Re: Solved - Re: A tale of two nameservers - resolution problems

2015-09-03 Thread Matus UHLAR - fantomas
On 01.09.15 13:36, Robert Moskowitz wrote: On the Fedora-arm list I was told about systemd-timesyncd. Much better for these systems than chronyd which is suppose to be the replacement for ntpdate... chrony is replacement for ntpd (not ntpdate!) on systems that are not always online. "has b

Re: Solved - Re: A tale of two nameservers - resolution problems

2015-09-03 Thread Robert Moskowitz
On 09/03/2015 04:09 AM, Matus UHLAR - fantomas wrote: On 01.09.15 13:36, Robert Moskowitz wrote: On the Fedora-arm list I was told about systemd-timesyncd. Much better for these systems than chronyd which is suppose to be the replacement for ntpdate... chrony is replacement for ntpd (not n

Re: RHEL, Centos, Fedora rpm 9.10.2-P4

2015-09-03 Thread Phil Mayers
On 02/09/15 21:57, Carl Byington wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://www.five-ten-sg.com/mapper/bind contains links to the source Sigh. FYI, Chrome popped this error up for me: """ Google Safe Browsing recently found harmful programs on www.five-ten-sg.com. """ Silly

logging bug for rpz at load-time?

2015-09-03 Thread Phil Mayers
Minor cosmetic bug, but we're seeing logs like: 03-Sep-2015 12:18:50.751 (re)loading policy zone 'rpz.' changed from 0 to 77406 qname, 0 to 0 nsdname, 769 to 771 IP, 0 to 0 NSIP, 0 to 0 CLIENTIP entries 03-Sep-2015 12:18:58.029 (re)loading policy zone 'rpz.' changed from 77406 to 1213943 qna

Re: logging bug for rpz at load-time?

2015-09-03 Thread Mukund Sivaraman
Hi Phil On Thu, Sep 03, 2015 at 01:22:48PM +0100, Phil Mayers wrote: > Minor cosmetic bug, but we're seeing logs like: > > 03-Sep-2015 12:18:50.751 (re)loading policy zone 'rpz.' changed from > 0 to 77406 qname, 0 to 0 nsdname, 769 to 771 IP, 0 to 0 NSIP, 0 to 0 > CLIENTIP entries > > 03-Sep-201

Re: logging bug for rpz at load-time?

2015-09-03 Thread Phil Mayers
On 03/09/15 15:14, Mukund Sivaraman wrote: The numbers are overall counts for that view, after the contents of that policy zone have been loaded. Cumulatively, they should match the number of records in your policy zones (named starts with empty RPZ state). In that case, those counts are absol

Re: logging bug for rpz at load-time?

2015-09-03 Thread Evan Hunt
On Thu, Sep 03, 2015 at 03:30:43PM +0100, Phil Mayers wrote: > I'm a tiny bit uncomfortable exposing the detailed config here given > what it does. You can open a bug ticket at bind9-b...@isc.org. ISC's bug database is closed and confidential for this exact reason. -- Evan Hunt -- e...@isc.org

Installing bind is not very clear for me

2015-09-03 Thread Leandro
Dear All: While installing bind still have not clear some issues: Im using Centos 6.6 since Im not very comfortable with Centos7 yet. My final goal is to get an updated and stable version and also use json format for the statistics channel. 1) Some bind users recommended to get at least a 9.10

Split horizon and some problems on sec.

2015-09-03 Thread Marek Kozlowski
:-) I have several domains for which I have two "internal" DNS servers (a primary and one of the secondaries) and two "external" DNS servers (both secondaries). There are six domains for each of them I have pairs of zone description files: a private (for internal clients) and a public (for all oth

Re: Installing bind is not very clear for me

2015-09-03 Thread Reindl Harald
Am 03.09.2015 um 19:45 schrieb Leandro: Dear All: While installing bind still have not clear some issues: Im using Centos 6.6 since Im not very comfortable with Centos7 yet. My final goal is to get an updated and stable version and also use json format for the statistics channel. 1) Some bind

Re: Installing bind is not very clear for me

2015-09-03 Thread Lyle Giese
On 9/3/2015 12:53 PM, Reindl Harald wrote: Am 03.09.2015 um 19:45 schrieb Leandro: Dear All: While installing bind still have not clear some issues: Im using Centos 6.6 since Im not very comfortable with Centos7 yet. My final goal is to get an updated and stable version and also use json form

Re: Installing bind is not very clear for me

2015-09-03 Thread Robert Moskowitz
On 09/03/2015 01:45 PM, Leandro wrote: Dear All: While installing bind still have not clear some issues: Im using Centos 6.6 since Im not very comfortable with Centos7 yet. My final goal is to get an updated and stable version and also use json format for the statistics channel. 1) Some bin

Re: Installing bind is not very clear for me

2015-09-03 Thread Mike Hoskins (michoski)
Few points for clarification: With rhel/centos you're not getting the major version as reported. You need to look at the changlog for the package to see what fixes/features have been backported. That effort including associated QA is part of what you're paying for with rhel or getting for free a

Re: Split horizon and some problems on sec.

2015-09-03 Thread Tony Finch
Marek Kozlowski wrote: > > But it's rather annoying. I have over 50 "common" zones and only six > "private" and "public" ones. How can I implement split horizon for just > a few zones and consider other ones as "common"? Write a script that takes the real include file containing slave declaration

Re: Installing bind is not very clear for me

2015-09-03 Thread Leandro
Ok ... I got BIND 9.10.2-P3 working. I compiled with ./configure --with-openssl --enable-threads --with-libxml2 --with-libjson make make install Json statistics channel is working and chroot is not longer mandatory. Im happy. Thanks! Leandro. On 03/09/15 15:47, Mike Hoskins (michoski) wrote

Re: Installing bind is not very clear for me

2015-09-03 Thread Robert Moskowitz
On 09/03/2015 04:35 PM, Leandro wrote: Ok ... I got BIND 9.10.2-P3 working. I compiled with ./configure --with-openssl --enable-threads --with-libxml2 --with-libjson make make install Json statistics channel is working and chroot is not longer mandatory. But do make sure you have selinux e

Re: Installing bind is not very clear for me

2015-09-03 Thread Reindl Harald
Am 03.09.2015 um 22:59 schrieb Robert Moskowitz: On 09/03/2015 04:35 PM, Leandro wrote: Ok ... I got BIND 9.10.2-P3 working. I compiled with ./configure --with-openssl --enable-threads --with-libxml2 --with-libjson make make install Json statistics channel is working and chroot is not longe

Re: Installing bind is not very clear for me

2015-09-03 Thread Robert Moskowitz
On 09/03/2015 05:02 PM, Reindl Harald wrote: Am 03.09.2015 um 22:59 schrieb Robert Moskowitz: On 09/03/2015 04:35 PM, Leandro wrote: Ok ... I got BIND 9.10.2-P3 working. I compiled with ./configure --with-openssl --enable-threads --with-libxml2 --with-libjson make make install Json sta

Re: Installing bind is not very clear for me

2015-09-03 Thread Reindl Harald
Am 03.09.2015 um 23:16 schrieb Robert Moskowitz: On 09/03/2015 05:02 PM, Reindl Harald wrote: Am 03.09.2015 um 22:59 schrieb Robert Moskowitz: On 09/03/2015 04:35 PM, Leandro wrote: Ok ... I got BIND 9.10.2-P3 working. I compiled with ./configure --with-openssl --enable-threads --with-lib