Re: BIND ignores queries from specific privileged source ports

2019-06-11 Thread Tony Finch
Mark Andrews wrote: > As for the NAT box that chooses those ports. If you can’t keep the > original port it should choose a ephemeral port at random. Choosing a > well known port is problematic for lots of reasons. If I understand the documentation that was linked previously https://www.cisco.c

DiG - Internal error

2019-06-11 Thread LeBlanc, Daniel James
Hello. I am using the dig that was created during the compile of BIND 9.14.0 (Stable Release) . I am performing a dig command from and against localhost and that has firewalled access to the Internet but am getting an exit status of 10 and the following textual error: Ø /var/named/bin/dig @

Re: DiG - Internal error

2019-06-11 Thread Tony Finch
LeBlanc, Daniel James wrote: > > I am performing a dig command from and against localhost and that has > firewalled access to the Internet but am getting an exit status of 10 > and the following textual error: dig +trace simulates iterative resolution so it tries to connect to authoritative serve

Useful tip on nsupdate -- readline support.

2019-06-11 Thread Warren Kumari
Hi there all, I manually use nsupdate to make some changes to some of my zones - most recently I had to add a bunch of reverse DNS records. These are all very similar - the first octet changes, and then the target name changes. Unfortuniatly nsupdate doesn't support readline, and so the obvious "p

Re: Useful tip on nsupdate -- readline support.

2019-06-11 Thread Mukund Sivaraman
On Tue, Jun 11, 2019 at 10:03:30AM -0400, Warren Kumari wrote: > Hi there all, > > I manually use nsupdate to make some changes to some of my zones - > most recently I had to add a bunch of reverse DNS records. These are > all very similar - the first octet changes, and then the target name > chan

Re: BIND ignores queries from specific privileged source ports

2019-06-11 Thread Blake Hudson
Tony Finch wrote on 6/11/2019 4:23 AM: Mark Andrews wrote: As for the NAT box that chooses those ports. If you can’t keep the original port it should choose a ephemeral port at random. Choosing a well known port is problematic for lots of reasons. If I understand the documentation that was l

Re: Useful tip on nsupdate -- readline support.

2019-06-11 Thread Warren Kumari
On Tue, Jun 11, 2019 at 10:59 AM Mukund Sivaraman wrote: > > On Tue, Jun 11, 2019 at 10:03:30AM -0400, Warren Kumari wrote: > > Hi there all, > > > > I manually use nsupdate to make some changes to some of my zones - > > most recently I had to add a bunch of reverse DNS records. These are > > all

RE: DiG - Internal error

2019-06-11 Thread LeBlanc, Daniel James
Thanks Tony - it is working now. :-) Daniel J. LeBlanc, P.Eng., MBA, DTME | Senior Network Architect | Bell Canada -Original Message- From: Tony Finch [mailto:d...@dotat.at] Sent: June-11-19 11:03 AM To: LeBlanc, Daniel James Cc: ML BIND Users (bind-users@lists.isc.org) Subject: [EXT]R

[SOLUTION] Re: Request assistance configuring RPZ

2019-06-11 Thread David Bank
About a week-and-a-half ago, I wrote into the list, looking for some help configuring RPZ. I wanted to have a name server (zurg) in a special network that, when queried for two specific hosts (andy and sid) in a zone, would give replies from its own information, while forwarding on all other

Re: [SOLUTION] Re: Request assistance configuring RPZ

2019-06-11 Thread Grant Taylor via bind-users
Hi David, On 6/11/19 2:05 PM, David Bank wrote: About a week-and-a-half ago, I wrote into the list, looking for some help configuring RPZ. Thank you for the follow up with details on how someone else could reproduce this for themselves if they find themselves with a similar need / desire.

rndc status command hangs in bind 9.14.2

2019-06-11 Thread Andi Vajda
Hi, I've been running bind 9.12 on netbsd 7.2 without any issues. The bind-9.12 package is now marked deprecated (eol) and we're encouraged to upgrade to bind 9.14. I've been giving it a few tries and, while my server seems to be working normally with bind 9.14.2, it doesn't respond to rnd