Re: 'managed-keys' is deprecated ??

2021-06-15 Thread Matthijs Mekking
Hi -T, I cannot reproduce this confusing warning message. Please use the absolute path /var/named/chroot/etc/named.root.key in https://bugzilla.redhat.com/show_bug.cgi?id=1972022 Best regards, Matthijs On 15-06-2021 07:46, ToddAndMargo via bind-users wrote: On 6/14/21 9:30 PM, Jim Popovitc

Re: Need Help with BIND9

2021-06-15 Thread Matus UHLAR - fantomas
On 11.06.21 18:19, Sten Carlsen wrote: From my place I resolve both to: 98.191.108.149 keiththewebguy.com. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) BIND seems to work ok but your local settings probably don't point your h

Re: Need Help with BIND9

2021-06-15 Thread Reindl Harald
Am 14.06.21 um 22:37 schrieb techli...@phpcoderusa.com: keiththewebguy.com [1]. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) I have a VPS that runs Plesk and there is only one name server so for every domain I have hosted on

Re: Need Help with BIND9

2021-06-15 Thread Reindl Harald
Am 15.06.21 um 10:31 schrieb Reindl Harald: Am 14.06.21 um 22:37 schrieb techli...@phpcoderusa.com: keiththewebguy.com [1]. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) I have a VPS that runs Plesk and there is only one nam

Re: Need help for Calculate DNS througputs

2021-06-15 Thread Anand Buddhdev
On 15/06/2021 08:12, PRAKASH CHAND wrote: Hi Prakash, Look at DNSPerf. It's an open source tool for benchmarking DNS servers. It has a component called resperf, specifically for resolvers. You could try to use that to find out how far you can push your resolvers. Make sure to measure the packet r

Re: Need Help with BIND9

2021-06-15 Thread techlists
Thank you for your help!! On 2021-06-15 00:39, Matus UHLAR - fantomas wrote: On 11.06.21 18:19, Sten Carlsen wrote: From my place I resolve both to: 98.191.108.149 keiththewebguy.com. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have sam

Re: Need Help with BIND9

2021-06-15 Thread techlists
On 2021-06-15 01:31, Reindl Harald wrote: Am 14.06.21 um 22:37 schrieb techli...@phpcoderusa.com: keiththewebguy.com [1]. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) I have a VPS that runs Plesk and there is only one name s

Re: Need Help with BIND9

2021-06-15 Thread techlists
On 2021-06-15 01:38, Reindl Harald wrote: Am 15.06.21 um 10:31 schrieb Reindl Harald: Am 14.06.21 um 22:37 schrieb techli...@phpcoderusa.com: keiththewebguy.com [1]. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) I have a VP

Re: Need Help with BIND9

2021-06-15 Thread Lyle Giese
I think I stumbled upon a problem with the zone records for keiththewebguy.com.  It could be the root issue you are having. If I run dig ns +trace keiththewebguy.com I got the following for the last record from your name servers: ns1.keiththewebguy.com. 86400   IN  A   98.191.108.149

Re: hooks in bind's DNSSEC automation to trigger external scripting of DS RECORDS updates, when CDS/CDNSKEY polling is (still) not available?

2021-06-15 Thread PGNet Dev
On 6/10/21 8:38 AM, Tony Finch wrote: PGNet Dev wrote: Has anyone here on-list figured out how to hook bind's internal signing process to *trigger* and external script to exec those API pushes? I have not, and I also want to be able to do this, and I also want scripting hooks for whenever an

Re: Need Help with BIND9

2021-06-15 Thread Matus UHLAR - fantomas
On 15.06.21 09:14, Lyle Giese wrote: I think I stumbled upon a problem with the zone records for keiththewebguy.com.  It could be the root issue you are having. If I run dig ns +trace keiththewebguy.com I got the following for the last record from your name servers: ns1.keiththewebguy.com.

Re: hooks in bind's DNSSEC automation to trigger external scripting of DS RECORDS updates, when CDS/CDNSKEY polling is (still) not available?

2021-06-15 Thread Matthijs Mekking
On 15-06-2021 16:32, PGNet Dev wrote: On 6/10/21 8:38 AM, Tony Finch wrote: PGNet Dev wrote: Has anyone here on-list figured out how to hook bind's internal signing process to *trigger* and external script to exec those API pushes? I have not, and I also want to be able to do this, and I a

Re: Need Help with BIND9

2021-06-15 Thread techlists
Thank you for your help!! The zone file is the one I tool from Plesk when I had keiththewebguy.com parked there. All I did was change the IP addresses. I assume what you want me to do is add keiththewebguy.com to the two records making: ns1.keiththewebguy.com. 86400   IN  A   98.

Re: 'managed-keys' is deprecated ??

2021-06-15 Thread ToddAndMargo via bind-users
On 15-06-2021 07:46, ToddAndMargo via bind-users wrote: On 6/14/21 9:30 PM, Jim Popovitch via bind-users wrote: On Tue, 2021-06-15 at 14:27 +1000, Mark Andrews wrote: https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/Bv9ARM.pdf The modern-day RTFM  :-) -Jim P. "Just Google it."  The

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread ToddAndMargo via bind-users
On 6/14/21 10:02 PM, ToddAndMargo via bind-users wrote: Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34.  Here are my notes. Hope this helps someone else. -T Well, if at first you don't succeed, revise! See changes to named.root.key

Re: Need Help with BIND9

2021-06-15 Thread Lyle Giese
Yep, that fixed it. Lyle On 6/15/21 2:23 PM, techli...@phpcoderusa.com wrote: Thank you for your help!!  The zone file is the one I tool from Plesk when I had keiththewebguy.com parked there.  All I did was change the IP addresses. I assume what you want me to do is add keiththewebguy.com

Re: hooks in bind's DNSSEC automation to trigger external scripting of DS RECORDS updates, when CDS/CDNSKEY polling is (still) not available?

2021-06-15 Thread Tony Finch
Matthijs Mekking wrote: > > A brief summary. Folks that are interested in the reasons why can read > up and discuss here: > >https://gitlab.isc.org/isc-projects/bind9/-/issues/1890#note_220217 So the fundamental design issue here is related to edge-triggered vs. level-triggered activities, an

Re: hooks in bind's DNSSEC automation to trigger external scripting of DS RECORDS updates, when CDS/CDNSKEY polling is (still) not available?

2021-06-15 Thread PGNet Dev
On 6/15/21 4:40 PM, Tony Finch wrote: How should named say that a key has changed? It's a multithreaded program so it can't fork (not without a single-threaded helper process) so maybe it should fire off a message to a socket that the script machinery can listen to. (Maybe abuse NOTIFY for the pu

Re: Need Help with BIND9

2021-06-15 Thread techlists
Dude!! Thanks!! On 2021-06-15 12:58, Lyle Giese wrote: Yep, that fixed it. Lyle On 6/15/21 2:23 PM, techli...@phpcoderusa.com wrote: Thank you for your help!!  The zone file is the one I tool from Plesk when I had keiththewebguy.com parked there.  All I did was change the IP addresses.

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread ToddAndMargo via bind-users
On 6/15/21 12:51 PM, ToddAndMargo via bind-users wrote: On 6/14/21 10:02 PM, ToddAndMargo via bind-users wrote: Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34.  Here are my notes. Hope this helps someone else. -T Here are my revise

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread ToddAndMargo via bind-users
On 6/15/21 6:59 PM, ToddAndMargo via bind-users wrote: On 6/15/21 12:51 PM, ToddAndMargo via bind-users wrote: On 6/14/21 10:02 PM, ToddAndMargo via bind-users wrote: Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34.  Here are my notes.

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread G.W. Haywood via bind-users
Hi there, On Wed, 16 Jun 2021, ToddAndMargo wrote: Re: My FC33->FC34 bind-chroot upgrade notes I hope this is the last time I have to revise this! ... Unfortunately perhaps not. ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' meaning 'this li