Re: bind9 update 9.16.50 -- too many record

2024-11-28 Thread Guillaume Bienkowski
Hi Lee, Ondrej, Salvatore I didn't follow up on this because your backport of the configuration settings was done after my original message in August: the 9.16.50-1~deb11u2 version, which landed during my holiday break. Since then, we are able to set the appropriate configuration settings to ena

Re: bind9 update 9.16.50 -- too many record

2024-07-29 Thread Salvatore Bonaccorso
Hi Ondrej, On Mon, Jul 29, 2024 at 12:14:01PM +0200, Ondřej Surý wrote: > I've now also ported all the changes to the system tests, so I can > confirm the changes are correct and I've now uploaded the version > with configuration options to security-master. > > This means that information in: >

Re: bind9 update 9.16.50 -- too many record

2024-07-29 Thread Ondřej Surý
I've now also ported all the changes to the system tests, so I can confirm the changes are correct and I've now uploaded the version with configuration options to security-master. This means that information in: https://kb.isc.org/docs/rrset-limits-in-zones also applies to bind9_9.16.50-1~deb11u

Re: bind9 update 9.16.50 -- too many record

2024-07-28 Thread Guillaume Bienkowski
Hello and thank you all for your answers. Indeed we might push the update to Bookworm four our DNS servers, or wait for the backports version to reach 9.18.28 (where the configuration option exists, which is not yet the case for the 9.16.24 that's available right now). > The source package can be

Re: bind9 update 9.16.50 -- too many record

2024-07-28 Thread Ondřej Surý
Hey, I've successfully backported the configuration options from 9.18 to 9.16, so if you need to bump the limits, it will be possible in the next upload. That said, I don't currently have a repository where I can upload the updated packages, so I'll do the upload to security master, but before Sa

Re: bind9 update 9.16.50 -- too many record

2024-07-27 Thread Salvatore Bonaccorso
Hi, [looping in explicitly Ondrej, maintainer of bind9] On Fri, Jul 26, 2024 at 03:40:30PM -0400, Lee wrote: > On Fri, Jul 26, 2024 at 11:24 AM Guillaume Bienkowski wrote: > > > > Hello, > > Hi > > > We are using bind9 with many SRV entries to allow for dynamic discovery of > > hosts to monito

Re: bind9 update 9.16.50 -- too many record

2024-07-26 Thread Lee
On Fri, Jul 26, 2024 at 11:24 AM Guillaume Bienkowski wrote: > > Hello, Hi > We are using bind9 with many SRV entries to allow for dynamic discovery of > hosts to monitor in our infrastructure. We have 300+ SRV records for the same > domain name. > > After the security update of tonight (9.16.4

bind9 update 9.16.50 -- too many record

2024-07-26 Thread Guillaume Bienkowski
Hello, We are using bind9 with many SRV entries to allow for dynamic discovery of hosts to monitor in our infrastructure. We have 300+ SRV records for the same domain name. After the security update of tonight (9.16.48 -> 9.16.50), our DNS server never rebooted. A named-zonecheck would issue erro