Re: BIND 9.8.0b1 Released Today

2011-01-25 Thread Matus UHLAR - fantomas
> >> I wonder, what are expected usages for this kinds of zones? > >> Maybe blacklists, if we have local mirrors and traffic so high that > >> we'd get blocked imediately? > On Jan 24, 2011, at 5:59 AM, Cathy Almond wrote: > > One use case is for testing new servers that aren't yet part of the mai

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Chris Buxton
On Jan 24, 2011, at 5:59 AM, Cathy Almond wrote: >> I wonder, what are expected usages for this kinds of zones? >> Maybe blacklists, if we have local mirrors and traffic so high that we'd get >> blocked imediately? > > It's subtle. > > One use case is for testing new servers that aren't yet par

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Hauke Lampe
On 24.01.2011 15:54, Paul Wouters wrote: > I meant, if you have a zone example.tld. And tld. is not signed, but > you have a testbed for a signed tld. at IP 1.2.3.4, if static-stub > would allow you to configure a resolving bind to perform DNSSEC on > 1.2.3.4 with a loaded trusted-key. So yes, the

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Paul Wouters
On Sat, 22 Jan 2011, JINMEI Tatuya / 神明達哉 wrote: Does this work with DNSSEC if one loads an explicit trust anchor, even if in the "world view" the trust anchor is missing? I'm afraid I don't understand the question. Could you be more specific, e.g., by using the above example.com example? I

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Cathy Almond
> so, iiuc, the difference is that "type forward" sends queries with RD bit > set, while "type static-stub" sends them with RD cleared... and > the "forward first" option appears to be applicable only in forward zones. > > did I get it right? Yes > > I use forward zones for blacklists - while I

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Matus UHLAR - fantomas
> > On 21.01.11 10:45, Sue Graves wrote: > >> * BIND now supports a new zone type, static-stub. This allows the > >> administrator of a recursive nameserver to force queries for a > >> particular zone to go to IP addresses of the administrator's choosing, > >> on a per zone basis, both globally

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Cathy Almond
On 24/01/11 10:56, Matus UHLAR - fantomas wrote: > On 21.01.11 10:45, Sue Graves wrote: >> * BIND now supports a new zone type, static-stub. This allows the >> administrator of a recursive nameserver to force queries for a >> particular zone to go to IP addresses of the administrator's choosing

Re: BIND 9.8.0b1 Released Today

2011-01-24 Thread Matus UHLAR - fantomas
On 21.01.11 10:45, Sue Graves wrote: > * BIND now supports a new zone type, static-stub. This allows the > administrator of a recursive nameserver to force queries for a > particular zone to go to IP addresses of the administrator's choosing, > on a per zone basis, both globally or per view. I.

Re: BIND 9.8.0b1 Released Today

2011-01-22 Thread JINMEI Tatuya / 神明達哉
At Sat, 22 Jan 2011 20:38:46 +0100, Florian Weimer wrote: > >> Does this work with DNSSEC if one loads an explicit trust anchor, even > >> if in the "world view" the trust anchor is missing? > > > > I'm afraid I don't understand the question. Could you be more > > specific, e.g., by using the ab

Re: BIND 9.8.0b1 Released Today

2011-01-22 Thread Florian Weimer
* JINMEI Tatuya / 神明達哉: > Paul Wouters wrote: >> Does this work with DNSSEC if one loads an explicit trust anchor, even >> if in the "world view" the trust anchor is missing? > > I'm afraid I don't understand the question. Could you be more > specific, e.g., by using the above example.com examp

Re: BIND 9.8.0b1 Released Today

2011-01-21 Thread JINMEI Tatuya / 神明達哉
At Fri, 21 Jan 2011 14:00:19 -0500 (EST), Paul Wouters wrote: > >* BIND now supports a new zone type, static-stub. This allows the > > administrator of a recursive nameserver to force queries for a > > particular zone to go to IP addresses of the administrator's choosing, > > on a per zone ba

Re: BIND 9.8.0b1 Released Today

2011-01-21 Thread pyh
Sue Graves writes: New Features 9.8.0 * BIND now supports a new zone type, static-stub. This allows the administrator of a recursive nameserver to force queries for a particular zone to go to IP addresses of the administrator's choosing, on a per zone basis, both globally or per view. I.e. i

Re: BIND 9.8.0b1 Released Today

2011-01-21 Thread Paul Wouters
On Fri, 21 Jan 2011, Sue Graves wrote: * BIND now supports a new zone type, static-stub. This allows the administrator of a recursive nameserver to force queries for a particular zone to go to IP addresses of the administrator's choosing, on a per zone basis, both globally or per view. I.e. i