Re: Why DNSSEC errors for bund.de?

2011-05-24 Thread Lars Hecking
Chris Thompson writes: > We are getting DNSSEC-related SERVFAILs on names in bund.de (e.g. > mx1.bind.de). This happens with all of BIND 9.7.3-P1, 9.7.4b1 and > 9.8.0-P1 configured with the root and dlv.isc.org trust anchors. > > However, I can't see what is actually wrong with it, using dig +cd a

Re: RHEL5 BIND in PROD

2011-03-15 Thread Lars Hecking
fakessh @ writes: > I recompile the source rpm fedora core 14 bind 9.7.3 to EL4 and EL5 > with koji see my blog for explanations > > http://fakessh.eu/2011/03/10/bind-9-7-3-sur-centos-5-5-depuis-rpm-source-fecora-14/ Yep, that works fine, and even on RHEL3. _

Re: Here I am again, hat in hand with humble demeanor.......

2010-09-24 Thread Lars Hecking
Stewart Dean writes: > More questions...(CentOS 5.5, bind-9.7.1-P2) The arguably easiest way to deal with this, if you prefer a recent version of bind on CentOS, is to grab the most recent srpm from the updates/testing directory of your nearest Fedora mirror and simply* rebuild it. Current Fe

Re: Building 9.6.1-P2 for 32-bit Redhat RHEL 5.4

2009-11-28 Thread Lars Hecking
> At present I do not have a 32-bit build environment I can try to natively > build this on, and was hoping that somebody could suggest how I can get round > this problem in the build environment I am using. http://fedoraproject.org/wiki/Projects/Mock

Re: BIND 9.4-ESVb1 is now available.

2009-11-19 Thread Lars Hecking
Chris Thompson writes: > On Nov 19 2009, Mark Andrews wrote: > > > > > BIND 9.4-ESVb1 is now available. > > > > BIND 9.4-ESVb1 is a extended release version beta for BIND 9.4. > > What's with the strange new version number? How is this different from, say, > a "9.4.4b1"? (Lots of

Re: bind 9.5 on Solaris dies silently

2009-10-30 Thread Lars Hecking
Lars Hecking writes: > Milan Jurik writes: > [...] > > If it is silent death at specific time (look at the stats web page) then > > why not to "truss" the daemon? Btw. no core file on the system? > > Thank you (and Andrew) for the suggestion. Unfortu

Re: bind 9.5 on Solaris dies silently

2009-10-06 Thread Lars Hecking
Milan Jurik writes: [...] > If it is silent death at specific time (look at the stats web page) then > why not to "truss" the daemon? Btw. no core file on the system? Thank you (and Andrew) for the suggestion. Unfortunately, the problem seems to be intermittent and I cannot reproduce it at will

bind 9.5 on Solaris dies silently

2009-10-06 Thread Lars Hecking
Hi all, I have made the observation that named sometimes dies silently when I look at the stats web page. Pretty much full logging is enabled, except query logging, but nothing at all is logged in this situation. How could I possibly debug this? statistics-channels { inet * port 808

update with no effect

2009-03-30 Thread Lars Hecking
I have started seeing these entries in named.log: 29-Mar-2009 05:02:35.467 general: warning: update with no effect 29-Mar-2009 05:02:35.468 general: warning: update with no effect 29-Mar-2009 05:02:35.469 general: warning: update with no effect 29-Mar-2009 05:02:35.470 general: warning: update w

Re: Exiting due to early fatal error

2009-03-19 Thread Lars Hecking
Mark Andrews writes: [...] > > This bind was compiled for threads, and /dev/poll is not in the jail. > > Well add /dev/poll/. Things have changed since 2001 when that > advice was written. Kevin Darcy writes: [...] > For a program like named which forks itself, "truss -f" is your

Exiting due to early fatal error

2009-02-17 Thread Lars Hecking
BIND 9.4.3-P1, Solaris 8 I'm trying to get a chroot setup to work following the instructions here http://www.boran.com/security/sp/bind9_20010430.html # /usr/sbin/named -g -t /var/named/chroot 17-Feb-2009 12:05:56.789 starting BIND 9.4.3-P1 -g -t /var/named/chroot 17-Feb-2009 12:05:56.790 fo

Re: in-addr.arpa delegation failure

2009-01-21 Thread Lars Hecking
Stephane Bortzmeyer writes: [...] > IMHO, you need to go back to the drawing board and, before writing > named.conf and zone files, deciding on a general architecture. > > Who will be the master for 30.172.in-addr.arpa? > Who will be authoritative for 30.172.in-addr.arpa? > Who will be the master

in-addr.arpa delegation failure

2009-01-20 Thread Lars Hecking
I've been beating my head against the wall with this issue, and I'm out of ideas: I can't get reverse lookups for a particular, delegated RFC1918 net to work. Setup: Internal root dns.domain.com running bind 9.4.2-P2. This host is set up as a master for 172.30/16. It delegates 172.30 to a

Re: ISC launches new website and mailing list manager

2008-11-18 Thread Lars Hecking
> The mailing list conversion requires a little explanation: > > * The new one-stop page for all the lists under isc.org is > https://lists.isc.org/mailman/listinfo Now, can it be configured to strip or reject html rubbish? ___ bind-users mailing