RE: bind-users Digest, Vol 1485, Issue 1

2013-04-01 Thread Ben-Eliezer, Tal (ITS)
ardis> Content-Type: text/plain; charset="utf-8" On Mon, 2012-11-05 at 21:21 +1100, Mark Andrews wrote: > > Ignore them. They will be addressed in the next maintenance release. > it was, but now seems to have reared its ugly head again in 9.9.2-p2 Apr 1 12:20:35 fox named[5

Auto-dnssec maintain and 'continous' resigning

2013-04-01 Thread Carlos M. Martinez
Hello all, I have a few zones signed with DNSSEC and "autodnssec maintain". I have one particular zone that every now and then (I'm working on finding a pattern or trigger) This re-signing process runs for a while, incrementing the serial each time and growing the journal until stopping. I know

RE: Dynamic Update Policy.....

2013-04-01 Thread Gary Greene
From: Chris Buxton [cli...@buxtonfamily.us] Sent: Saturday, March 30, 2013 08:23 PM To: Gary Greene Cc: bind-users@lists.isc.org Subject: Re: Dynamic Update Policy. > On Mar 28, 2013, at 4:03 PM, Gary Greene wrote: > >> I'm trying to get bind to use ddns updates for our environment, however I'

Re: Auto-dnssec maintain and 'continous' resigning

2013-04-01 Thread Carlos M. Martinez
Reframing the question in more general terms... Which events trigger a zone re-sign and reload when using "auto-dnssec maintain" ? regards, ~Carlos On 4/1/13 12:04 PM, Carlos M. Martinez wrote: > Hello all, > > I have a few zones signed with DNSSEC and "autodnssec maintain". I have > one partic

Re: BIND 9.8.2: forward zone not working

2013-04-01 Thread Kevin Darcy
On 3/19/2013 8:30 PM, Gerry Reno wrote: On 03/19/2013 08:10 PM, b...@bitrate.net wrote: On Mar 18, 2013, at 23.04, Gerry Reno wrote: On 03/18/2013 10:25 PM, b...@bitrate.net wrote: On Mar 18, 2013, at 20.27, Gerry Reno wrote: Using BIND 9.8.2 When you setup Samba 4 AD DC using BIND9_DLZ

Re: Forward First on Master Zone (bypass SOA)

2013-04-01 Thread Kevin Darcy
On 3/29/2013 12:09 AM, Doug Barton wrote: On 03/28/2013 12:28 PM, Ben-Eliezer, Tal (ITS) wrote: My organization is evaluating the use of split-view DNS in our environment. Simple ... don't do it. It's almost never the right answer, and as you're learning carries with it more administrative ov

BIND cannot load backup of slaved root zone

2013-04-01 Thread Kevin Morgan
Steps to reproduce: 1.Delete or move root.zone out of the bind directory if it exists. 1.Slave the root zone by adding the following to named.conf: zone "." { type slave; file "root.zone"; notify no; masters{192.0.32.140; 192.0.47.140; }; }; 2.Restart BIND 3.restart BIND again Unexpected r

Re: Forward First on Master Zone (bypass SOA)

2013-04-01 Thread Mike Hoskins (michoski)
-Original Message- From: Kevin Darcy Date: Monday, April 1, 2013 2:46 PM To: "bind-users@lists.isc.org" Subject: Re: Forward First on Master Zone (bypass SOA) >On 3/29/2013 12:09 AM, Doug Barton wrote: >> On 03/28/2013 12:28 PM, Ben-Eliezer, Tal (ITS) wrote: >>> My organization is evalu

Re: Auto-dnssec maintain and 'continous' resigning

2013-04-01 Thread Alan Clegg
On Apr 1, 2013, at 2:36 PM, Carlos M. Martinez wrote: > Reframing the question in more general terms... Which events trigger a > zone re-sign and reload when using "auto-dnssec maintain" ? Obvious ones: modifications to the dynamic zone Less obvious ones: key events (publication/activatio

DLZ $client% parameter segfault

2013-04-01 Thread Michael McConnell
Hello All, I am trying to use Bind 9.9.2-P2 with the DLZ module, however I continue to run into segfault issues when trying to use $client$ {SELECT SQL_CACHE zone_name FROM dns_zones … } {{select zone_ttl AS ttl …. WHERE geo_ip LIKE '$client$'} I am trying to user $client$ in the A record looku

Does 9.9.2-P2 support rate-limit configuration?

2013-04-01 Thread Red Cricket
Hi, Does 9.9.2-P2 (the recent release that fixes CVE-2013-2266: A Maliciously Crafted Regular Expression Can Cause Memory Exhaustion in named) support rate-limit ? If not is there a way to patch the source code to allow for rate-limiting? Thanks ___ Ple

Re: Does 9.9.2-P2 support rate-limit configuration?

2013-04-01 Thread Vernon Schryver
> From: Red Cricket > Does 9.9.2-P2 (the recent release that fixes > CVE-2013-2266: A Maliciously Crafted Regular Expression Can Cause Memory > Exhaustion in named) > support rate-limit ? not without patching. > If not is there a way to patch the source code to > allow for

Re: DLZ $client% parameter segfault

2013-04-01 Thread Michael McConnell
The $client$ parameter appears to work for zone transfers, as per this example https://github.com/opennetadmin/ona/wiki/bind-dlz However if I use $client$ on any other queries bind segfaults. Strace doesn't seem to show anything useful... Ideas? Thanks again, Mike On Apr 1, 2013, at 2:51 PM, M