[auto-dnssec] Switching to NSEC3 leaves behind stale NSEC signatures?

2013-07-31 Thread Stephane Bortzmeyer
I have a zone maintained by: inline-signing yes; auto-dnssec maintain; update-policy local; I switched it from the default NSEC to NSEC3 with: rndc signing -nsec3param 1 0 10 68f499ee auto.rd.nic.fr It seems to work but the zone still contains NSEC signatures (but no N

Internernal view is answering to external ping

2013-07-31 Thread IT Support
Hi brothers I have running bind9 on debian, with master zone for mydomain.com i created internal view for resolve names on my lan, and external zone for resolve my host on Internet, this is the working scenario Internal view LAN IP 192.168.0.67 Hostname sales.mydomain.com External view WAN I

Re: Internernal view is answering to external ping

2013-07-31 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 2013-07-31 at 17:39 -0500, IT Support wrote: > I have running bind9 on debian, with master zone for mydomain.com i > created internal view for resolve names on my lan, and external zone > for resolve my host on Internet, standard answer - post

Re: Internernal view is answering to external ping

2013-07-31 Thread IT Support
Dear Carl Thanks for your answer here the output: acl allowed-users { localhost; 200.57.66.77/28; 192.168.0.0/23; 189.0.0.0/8; 172.16.102.1; 172.28.76.0/24; }; acl internal { localhost; 200.57.66.77/28; 192.168.0.0/23 }; a

Re: Internernal view is answering to external ping

2013-07-31 Thread Steven Carr
On 1 August 2013 00:59, IT Support wrote: > Thanks in advance. Where is your view/zone configuration? (possibly in one of the included files) you will need to post that configuration as well. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-

Re: Internernal view is answering to external ping

2013-07-31 Thread Mark Andrews
Post your *full* config not half of it. How the hell do you expect people to identify problems unless you give them the neccessary details. Do you give you car mechanic only access to the boot when you have a engine problem? You said you created views yet you didn't send anything that described

Re: Internernal view is answering to external ping

2013-07-31 Thread IT Support
Thanks Mark for the advice, that output is my whole named.conf, please let me know if I need to post another output file This is what do i have on my bind folder: named.conf named.conf.dpkg-dist named.conf.local named.conf.local.bfRFC1918 named.conf.local.orig named.conf.options named.conf.opti

Re: Internernal view is answering to external ping

2013-07-31 Thread IT Support
Hi Steven Can you tell me what files do I have to post here? On 31/07/2013 7:04 PM, Steven Carr wrote: On 1 August 2013 00:59, IT Support wrote: Thanks in advance. Where is your view/zone configuration? (possibly in one of the included files) you will need to post that configuration as well.

Re: Internernal view is answering to external ping

2013-07-31 Thread Mark Andrews
Send the output of "named-checkconf -p". This will combine all the configuration files into one file. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please

Re: Internernal view is answering to external ping

2013-07-31 Thread Barry Margolin
In article , IT Support wrote: > Thanks Mark for the advice, that output is my whole named.conf, please > let me know if I need to post another output file It contains: include "/etc/bind/named.conf.options"; include "/etc/bind/named.conf.local"; One of these files should contain the view co