RE: rndc on local host: need named running?

2016-08-30 Thread Woodworth, John R
> My plan is to have two remote, authoritative name servers > (master and slave) for my owned domains. I would like to use rndc > to control them from my local host. > > A couple of questions: Tom, I have a slightly unorthodox view on this which may even offer a bit more security. The answers a

Re: SPF and domain keys

2016-08-30 Thread Reindl Harald
Am 29.08.2016 um 15:49 schrieb project722: What about DKIM only? Can it be used instead of, or, as a "replacement" for SPF? For example mails are signed with DKIM from the SMTP servers, and the receiving servers are checking both SPF and DKIM. If the receiving server detected a missing SPF woul

Re: rndc on local host: need named running?

2016-08-30 Thread Tom Browder
On Tuesday, August 30, 2016, Cathy Almond wrote: > On 28/08/2016 02:48, Lyle wrote: > > Use any in the allow stanza. > > You'll be using a shared key for this to work anyway, but I'd suggest > being slightly more paranoid than 'any' in the allow stanza - perhaps > the address range in which your

Re: rndc on local host: need named running?

2016-08-30 Thread Tom Browder
On Tuesday, August 30, 2016, Woodworth, John R < john.woodwo...@centurylink.com> wrote: > > I have a slightly unorthodox view on this which may even offer a bit more > > security. The answers are listed below inline. > > ... Thanks, John. Best regards, -Tom

Re: DNS views and zone transfers

2016-08-30 Thread Bob Harold
On Thu, Aug 25, 2016 at 12:56 PM, project722 wrote: > I have successfully setup TSIG keys for "views" using a DNS master/server > pair. Zone transfers are working as expected between the 2 servers for each > view. Before we go live into production with this I need some clarification > on a couple

Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread James Brown via bind-users
System is a Mac mini (late-2009) running a new install of Mac OS X 10.11.6. Installed OpenSSL 1.1.0 using: ./Configure --prefix=/usr/local shared darwin64-x86_64-cc enable-ec_nistp_64_gcc_128 no-ssl2 no-ssl3 make depend make test sudo make install No problems encountered. Then I tried to install

Re: Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread John W. Blue
I personally avoid all Apple products like the plauge. Sadly, a iPhone 6s was foisted upon me by my place of employment. Piece of junk. Hate it. achem. Surely you can find some normal hardware to install unix on and then BIND, right? Or. How about throwing up a VM on the Mac and using that

Re: Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread Mukund Sivaraman
On Wed, Aug 31, 2016 at 02:02:45PM +1000, James Brown via bind-users wrote: > System is a Mac mini (late-2009) running a new install of Mac OS X 10.11.6. > > Installed OpenSSL 1.1.0 using: > ./Configure --prefix=/usr/local shared darwin64-x86_64-cc > enable-ec_nistp_64_gcc_128 no-ssl2 no-ssl3 > m

Re: Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread Vinícius Ferrão
Unnecessary hate. OS X is a pretty standard Unix and it’s POSIX certified instead of Linux for example. BIND9 simply does not compile with OpenSSL 1.1 yet. On Aug 31, 2016, at 01:20, John W. Blue mailto:john.b...@rrcic.com>> wrote: I personally avoid all Apple products like the plauge. Sadly

Re: Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread John W. Blue
Heh. I did say "personally" and for me being locked out of doing what I want to do when I want to do it really helps me decide between something that is useful or junk. And besides, I am cheap. As an aside .. I remember I went into coworkers office for the first time. It was like a small s

Re: Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread Mark Andrews
OpenSSL changed the API between OpenSSL 1.0.2 and OpenSSL 1.1.0 and it is not backwards compatible. Almost everything written for OpenSSL 1.0.2 and earlier needs to be re-written for OpenSSL 1.1.0. We have not yet completed that process. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley,