Debian download source on ISC website

2024-06-19 Thread Dominic Preston
Hello, When browsing for Debian download sources on https://www.isc.org/download/ , there is a link to https://bind.debian.net/bind When clicking on https://bind.debian.net/bind I am redirected to https://packages.sury.org/bind/ Since it is listed on https://www.isc.org/download/ , can I assume

Re: Debian download source on ISC website

2024-06-19 Thread Ondřej Surý
If by production-ready you mean it’s reasonably well-tested, we are using it ourselves and it also matches what’s being uploaded to Debian directly then yes. If you mean there will be no bugs and it will magically work until the end of times without any effort then you might be disappointed. On

qname minimization: me too :(

2024-06-19 Thread Peter
Hi all, today I happened to look into a named.log, and found it full of qname minimization messages. Now as far as I understand, the saying goes that this is a problem of misconfigured upstream nameservers and we cannot do much about it. But, what if these "misconfigured upstream servers" happ

Re: qname minimization: me too :(

2024-06-19 Thread Stephane Bortzmeyer
On Wed, Jun 19, 2024 at 10:15:48PM +0200, Peter wrote a message of 32 lines which said: > today I happened to look into a named.log, and found it full of > qname minimization messages. Which message? Could you copy-and-paste it? -- Visit https://lists.isc.org/mailman/listinfo/bind-users t

Re: qname minimization: me too :(

2024-06-19 Thread Peter
On Wed, Jun 19, 2024 at 10:33:41PM +0200, Stephane Bortzmeyer wrote: ! On Wed, Jun 19, 2024 at 10:15:48PM +0200, ! Peter wrote ! a message of 32 lines which said: ! ! > today I happened to look into a named.log, and found it full of ! > qname minimization messages. ! ! Which message? Could

can I provide invalid HTTPS values for testing?

2024-06-19 Thread Stephen Farrell
Hiya, Apologies if this is a repeat, I spent a bit of time looking but didn't find stuff... I'd like to publish various HTTPS RRs with dodgy encodings in order to test which clients handle things well or badly. Were it possible to use nsupdate for that, that'd make my life simpler, but I've no

Re: can I provide invalid HTTPS values for testing?

2024-06-19 Thread Mark Andrews
Named and nsupdate validate input for types they know about (both text and wire). You would have to use versions that are not HTTPS aware and use unknown type format. Mark > On 20 Jun 2024, at 11:39, Stephen Farrell wrote: > > > Hiya, > > Apologies if this is a repeat, I spent a bit of time l

Re: can I provide invalid HTTPS values for testing?

2024-06-19 Thread Ondřej Surý
Stephen, I would suggest to write a specialized DNS server using dnspython rather than trying to cram the crap into existing DNS servers. Then it should be possible to use something like this: https://hypothesis.readthedocs.io/en/latest/ to generate the test cases automatically. Cheers, -- On

Re: can I provide invalid HTTPS values for testing?

2024-06-19 Thread Michael Richardson
Mark Andrews wrote: > Named and nsupdate validate input for types they know about (both text > and wire). You would have to use versions that are not HTTPS aware and > use unknown type format. So, he could code it in Perl or Python or something which had a dynamic DNS library. Bind