wipe-out-new-bind-vulnerabilities/ Is this statement correct?

Re: Authoritative dns with private IP for hostname

2018-07-30 Thread Elias Pereira
Could you give me an example of how to do with DNAME? Em seg, 30 de jul de 2018 20:16, Grant Taylor via bind-users < bind-users@lists.isc.org> escreveu: > On 07/30/2018 04:54 PM, Elias Pereira wrote: > > Thanks to everyone that help me!!! > > You're welcome. > &g

Re: Authoritative dns with private IP for hostname

2018-07-30 Thread Elias Pereira
Thanks to everyone that help me!!! The Grant Taylor tuto works like a charm!!! :) On Fri, Jul 27, 2018 at 7:12 PM Grant Taylor via bind-users < bind-users@lists.isc.org> wrote: > On 07/27/2018 09:59 AM, Elias Pereira wrote: > > hello, > > Hi, > > > Can an auth

Authoritative dns with private IP for hostname

2018-07-27 Thread Elias Pereira
hello, Can an authoritative dns for a domain, eg mydomain.tdl, have a hostname, example, wordpress.mydomain.tdl with a private IP? Would this be accessible from the internet via hostname, if I did a nat on the firewall? -- Elias Pereira ___ Please

Reinstall bind9 via apt-get with options

2018-06-29 Thread Elias Pereira
Hello, Is there any way to reinstall bind9 with install options via apt-get install/reinstall? E.g: apt-get install --reinstall bind9 --with-dlz-ldap ... -- Elias Pereira ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to

Re: DNS can be a subdomain

2018-06-27 Thread Elias Pereira
to their products. > > I'm seeing more and more references to SIG(0) in the last couple of > weeks. I think I need to refresh myself on it. > > > > -- > Grant. . . . > unix || die > > ___ > Please visit https://lists.isc.org/

Re: DNS can be a subdomain

2018-06-26 Thread Elias Pereira
servers just > need the ability to update DNS. They do not need to be authoritative > for it. How would this work in the scenario I described above? On Tue, Jun 26, 2018 at 8:37 PM Grant Taylor via bind-users < bind-users@lists.isc.org> wrote: > On 06/26/2018 05:20 PM, Elias Pereira

Re: DNS can be a subdomain

2018-06-26 Thread Elias Pereira
the samba needs to be authoritative on its own dns. Our DC would be "str.hq.company.intra" and our dns "ns1.named.hq.company.intra". Maybe we use glue records, as Reindl Harald commented. On Tue, Jun 26, 2018 at 6:13 PM John Miller wrote: > Hi Elias, > > Genera

DNS can be a subdomain

2018-06-26 Thread Elias Pereira
Hello, My external DNS can be a subdomain of my root domain? Eg: root domain: company.intra external dns: named.company.intra -- Elias Pereira ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind

Re: DNS forwarding

2017-05-22 Thread Elias Pereira
> Grant. . . . > unix || die > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman

DNS forwarding

2017-05-17 Thread Elias Pereira
computer, if I need to access an internal subdomain, for example our webserver*, I can not access. Gives resolution error. For any other site, for example, google.com, I can access. I'm not finding the problem. Any idea? -- Elias Pereira __

Re: Best practices for ipv6

2015-12-17 Thread Elias Pereira
> Gary Wallis > Unixservice, LLC. > > > On 12/16/2015 00:09, John W. Blue wrote: > >> I have found https://ipv6.he.net to be helpful. >> >> John >> >> Sent from Nine <http://www.9folders.com/> >> >> *From:* Elias Pereira >> *

Best practices for ipv6

2015-12-15 Thread Elias Pereira
Hello guys, I like to know what are the best practices used or better bind configuration methods with ipv6? Thank you! -- Elias Pereira ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users

RE: Query on ignoring additional section returned in replies

2015-11-18 Thread Elias Ahmed Kamal
Even with a broken delegation its like always resolvable with Google DNS or even Open DNS. Are there any BIND specific workarounds? -Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Wednesday, November 18, 2015 6:26 PM To: Elias Ahmed Kamal Cc: bind-users@lists.isc.org

Query on ignoring additional section returned in replies

2015-11-18 Thread Elias Ahmed Kamal
Hi guys, I'm having issues resolving www.fis.com.my. I'm trying to tell fis.com.my that its an issue at their end, but when checking against 8.8.8.8 it resolves fineso it MUST be a problem with me. 1. Lookups fail, this is clear enough root@sputnik # dig @localhost www.fis.com.my ; <<>> D

Re: Doubt regarding acls and internal and external view.

2015-05-23 Thread Elias Pereira
returns the negative response to the client. > > > > > - Kevin > > > > *From:* bind-users-boun...@lists.isc.org [mailto: > bind-users-boun...@lists.isc.org] *On Behalf Of *Elias Pereira > *Sent:* Friday, May 22, 2015 10:48 AM > *To:* bind-users@lists.isc.org > *

Doubt regarding acls and internal and external view.

2015-05-22 Thread Elias Pereira
ne "external" { type master; file "/etc/bind/db.external"; }; }; Thus I should only put the site in a zone that is in the external view and the other servers on the internal view, would it? -- Elias Pereira ___

Re: Bind not returning A record

2010-12-22 Thread Elias
The A records for ns1.yu.kwsp.gov.my and ns2.yu.kwsp.gov.my is missing at the authoritative servers for the subdomain yu.kwsp.gov.my, ie : ns1.yu.kwsp.gov.my. 43200 IN A 202.162.21.163 ns2.yu.kwsp.gov.my. 43200 IN A 211.25.56.211 # dig @202.162.21.163 ns1.yu.kws

Re: Choosing authoritative nameservers

2010-06-03 Thread Elias
tact isn't bothered to respond...just great... - Original Message - From: "Matus UHLAR - fantomas" To: Sent: Wednesday, June 02, 2010 8:39 PM Subject: Re: Choosing authoritative nameservers On 02.06.10 16:20, Elias wrote: Does anyone know how BIND chooses which auth

Choosing authoritative nameservers

2010-06-02 Thread Elias
Hi guys, Does anyone know how BIND chooses which authoritative server to refer to? When a referal returns ns1.abc.com, ns2.abc.com and ns3.abc.com, will the recursive server randomly send out a request to either ns1, ns2 or ns3 or is there a selection algorithm? I've got a problem resolving

Unable to perform zone transfers

2009-07-07 Thread Elias
Hi all, I'm having troubles getting a particular zone transferred over to our nameserver but can manually dig for it. After trying a couple of things out, I noticed that it didn't work because they had the parent iskl.edu.my and the subdmain lc.iskl.edu.my in the same zone. I was only able to h

Intermittent name resolution for spmonline.petronas.com.my

2009-03-16 Thread Elias
P, but are there any other reasons? RFC 5452 has a mention that certain resolvers may re-issue the query over TCP when they detects spoofing attempts (can anyone explain in detail how this is achieved, greatly appreciated :D) Thx! - Elias - ___