Re: views-based RPZ

2024-08-23 Thread Greg Choules via bind-users
w has its own cache, hence the need for a lot of RAM. I would try it out on a lab server first. Hope that helps. Cheers, Greg On Fri, 23 Aug 2024 at 20:43, Carlos Horowicz via bind-users < bind-users@lists.isc.org> wrote: > Hello List, > > an ISP has brought a case where several cu

Re: views-based RPZ

2024-08-24 Thread Carlos Horowicz via bind-users
rver first. Hope that helps. Cheers, Greg On Fri, 23 Aug 2024 at 20:43, Carlos Horowicz via bind-users wrote: Hello List, an ISP has brought a case where several customers do not agree with our web interface portal that lets select different RPZ zones to be activated fo

Re: 9.18 horrendous

2024-08-24 Thread Havard Eidnes via bind-users
that the original poster had no intention of contributing to improving BIND. The fact that many if not most of us get all this for free is further reason to not just complain for the sake of complaining. Best regards, - Håvard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to un

Re: views-based RPZ

2024-08-24 Thread Grant Taylor via bind-users
On 8/24/24 07:37, Carlos Horowicz via bind-users wrote: 2. if RPZ records are held in memory, why would an RPZ zone need to be stored n times if there are n orthogonal views ? That is, why the more views the more memory needed. Maybe you meant the qpcache, to store different answers, though I

Re: views-based RPZ

2024-08-25 Thread Greg Choules via bind-users
view selection, I don't know exactly how the code works or how efficient it is. But certainly I have seen some configs with a lot of views and they seem to function OK. What sort of QPS are each of your servers handling? Cheers, Greg On Sun, 25 Aug 2024 at 05:27, Grant Taylor via bin

BIND statistics

2024-08-25 Thread Havard Eidnes via bind-users
;)) { n.toggleClass("hidden"); n = n.next(); } if (n.is("table")) { n.toggleClass("hidden"); } return false; }); }); and is quite different from what BIND 9.18.x presents: 2024-08-16T09:03:10.730Z etc. etc. The question is: am I alone in experiencing this? It a

Re: BIND statistics

2024-08-25 Thread Greg Choules via bind-users
Firefox. I can't reproduce your issue, sorry. Cheers, Greg On Sun, 25 Aug 2024 at 21:06, Havard Eidnes via bind-users < bind-users@lists.isc.org> wrote: > Hi, > > I'm mostly running BIND 9.18.x, and have configured statistics > publishing via > > statistics-channe

Re: BIND statistics

2024-08-25 Thread Havard Eidnes via bind-users
gt; fine to me in all of them. > Browers tried were Chrome, Safari and Firefox. > > I can't reproduce your issue, sorry. OK, thanks for checking anyway, will do more testing. Regards, - Håvard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this l

Re: BIND statistics

2024-08-26 Thread Greg Choules via bind-users
e on MacOS: just the same; it displays the raw XML > which isn't exactly user-friendly. > > Regards, > > - Håvard > -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid suppor

Re: BIND statistics

2024-08-26 Thread Havard Eidnes via bind-users
ard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://l

Re: BIND statistics

2024-08-26 Thread Havard Eidnes via bind-users
>> Hi Håvard. >> Have you tried a different browser? > > Not yet. Will do tomorrow. Latest Chrome on MacOS: just the same; it displays the raw XML which isn't exactly user-friendly. Regards, - Håvard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsu

Re: BIND statistics

2024-08-26 Thread Havard Eidnes via bind-users
\n\n \ \n \nCurrent time:<\ /th>\n\n \n\n \n \nServer version:\n\n \ \n \n \n\n\nhttps://l

Re: BIND statistics

2024-08-26 Thread Havard Eidnes via bind-users
cessing the command-line arguments, but before reading the configuration file. Regards, - Håvard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscripti

Re: views-based RPZ

2024-08-26 Thread Carlos Horowicz via bind-users
s. Thank you all for your insights, Carlos On 26/08/2024 10:20, Petr Špaček wrote: On 25. 08. 24 9:20, Greg Choules via bind-users wrote: Regarding view selection, I don't know exactly how the code works or how efficient it is. But certainly I have seen some configs with a lot of views a

Re: BIND statistics

2024-08-26 Thread Havard Eidnes via bind-users
ecause I wasn't paying attention to what options were turned on by default for the package I was putting together. "Surely stats is on by default!" Not so. (Well, I didn't even think it was optional.) Lesson learned. Regards, - Håvard -- Visit https://lists.isc.org/mailman/l

Re: BIND statistics

2024-08-26 Thread Havard Eidnes via bind-users
> On Mon, Aug 26, 2024 at 06:05:19PM +0200, Havard Eidnes via bind-users wrote: >> Thanks. I found it, and it's more than a little embarassing. >> >> This is what you get when not building with --with-libxml2: an >> "un-rendered" xsl file as a result, i

Re: Updated Docker images (9.18, 9.20, 9.21) - now based on Alpine Linux

2024-08-27 Thread Dan Parrish via bind-users
had basic logging, I could provide more information, possibly even resolved the issue and reported the fix. Can we get logging to work? --dan -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support sub

Re: Updated Docker images (9.18, 9.20, 9.21) - now based on Alpine Linux

2024-08-27 Thread Peter DeVries via bind-users
nt. Please do not feel > obligated to reply outside your normal working hours. > > > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Con

Re: Updated Docker images (9.18, 9.20, 9.21) - now based on Alpine Linux

2024-08-27 Thread Dan Parrish via bind-users
my config not being close-enough to stock for the new container to load successfully. An easy issue to understand and fix with the logging change you made. Thanks! --dan -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of thi

Re: Updated Docker images (9.18, 9.20, 9.21) - now based on Alpine Linux

2024-08-28 Thread Peter DeVries via bind-users
enough in "one size > fits all" sense? > > -- > Petr Špaček > Internet Systems Consortium > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support su

Re: Updated Docker images (9.18, 9.20, 9.21) - now based on Alpine Linux

2024-09-02 Thread Taavi Eomäe via bind-users
By any chance have you measured the performance difference between GNU libc and MUSL? Best Regards, Taavi smime.p7s Description: S/MIME Cryptographic Signature -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this

Sporadic Timeouts after upgrading to bind9.20

2024-09-04 Thread Klaus Darilion via bind-users
Salzburg, Austria -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-04 Thread Klaus Darilion via bind-users
Darilion, Head of Operations nic.at GmbH, Jakob-Haringer-Straße 8/V 5020 Salzburg, Austria From: Ondřej Surý Sent: Wednesday, September 4, 2024 7:23 PM To: Klaus Darilion Cc: bind-users@lists.isc.org Subject: Re: Sporadic Timeouts after upgrading to bind9.20 Klaus, is that recursive or authoritative

Question about parameter settings query-source-v6 address { none; };

2024-09-05 Thread Klaus Tachtler via bind-users
: https://dokuwiki.tachtler.net --- -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information

Re: Sporadic Timeouts after upgrading to bind9.20

2024-09-05 Thread Havard Eidnes via bind-users
erage "drops due to full socket buffers", but that doesn't mean there are occasional (smallish) spikes in the rate, of course. And this is with BIND 9.18.29. In other words: I think more information is needed to help you diagnose the issue. Regards, - Håvard -- Visit https://l

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-06 Thread Klaus Darilion via bind-users
-Haringer-Straße 8/V 5020 Salzburg, Austria From: Ondřej Surý Sent: Wednesday, September 4, 2024 7:23 PM To: Klaus Darilion Cc: bind-users@lists.isc.org Subject: Re: Sporadic Timeouts after upgrading to bind9.20 Klaus, is that recursive or authoritative? Anything unusual like RPZ or catz? Try

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-06 Thread Klaus Darilion via bind-users
I just happened again. I have not yet installed the debug symbols. I query the SOA every second with 1 second timeout. Here are the traces. I happened a few times in a row. Below are the traces. I noticed the timeout happened during Bind9 starting an inbound IXFR: Sep 06 07:20:55 named[1605200]

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-06 Thread Klaus Darilion via bind-users
/lib/x86_64-linux-gnu/libuv.so.1.0.0 #4 0x7b8ceb49ca94 - 1 - /usr/lib/x86_64-linux-gnu/libc.so.6 #5 0x7b8ceb529c3c - 1 - /usr/lib/x86_64-linux-gnu/libc.so.6 -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-06 Thread Klaus Darilion via bind-users
From: Ondřej Surý Sent: Friday, September 6, 2024 4:10 PM To: Klaus Darilion Cc: Klaus Darilion via bind-users Subject: Re: Sporadic Timeouts after upgrading to bind9.20 Hmm, what is the churn in the zones? How often there’s IXFR and how large those changes are? Every 30 minutes. See logs

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-06 Thread Klaus Darilion via bind-users
From: Ondřej Surý Sent: Friday, September 6, 2024 4:08 PM To: Klaus Darilion Cc: Petr Špaček ; bind-users@lists.isc.org; Klaus Darilion via bind-users Subject: Re: Sporadic Timeouts after upgrading to bind9.20 Are your running with options { reuseport no; }; ? You might want to try that

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-06 Thread Klaus Darilion via bind-users
Correcting myself: event with { reuseport no; }; and UV_THREADPOOL_SIZE=12 still timeouts happen, but the situation improved a lot. Regards Klaus From: bind-users On Behalf Of Klaus Darilion via bind-users Sent: Saturday, September 7, 2024 12:21 AM To: Ondřej Surý Cc: Klaus Darilion via bind

RE: Sporadic Timeouts after upgrading to bind9.20

2024-09-09 Thread Klaus Darilion via bind-users
-users Subject: RE: Sporadic Timeouts after upgrading to bind9.20 Correcting myself: event with { reuseport no; }; and UV_THREADPOOL_SIZE=12 still timeouts happen, but the situation improved a lot. Regards Klaus From: bind-users mailto:bind-users-boun...@lists.isc.org>> On Behalf Of

Re: Lookup failures

2024-09-13 Thread Greg Choules via bind-users
a specific > interface? I already have listen-on { 10.0.0.1; }; (vlan101 IP) in the > config with nothing else listening. > > I guess there's nothing technically wrong with this, but it does make it > harder to troubleshoot. > > -- > Visit https://lists.isc.org/mailman/l

DNSSEC and time.nist.gov

2016-08-26 Thread Rok Potočnik via bind-users
, Rok ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Error running Configure with OpenSSL 1.1.0 and BIND 9.11.0rc1

2016-08-30 Thread James Brown via bind-users
/local/include checking whether linking with OpenSSL works... yes checking whether linking with OpenSSL requires -ldl… unknown Can anyone help me with this? Thanks, James.___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

minimal-all on master

2016-09-02 Thread Jim Popovitch via bind-users
visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: minimal-all on master

2016-09-02 Thread Jim Popovitch via bind-users
On Fri, Sep 02, 2016 at 06:59:35PM +, Jim Popovitch via bind-users wrote: > Hello, > > Should minimal-all (v9.11.0-rc1) work on a master? My testing shows that it > only works on the slave DNS servers. > And by minimal-all I mean minimal-any (i keep typo'ing that fo

Re: minimal-any on master

2016-09-05 Thread Jim Popovitch via bind-users
On Mon, Sep 05, 2016 at 09:51:25AM +0100, Tony Finch wrote: > Jim Popovitch via bind-users wrote: > > > > Should minimal-all (v9.11.0-rc1) work on a master? My testing shows > > that it only works on the slave DNS servers. > > Works for me :-) minimal-any is implement

Re: minimal-any on master

2016-09-05 Thread Jim Popovitch via bind-users
On Mon, Sep 05, 2016 at 05:12:47PM +0100, Tony Finch wrote: > Jim Popovitch via bind-users wrote: > > > > Thanks. Now I'm seeing something slighly different. I have 3 NS > > servers, ns{1-3}.domainmail.org. > > > > When I first asked 3 days ago I was seein

Re: 9.15.8: task.h includes uninstalled netmgr.h

2020-02-19 Thread Dennis Clarke via bind-users
GreyBeard and suspenders optional ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Advice on balancing web traffic using geoip ACls

2020-02-23 Thread G.W. Haywood via bind-users
_ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

RE: Bind 9.14 and bind-tools 9.16

2020-03-01 Thread Browne, Stuart via bind-users
It looks to me as if you are trying to generate a TSIG key for DNS updates. Try using "tsig-keygen" instead. Stuart > -Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of > @lbutlr > Sent: Monday, 2 March 2020 1:13 PM >

Re: recursive resolver

2020-03-12 Thread G.W. Haywood via bind-users
logging arrangements. Having said that, I have never found that centralised logging has caused any problems when it is set up sanely. -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users

Re: Fwd: Re: recursive resolver

2020-03-13 Thread Grant Taylor via bind-users
ase visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: recursive resolver

2020-03-14 Thread G.W. Haywood via bind-users
e that 62ms is very respectable. If you have problems with your own service you can probably use a different one, if only until such time as you can fix your own (and if indeed it needs to be fixed). -- 73, Ged. ___ Please visit https://lists.isc.org/mai

Re: How to get random subset of large rrset (30+ IPs for round robin)?

2020-03-20 Thread Grant Taylor via bind-users
___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Non-disruptive migration to dnssec-policy possible?

2020-03-25 Thread Håkan Lindqvist via bind-users
process. Is that relevant to the problem? Ie, do existing keys need this file to be used properly, if so is there tooling to generate these? Any suggestions? Regards, Håkan Lindqvist ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: Non-disruptive migration to dnssec-policy possible?

2020-03-25 Thread Håkan Lindqvist via bind-users
blem) /Håkan ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: dnssec-lookaside auto key expiration

2020-03-25 Thread Havard Eidnes via bind-users
quot; is for now the safe thing to do. Best regards, - Håvard ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Non-disruptive migration to dnssec-policy possible?

2020-03-26 Thread Håkan Lindqvist via bind-users
little awkward? On that note, combining "dnssec-policy x" with "inline-signing no" does not seem to be handled gracefully. This makes me suspect that it's not an intended scenario, is that correct? /Håkan On 2020-03-25 16:57, Håkan Lindqvist via bind-users wrote: On 2

Re: Non-disruptive migration to dnssec-policy possible?

2020-03-26 Thread Håkan Lindqvist via bind-users
failure) /Håkan ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Non-disruptive migration to dnssec-policy possible?

2020-03-27 Thread Håkan Lindqvist via bind-users
ssues/1709 /Håkan ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Localhost view is not working for me

2020-03-30 Thread Marc Chamberlin via bind-users
;    recursion no; >    include "/etc/named.d/external/external_zones.conf"; > }; -- --... ...-- .. ...-.. ..-- .- --... .--. -..- .-- -- .- .-. -.-. *Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! * ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Machine friendly alternative to nsupdate

2020-04-01 Thread G.W. Haywood via bind-users
experience of it. The last changelog entry is dated Sep 22 2010, which you might consider a good thing, or you might not. -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

update-policy wildcard grant

2020-04-01 Thread Jim Popovitch via bind-users
am I doing wrong? tia! -Jim P. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Localhost view is not working for me SOLVED!

2020-04-01 Thread Marc Chamberlin via bind-users
ing and see what source and destination your queries > are using.  Make fake queries to unique names just to be sure which > queries you are looking at. > That's the best that I can suggest. > > -- > Bob Harold > > > On Mon, Mar 30, 2020 at 1:07 PM Marc Chamberlin via bind-use

Re: update-policy wildcard grant

2020-04-01 Thread Jim Popovitch via bind-users
On Thu, 2020-04-02 at 09:27 +1100, Mark Andrews wrote: > > On 2 Apr 2020, at 06:53, Jim Popovitch via bind-users < > > bind-users@lists.isc.org> wrote: > > > > Hello! > > > > I started on #bind, moved on to the ARM, and now I am here. > > > >

Re: checkzone from stdin?

2020-04-08 Thread Grant Taylor via bind-users
for the detailed explanation. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature _______ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

DHCPD - BIND DDNS: dnssec-keygen hmac-md5 removed

2020-04-10 Thread moo can via bind-users
/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: AW: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-04-15 Thread Jim Popovitch via bind-users
les. :) -Jim P. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-04-15 Thread Jim Popovitch via bind-users
On Wed, 2020-04-15 at 14:21 +0200, Reindl Harald wrote: > > Am 15.04.20 um 14:17 schrieb Jim Popovitch via bind-users: > > On Wed, 2020-04-15 at 10:35 +0200, Klaus Darilion wrote: > > > Thanks for answer! > > > > > > So actually it is just a cosmet

Re: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-04-15 Thread Dennis Clarke via bind-users
s but we all need to move forwards. -- Dennis Clarke RISC-V/SPARC/PPC/ARM/CISC UNIX and Linux spoken GreyBeard and suspenders optional ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mai

bind 9.16.2 on centos6

2020-04-18 Thread Carl Byington via bind-users
e visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: bind 9.16.2 on centos6

2020-04-18 Thread Carl Byington via bind-users
GP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAl6bdZAACgkQL6j7milTFsFmnwCfZC0IxRYScs3qNSxDJ67q31qH 8n4AnRUFgWKhTeachVnl/yihhaz+sm6v =Qnan -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsub

Re: bind 9.16.2 on centos6

2020-04-19 Thread Carl Byington via bind-users
rsion: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAl6ceawACgkQL6j7milTFsFUzQCggH9/2MypmkUS1ZIpnbfaE85D ayQAn0dRzHOeNqgwAfKiTdfoWvYLbPo1 =pKY4 -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from thi

Re: [dev] Change in the build system - please test

2020-04-21 Thread Xavier Humbert via bind-users
ue #4. If the problem is reasonable big and > contained, feel free to open > new issue for it (and probably link it in the comment in issue #4). > > Thank you, > Ondrej > -- > Ondřej Surý > ond...@isc.org > > > _______

RE: NAT and Question Section Mismatch

2020-04-21 Thread Carl Byington via bind-users
/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Vim Syntax, New Release for ISC Bind named.conf 5.16

2020-04-22 Thread Grant Taylor via bind-users
On 4/22/20 12:32 PM, Steve Egbert wrote: Hello, Bind-Users, Hi, This is my 2nd post (in 19 years). Welcome. I'm announcing the release of ISC Bind v9.16 named.conf syntax file for Vim editor. Thank you! The color scheme is derived from default Vim highlights using your own

RHEL, Centos, Fedora rpm 9.16.2

2020-04-23 Thread Carl Byington via bind-users
QOUAn3jU9gvZMrztcO57agdTYB84sOJp =fw26 -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

validating ... bad cache hit

2020-04-24 Thread Havard Eidnes via bind-users
oblem at the moment? Regards, - Håvard ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: validating ... bad cache hit

2020-04-24 Thread Havard Eidnes via bind-users
NSSEC) last re-signed the zone 06:51 this morning, and then next on 08:51. So I'm still quite confused as to why this happened. Regards, - Håvard ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: DoH plugin for BIND

2020-05-02 Thread Paul Kosinski via bind-users
mangle it, you have no business about the content of my traffic" ___________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DoH plugin for BIND

2020-05-02 Thread Paul Kosinski via bind-users
> with my internet connection" > > > Even if your ISP allows it, chances are that other mail servers will reject > > it > > that's a completl different story > > > On 5/2/20 3:30 PM, Paul Kosinski via bind-users wrote: > >> H

Re: DoH plugin for BIND

2020-05-05 Thread Browne, Stuart via bind-users
On 6/5/20, 02:21, "bind-users on behalf of Chuck Aurora" wrote: On 2020-05-02 14:35, Reindl Harald wrote: > Am 02.05.20 um 21:31 schrieb Chuck Aurora: >> On 2020-05-02 13:23, Erich Eckner wrote: >>> Will there be client-side DoT/DoH suppor

What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
and the other anycast instance being internal private accessible. I don't see another way to delegate the same zone to different (sets of) name servers without using anycast. Hence my email to the list asking if anyone had any suggestions. -- Grant. . . . unix || die smime.p7s Descr

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
rant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
On 5/6/20 1:28 PM, Grant Taylor via bind-users wrote: The only way that I see how to make this work is to anycast the names and IPs of the name servers that lab1.example.net is delegated to.  One anycast instance being external publicly accessible and the other anycast instance being internal

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
isit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
a n00b, because obviously my understanding of it differs from what your understanding seems to be. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
nse of NXDOMAIN. Something that I think is cleaner for the Internet at large. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
anything that's not IPX. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.is

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
at least equivalent answers so the routes are not a security issue. Agreed. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
n the labs. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Grant Taylor via bind-users
ing I was missing that didn't require anycast for proper delegation. But I'm not seeing anything else. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinf

Re: DNS Queries Using API - BIND9

2020-05-10 Thread Vadim Pavlov via bind-users
mp; Regards > Blason R > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind

Re: DNS Queries Using API - BIND9

2020-05-10 Thread Vadim Pavlov via bind-users
will be using it just in browsers). Vadim > On May 10, 2020, at 23:26, Daniel Stirnimann > wrote: > > > > On 11.05.20 08:18, Vadim Pavlov via bind-users wrote: >> The main issue that bind does’t provide an authentication method. So in >> any case you somehow shoul

Re: DNS Queries Using API - BIND9

2020-05-10 Thread Vadim Pavlov via bind-users
o...@gmail.com>> wrote: > Hmm- Any docs on configuring DOH Proxy? > > On Mon, May 11, 2020 at 11:56 AM Daniel Stirnimann > mailto:daniel.stirnim...@switch.ch>> wrote: > > > On 11.05.20 08:18, Vadim Pavlov via bind-users wrote: > > The main issue that bind does’t p

TSIG DDNS and windows clients

2020-05-12 Thread Pete Fry via bind-users
___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: TSIG DDNS and windows clients

2020-05-13 Thread Grant Taylor via bind-users
tinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

How to disable recursion on ONE domain? (Bind-9.11.14)

2020-05-15 Thread Chris Palmer via bind-users
Chris ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-

Re: How to disable recursion on ONE domain? (Bind-9.11.14)

2020-05-15 Thread Chris Palmer via bind-users
On 15/05/2020 13:34, Ondřej Surý wrote: Hi Chris, when your vpn comes up, you need to issue: rndc flushtree command to the BIND 9 instance. Ondrej -- Ondřej Surý ond...@isc.org On 15 May 2020, at 14:16, Chris Palmer via bind-users wrote: There is much discussion about recursion but I

Re: How to disable recursion on ONE domain? (Bind-9.11.14)

2020-05-15 Thread Chris Palmer via bind-users
at into the VPN config so people didn't have to do it manually. Is there any way to stop the recursion for that domain happening in the first place though? Thanks, Chris On 15/05/2020 13:34, Ondřej Surý wrote: Hi Chris, when your vpn comes up, you need to issue: rndc flushtree command to the

RHEL, Centos, Fedora rpm 9.16.3

2020-05-19 Thread Carl Byington via bind-users
tyAAnjZbfku4d2rt81c2IZC45W/0FTLX =Qnja -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https

KASP Inactive/Retired timestamps

2020-05-19 Thread Gregory Shapiro via bind-users
May 18 02:04:20 2020) +Retired: 20200519230430 (Tue May 19 23:04:30 2020) Thanks! ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions

Yet another GSS-TSIG thread for BIND9 with AD

2020-05-23 Thread Vinícius Ferrão via bind-users
tation was based on this article: http://ddiguru.com/blog/configuring-gss-tsig-on-bind; except for the +DesOnly option, because it’s deprecated right now. I’ve enabled the AES256 passwords on the BIND9 user account on AD side and set the password after it so the hashes could be generated.

Re: Does 'make uninstall' work?

2020-05-28 Thread G.W. Haywood via bind-users
ke /usr/sbin and the new one in /usr/local/sbin; then you can choose which one runs in your startup scripts. They will both use the same configuration and data (in /etc/named.conf and /var/named/ or wherever you have configured it to be). -- 73, Ged. ___

9.16.3 make tests on centos 8

2020-05-31 Thread Carl Byington via bind-users
SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more

Deconstructing the Great Firewall of China

2020-06-05 Thread Paul Kosinski via bind-users
A very interesting article on how China uses DNS (among other things) to "control" Internet usage. https://blog.thousandeyes.com/deconstructing-great-firewall-china/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubsc

Re: Yet another GSS-TSIG thread for BIND9 with AD

2020-06-12 Thread Vinícius Ferrão via bind-users
42.767 client @0x7f2c580a1ca0 192.0.2.11#55332: update 'local.example.com/IN’<http://local.example.com/IN’> denied On 24 May 2020, at 02:39, Tim Maestas mailto:tmaesta...@gmail.com>> wrote: On Sat, May 23, 2020 at 12:19 PM Vinícius Ferrão via bind-users mailto:bind-users@lists.isc

<    2   3   4   5   6   7   8   9   10   11   >