The signed domain file rewritten

2019-11-12 Thread Alessandro Vesely
Hi, I have a signed domain, with inline-signing yes and auto-dnssec maintain. Although the domain is static, the .signed and .signed.jnl files are being rewritten without apparent reason. They are about a month newer than the corresponding .jbk and base files. I notice that because of tripwire

Re: The signed domain file rewritten

2019-11-12 Thread Mark Andrews
The RRSIGs need to be regenerated periodically. This is the changes you are seeing. -- Mark Andrews > On 12 Nov 2019, at 20:42, Alessandro Vesely wrote: > > Hi, > > I have a signed domain, with inline-signing yes and auto-dnssec maintain. > > Although the domain is static, the .signed an

Using different OS for Master and Slaves

2019-11-12 Thread Mundile
Is it good idea and possible to create Master and Slaves nameservers using different OSes. For example , Master OS =Centos 7 and Slaves Os=Ubuntu 18 or Windows 2016 Sent from Mail for Windows 10 ___ Please visit https://lists.isc.org/mailman/listinfo/

Re: Using different OS for Master and Slaves

2019-11-12 Thread Reindl Harald
Am 12.11.19 um 12:24 schrieb Mundile: > Is it good idea and possible to create Master and Slaves nameservers > using different OSes. > > For example , Master OS =Centos 7 and Slaves Os=Ubuntu 18 or  Windows 2016 surely, zone transfers are working over a network protocol no matter what software

Re: Using different OS for Master and Slaves

2019-11-12 Thread sthaug
> Is it good idea and possible to create Master and Slaves nameservers using > different OSes. > For example , Master OS =Centos 7 and Slaves Os=Ubuntu 18 or Windows 2016 I guess that depends on what you want to achieve. If you want maximum diversity you might want to use different OSes *and* a

Bind9 for Windows

2019-11-12 Thread Abel, Andre via bind-users
Hello, we are wondering if BIND9 is running under Windows Server 2019? Can somebody confirm it is running? Cause I am getting trouble to get it running with errors like a missing DLL. BR Adnré Abel ___ Please visit https://lists.isc.org/mailman/listi

Re: .onion and dnssec

2019-11-12 Thread Tony Finch
Erich Eckner wrote: > I have also a hard time, generating some useful debug output > - setting `-d 9` does not give additional information in the system log. You might find it is being written to the file named.run in named's working directory (this is the default_debug logging channel configura

Re: The signed domain file rewritten

2019-11-12 Thread Jim Popovitch via bind-users
On 11/12/19 4:42 AM, Alessandro Vesely wrote: Hi, I have a signed domain, with inline-signing yes and auto-dnssec maintain. Although the domain is static, the .signed and .signed.jnl files are being rewritten without apparent reason. They are about a month newer than the corresponding .jbk and

Re: Using different OS for Master and Slaves

2019-11-12 Thread G.W. Haywood via bind-users
-- next part -- An HTML attachment was scrubbed... URL: <https://lists.isc.org/pipermail/bind-users/attachments/20191112/8a4e84c1/attachment-0001.htm> Perhaps you do. -- 73, Ged. ___ Please visit https://lists.isc.org/m

Re: .onion and dnssec

2019-11-12 Thread Erich Eckner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, 12 Nov 2019, Tony Finch wrote: Erich Eckner wrote: I have also a hard time, generating some useful debug output - setting `-d 9` does not give additional information in the system log. You might find it is being written to the file na

Re: .onion and dnssec

2019-11-12 Thread Tony Finch
Erich Eckner wrote: > > To my understanding, the difference between "forward first;" and "forward > only;" is, that the former caches and the latter forwards all queries. > However, I see the same behaviour in the log for both. Where is my mistake? My understanding is that first vs. only is relat

Re: Using different OS for Master and Slaves

2019-11-12 Thread Reindl Harald
Am 12.11.19 um 14:00 schrieb G.W. Haywood via bind-users: > Hi there, > > On Tue, 12 Nov 2019, Mundile wrote: > >> Is it good idea and possible to create Master and Slaves nameservers >> using different OSes. >> For example , Master OS =Centos 7 and Slaves Os=Ubuntu 18 or  Windows >> 2016 > >

Re: The signed domain file rewritten

2019-11-12 Thread Alessandro Vesely
On Tue 12/Nov/2019 12:09:06 +0100 Mark Andrews wrote: > The RRSIGs need to be regenerated periodically. This is the changes you are > seeing. > It doesn't seem to happen every day, but can happen again on the next day. Can the period be controlled? Best Ale -- __

Re: The signed domain file rewritten

2019-11-12 Thread Tony Finch
Alessandro Vesely wrote: > > It doesn't seem to happen every day, but can happen again on the next day. > Can > the period be controlled? It depends on the size of the zone (bigger zone -> more frequent upates), how widely scattered the RRSIG expiry times are (which depends on how the zone is u

Re: The signed domain file rewritten

2019-11-12 Thread Alessandro Vesely
On Tue 12/Nov/2019 13:39:30 +0100 Jim Popovitch via bind-users wrote: > On 11/12/19 4:42 AM, Alessandro Vesely wrote: >> Hi, >> >> I have a signed domain, with inline-signing yes and auto-dnssec maintain. >> >> Although the domain is static, the .signed and .signed.jnl files are being >> rewritten

Re: The signed domain file rewritten

2019-11-12 Thread Alessandro Vesely
On Tue 12/Nov/2019 18:18:52 +0100 Tony Finch wrote: > Alessandro Vesely wrote: >> >> It doesn't seem to happen every day, but can happen again on the next day. >> Can >> the period be controlled? > > It depends on the size of the zone (bigger zone -> more frequent upates), > how widely scattere