Porblems with Lycos.com host lookup.

2009-08-21 Thread Matt
Hi all, We are seeing odd behaviour when attempting to look up the following url from a range of Redhat servers. bigmail1.lycosmail.lycos.com should resolve to 209.202.248.251 but we see the following. [...@ ~]$ host bigmail1.lycosmail.lycos.com Host bigmail1.lycosmail.lycos.com no

9.7.0a2 - deny-answer-addresses

2009-08-21 Thread clemens fischer
'uname -rms' Linux 2.6.30.4-spott-gecd13d4 i686 '/l/sbin/named -V' BIND 9.7.0a2 built with '--prefix=/opt/bind/9.7.0a2' '--with-openssl=yes' '--disable-linux-caps' '--sysconfdir=/usr/local/etc' '--localstatedir=/var' 'CFLAGS=-O' I want to disallow rebinding-attacks in a caching resolver. In the

Re: 9.7.0a2 - deny-answer-addresses

2009-08-21 Thread Jeremy C. Reed
On Fri, 21 Aug 2009, clemens fischer wrote: > BIND 9.7.0a2 built with '--prefix=/opt/bind/9.7.0a2' > '--with-openssl=yes' '--disable-linux-caps' > '--sysconfdir=/usr/local/etc' '--localstatedir=/var' 'CFLAGS=-O' Thank you very much for testing the alpha release. > deny-answer-addresses { >

Re: 9.7.0a2 - deny-answer-addresses

2009-08-21 Thread clemens fischer
Jeremy C. Reed wrote: > Thank you very much for testing the alpha release. My pleasure! I had a workaround resulting in dns-rebind protection in my pdnsd[1] resolver, but pdnsd doesn't support dnssec and a few other features. [1] http://www.phys.uu.nl/~rombouts/pdnsd.html >> deny-answer-addr

Test is "unresolved" building 9.6.1-P1

2009-08-21 Thread John Center
Hi, I'm building 9.6.1-P1 on Solaris 10 SPARC with SS12u1 & the only issue I've come across running "make test" is this: T:dst:2:A A:the dst module provides the capability to verify data signed with the RSA and DSA algorithms I:testing t2_data_1, t2_dsasig, test., 23616, DST_ALG_DSA, ISC_R_S

Re: Format of 'dig -k' "TSIG key file"?

2009-08-21 Thread Joseph S D Yao
After some experimenting, here is the whole answer, hinted at by one response on this mailing list. On Thu, Jul 30, 2009 at 05:40:54PM -0400, Joseph S D Yao wrote: ... > In dig(1), the '-k' option is said to require a "TSIG key file" as an > option. I have a TSIG file with a comment header and th

Re: Porblems with Lycos.com host lookup.

2009-08-21 Thread Mark Andrews
In message <65afb5970908210654s56231ce1g461a251fe9afa...@mail.gmail.com>, Matt writes: > Hi all, > > > > We are seeing odd behaviour when attempting to look up the following url > from a range of Redhat servers. The lycos.com servers are returning malformed responses. The NS RRset should not