Re: rndc status command hangs in bind 9.14.2

2019-06-12 Thread Michał Kępień
Hi Andi, > Is there something different about 9.14 defaults that I now need to include > in my config to get past this ? I am unable to reproduce this, things seem to work fine, at least on a fresh amd64 NetBSD 7.2 VM: # bin/rndc/rndc status version: BIND 9.14.2 (Stable Release) run

Re: Useful tip on nsupdate -- readline support.

2019-06-12 Thread Tony Finch
Mukund Sivaraman wrote: > On Tue, Jun 11, 2019 at 10:03:30AM -0400, Warren Kumari wrote: > > > > I manually use nsupdate to make some changes to some of my zones - > > most recently I had to add a bunch of reverse DNS records. These are > > all very similar - the first octet changes, and then the

Re: Useful tip on nsupdate -- readline support.

2019-06-12 Thread Ondřej Surý
Hey list, I believe this needs addressing from the BIND team. > * readline is GPL BIND 9 supports compilation with libedit which is 99% drop-in replacement since 2015 (017cbd44). The well-established open-source distributions are well aware of the readline firm stand on the GPL vs LGPL for the

Re: Useful tip on nsupdate -- readline support.

2019-06-12 Thread Mukund Sivaraman
Hi Ondrej On Wed, Jun 12, 2019 at 04:08:20PM +0200, Ondřej Surý wrote: > Hey list, > > I believe this needs addressing from the BIND team. > > > * readline is GPL > > BIND 9 supports compilation with libedit which is 99% drop-in replacement > since 2015 (017cbd44). I had mentioned libedit in m

Re: rndc status command hangs in bind 9.14.2

2019-06-12 Thread Andi Vajda
On Wed, 12 Jun 2019, Micha? K?pie? wrote: Hi Andi, Is there something different about 9.14 defaults that I now need to include in my config to get past this ? I am unable to reproduce this, things seem to work fine, at least on a fresh amd64 NetBSD 7.2 VM: # bin/rndc/rndc status ver

dnssec-validation auto vs yes

2019-06-12 Thread Shawn Zhou via bind-users
Hi, The default BIND9 installation for CentOS7 has dnssec-validation set to "yes" and it also includes managed-keys as well. Do those managed-keys get updated automatically? It is not clear from reading  https://ftp.isc.org/isc/dnssec-guide/html/dnssec-guide.html#dnssec-validation-explained  tha

Re: Strange DNS problem

2019-06-12 Thread Mark Andrews
Thanks > On 13 Jun 2019, at 1:17 am, Rune Hassel wrote: > > Hi! > > This problem should now be completely resolved. > > Regards > Rune Hassel > > > -Original Message- > From: Mark Andrews > Sent: Tuesday, June 11, 2019 6:08 AM > To: Jukka Pakkanen > Cc: Stephane Bortzmeyer ; c...@

Re: dnssec-validation auto vs yes

2019-06-12 Thread Evan Hunt
On Wed, Jun 12, 2019 at 11:40:27PM +, Shawn Zhou via bind-users wrote: > The default BIND9 installation for CentOS7 has dnssec-validation set to > "yes" and it also includes managed-keys as well. Do those managed-keys > get updated automatically? Yes, if the "managed-keys" statement is in name

Re: dnssec-validation auto vs yes

2019-06-12 Thread Shawn Zhou via bind-users
Thanks Even. Sounds like "dnssec-validation auto" is a more future-proof option for what want it. I will use that instead. On Wednesday, June 12, 2019, 5:25:51 PM PDT, Evan Hunt wrote: On Wed, Jun 12, 2019 at 11:40:27PM +, Shawn Zhou via bind-users wrote: > The default BIND9 inst