dnssec update

2015-03-11 Thread Jittinan Suwanruengsri
Hi, I configure bind to serve "example.com" domain with 1. dnssec-enable yes; 2. auto-dnssec maintain; 3. inline-signing yes; 4. allow-update{localhost;}; Bind can fully automatic dnssec signing on example.com but If I want to modify a record in example.com zone

How does bind 9.x chooses root servers?

2014-09-19 Thread Jittinan Suwanruengsri
Hi, How does bind 9.x chooses root servers? This is sample result from tcpdump on Bind 9.x .From this result it means bind chooses root servers base on weight of response time. It does not choose the lowest response time server. Do I understand correctly? 2 a.root-servers.net.dom

RE: dnssec automatic signing

2014-08-28 Thread Jittinan Suwanruengsri
Hi Mark If there are many RRSIGs expire at the same time, Which record will be chosen? Sincerely, Mr.Jittinan Suwanrueangsri -Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Friday, August 29, 2014 5:36 AM To: Jittinan Suwanruengsri Cc: bind-us...@isc.org Subject

dnssec automatic signing

2014-08-28 Thread Jittinan Suwanruengsri
Hi, This is example.com zone $ORIGIN . $TTL 86400 ; 1 day example.com 86400 IN SOA ns.example.com. hostmaster.example.com. ( 2013122402 ; serial 86400 ; refresh (1 day) 7200

rndc zonestatus meaning

2014-08-07 Thread Jittinan Suwanruengsri
Hi, 1. #rncd zonestatus example.com name: example.com type: master files: /usr/local/named/zone/example.com.zone serial: 2013122402 signed serial: 2013122405 nodes: 5 last loaded: Fri, 29 Aug 2014 08:00:15 GMT secure: yes inline signing: yes key maintenance: automatic next key

bind 9.10-P2 dnssec keys management

2014-08-07 Thread Jittinan Suwanruengsri
Hi, 1. my server use key id 23412 first and then 40767 [root@dnssec keys]# dnssec-settime -p all Kexample.com.+005+23412 Created: Wed Jul 30 14:56:09 2014 Publish: Wed Jul 30 14:56:09 2014 Activate: Fri Aug 1 14:56:09 2014 Revoke: UNSET Inactive: Sun Aug 31 14:56:09 2014 Delete: M

Re: cache_dump.db format and meaning

2014-02-22 Thread Jittinan Suwanruengsri
Thank you. - Reply message - From: "Evan Hunt" To: "Mr.Jittinan Suwanrueangsri" Cc: "bind-users@lists.isc.org" Subject: cache_dump.db format and meaning Date: Fri, Feb 21, 2014 22:51 On Fri, Feb 21, 2014 at 03:47:25PM +0700, Mr.Jittinan Suwanrueangsri wrote: > I have dumped cac