Re: Problem using nsupdate -l -k with zone inside view

2024-11-06 Thread marki
Aight 🙈 Session.key is actually a session key. It changes when bind is restarted, on a different server it's different anyway. LOL I configured a static key now. El 5 de noviembre de 2024 18:37:05 CET, Marki escribió: >Hello, > >I was converting a config to use views which

Problem using nsupdate -l -k with zone inside view

2024-11-05 Thread Marki
allow" blocks to no avail. Bind 9.16.6 on SLES15-SP3. Thoughts? Thanks, Marki -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact

Re: feature request for improving named-compilezone

2024-02-11 Thread marki
We're using dynamic updates. Update files are generated mostly through scripts so you know exactly who did what and when. On February 11, 2024 6:31:38 PM GMT+01:00, Andrew Latham wrote: >If you are using a version control system like GIT then I would suggest you >have a zonefile.md next to the

Re: I am provoked by ISC for the 10 years statement that ISC refuse to fulfill (Re: DNSSEC setup for stealth master and multi slave/recursive - Multiple DS keys?)

2024-02-11 Thread marki
It's hilarious. Who says python3 is going to be a thing in 10y ... or 20 🤣 On February 11, 2024 5:41:34 PM GMT+01:00, Tim Daneliuk via bind-users wrote: >On 2/11/24 02:07, Ole Aamot wrote: >> "This whole “we support everything for 10 years” is just a sales pitch, not >> a something that can be

Correct response to NS request in case of dual delegation when one delegation returns REFUSED

2022-05-18 Thread Marki
t working. They claim this is normal and that they only support Windows DNS for that check. My conclusion is that Windows DNS is an abomination. And relying on an inherently faulty behavior leads straight to hell. Am I missing something? Is Bind behaving correctly? Thanks, Marki -- Visit https:

Re: Need Help with BIND9

2021-06-11 Thread Marki
A thing you probably missed is checking the log files. What do they contain when it "isn't working"? What is the actual problem anyway?___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the develo

Re: forwarding zone setup from a BIND slave (without recursion?)

2021-04-13 Thread Marki
nd blacklists. Palo Altos currently are not able to whitelist AFAIK. Best regards, Marki ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subs

Re: forwarding zone setup from a BIND slave (without recursion?)

2021-04-07 Thread Marki
to the non-recursive service)? What would you like to achieve? What would you like to prevent? Bye, Marki ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software

Re: Authority and forwarding, but not recursion/iteration

2021-03-16 Thread Marki
On 3/13/2021 12:11 AM, Tony Finch wrote: Marki wrote: But if you need granular filtering, that could become a lot of views... Yes, I think RPZ is really designed to be a ban hammer for dealing with abuse, rather than a general-purpose access control mechanism. If you need to get really fancy

Re: Authority and forwarding, but not recursion/iteration

2021-03-10 Thread Marki
On 3/9/2021 10:21 PM, Tony Finch wrote: Marki wrote: I'm not sure about the flexibility of RPZ; it doesn't seem that I can have rules like "client 1.2.3.4 is allowed to look up example.com but client 1.2.3.5 is not". You can have multiple response-policy zones, which are

Re: Authority and forwarding, but not recursion/iteration

2021-03-09 Thread Marki
On 3/9/2021 6:03 PM, Tony Finch wrote: Marki wrote: I am seeking a combination of either a combined configuration on one, or a config of several different DNS servers together to achieve the following: * Some clients should be able to resolve authoritative local zones as well as some

Re: Authority and forwarding, but not recursion/iteration

2021-03-07 Thread Marki
rs. > >On Sat, Mar 6, 2021 at 3:34 PM Marki wrote: > >> I'm not sure: >> >> > Some clients should be able to resolve authoritative local zones as >well >> as some forwarded zones. >> >> And only that. "forward only;" doesn't c

Re: Authority and forwarding, but not recursion/iteration

2021-03-06 Thread Marki
nt is to _only_ resolve local stuff for some clients. On 3/6/2021 8:48 PM, Crist Clark wrote: forward only; On Fri, Mar 5, 2021 at 5:19 PM Marki <mailto:bind-us...@lists.roth.lu>> wrote: Hello, I am seeking a combination of either a combined configuration on one, or a

Authority and forwarding, but not recursion/iteration

2021-03-05 Thread Marki
x27;t turn off recursion. * Since I can't turn off recursion I can't prevent it to go and try to resolve from root DNS. How do I do one (local authority and forwarders) but not the other (iterative lookups on the Internet)? Thanks, Marki _