Issues in configuring Bind 9.10 in CentOS 6.3 with --open-ssl

2014-05-02 Thread Gaurav Kansal
Dear Team, I am trying to configure Bind 9.10 version in CentOS 6.3 using the following options but getting an error as shown below. Option 1 - ./configure --with-geoip=/usr/local/share/GeoIP/ checking for libtool... no checking for Source Identity Token support... no checking for OpenS

Re: Issues in configuring Bind 9.10 in CentOS 6.3 with --open-ssl

2014-05-02 Thread Jeremy C. Reed
On Fri, 2 May 2014, Gaurav Kansal wrote: > checking for OpenSSL library... using OpenSSL from /usr/lib and /usr/include > > checking whether linking with OpenSSL works... no > > configure: error: Could not run test program using OpenSSL from > > /usr/lib and /usr/include. > > Please check the

Re: RRL active by default?

2014-05-02 Thread /dev/rob0
On Thu, May 01, 2014 at 05:10:50PM -0500, Lawrence K. Chen, P.Eng. wrote: > Does compiling in RRL mean its active, even without a rate-limit > {} control block? No, and also note the your rate-limit {} stanza could be either in your options {} statement, or in a view {} statement. The latter re

Re: RRL active by default?

2014-05-02 Thread Jeremy C. Reed
On Thu, 1 May 2014, Lawrence K. Chen, P.Eng. wrote: > Does compiling in RRL mean its active, even without a rate-limit {} > control block? Only for the built-in Chaos "_bind" view (for id.server, authors.bind, hostname.bind, and version.bind). ___ Ple

Re: Issues in configuring Bind 9.10 in CentOS 6.3 with --open-ssl

2014-05-02 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 2014-05-02 at 13:17 +0530, Gaurav Kansal wrote: > I am trying to configure Bind 9.10 version in CentOS 6.3 using the > following options but getting an error as shown below. You might try the centos source rpm linked at http://www.five-ten-sg.

BIND 9.10 compilation problem for FreeBSD 6.x/7.x

2014-05-02 Thread Shawn Zhou
Any problem has problem building BIND 9.10 for FreeBSD? We are using the same process that worked for building 9.9.4 to build 9.10 on FreeBSD 6.x/7.x but we are getting "ld: invalid BFD target" error. https://www.dropbox.com/s/jciafakcwu68p6f/build_bind.txt Snippet of the compilation log: gcc

RE: Issues in configuring Bind 9.10 in CentOS 6.3 with --open-ssl

2014-05-02 Thread Gaurav Kansal
Hi Jaremy, Config.log doesn't showing any useful data to troubleshoot this. configure:15007: result: no configure:15121: checking for sysconf configure:15121: gcc -o conftest -g -O2 -I/usr/local/share/GeoIP//include -D_GNU_SOURCE -I/usr/local/share/GeoIP//include conftest.c -lpthread -lm

RE: Issues in configuring Bind 9.10 in CentOS 6.3 with --open-ssl

2014-05-02 Thread Jeremy C. Reed
On Fri, 2 May 2014, Gaurav Kansal wrote: > Config.log doesn't showing any useful data to troubleshoot this. > configure:15338: checking for OpenSSL library > > configure:15436: error: "/usr/include/openssl//include/openssl/opensslv.h" > not found You looked at config.log after you did a differe

Re: Issues in configuring Bind 9.10 in CentOS 6.3 with --open-ssl

2014-05-02 Thread Mukund Sivaraman
Hi Gaurav On Fri, May 02, 2014 at 01:17:40PM +0530, Gaurav Kansal wrote: > --with-openssl="/usr/include/openssl/" --with-openssl should not point to the include directory, but to the prefix. Try --with-openssl=/usr or even just --with-openssl. > checking for OpenSSL library... configure: error:

Bad performance from BIND 9.10 on RHEL 6.5

2014-05-02 Thread Shawn Zhou
I was hoping that BIND 9.10 would outperform BIND 9.9.4b1 on RHEL 6.5 but I was surprised to see so much performance drop from BIND 9.10. We have been able to send test traffic with 180K qps against 9.9.4b1 without seeing query drops but with 9.10, the query drop rate was 18%. Both of the num

Re: RRL active by default?

2014-05-02 Thread Lawrence K. Chen, P.Eng.
Awww...I found messages about version.bind. On 05/02/14 09:23, Jeremy C. Reed wrote: > On Thu, 1 May 2014, Lawrence K. Chen, P.Eng. wrote: > >> Does compiling in RRL mean its active, even without a rate-limit {} >> control block? > > Only for the built-in Chaos "_bind" view (for id.server, auth

GSS-TSIG updates from Windows clients

2014-05-02 Thread John Miller
Hi folks, I'm trying to get our AD domain controllers to update our BIND 9.8.2 servers--specifically for the zone _msdcs.lab.brandeis.edu. I've got updates working in general: I can run kinit @REALM ( johnmill-dns-t...@lab.brandeis.edu in this case), then successfully run nsupdate -g from my des

Re: GSS-TSIG updates from Windows clients

2014-05-02 Thread Mark Andrews
See tkey-gssapi-credential ; tkey-gssapi-keytab ; grant ms-subdomain ; -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please vi

How does bind determine a query is duplicate?

2014-05-02 Thread Matt Doughty
I'm assuming it is a combination of host:port:query, but can anyone confirm that? -- --Matt ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists

verifying bind-9.10.0 download

2014-05-02 Thread mm half
Hello, I have downloaded bind-9.10.0.tar.gz from the ISC download site, imported in the pgpkey2013.txt located at:    https://www.isc.org/downloads/software-support-policy/openpgp-key/ , and can't seem to get any of the signature files to pass the verify test using gpg : gpg --import pgpkey20

Re: verifying bind-9.10.0 download

2014-05-02 Thread Evan Hunt
On Fri, May 02, 2014 at 05:50:45PM -0700, mm half wrote: > I have downloaded bind-9.10.0.tar.gz from the ISC download site, imported in > the pgpkey2013.txt located at:    > https://www.isc.org/downloads/software-support-policy/openpgp-key/ , and > can't seem to get any of the signature files to

Re: verifying bind-9.10.0 download

2014-05-02 Thread Noel Butler
OK here too. On 03/05/2014 11:07, Evan Hunt wrote: > On Fri, May 02, 2014 at 05:50:45PM -0700, mm half wrote: > >> I have downloaded bind-9.10.0.tar.gz from the ISC download site, imported in >> the pgpkey2013.txt located at: >> https://www.isc.org/downloads/software-support-policy/openpg

Re: RRL active by default?

2014-05-02 Thread Jeremy C. Reed
> On 05/02/14 09:23, Jeremy C. Reed wrote: > > Only for the built-in Chaos "_bind" view (for id.server, authors.bind, > > hostname.bind, and version.bind). On Fri, 2 May 2014, Lawrence K. Chen, P.Eng. wrote: > Awww...I found messages about version.bind. My workaround I use is like: # for built

bin 9.10 verbose logging

2014-05-02 Thread Noel Butler
Hi, U, since upgrade 9.9.5 to 9.10 every request to the name server is spewing copious amounts of debug type data (thankfully I only upgraded the one server) named[23250]: received packet from 207.66.8.132#53 (no opt): ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20501 ;; flags: