Re: Syntax for ECS ACL Entry

2021-09-02 Thread Ondřej Surý
FTR The PROXY protocol is on the todo list, but the demand hasn’t been great so it’s more in the “patches accepted” area then something that’s just around the corner… -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Reloading new certs for DNS over HTTPS

2021-09-09 Thread Ondřej Surý
Hi Eric, please create a GitLab issue for this. I think the rndc reconfig should pick the new cert/key, but I am not sure if we have actually implemented this. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Notice of plan to deprecate map zone file format

2021-09-10 Thread Ondřej Surý
For the record, there’s small typo below - the stable major version where we plan to remove the map format is 9.18. E.g. this will happen in the next stable release rather than in 9.20 that’s going to be released in ~2024. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working

Re: Notice of plan to deprecate map zone file format

2021-09-10 Thread Ondřej Surý
-- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 9. 2021, at 19:44, Timothe Litt wrote: > >  > I'm not a consumer of this and agree that it's up to

Re: BIND 'max-cache-size' Value on FreeBSD-13.0

2021-09-13 Thread Ondřej Surý
additional questions. Scraping the information from the mailing list chatter is very impractical. Thanks, -- Ondřej Surý (He/Him) ond...@isc.org > On 13. 9. 2021, at 9:12, Borja Marcos wrote: > > 2- Adding a bogus 127.10.whatever to the spare Ethernet interface I am not > using, pe

Re: NS query on bind9

2021-09-13 Thread Ondřej Surý
ould help you point you to the right direction. If you insist on writing your own DNS server, I would recommend starting with reading: https://labs.ripe.net/author/bert_hubert/introducing-tdns-the-teachable-authoritative-dns-server/ Ondrej -- Ondřej Surý (He/Him) ond..

Re: NS query on bind9

2021-09-13 Thread Ondřej Surý
https://datatracker.ietf.org/doc/html/rfc6891 -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 9. 2021, at 14:31, Petr Menšík wrote: > >  > Hello Sonal, &g

Re: NS query on bind9

2021-09-13 Thread Ondřej Surý
implement right, let’s not make this any harder by adding more weirdness into the wild. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 9. 2021, at 14:42, Ondřej S

Re: Problem resolving

2021-09-16 Thread Ondřej Surý
wouldn’t matter, but query is triggering NODATA response which triggers the detection of mismatched SOA. named correctly detects the misconfiguration and returns the SERVFAIL for the query. Cheers, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 16. 9. 2021, at 11:42, Danilo Godec

Notice of plan to deprecate DLZ drivers (not DLZ modules)

2021-09-20 Thread Ondřej Surý
DLZ drivers: dlz_bdb_driver.c dlz_bdbhpt_driver.c dlz_dlopen_driver.c dlz_drivers.c dlz_filesystem_driver.c dlz_ldap_driver.c dlz_mysql_driver.c dlz_odbc_driver.c dlz_postgres_driver.c dlz_stub_driver.c List of DLZ modules: bdbhpt filesystem ldap mysql mysqldyn perl sqlite3 wildcard Ondřej -- Ondřej

Re: Breaking change between 9.16.20 and 9.16.21 (check-names) ?

2021-09-23 Thread Ondřej Surý
Hi, we cannot really help you if anonymize everything and don’t provide any details at all. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 23. 9. 2021, at 10:54, Thib D wrote: > > Hello, > > I am currently rolling the 9.16.21 on a few bind servers. Most of the server

Re: Breaking change between 9.16.20 and 9.16.21 (check-names) ?

2021-09-23 Thread Ondřej Surý
This should be the right workaround at this moment, so I wonder why it didn’t work. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 23. 9. 2021, at 13:51, Thib D wrote: > > Hi Ondrej, > > Thanks for your reply, > > I'm afraid I am unable to share any more detail

Re: CPU core load not distributing with bind 9.16.21

2021-09-27 Thread Ondřej Surý
You need to set your kernel to evenly distribute the traffic from NIC queues to the threads. Google rx-flow-hashing -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 27. 9. 2

Re: Bind9 changes RCODE

2021-09-29 Thread Ondřej Surý
hile this doesn’t clearly violate any rules, it doesn’t make me very happy - the topic of this is list is to help BIND 9 users, not debug an application developed by a commercial company. I would suggest you limit your post to this mailing list. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On

Re: libisc-9.16.15-Debian.so: undefined symbol: uv_udp_connect

2021-09-30 Thread Ondřej Surý
Using ldd is a good debugging step, but I would start with deleting the obsolete copy of libuv from /usr/local. That helps in 99% of cases like this. > Either packagers on Debian made mistake Definitely not ;-) Ondrej. -- Ondřej Surý (He/Him) ond...@isc.org > On 30. 9. 2021, at 14:39

Re: libisc-9.16.15-Debian.so: undefined symbol: uv_udp_connect

2021-09-30 Thread Ondřej Surý
Only you can answer that question… it’s your system. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 10. 2021, at 0:04, Maihöfer via bind-users > wrote: > >

Re: Broken trust chain presumably due to some zone operators using LetsEncrypt certificates

2021-10-01 Thread Ondřej Surý
Hi Richard, this is not the case. slack.com botched their DS/DNSKEY deployment (there’s a thread on dns-operations about it). Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 10. 2021, at 18:46, Richard T.A. Neal wrote: > > For those of you facing a curious issue with BIND f

Re: force nameserver(bind) information exchanges with clients via tcp only

2021-10-01 Thread Ondřej Surý
-- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 2. 10. 2021, at 1:12, Donika Mirdita > wrote: > > Hello Petr, > > This setup was not meant to address a spec

Re: Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Ondřej Surý
-- Ondřej Surý (He/Him) ond...@isc.org > On 18. 10. 2021, at 11:51, Rajnish Kamboj via bind-users > wrote: > > Hi Team, > Currently we are using Bind version 9.16.10, > > My Query > I recently found that there is an issue with the 9.16.10 version. "Issue#2389 >

Re: Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Ondřej Surý
All the information available is always written down in the issue you have already referenced. That’s always the case - even with security issues, there’s only 1 month+ delay to give people chance to upgrade. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Ondřej Surý
, but don’t shift your costs to us. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 10. 2021, at 11:52, Rajnish Kamboj via bind-users > wrote: > >

Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Ondřej Surý
, but don’t shift your costs to us. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 10. 2021, at 11:52, Rajnish Kamboj via bind-users > wrote: > 

Re: Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Ondřej Surý
here for your convenience: ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: use dig query

2021-10-25 Thread Ondřej Surý
Dig arguments are positional and they always were. See the Simple Usage and Multiple Queries sections in the manual page for details. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal

Re: Query on issue#2389 BIND 9.16.10

2021-10-27 Thread Ondřej Surý
-- Ondřej Surý (He/Him) ond...@isc.org > On 27. 10. 2021, at 7:03, Mayank Maheshwari M > wrote: > > Hi Ondrej, > > Thanks for all your responses so far. > > As per the recommendation from BIND community we plan to proceed with an > upgrade to latest BIND vers

Re: host your subdomain on your own ?

2021-11-13 Thread Ondřej Surý
you might describe why you want to do ? Ondrej -- Ondřej Surý (He/Him) ond...@isc.org signature.asc Description: Message signed with OpenPGP ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the d

Re: ERROR: Failed to create fetch for DNSKEY update

2021-11-15 Thread Ondřej Surý
far, you shared a **single line** from the log and nothing else. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software wi

Re: A good name for development branch releases package

2021-11-30 Thread Ondřej Surý
I quite like the nginx naming - stable and mainline. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 30. 11. 2021, at 16:10, Petr Menšík wrote: > > Hello B

Re: A good name for development branch releases package

2021-12-01 Thread Ondřej Surý
What if you call it bind9-git or bind9-snapshot? The monthly releases are development snapshots anyway... Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 12. 2021, at 13:07, Petr Menšík wrote: > > Mainline seems strange term to me. I think it should be used also by ISC >

Re: A good name for development branch releases package

2021-12-01 Thread Ondřej Surý
I like bind-next too - shame we didn’t think of it when we created the repositories. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 12. 2021, at 17:56, Petr Menšík wrote: > > Well, why not, I like that. Only slight disadvantage to bind9-dev is it > is never called similar w

Re: Millions of './ANY/IN' queries denied

2021-12-15 Thread Ondřej Surý
IP addresses doesn’t need access to your DNS? If yes, then go ahead. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 15. 12. 2021, at 12:51, Danilo Godec via bind-users > wrote: > > Hello, > > > I'm noticing some unusual activity where 48 external IPs generated over &g

Re: Millions of './ANY/IN' queries denied

2021-12-15 Thread Ondřej Surý
Not responding would make the client susceptible to spoofing, and named have no way of deciding whether the other side is legitimate or not. The out-of-configure-zone question could come from misconfiguration somewhere and not be malicious at all. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Ondřej Surý
FTR RRL will not help on this case. There’s no difference between response with TC and response with REFUSED. It would make a difference only if there was NOERROR response with data. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Strange named freezing

2021-12-27 Thread Ondřej Surý
Does the jail have enough entropy? That would be my first guess… -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 12. 2021, at 7:18, Nikita Druba wrote: > > Wh

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

2022-01-08 Thread Ondřej Surý
That’s a question that you need to ask people running these nameservers: 159.134.0.11; 159.134.0.12; The domain works fine from here and those servers serve only your ISP it seems. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

2022-01-08 Thread Ondřej Surý
Again - it’s your configured forwarders at fault. There’s no Google Hidden Internet. Just stop using the forwarders, named is capable to resolve the names on its own. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

2022-01-09 Thread Ondřej Surý
FTR Jason has been warned before to stop sending this nonsense about Hidden Google Internet and I’ve put them on the moderation list for now. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: your mail

2022-01-15 Thread Ondřej Surý
John, welcome to the list of people being moderated. Trolling and harassing other users on the lists is not welcomed here. Please pick your fights elsewhere. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

2022-01-28 Thread Ondřej Surý
Hi Anand, what is your open files limit before starting the server? (ulimit -n) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 28. 1. 2022, at 14:33, An

Re: Python support

2022-01-31 Thread Ondřej Surý
DNSSEC Signing Guide: Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 31. 1. 2022, at 9:39, Josef Moellers wrote: > > Mooi'n, > > I was wo

Re: 9.17.21 RUNTIME_CHECK(csock->tls.tls != ((void *)0)) failed

2022-01-31 Thread Ondřej Surý
gt;> Jan 24 12:41:25 dns named[6281]: creating IPv4 interface ixl1.15 failed; >> interface ignored >> >> and the named process no longer listens on TCP port 853. >> >> Also tried this on 9.17.22, and the same problem occurs. > > Now also tried on 9.18.0,

Re: "make test" not working?

2022-01-31 Thread Ondřej Surý
ng and why it is failing? Both ‘make test’ and ‘make check’ works as expected. ` Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailm

Re: "make test" not working?

2022-01-31 Thread Ondřej Surý
ke: Nothing to be done for 'test’. I will repeat that again - you should understand what you are doing and why you are doing that - that includes all your local patches, changes to the default options and any other modifications to the build system. Ondrej -- Ondřej Surý (He/Him) ond

Re: "make test" not working?

2022-02-01 Thread Ondřej Surý
Please don’t, use gitlab. The message is just autoconf quirk. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 2. 2022, at 15:28, Josef Moellers wrote: > > PS The

Re: "make test" not working?

2022-02-01 Thread Ondřej Surý
porting bugs. You omitted quite serious information about the build until the very last moment when you reported you found the issue. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal w

Obsoleting keep-response-order option in BIND 9.19/9.20+

2022-02-11 Thread Ondřej Surý
nt DNS client and hence we plan to directly make the option to do nothing instead of graceful removal which would force us to support the option for the next 6 years. The option will be marked obsolete, so named-checkconf will issue a warning, and removed in BIND 9.21+ development release. 1.

Re: Bind: Standard Ports And Non Standard Ports

2022-02-11 Thread Ondřej Surý
rants. The experience shows that sticking to the technical questions leads to more pleasant experience on the mailing list. Thanks. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: Obsoleting keep-response-order option in BIND 9.19/9.20+

2022-02-11 Thread Ondřej Surý
Thanks Fred, those are all good advices for the DNS over TCP implementors. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 11. 2. 2022, at 18:32, Fred Morris wr

Re: Setup a hidden master

2022-02-14 Thread Ondřej Surý
Hi, do both, or at least the firewall. But you absolutely must remove the hidden primary from the list of NS both in the parent and child zones. That’s the most important thing to do. Start with that, the rest is just additional layers. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours

Re: blackhole option anomaly

2022-02-15 Thread Ondřej Surý
Hi, please fill the issue in our GitLab: https://gitlab.isc.org/isc-projects/bind9/-/issues/new?issuable_template=Bug Thank you, -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: about apply Deckard to test BIND named

2022-02-16 Thread Ondřej Surý
would be a bare minimum here. 4. Create an issue (I thought there’s already one as integrating Deckard has been on our TODO list for couple of years now), and track all the ideas and progress there. GL #2088: https://gitlab.isc.org/isc-projects/bind9/-/issues/2088 -- Ondřej Surý (He/Him

Re: about apply Deckard to test BIND named

2022-02-16 Thread Ondřej Surý
I guess you can possibly workaround this by disabling jemalloc from named build and hope that the static shims for jemalloc calls will trump the preloaded functions from libfaketime. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: ipv6 adoption

2022-02-16 Thread Ondřej Surý
s almost EOL (June 2022), so you should upgrade to bullseye in any case. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

2022-02-17 Thread Ondřej Surý
- debugging on Windows is extremely painful and requires expertise with extremely high learning curve. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 17. 2. 2022, at 15:08, Ja

Re: Is there a community product maintaining Windows support?

2022-02-17 Thread Ondřej Surý
rs and weird quirks of the Windows SDK. Also we are not actively rejecting the idea of having Windows port - and I think I pretty much explained the conditions the ISC would accept the Windows port in the previous emails. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your worki

Re: Issue Using Wildcards for Subdimain Redirecing

2022-02-17 Thread Ondřej Surý
if you start using real domain and describing what you need to achieve instead of how you want to do that would be a good start. Step back and describe why are you doing things like this. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: BIND 9.18.0 and Mac OS X 10.15.7 - cannot build

2022-02-22 Thread Ondřej Surý
/docs/dr_459.htm (e.g. this was fixed in 2014 in the C standard) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 2. 2022, at 5:26, Larry Stone wr

Re: Recent upgrade

2022-02-22 Thread Ondřej Surý
eshark) to look what happens on the wire when the failure occurs would help. You can also run named with extra debugging level to provide more insight. Cheers, Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply o

Re: dns_dnssec_findzonekeys2: error reading WHATEVER.private: file not found

2022-02-23 Thread Ondřej Surý
16 with the upstream patch releases. The other option provided by ISC is to run BIND 9 inside a docker container, so you don’t have to worry about the PPA messing with the base system, but the docker container is exactly “Ubuntu 20.04 + ISC PPA”. Cheers, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org

Re: Errors loading Named ( 9.16.26) on RHEL 7.9

2022-02-24 Thread Ondřej Surý
The server isn’t same. All the libraries that you are using to compile BIND 9 needs to be at same or higher version, which isn’t the case here. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: Forwarding zone, setup

2022-03-01 Thread Ondřej Surý
Is static-stub something you are looking for? Reference documentation: https://bind9.readthedocs.io/en/v9_18_0/reference.html?highlight=static-stub#zone-types And in human terms: https://jpmens.net/2011/01/25/binds-new-static-stub-zone-type/ Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My

Re: Problems building bind 9.18.1 on FreeBSD

2022-03-17 Thread Ondřej Surý
You don’t have to have sphinx-build installed for manpages to be generated. There’s nothing complicated in the build system. All is pretty standard stuff. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: V 9.18.1 not listen on port 853 after rndc reload

2022-03-21 Thread Ondřej Surý
This is already being tracked as https://gitlab.isc.org/isc-projects/bind9/-/issues/3122 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 21. 3. 2022, at 17

Re: Problems building bind 9.18.1 on FreeBSD

2022-03-25 Thread Ondřej Surý
Making general statements like this is neither helpful to those “maintainers” (they can speak for themselves, do they) nor the the upstream developers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outs

Re: Problems building bind 9.18.1 on FreeBSD

2022-03-25 Thread Ondřej Surý
n the Supported Platforms: https://bind9.readthedocs.io/en/v9_18_1/requirements.html#supported-platforms Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.

Re: Problems building bind 9.18.1 on FreeBSD

2022-03-25 Thread Ondřej Surý
emD. And we are not planning to depend on specific supervisor, but in fact, we are happy to add **optional** support for any available supervisor **if it makes sense**. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not

Re: Problems building bind 9.18.1 on FreeBSD

2022-03-25 Thread Ondřej Surý
ssues?scope=all&state=closed&search=Macports For all of these, we either prepared and/or merged a fix or provided a workaround (for the second issue on the list, you need to run autoreconf -if). Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be differ

Re: Periodic SERVFAIL for TLD .BY

2022-03-29 Thread Ondřej Surý
SERVFAIL TTL to expire. The maximum value is ``30`` seconds; any higher value is silently reduced. The default is ``1`` second. And see if that helps. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Periodic SERVFAIL for TLD .BY

2022-04-02 Thread Ondřej Surý
Read the thread, this has been already answered on the list. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 2. 4. 2022, at 19:48, Dzmitry Shykuts wrote: > &

Re: Bind and systemd-resolved

2022-04-17 Thread Ondřej Surý
r defaults for dig via ${HOME}/.digrc. This file is read and any options in it are applied before the command line arguments. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

Re: Communication error when we do axfr query for the large size zone

2022-04-19 Thread Ondřej Surý
We can’t really help you if you withhold information. You need to learn to provide complete information if you want other people to help you instead of letting them guess what does you environment look like. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Communication error when we do axfr query for the large size zone

2022-04-19 Thread Ondřej Surý
> bind 9.16.13 This. You are running outdated unsupported version of BIND 9. You need to upgrade to latest 9.16 version at least. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working ho

Re: Bind and systemd-resolved

2022-04-22 Thread Ondřej Surý
I think you also might want to mask the service: https://fedoramagazine.org/systemd-masking-units/ -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 4. 2022, at 17:20, Ra

Re: getting answers from DNS queries

2022-04-25 Thread Ondřej Surý
> I asked this last week, but I didn't an answer. Probably because I still don’t know what you mean. You need to better articulate your problem and your question. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do

Re: getting answers from DNS queries

2022-04-25 Thread Ondřej Surý
That’s much better - you should search for dnstap, initial pointer might be: https://kb.isc.org/docs/aa-01342 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. >

Re: Tuning Authoritative Memory Usage

2022-04-28 Thread Ondřej Surý
From top of my head - try setting the max-cache-size to infinite. The internal views might still pre-allocate some stuff based on available memory. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Tuning Authoritative Memory Usage

2022-04-28 Thread Ondřej Surý
Pull the memory stats from the statschannel (json or xml). Also make sure you run 9.18 with jemalloc (you can use jemalloc with 9.16, but it needs to be linked explicitly with LDFLAGS or pre-loaded). Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different

Re: Attempting to configure an ISC BIND repository on Red Hat Linux 7.9

2022-04-28 Thread Ondřej Surý
I am actually thinking the similar thing that the COPR is being filtered from where you are. Try gnutls-cli to connect to the site whether it gives you the correct cert and everything. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: getting answers from DNS queries

2022-05-03 Thread Ondřej Surý
toring software. Also monitoring DNS traffic on the mirror doesn’t tell you anything **how** the DNS server sees the queries, so dnstap is going to be better solution for most deployments. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different

Re: Unrecognized Options --enable-threads

2022-05-03 Thread Ondřej Surý
ls whatsoever. Modern systems are usually managed by using software from packages. However, the broad topic of system administration is out of topic for this list. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: success resolving xxx after disabling EDNS

2022-05-04 Thread Ondřej Surý
7 The main tuning is that people should not write their own DNS server if they can’t implement it properly, but hey that’s what we have on the Internet now... Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obliga

Re: Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

2022-05-06 Thread Ondřej Surý
rsonally go with VPN as a first option. Other than that this is classical example of GIGO (garbage in, garbage out). Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Vi

Re: Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

2022-05-06 Thread Ondřej Surý
articular issue. They were crippling the TTL to 0 in the wrong direction. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind

Re: success resolving xxx after disabling EDNS

2022-05-09 Thread Ondřej Surý
as EDNS Can **you** tell if the problem why the server didn’t respond was IPv6 and not EDNS over IPv6? It’s impossible to tell whether the IPv4 and IPv6 addresses are handled on the same machine not to mention same software. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your

Re: Problem resolving a domain

2022-05-13 Thread Ondřej Surý
s) were not responsive to queries over UDP. (157.83.102.245, 157.83.102.246, 157.83.126.245, 157.83.126.246) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 5.

Re: Bad CNAME treatment consistency beetween direct CNAME request vs A request

2022-05-13 Thread Ondřej Surý
160-c.gandi.net.) (UDP) ;; WHEN: Fri May 13 15:57:49 CEST 2022 ;; MSG SIZE rcvd: 87 So, there’s nothing like “cache polution”, named correctly caches the records returned by the authoritative servers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours

Re: Problem resolving a domain

2022-05-13 Thread Ondřej Surý
loudly. They are non-compliant and need to deploy the fix at their side. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 5. 2022, at 15:16, Rainer Duffn

Re: Request to use "Canonical/Mirror"

2022-05-13 Thread Ondřej Surý
Also see https://datatracker.ietf.org/doc/html/rfc8499 for canonical DNS terminology document. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 14. 5. 2022, at 1

Re: Only one DS key comes back in query

2022-05-16 Thread Ondřej Surý
You don’t put DS into child zone, the DS record goes to parent zone, so your question doesn’t make sense in this context. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: Only one DS key comes back in query

2022-05-16 Thread Ondřej Surý
Hubert was exactly right here: https://berthub.eu/articles/posts/anonymous-help/ Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 16. 5. 2022, at 19:06, frank pica

Re: High memory consumption in bind 9.18.2

2022-05-17 Thread Ondřej Surý
You did not provided any details, so we can’t really help you. What is “RAM consumption” anyway? VSZ, RSS, numbers pulled from stats channel from named? What’s the hardware, what is the configuration, how was BIND 9 compiled (or packaged)? The more details, the better Ondrej -- Ondřej Surý

Re: Correct response to NS request in case of dual delegation when one delegation returns REFUSED

2022-05-18 Thread Ondřej Surý
ng dig. Beyond that, if you need more help, you’ll need to go into more details. > My conclusion is that Windows DNS is an abomination. And relying on an > inherently faulty behavior leads straight to hell. I cannot confirm or deny this conclusion... Ondrej -- Ondřej Surý (He/Him) ond...@is

Re: High memory consumption in bind 9.18.2

2022-05-18 Thread Ondřej Surý
Also please note that proper measurement of memory consumption is needed. There’s some good (semi-accurate) stuff at SO and it needs to be correlated with the statschannel output from named. Running “free” doesn’t measure memory consumption by any program. Ondřej -- Ondřej Surý — ISC (He/Him

Re: High memory consumption in bind 9.18.2

2022-05-18 Thread Ondřej Surý
Hi Klarstein, Gathering the output of named statschannel should be good enough for initial assessment (json please). For 9.18, make sure the jemalloc is being used at runtime. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel

Re: Dynamic A records similar to nip.io or xip

2022-05-24 Thread Ondřej Surý
Yeah, I concur that writing a small DLZ module or maybe even just **plugin** is a way to go. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 24. 5. 2022, at

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-13 Thread Ondřej Surý
Sandro, you did nothing wrong. No need to apologize from your side. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 6. 2022, at 17:45, Sandro wrote: >

Re: Compilation problems with 9.16.30

2022-06-15 Thread Ondřej Surý
You need to provide little bit more detail about the environment - operating system, compiler used, output of ./configure (including the options used). There’s no such thing as too many *relevant* details… Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Compilation problems with 9.16.30 {External}

2022-06-15 Thread Ondřej Surý
, -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 15. 6. 2022, at 20:31, William D. Colburn wrote: > Compiler: gcc -std=gnu99 >gcc (GCC) 4.4.7 20120313 (Red Hat

Re: Compilation problems with 9.16.30 {External}

2022-06-15 Thread Ondřej Surý
the dependencies (which you are probably doing anyway), so what’s the point of having this old “chassis” when you are welding new bits on top of it? Perhaps running BIND 9 in a container would be easier? Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: High memory consumption in bind 9.18.2

2022-06-16 Thread Ondřej Surý
Hi, we cannot really help you if you ignore everything that was said to you regarding the memory measurements. Ondrej. -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

<    1   2   3   4   5   6   7   >