On 6/5/25 06:50, Sahil Sharma D via bind-users wrote:
*_Use case :_*//
Trying to load 120M identifier of length 15 digit which will load in
zone using nsupdate in a batch of 1000.
A file created having 120M identifier and sent to nsupdate in a batch of
1000 to add identifier in bind
Hello BIND Community,
I am writing to report a significant performance drop observed after upgrading
from BIND 9.18.30 to BIND 9.20.8 .
We are running BIND in a batch data processing environment where large volumes
of dynamic DNS updates are pushed periodically.
Under 9.18.30, our system
two different kinds of “glue”
...
Best regards,
Panagiotis
*From:*bind-users *On Behalf Of
*Florian Schlums
*Sent:* Thursday, 24 April 2025 11.18
*To:* bind-users@lists.isc.org
*Subject:* bind sends back server failure when local cache expired (
glue record)
Dear list
I'm running se
Dear list
I'm running several bind caching resolver based on Ubuntu latest bind
release 9.18.30.
Configuration is pretty simple. A few public IP prefixes are allowed to
use these server as recursive resolver.
All other prefixes are no allowed to use them. The setup is up for
several year
misconfigured with my Bind syntax.
If you find a bug in LinuxSOHO, please submit a bug report to
bugs.launchpad.net/linuxsoho/+filebug.
Kind regards,
Travis Bean
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software
file also, without it I or steps to reproduce
it doubt anyone will be able fix it, whatever it is.
Try whether coredumpctl list will contain this crash.
On 10/04/2025 06:22, Duleep Thilakarathne wrote:
Hi,
Bind service unexpectedly exited a few days back with the following
error: Could someone
> wrote:
> >
> > Dear Mark,
> >
> > Thank you for the update . I will arrange to update Bind to latest
> version . For my understanding, is their any reference thread to refer
> historical incident . I didnt experience this issue since last friday .
> >
> > Regards
https://gitlab.isc.org/isc-projects/bind9/-/issues/942
Or CVE-2019-6471
Mark
> On 10 Apr 2025, at 02:14, Duleep Thilakarathne wrote:
>
> Dear Mark,
>
> Thank you for the update . I will arrange to update Bind to latest version .
> For my understanding, is their any r
Dear Mark,
Thank you for the update . I will arrange to update Bind to latest version
. For my understanding, is their any reference thread to refer historical
incident . I didnt experience this issue since last friday .
Regards
Duleep.
On Thu, Apr 10, 2025 at 12:02 PM Mark Andrews wrote
This was fixed roughly 6 years ago in a later version of BIND 9.11 which has
since been EoL’d. Upgrade to a supported version.
> On 9 Apr 2025, at 23:22, Duleep Thilakarathne wrote:
>
> Hi,
>
> Bind service unexpectedly exited a few days back with the following error:
Hi,
Bind service unexpectedly exited a few days back with the following error:
Could someone possibly suggest some more troubleshooting? This service has
run for more than a year without issue.
dispatch.c:3422: REQUIRE(resp->item_out == isc_boolean_true) failed, back
trace
#0 0x438bed in ??
misconfigured with my dynamic,
active/active Bind DNS server syntax.
If you find a bug in LinuxHA, please submit a bug report to
bugs.launchpad.net/linuxha/+filebug.
Kind regards,
Travis Bean
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds
source of truth
for categorization decisions.
- As such, I do not wish to store any additional data within the plugin,
memory, or any BIND-internal structures.
- Instead, I want the plugin to dynamically query this data by calling
my existing C program or SDK, which reads and evaluates
is updated externally and serves as the sole source of
>truth for categorization decisions.
>- As such, I do not wish to store any additional data within the
>plugin, memory, or any BIND-internal structures.
>- Instead, I want the plugin to dynamically query this data by ca
source of
truth for categorization decisions.
* As such, I do not wish to store any additional data within the
plugin, memory, or any BIND-internal structures.
* Instead, I want the plugin to dynamically query this data by calling
my existing C program or SDK, which reads and
I have been running BIND chroot'ed since before there was a systemd. I have
a vague memory of having to, at some point, change the systemd unit for named
from "Type=notify" to "Type=forking". My memory is not what it used to be, but
I am fairly sure I was runni
Hi Michal,
Thanks a lot for the reply, i will take a look at the documentation for
chroot and systemd notify. I already use the old option (type=forking) and yes
everything is working fine.
Have a good day.
--
Joel Langlois
-Message d'origine-
De : bind-users De la pa
Hi,
I can reproduce your problem when I setup chroot.
Tho, I think this is the expected behaviour unless you setup the systemd
notify socket inside the chroot. See the following guide for how to do
it https://kb.leuxner.net/article/bind-sd_notify-chroot/ (haven't tried
it myself), or r
On 3/19/25 9:40 AM, Mónika Kiss wrote:
I have a domain categorization program written in C that dynamically
determines the risk level of a queried domain.
I need to integrate this categorization logic into a BIND 9 plugin that:
Mónika, have you looked into Dynamically Loadable Zones? You
Hello,
Thanks for your reply, this help me to point in the good direction! The
problem is in the startup file for the service
/usr/lib/systemd/system/isc-bind-named.service (this file is modify by the
9.20.7 update). When i try to use the option "Type=notify" or the
For BIND 9.20.7 and 9.21.6 we changed the service type from "forking" to
"notify", also ExecStart now has the "-f" option:
-[Service]
-Type=forking
-ExecStart=/opt/isc/isc-bind/root/usr/sbin/named -u named
+[Service]
+Type=notify
+ExecStart=/opt/isc/isc-bind/r
Hi,
> Need help with the COPR packages for BIND, they don’t seem to have DOH
> enabled / working
That's not the case, DNS-over-HTTPS should work just fine with our Copr
packages.
> Should have: compiled with DNS-over-HTTPS
> It does not no?
DNS-over-HTTPS support in BIND
program or SDK, which reads and evaluates domains in
real time.
My understanding is that RPS is a way for BIND / named to communicate
with something external as a source of information. I think that it may
be possible to create a DLZ driver that does similar.
To whit, BIND would dynamic
Hey Everyone,
Need help with the COPR packages for BIND, they don’t seem to have DOH enabled
/ working
sudo yum-config-manager --add-repo
https://copr.fedorainfracloud.org/coprs/isc/bind/repo/epel-9/isc-bind-epel-9.repo
sudo yum --enablerepo="copr:copr.fedorainfracloud.org:isc:bind&quo
outside your normal working hours.
> On 22. 3. 2025, at 2:44, Langlois Joël via bind-users
> wrote:
>
> Hi everyone,
>
> After updating my isc-bind packages from 9.20.6-1.2 to 9.20.7-1.2, i
> try to start the service but it always « shutdown » by himself. My server is
, Greg
> On 21 Mar 2025, at 22:16, Karol Nowicki via bind-users
> wrote:
>
> Hello Everyone
>
> Do we have any option to define order of domain delegation depends from query
> location ?
>
> For example
>
> google.com. NS dns1.company.com.
> google.com.
comes from Europe then delegates to dns2
Wysłane z Yahoo Mail do iPhone
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more
Hi everyone,
After updating my isc-bind packages from 9.20.6-1.2 to 9.20.7-1.2, i try
to start the service but it always « shutdown » by himself. My server is a
Rocky Linux 8.10 and with the old version (9.20.6) everything is working fine
since many mounths. Here is a the part of the
— ISC (He/Him)
My working hours and your working hours may be different. Please do not feel
obligated to reply outside your normal working hours.
> On 21. 3. 2025, at 21:24, Grant Taylor via bind-users
> wrote:
>
> Based on my understanding, RPS should be able to do all of those th
at 18:11, Greg Choules via bind-users
> wrote:
>
> My take on this is that DNS resolver code is written to (try and) be as fast
> and efficient as possible and work pretty much entirely in RAM because that's
> the quickest storage available.
>
> Anything that interr
when using large and frequently updated policy
zones. It also enables named to share response policy providers with
other DNS implementations such as Unbound. Thanks to Vernon Schryver
and Farsight Security for the contribution."
Link - BIND 9.12 development is getting closer to
I wrote a closed source filtering plugin for BIND and I found that the #1 issue
is that there is no defined interface between a plugin and BIND internal data
structures.
Since data structures (may) have small changes between patch releases, this implies that with /every/ release of BIND, the
or it now. Somebody will have
> to invest into writing this :shrug:
>
> Ondrej
Hi Ondrej, I commend your productivity! I saw your work in both BIND-Users and
DNSOP.
No joke, we need more people like this, especially right now. Having had a
productivity
boost on the same day, fist-
On Wed, 19 Mar 2025, Lowry-Schiller, Dell M CTR (USA) via bind-users wrote:
> I run this command and it works fine ./configure --prefix=/usr/local/b
> ind-9.9.6 --sysconfdir=/etc --localstatedir=/var --enable-threads --with-ope
> nssl
I suspect this configure step did not work fi
Maybe I'm not understanding all the nuances of the stated goal but doesn't
RPZ handle this?
Bob
Sent from my Google Pixel 8a phone.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with pa
Hi again,if this is something that is going to be open-source and the whole BIND 9 users community would benefit from this, I would love to hear and see more.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside
On Wednesday, March 19, 2025 3:40:28 PM CET Mónika Kiss wrote:
> Hello,
>
> Thank you for your response.
>
> I have a domain categorization program written in C that dynamically
> determines the risk level of a queried domain.
> I need to integrate this categorization logic
gt;
>> Thank you for your response.
>>
>> I have a domain categorization program written in C that dynamically
>> determines the risk level of a queried domain.
>> I need to integrate this categorization logic into a BIND 9 plugin that:
>>
>> - Calls
reply outside your normal working hours.On 19. 3. 2025, at 21:40, Mónika Kiss wrote:Hello,Thank you for your response.I have a domain categorization program written in C that dynamically determines the risk level of a queried domain.I need to integrate this categorization logic into a BIND 9 plugin
Hello,
Thank you for your response.
I have a domain categorization program written in C that dynamically
determines the risk level of a queried domain.
I need to integrate this categorization logic into a BIND 9 plugin that:
- Calls the categorization function to analyze each incoming DNS
ps://deteque.com/m3aawg-bind-training/named.conf
response-policy {
zone "rpz.local";
};
};
// Response Policy Zone
zone "rpz.local" {
type primary;
file "/path/to/rpz.local.db";
};
In rpz.local.db:
$TTL 300
@
ere official documentation or examples for writing custom BIND 9
> plugins?
> What are the recommended hook points for intercepting and modifying DNS
> responses?
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of th
ours and your working hours may be different. Please do not feel
obligated to reply outside your normal working hours.
> On 19. 3. 2025, at 20:23, Lowry-Schiller, Dell M CTR (USA) via bind-users
> wrote:
>
> Message: I am following the instructions provided in the knowledge base a
Am 19.03.2025 um 13:23:09 Uhr schrieb Lowry-Schiller, Dell M CTR
\(USA\) via bind-users:
> Message: I am following the instructions provided in the knowledge
> base and I am having issues with the upgrade of my bind server to
> version 9.20.6 I am currently on version BIND 9.16.23
Message: I am following the instructions provided in the knowledge base and I
am having issues with the upgrade of my bind server to version 9.20.6 I am
currently on version BIND 9.16.23-RH
I run this command and it works fine ./configure
--prefix=/usr/local/bind-9.9.6 --sysconfdir=/etc
Dear BIND Users,
My name is Monika Kiss and I am currently working on a custom DNS
filtering plugin for BIND 9 and I would appreciate your guidance on a few
technical aspects. My goal is to intercept certain DNS queries and return a
custom IP address instead of forwarding them to an upstream
> From: "Havard Eidnes via bind-users"
> Sent: Thursday, March 13, 2025 7:21:32 AM
> The reason is that the "how to reproduce the problem" bit is
> quite fuzzy.
Yeah. :-( In general, without logs or similar, it is impossible to diagnose
this sort of probl
On 3/13/25 12:21, Havard Eidnes via bind-users wrote:
I wondered a while whether this would be more appropriate to post
here or as an issue in ISC's gitlab, but came to the conclusion
that for now the best place would be here. The reason is that
the "how to reproduce the problem&quo
s reported as a gitlab issue as
well, I can do that, of course.
Context: we are running 4 nodes in an anycast setup, providing
our users with DNS recursor service, and RPZ service to a subset
of these users.
We have been using BIND 9.20 for a while, and have followed the
ISC upgrades shortly
Hi Sergio,
the BIND 9 documentation covers this:
https://bind9.readthedocs.io/en/v9.18.34/chapter5.html#pkcs-11-cryptoki-support
Since you are using OpenSSL you must ensure that Legacy engines are enabled.
I would however recommend switching to 9.20.6 that has support for more modern
OpenSSL
Hi,
We need to integrate a "Thales Luna HSM PCIe 7" card, that we just
purchased, with the most updated BIND version that works in this scenario.
We had followed carefully the instructions given by the Thales documents but we
had not succefull results. Also, we had contacted
> bind crashes with assertion, maybe due to many ephemeral network devices?
Looking at the symptoms and your description, I actually think this is a problem
of interfaces appearing during the network interface scan and then disappearing
before named can process them.
I would suggest to disa
Hi Ondrej,
thanks for the fast answer :)
On Mon, 10 Mar 2025, Ondřej Surý wrote:
bind crashes with assertion, maybe due to many ephemeral network devices?
Looking at the symptoms and your description, I actually think this is a problem
of interfaces appearing during the network interface
Hi,
I'm running bind version 9.20.6 on artix linux (an arch linux derivate
without systemd) with a pretty standard config:
# named -V
BIND 9.20.6 (Stable Release)
running on Linux x86_64 6.13.5-artix1-1 #1 SMP PREEMPT_DYNAMIC Fri, 28 Feb 2025
10:18:15 +
built by make with
Sure, here is 9.18.26 with all the required patches:
https://ftp.isc.org/isc/bind9/9.18.34/bind-9.18.34.tar.xz
Ondrej
--
Ondřej Surý — ISC (He/Him)
My working hours and your working hours may be different. Please do not feel
obligated to reply outside your normal working hours.
> On 28
Hi Ondrej,
Thank you for your prompt response. We recently upgraded to this version as it
was marked as stable. It may take some time to upgrade to the latest version of
bind-9.18. Meanwhile i was wondering if i can patch the fix (if available) to
our current version or any workaround
:12, avijeet gupta wrote:
>
> I have bind9 version 9.18.26
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
b
.so.0
#34 0x7ff8928e588f in clone () from /lib/x86_64-linux-gnu/libc.so.6
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ f
Hello,
Functional EDE 22 is available in Bind 9.20.6.
RFC say :
4.23. Extended DNS Error Code 22 - No Reachable Authority
The resolver could not reach any of the authoritative name servers (or
they potentially refused to reply)
Bind does not map a rcode REFUSED to EDE 22 so in your case I
ERVFAIL, id: 18432
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
*; EDE: 22 (No Reachable Authority): (at delegation send.dom24.si.) ;
EDE: 23 (Network Error): (205.251.198.128:53 rcode=REFUSED for
send.dom24.si NS)*
;
in your
environment and why. Then progressively address them as they happen. Helps to
establish rationale for what you build and why.
--
Met vriendelijke groet,
Michael De Roover
Mail: i...@nixmagic.com
Web: michael.de.roover.eu.org
--
Visit https://lists.isc.org/mailman/listinfo/bind-users t
xpected. I'm not too
> concerned about it, and the benefits outweigh the costs. He was also heavily
> invested in fixing similar problems in his powerbanks at the time, so the
> verdict may have been biased. Lots of switching power supplies are noisy like
> that.
>
> https://www
tside your normal working hours.
>
> > On 10. 2. 2025, at 15:07, Turritopsis Dohrnii Teo En Ming via bind-users
> > bind-users@lists.isc.org wrote:
> >
> > Rather than using WSL, I think I will use Hyper-V, VMware Workstation or
> > Oracle VirtualBox instead.
--
ery slow.
Regards,
Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individuals in Singapore
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
> this list
>
> ISC funds the development of this software with paid support subscriptions.
> Contact
://www.youtube.com/watch?v=6bicunweBAQ[1]
Problem is, 1GB of memory in my 3B's is hardly sufficient for more than just
BIND alone.
For an entire network, it needed a lot more than that (DHCP, hostapd,
Postfix/Dovecot,
Samba, ...). The memory requirements quickly balloon back into a frac
sis Dohrnii Teo En Ming via bind-users
> wrote:
>
> Rather than using WSL, I think I will use Hyper-V, VMware Workstation or
> Oracle VirtualBox instead.
signature.asc
Description: Message signed with OpenPGP
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
r option you choose in the end, I wish you good luck :)
Best regards,
Michael
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/
to be a way to assign
> > it a static IP - i.e. your WSL BIND server will change IP address every
> > time (it's a private routed address that will need a Windows Firewall NAT
> > rule to be reached from other machines on your network).
>
>
> Please do note that WS
On Sunday, February 9th, 2025 at 6:55 PM, Marco Moock wrote:
> Am 09.02.2025 um 10:51:35 Uhr schrieb Turritopsis Dohrnii Teo En Ming
> via bind-users:
>
> > Can I install WinBIND on Windows 10 and Windows 11? The following
> > guide mentioned installation of WinBIND o
On Sunday, February 9th, 2025 at 7:07 PM, Richard T.A. Neal
wrote:
> That's my site! 😊
>
> Whilst functional please bear in mind that BIND is no longer developed or
> supported on Windows so I really don’t recommend doing so. You should install
> it on a Linux sy
> On Tue, Jan 28, 2025 at 11:27 AM Nagesh Thati wrote:
> Hi,
> Thank you for your prompt response.
> I configured the logging severity as dynamic to allow me to change the
> severity level at any time using the rndc command. I have also reviewed the
> release notes for all versions
he rndc command. I have also reviewed
> the release notes for all versions released after BIND 9.18.16, but I did
> not find any bug fixes related to debug logging in any of those releases.
> Thanks,
> Nagesh
>
> On Tue, Jan 28, 2025 at 11:12 AM Ondřej Surý wrote:
>
>> I w
On Sunday, February 9, 2025 12:07:48 PM CET Richard T.A. Neal wrote:
> That's my site! 😊
That is incredible!
> One major drawback with WSL is that there doesn't seem to be a way to assign
> it a static IP - i.e. your WSL BIND server will change IP address every
> time
That's my site! 😊
Whilst functional please bear in mind that BIND is no longer developed or
supported on Windows so I really don’t recommend doing so. You should install
it on a Linux system as intended, or alternatively in WSL (Windows SubSystem
for Linux).
One major drawback with W
Am 09.02.2025 um 10:51:35 Uhr schrieb Turritopsis Dohrnii Teo En Ming
via bind-users:
> Can I install WinBIND on Windows 10 and Windows 11? The following
> guide mentioned installation of WinBIND on Windows Server only.
Should work, give it a try.
--
Gruß
Marco
--
Visit https://lists.i
Subject: BIND DNS Server on Windows
Good day from Singapore,
Can I install WinBIND on Windows 10 and Windows 11? The following guide
mentioned installation of WinBIND on Windows Server only.
Link: https://www.winbind.org/installing-bind-on-windows/
Thank you.
Regards,
Mr. Turritopsis
Thank you !
I saw it, but wrongly supposed it was merged before the release.
Emmanuel.
Le 06/02/2025 à 13:28, Matthijs Mekking a écrit :
Hi Emmanuel,
Please see https://gitlab.isc.org/isc-projects/bind9/-/issues/5137
- Matthijs
On 06-02-2025 10:45, Emmanuel Fusté wrote:
Hello,
BIND
:28, Matthijs Mekking a écrit :
>> Hi Emmanuel,
>>
>> Please see https://gitlab.isc.org/isc-projects/bind9/-/issues/5137
>>
>> - Matthijs
>>
>> On 06-02-2025 10:45, Emmanuel Fusté wrote:
>>> Hello,
>>>
>>> BIND 9.20.5 is supposed t
Hi Emmanuel,
Please see https://gitlab.isc.org/isc-projects/bind9/-/issues/5137
- Matthijs
On 06-02-2025 10:45, Emmanuel Fusté wrote:
Hello,
BIND 9.20.5 is supposed to implement EDE 22 reporting (No reachable
authority)
Ubuntu 22.04 / ISC BIND packages
I have a domain for which the two
Hello,
BIND 9.20.5 is supposed to implement EDE 22 reporting (No reachable
authority)
Ubuntu 22.04 / ISC BIND packages
I have a domain for which the two DNS servers are unreachable from my
BIND resolver because of network issues.
I am unable to get EDE 22 from my resolver. Only a SERVFAIL
On Mon, Jan 27, 2025 at 01:17:10PM +0100, Ondřej Surý wrote:
> - The all /etc/bind/db.*, named.conf.default-zones and zones.rfc1918
> configuration files are going to be removed in favor of empty-zones yes;
> (which is default)
I see many BIND authoritative server tutorials compose
Ondřej
--
Ondřej Surý (He/Him)
ond...@isc.org
My working hours and your working hours may be different. Please do not feel
obligated to reply outside your normal working hours.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development
empty-zones yes; (which is default)
Just curious what the reason for removing the 1918 zone files is?
Please see
https://bind9.readthedocs.io/en/v9.20.5/reference.html#built-in-empty-zones
--
Petr Špaček
Internet Systems Consortium
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to
curious what the reason for removing the 1918 zone files is?
Ted
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information
1.
My systems are low volume, so I cannot report on any performance gains or
regressions.
Greetings
Carsten
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at
Hey all,
this is pre-announcement that the BIND 9.21 build system will be drop the
autoconf/automake build system.
We consider the Python to be ubiquitous nowadays and therefore the Meson build
system was picked for its maintainability, speed and ease of use. Additionally,
Meson is available
Hi,
the BIND 9 team merged an improvement to BIND 9.18.34-dev and 9.20.6-dev
releases that should help with the memory usage in the resolver scenarios and in
the case of BIND 9.18.34-dev there's even improved performance for the
cold cache. The improvements for 9.18.34-dev is significant
Hi,
the BIND 9 team merged an improvement to BIND 9.18.34-dev and 9.20.6-dev
releases that should help with the memory usage in the resolver scenarios and in
the case of BIND 9.18.34-dev there's even improved performance for the
cold cache. The improvements for 9.18.34-dev is significant
Hi,
Thank you for your prompt response.
I configured the logging severity as dynamic to allow me to change the
severity level at any time using the rndc command. I have also reviewed the
release notes for all versions released after BIND 9.18.16, but I did not
find any bug fixes related to debug
I wonder…. What do you think that
severity dynamic;
does in your configuration file and why you have it configured? Have you read
the documentation on the logging in the ARM?
Also - don’t run old versions of BIND 9, you are almost 20 versions behind the
latest 9.18 release, that’s year an
Dear Team,
I am currently using BIND 9.18.16 and have encountered an issue where debug
level 3, 5, and 99 logs are being recorded in the named.log, even though
the debug level is explicitly set to 0.
Could you confirm if there are any hardcoded logging configurations within
BIND that might cause
Hi,
ISC provides BIND 9 packages via:
- Launchpad:
- BIND 9.18: https://launchpad.net/~isc/+archive/ubuntu/bind-esv
- BIND 9.20: https://launchpad.net/~isc/+archive/ubuntu/bind
- BIND 9.21: https://launchpad.net/~isc/+archive/ubuntu/bind-dev
- Debian custom repositories:
- BIND 9.18: https
Don't run out of date software. BIND 9.16 has reached end-of-life in April
2024, almost a year ago. You need to run up-to-date version, preferably the
last version of BIND 9.20 that's the recent stable release.
And no, nobody can give you any figures as it depends on many variables.
Hello community,
Please, I would like to ask if there is a rule to estimate the resources (CPU
and RAM) needed for BIND9.16 to handle x number of requests.
BR
Orange Restricted
Orange Restricted
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC
sustain
a little downtime.
Good luck,
RW
____
From: bind-users on behalf of Fred Morris
Sent: Wednesday, January 8, 2025 2:11 PM
To: Bind-users
Subject: Re: Bind and DHCP
This email originated from outside of TESLA
Do not click links or open attachments unless
ly). What DNS nameservers
are configured? Does that match what's in resolv.conf?
Does your configuration reference only your copy (or copies) of BIND which
have Dnstap enabled? (It sounds like you have just one copy of BIND and
it's listening on 127.0.0.1.)
It didn't fix the issue.
I tried disabling and stopped systemd resolved. It didn't fix the issue. I
checked in nsswitch, and could see the entries for file, group, user with
systemd.
Get Outlook for iOS<https://aka.ms/o0ukef>
From: bind-users on behalf of Fred Morris
Sen
City of Tacoma can't do a competent job of reverse DNS and
the City can't be made to care. I even testified about it at a City
Council meeting: https://athena.m3047.net/tacoma-council-10-Sep-2024.mp4
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
of people are invested in solutionism via centralization so this is
inherently controversial.
On Wed, 8 Jan 2025, Karol Nowicki via bind-users wrote:
Does a good practice recommend to split running ISC Bind and DHCP into
two different machines or make DNS+DHCP running on same server is
allowed
remember any time I cared about the DHCP server's
IP in the last two decades, other than DHCP helpers / forwarders.
I'm sure there are some edge cases that I'm not thinking of. I'd be
curious to learn edge cases others have run into.
As others have said, running BIND and
1 - 100 of 1192 matches
Mail list logo
