Re: QNAME minimisation question

2025-06-03 Thread Stacey Marshall
On 3 Jun 2025, at 10:29, Nick Tait via bind-users wrote: > But I also noticed that delv only makes A queries (not ), and even if I > specify "-6" on the command-line it makes no difference? Have yo tried using an IPv6 address with the -x option? delv -x :::45.90.5.195 +ns +qmin +maxque

Re: Docker Compose Setup with ISC/Bind9 Image

2024-12-28 Thread Stacey Marshall
I agree with the others, does it run standalone without docker complicating things. I suggest running with -g option too to keep it in the foreground and log to your terminal session. Happy hunting, Stace Sent from Gmail Mobile On Sat, 28 Dec 2024 at 12:22, Darren Ankney wrote: > Hi Pablo,

Re: Problems compiling BIND 9.18.28 on Solaris 11.4

2024-08-14 Thread Stacey Marshall
Hi Jaco, Ondřej is right, for Solaris build I have to patch two Makefiles to change the order of the library paths such that the OpenSSL 3 libraries are found. Once Solaris 11.4 moves OpenSSL 1 out of the way the patch wont be needed but until then... https://github.com/oracle/solaris-userla

Re: Question about ISC BIND COPR repositories for 9.16->9.18 ESV transition

2024-06-14 Thread Stacey Marshall
On 14 Jun 2024, at 0:32, Sebby, Brian A. via bind-users wrote: > I spent years having to compile BIND myself on Solaris Curious, Solaris 11.4 provides a recent 9.18 ESV release. Though not the monthly drops that ISC have been providing for a while, is that what you wanted? Mr. Stacey Marsh

Re: fixed rrset ordering - is this still a thing?

2024-03-01 Thread Stacey Marshall
On 29 Feb 2024, at 21:39, Ondřej Surý wrote: > Hey, > > BIND 9 supports a fixed rrset ordering (that is keeping the order of the > RRSets from the zone file). It has to be configured > at the compile time, it takes more memory (to record that order) and it's a > #ifdef all over the places. > >

Re: Deprecated DSCP support

2024-02-29 Thread Stacey Marshall
Not familiar with DSCP, Differentiated Services Code Point, a means of classifying and managing network traffic and of providing quality of service (QoS) in modern IP networks [D]. Google search found me a libuv conversation `Setting DSCP per UDP datagram` [A] which links to `Extending the u

Re: How do I debug if the queries are not getting resolved?

2023-12-13 Thread Stacey Marshall
That's good advice Greg, I thought I'd read up some more about that in the DNSSEC guide within the Admin. Reference Manual - https://bind9.readthedocs.io/en/v9.18.20/dnssec-guide.html - only it is not mentioned within that section (dnssec-validation is). It is in the Configuration Reference -

Re: git branches v9_18 vs bind-9.18

2023-05-30 Thread Stacey Marshall
Looking at https://github.com/isc-projects/bind9/branches shows the underscore branches have not been updated in two months, unlike the dot versions which were updated recently Does that help? -- Stace On 30 May 2023, at 9:54, MAYER Hans wrote: Dear All, looking at https://github.com/i

Re: Is it possible to upgrade bind from 9.11 to 9.18 directly?

2023-04-21 Thread Stacey Marshall
If it helps, my assessment was that one could skip 9.16 too. I recognise that this is thanks to the hard effort that ISC work to provide backward compatibility, and not by some accident. On Solaris 11.4 current shipping versions of BIND are $ pkg list -fa service/network/dns/bind NAME (PUBLIS

Re: [Non-DoD Source] BIND installed on a Solaris 11.4 x 86 virtual server

2020-06-02 Thread Stacey Marshall
named.conf if no configuration file is provided in the property configuration_file, though it does not specify that to the named command line as that is also the default compiled into Oracle Solaris version of bind: ``` % /usr/sbin/named -V | fmt |grep etc '--sysconfdir=/etc' '--loc

Re: A policy for removing named.conf options.

2019-06-14 Thread Stacey Marshall
raded. ESV release could have the tools updated in micro release to provide early warnings; for those that update to the later releases at least. Mr. Stacey Marshall - Principal Software Engineer - Oracle UK Oracle Systems, SPARC & Solaris System Software En

Re: BIND 9.14 configure error

2019-05-29 Thread Stacey Marshall
On 29 May 2019, at 18:28, greg.ra...@bt.com wrote: Having trouble running 'configure' script for BIND 9.14.2 on CentOS 7 system. I have python 2.7.5 installed, but not the PLY package. The configure script complains: configure: error: Python >= 2.7 or >= 3.2 and the PLY package are require

Re: BIND 9.11.6-P1 build fails on Solaris

2019-04-26 Thread Stacey Marshall
I'm struggling with this on Solaris 10 with Solaris Studio compiler. Seems to be a couple of issues, I'm still working through... For example configure is using -pthread option when testing OpenSSL which is not appropriate for Studio: ``` configure:17237: checking for OpenSSL AES support confi

Re: Subdomain Issue

2011-11-08 Thread Stacey Marshall
Responses in-line. On 8 November 2011 14:57, trm asn wrote: > Dear List, > > Please help me out to investigate the below scenario . > > I have one domain "example.com" > > $TTL 300 > @ IN SOA ns4.example.com. postmaster.example.com. ( > The @ above says to use $ORIGIN, which by d

Re: Bogus Wild Card DNS

2011-04-11 Thread Stacey Marshall
On 11 April 2011 17:56, Stacey Marshall wrote: > > > On 11 April 2011 14:04, Martin McCormick wrote: > >> Stacey Marshall writes: >> > I'm not certain as to what it is your trying to do exactly, but the hint >> > zone should provide address

Re: Bogus Wild Card DNS

2011-04-11 Thread Stacey Marshall
On 11 April 2011 14:04, Martin McCormick wrote: > Stacey Marshall writes: > > I'm not certain as to what it is your trying to do exactly, but the hint > > zone should provide addresses of root servers. One of which will be > > contacted to download the list of root na

Re: Bogus Wild Card DNS

2011-04-09 Thread Stacey Marshall
I'm not certain as to what it is your trying to do exactly, but the hint zone should provide addresses of root servers. One of which will be contacted to download the list of root nameservers. Wildcard address are really not very nice as they make resolver searches ineffective when unexpected add

Re: BIND9 fails resolving after connecting to VPN

2011-04-09 Thread Stacey Marshall
I' wondering if the network your attaching to via VPN allows direct DNS lookups? I know of networks where the provided servers have firewall rules that allow them to make queries but other servers are not. You could test this theory by trying to connect to a root server with dig when connected to

Re: Occasional errors from res_nsearch

2009-11-27 Thread Stacey Marshall
Divakar Pratap Singh P wrote: Thanks for suggestion Stacey, Resolv.conf (I have replaced actual data with a,b,c,x,y,z etc) : / domain // xx // . // yy // .ericsson. // se / / nameserver // a.b.c.d / / nameserver // a.b.c.d // 1 / / nameserver // a2.b2.c2.d2 / / search // xx // . // yy // .