Re: filter-aaaa-on-v4

2013-09-18 Thread Mike Hoskins (michoski)
-Original Message- From: "", "P.Eng." Date: Wednesday, September 18, 2013 10:08 AM To: bind-users Subject: filter--on-v4 >I finally turned this feature on when I built bind-9.9.3-P2 > >Had only gotten the occasional user complaints that some browser/client >tries to connect to IPv6

filter-aaaa-on-v4

2013-09-18 Thread Lawrence K. Chen, P.Eng.
I finally turned this feature on when I built bind-9.9.3-P2 Had only gotten the occasional user complaints that some browser/client tries to connect to IPv6 and fails. Because our IT Security group doesn't allow IPv6 and is/was blocking tunneling protocols on campus. As a side effect, my NTP s

proposed new command line option for dnssec-signzone

2013-09-18 Thread Pierre Beyssac
Hello all, I have written a small patch for dnssec-signzone to handle what I assume is a pretty common case for big zones: ZSK rollover without double RRSIGs, ie removal of the RRSIG records signed with the old ZSK (inactive but still published while waiting for cache expiration of the old RRSIGs)

Re: filter-aaaa-on-v4

2013-09-18 Thread Lawrence K. Chen, P.Eng.
Well, drifting away from bind now - Original Message - > > FWIW, you could also add -4 to ntpd args or use -4 prefix in > ntpd.conf. > I was positive that I had that setbut I see now that somebody had made our cfengine system force different options on ntpd, which doesn't inclu