Does anyone remember ...

2018-11-17 Thread Red Cricket
Does anyone remember a project involving DNS at UCS where someone set up a dns server(s) to do arithmetic? If so can you reply with a link or something? Thanks ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this l

How can I determine if 9.9.4 bind named executable was built with --enable-rrl?

2013-09-24 Thread Red Cricket
Hi, I understand to be able to use rate-limiting with BIND 9.9.4 it needed to have been built with this "./configure --enable-rrl" configure command. But what if I am not the person that builds named? How can I determine if it was built with rate-limiting? I have tried isc-config.sh and rndc sta

Re: Loopback configuration

2013-06-22 Thread Red Cricket
192.168.0.101 is in the non-routeable address block https://en.wikipedia.org/wiki/Private_network On Sat, Jun 22, 2013 at 2:00 PM, Lawrence K. Chen, P.Eng. wrote: > None of what you've described seems to have anything to do with bind > > But, if you are running bind... there are a number of

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
ctory when that patch command was issued. On Fri, Apr 5, 2013 at 1:02 PM, Vernon Schryver wrote: > > From: Red Cricket > > > here's a link to pastebin http://pastebin.com/RxcsJMLe > > > > I used ... > > > > > > patch -s -p0 -i rl-9.9.2-P2.patch

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
here's a link to pastebin http://pastebin.com/RxcsJMLe On Fri, Apr 5, 2013 at 11:35 AM, Red Cricket wrote: > I used ... > > patch -s -p0 -i rl-9.9.2-P2.patch > > like it says in the documentation. > I could post the entire set of commands and I am executing and the >

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
wrote: > > From: Red Cricket > > > I have been attempting to follow the instructions here: > > http://ss.vix.su/~vjs/rrlrpz.html > > but make fails with this error ... > > > undefined reference to `dns_rrl'query.o: In function > > I bet that there

trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
I have been attempting to follow the instructions here: http://ss.vix.su/~vjs/rrlrpz.html but make fails with this error ... gcc -I/users/red/platform/red-bind-beta/BUILD/red-bind-beta-9.9.2 -I./include -I./unix/include -I. -I/users/red/platform/red-bind-beta/BUILD/red-bind-beta-9.9.2/lib/lwres/i

Confused about CVE-2013-2266

2013-04-04 Thread Red Cricket
Hi, I am sorry for being so dense but I am confused about what to do about protecting my BIND DNS servers running 9.9.1-P4 from the regex issue. The link https://kb.isc.org/article/AA-00871 says this ... Impact: ... Intentional exploitation of this condition can cause denial of service in all a

Does 9.9.2-P2 support rate-limit configuration?

2013-04-01 Thread Red Cricket
Hi, Does 9.9.2-P2 (the recent release that fixes CVE-2013-2266: A Maliciously Crafted Regular Expression Can Cause Memory Exhaustion in named) support rate-limit ? If not is there a way to patch the source code to allow for rate-limiting? Thanks ___ Ple

what values should I use for responses-per-second and window in my rate-limit clause?

2013-03-21 Thread Red Cricket
I am having trouble determining what values I should set my rate-limit to. The only example I have seen is this ... rate-limit { responses-per-second 5; window 5; }; ... is that too tight? Can it cause problems for my clients? This is suppose to h

Re: allow-users with list of IP's and key

2012-08-13 Thread Red Cricket
Thank you Sir! On Mon, Aug 13, 2012 at 8:08 PM, Mark Andrews wrote: > > In message > > , Red Cricket writes: >> Hi, >> >> I am running bind 9.9.1-P1 and I have in my named.conf this zone ... >> >> zone "example.com" { &

allow-users with list of IP's and key

2012-08-13 Thread Red Cricket
Hi, I am running bind 9.9.1-P1 and I have in my named.conf this zone ... zone "example.com" { ... allow-update { 192.168.1.32; 192.168.1.33; key example.com.key; }; }; I was hoping that this meant that only hosts 192.168.1.32 and 192.168.1.33 with the key exam

Re: make bind-9.7.4-P1 fails when --prefix and --exec-prefix switches are used

2011-11-17 Thread Red Cricket
Oops! Thanks again Mark. I'll fix'em :) ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: make bind-9.7.4-P1 fails when --prefix and --exec-prefix switches are used

2011-11-17 Thread Red Cricket
work fine now. On Thu, Nov 17, 2011 at 1:36 PM, Mark Andrews wrote: > > You need to fix your gcc wrapper as it is not handling command line > arguments that contain spaces.  This is a common error when people > write shell script wrappers.  They fail to account for arguments > with s

make bind-9.7.4-P1 fails when --prefix and --exec-prefix switches are used

2011-11-17 Thread Red Cricket
Hi, I have been working on upgrading from bind-9.7.3-P3 to bind-9.7.4-P1 to patch for cve-2011-4313. Here is what I am doing ... rcricket@dws-rch-rcricket-l:~$ wget http://ftp.isc.org/isc/bind9/9.7.4-P1/bind-9.7.4-P1.tar.gz ... rcricket@dws-rch-rcricket-l:~$ tar -zxf bind-9.7.4-P1.tar.gz rcricke