Re: mysterious failures/wrong-answers in reverse DNS lookup

2025-07-23 Thread Jeremy C. Reed
On Wed, 23 Jul 2025, Michael Richardson wrote: When I ask from the IETF123 network: ;; SERVER: 31.130.231.0#53(31.130.231.0) (UDP) ;; ANSWER SECTION: d.0.0.f.e.b.a.b.0.0.0.0.0.0.0.0.0.0.0.0.f.0.0.0.0.b.0.f.7.0.6.2.ip6.arpa. 7200 IN PTR nic.sandelman.ca. which is entirely correct. Probably 3

RE: suggetsed distro for Bind

2025-07-23 Thread Marc
Then maybe rocky. CentOS is not the same any more. Although for just bind it does not matter that much > Thank you very much, I verified and I'm interesting to: > > Red Hat Enterprise Linux / CentOS / AlmaLinux 8, 9 > > what do I think about Oracle Linux 9 ? It' based on RedHat code. > > >

suggetsed distro for Bind

2025-07-23 Thread Renzo Marengo
I'd like to migrate from bind 9.11 lo last version. This service is acting as cache dns server and It' running on Centos 7 server, what Linux distro do you suggest me for new Bind? -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development

RE: suggetsed distro for Bind

2025-07-23 Thread Marc
Maybe consider running it in a container and keeping nice and small with alpine linux > > I'd like to migrate from bind 9.11 lo last version. > This service is acting as cache dns server and It' running on Centos 7 > server, what Linux distro do you suggest me for new Bind? -- Visit https://lis

Re: suggetsed distro for Bind 

2025-07-23 Thread Robert McDonald
/mailman/listinfo/bind-users to unsubscribe > > from this list > > > > ISC funds the development of this software with paid support > > subscriptions. Contact us at https://www.isc.org/contact/ for more > > information. > > > > > > bind-users mai

Re: suggetsed distro for Bind

2025-07-23 Thread Carlos Horowicz via bind-users
Well I meant you can run docker containers inside a vm with qemu emulated hardware, that'd be the bad scenario ...you're right containers on bare-metal have full visibility of the Instruction set On 23/07/2025 15:19, Ondřej Surý wrote: Docker/Podman is just a container, not *-virtualization pla

Re: suggetsed distro for Bind

2025-07-23 Thread Ondřej Surý
Docker/Podman is just a container, not *-virtualization platform, so there’s full access to the underlying hardware. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 23. 7. 2025,

mysterious failures/wrong-answers in reverse DNS lookup

2025-07-23 Thread Michael Richardson
Sometimes, when I do reverse lookups on my own /56, I get weird responses. I saw this in ... April too... and maybe it went away, not sure how. Today, it's back. I tend to notice this while ping6'ing stuff... Hosts: 1. obiwan is desktop in Ottawa. 2. tilapia is authoritative DNS server (in Ottaw

Re: suggetsed distro for Bind

2025-07-23 Thread Carlos Horowicz via bind-users
I’m not sure if a container will pass through the CPU instruction set required to leverage hardware acceleration on newer (or even not-so-new) Intel processors. In KVM, for example, you have to enable it explicitly. One way to check for supported instructions is: grep -o -w 'aes\|sha_ni\|pclmu

Re: suggetsed distro for Bind

2025-07-23 Thread Renzo Marengo
Thank you very much, I verified and I'm interesting to: Red Hat Enterprise Linux / CentOS / AlmaLinux 8, 9 what do I think about Oracle Linux 9 ? It' based on RedHat code. Il giorno mer 23 lug 2025 alle ore 15:05 Ondřej Surý ha scritto: > It would be best to pick something from a list of sup

Re: suggetsed distro for Bind

2025-07-23 Thread Ondřej Surý
It would be best to pick something from a list of supported platforms: https://bind9.readthedocs.io/en/v9.20.11/chapter2.html#supported-platforms And then cross-check it with list of ISC provided packages (Fedora, RHEL-like, Debian, Ubuntu) if you want a base system that changes less often. Or

Re: suggetsed distro for Bind

2025-07-23 Thread Michal Nowak
On 23/07/2025 15:10, Renzo Marengo wrote: Thank you very much, I verified and I'm interesting to: Red Hat Enterprise Linux / CentOS / AlmaLinux 8, 9 what do I think  about Oracle Linux 9 ? It' based on RedHat code. It will work just fine as any other RHEL fork. -- Visit https://lists.isc.org/

Re: DNSSEC validation broken trust July 22-23rd time.nist.gov

2025-07-23 Thread Julian Panke via bind-users
Hi, DNSviz is showing the issue very clearly so it was not on your side https://dnsviz.net/d/time.nist.gov/aID54g/dnssec/ regards Julian Panke Ursprüngliche Nachricht Am 24.07.25 00:18 schrieb J Doe : > Hi, > > I have a small mail server that is using: BIND 9.20.11 and

DNSSEC validation broken trust July 22-23rd time.nist.gov

2025-07-23 Thread J Doe
Hi, I have a small mail server that is using: BIND 9.20.11 and performs recursion and DNSSEC validation. From yesterday (July 22nd), to today (July 23rd), I noticed the following in the server logs 22-Jul-2025 23:59:50.347 lame-servers: info: no valid RRSIG resolving 'glb.nist.gov/DNSKEY/I