Re: Bind address for wireguard

2023-08-29 Thread Janne Johansson
Den tis 29 aug. 2023 kl 17:10 skrev Samuel Jayden : > Is it possible to bind source address on wireguard as the source address of > the connection? > Thanks. There isn't such an option now, outgoing udp will choose the interface which currently is deemed "best" on which the destination IP can be r

Re: bind dhcpd to IP address

2021-06-10 Thread Valdrin MUJA
Thanks, working like a charm. From: owner-m...@openbsd.org on behalf of Stuart Henderson Sent: Thursday, June 10, 2021 12:15 PM To: misc@openbsd.org Subject: Re: bind dhcpd to IP address On 2021-06-10, Ralf Horstmann wrote: > Hi Valdrin, > > that se

Re: bind dhcpd to IP address

2021-06-10 Thread Stuart Henderson
On 2021-06-10, Ralf Horstmann wrote: > Hi Valdrin, > > that setup works fine. You would use "ip helper-address" on the Ciscos to > forward the DHCP requests to your OpenBSD box. The forwarded requests use the > specified helper address as unicast destination. No need to have the VLANs > present on

Re: bind dhcpd to IP address

2021-06-09 Thread Ralf Horstmann
Hi Valdrin, that setup works fine. You would use "ip helper-address" on the Ciscos to forward the DHCP requests to your OpenBSD box. The forwarded requests use the specified helper address as unicast destination. No need to have the VLANs present on your OpenBSD box. I'm running dhcpd without -u

Re: bind and error sending response: would block

2018-11-19 Thread Kapetanakis Giannis
On 19/11/2018 12:30, Stuart Henderson wrote: > On 2018-11-16, Kapetanakis Giannis wrote: >> Hi, >> >> after upgrading one of my bind (cache resolver) machines to 6.4 (release) >> I'm getting these errors quite often: >> >> Nov 16 15:55:14 server named[30616]: client: warning: client @0x6591da0244

Re: bind and error sending response: would block

2018-11-19 Thread Stuart Henderson
On 2018-11-16, Kapetanakis Giannis wrote: > Hi, > > after upgrading one of my bind (cache resolver) machines to 6.4 (release) I'm > getting these errors quite often: > > Nov 16 15:55:14 server named[30616]: client: warning: client @0x6591da02440 > xxx.xxx.xxx.xxx#39702 (a1928.d.akamai.net): erro

[solved]Re: bind: Permission denied

2014-12-24 Thread Henrique Lengler
On Wed, Dec 24, 2014 at 03:26:21AM +, Maurice McCarthy wrote: > Have a look at the documentation installed with the port. > > $ pkg_info -L cmus > > will list all the files installed. There maybe something in > /usr/local/share/doc/pkg-readmes > Check the configuration files to see if you nee

Re: bind: Permission denied

2014-12-23 Thread Maurice McCarthy
On 2014-12-24 03:15, Maurice McCarthy wrote: I don't use cmus but it is something to do with keybindings https://github.com/cmus/cmus/blob/master/Doc/cmus.txt Have a look at the documentation installed with the port. $ pkg_info -L cmus will list all the files installed. There maybe something

Re: bind: Permission denied

2014-12-23 Thread Maurice McCarthy
On 2014-12-24 02:49, Henrique Lengler wrote: Hi, When I try to run cmus in a normal user, I get $ cmus cmus: bind: Permission denied I never heard about bind before, so I can't imagine a way to solve this. Can someone help me? Regards, I don't use cmus but it is something to do with keybi

Re: bind port broken

2014-05-20 Thread Stéphane Guedon
Le mardi 20 mai 2014, 12:41:35 Stuart Henderson a écrit : > Stéphane Guedon 22decembre.eu> writes: > > I don't know if I am doing things ok, but the Bind9 port seems > > broken (in a fresh 5.5 install). > > > > Thanks if someone fix it. > > Is there a particular reason you're not just using the

Re: bind port broken

2014-05-20 Thread Stuart Henderson
Stéphane Guedon 22decembre.eu> writes: > I don't know if I am doing things ok, but the Bind9 port seems broken > (in a fresh 5.5 install). > > Thanks if someone fix it. Is there a particular reason you're not just using the packages provided? I see no advantage to building it yourself. # pkg_

Re: bind port broken

2014-05-19 Thread Jérémie Courrèges-Anglas
Stéphane Guedon writes: > Le lundi 19 mai 2014 14:59:54, vous avez écrit : >> You provide zero details on what you are doing, how can someone know >> what to fix without the minimum bits of information. > > I was aware of the thing, yet didn't know what to do since I have done > really really few

Re: bind port broken

2014-05-19 Thread Stéphane Guedon
Le lundi 19 mai 2014 14:59:54, vous avez écrit : > You provide zero details on what you are doing, how can someone know > what to fix without the minimum bits of information. I was aware of the thing, yet didn't know what to do since I have done really really few. I just placed myself in /usr/por

Re: Bind with GSSAPI

2013-08-13 Thread Remco
Jeff Powell wrote: > I've been tearing my hair out trying to get this to work. I'm running > OpenBSD 5.3 x64 and I'm trying to build isc-bind from ports using the > -with-gssapi in the Makefile (I want to have the -g option in nsupdate so > I can use iscp-dhcp to register dynamic DNS updates aga

Re: Bind Package

2011-03-01 Thread Eric Kom
On 3/1/2011 8:20 AM, David Vasek wrote: On Tue, 1 Mar 2011, Eric Kom wrote: On 3/1/2011 7:31 AM, David Vasek wrote: On Tue, 1 Mar 2011, Eric Kom wrote: hi please i'm a new on openbsd, someone can give me the name of bind dns package? base49.tgz bind is provided by base49 package or named

Re: Bind Package

2011-03-01 Thread David Vasek
On Tue, 1 Mar 2011, Eric Kom wrote: On 3/1/2011 7:31 AM, David Vasek wrote: On Tue, 1 Mar 2011, Eric Kom wrote: hi please i'm a new on openbsd, someone can give me the name of bind dns package? base49.tgz bind is provided by base49 package or named package? Well no, I meant it as a joke

Re: Bind Package

2011-03-01 Thread Eric Kom
On 3/1/2011 7:31 AM, David Vasek wrote: On Tue, 1 Mar 2011, Eric Kom wrote: hi please i'm a new on openbsd, someone can give me the name of bind dns package? base49.tgz bind is provided by base49 package or named package? Really, reading the FAQ first will make your life easier. http://ww

Re: Bind Package

2011-03-01 Thread Eric Kom
On 3/1/2011 7:26 AM, Vivien MOREAU wrote: Tuesday 01 Mar 2011 ` 07:17 (-0800), Eric Kom a icrit : please i'm a new on openbsd, someone can give me the name of bind dns package? Bind is part of the base system. man 8 named Thanks a lot, I was already lost. Thanks to welcomes me in OpenBSD

Re: Bind Package

2011-03-01 Thread Vivien MOREAU
Tuesday 01 Mar 2011 ` 07:17 (-0800), Eric Kom a icrit : > please i'm a new on openbsd, someone can give me the name of bind > dns package? Bind is part of the base system. man 8 named -- Vivien

Re: Bind ntpd on certain interface?

2009-08-17 Thread Nice Daemon
On Fri, Aug 14, 2009 at 11:58 PM, Eric Furman wrote: > On Fri, 14 Aug 2009 05:08 -0600, "Theo de Raadt" > wrote: > > The point is that you are a crybaby. > > > > and he can't follow simple instructions. > Most interestingly, crybabies have an enormous understanding of communication, in contrast

Re: Bind ntpd on certain interface?

2009-08-16 Thread Daniel Gracia Garallar
The problem here is not the list attitude, but your silly "That's right, I've already done it, I know, I know" when somebody corrects you. That makes developers angry. Obviously something was wrong with your configs, and you think you know what, but don't. And that's worse than knowing you don

Re: Bind ntpd on certain interface?

2009-08-14 Thread Eric Furman
On Fri, 14 Aug 2009 05:08 -0600, "Theo de Raadt" wrote: > The point is that you are a crybaby. > and he can't follow simple instructions.

Re: Bind ntpd on certain interface?

2009-08-14 Thread Henning Brauer
* Nice Daemon [2009-08-14 13:08]: > The point was that Henning started insulting. I didn't. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg

Re: Bind ntpd on certain interface?

2009-08-14 Thread Jason Dixon
On Fri, Aug 14, 2009 at 12:55:03PM +0200, Nice Daemon wrote: > > The point was that Henning started insulting. If you were truly upset you would have just gone away. Instead, you chose to stay here and troll. You try to sound like a martyr but just come off as an infant. Go cry somewhere else,

Re: Bind ntpd on certain interface?

2009-08-14 Thread Tony Aberenthy
> I'm very sorry do disappoint you, but I'd have found it (on > my own). But it's nice of you to underestimate other people, > as it fits in your role model. I don't mind. Then why didn't you? (find it on your own) The developers seem to have a rather precise idea of their own Competence and the

Re: Bind ntpd on certain interface?

2009-08-14 Thread Tony Aberenthy
, August 14, 2009 6:17 AM To: t...@servacorp.com Cc: Claudio Jeker; misc@openbsd.org Subject: Re: Bind ntpd on certain interface? No. The point is that you are stupid. Pretending to be otherwise is extremely insulting to my intelligence. Please stop insulting my intelligence. You demonstrate being

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
t; -Original Message- > > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] > > On Behalf Of Nice Daemon > > Sent: Friday, August 14, 2009 5:55 AM > > To: t...@servacorp.com. > > Cc: Claudio Jeker; misc@openbsd.org > > Subject: Re: Bind ntpd on certa

Re: Bind ntpd on certain interface?

2009-08-14 Thread Siju George
On Fri, Aug 14, 2009 at 3:01 PM, Nice Daemon wrote: > You are the kids that nobody wants to play with. That nobody wants to fall > in love with, that will die alone. Unloved. But it would be so easy to > change: Just say 'hi!' instead of 'what do you motherfucking prick want?!'. > :) > Nice, Wha

Re: Bind ntpd on certain interface?

2009-08-14 Thread Tony Aberenthy
y, August 14, 2009 5:55 AM > To: t...@servacorp.com. > Cc: Claudio Jeker; misc@openbsd.org > Subject: Re: Bind ntpd on certain interface? > > On Fri, Aug 14, 2009 at 12:42 PM, Tony Aberenthy > wrote: > > > Nice Daemon wrote: > > > No, I'm certainly not stupid.

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
On Fri, Aug 14, 2009 at 12:56 PM, Henning Brauer wrote: > * Nice Daemon [2009-08-14 08:48]: > > Second, that coders (like you, Henning) feel like 'Gods', untouchable (I > > never had any intention in this) and 'above all others', which leads to > the > > above mentioned tone or harsh atmosphere.

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
> The point is that you are a crybaby. > > Yeah, and you have the biggest and strongest and most beautiful dick on the planet, and you spray tons of sperm on every female around. Ah, yeah, and onto your nieces and nephews, as you told to fuck children. OMG

Re: Bind ntpd on certain interface?

2009-08-14 Thread Theo de Raadt
The point is that you are a crybaby.

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
On Fri, Aug 14, 2009 at 12:42 PM, Tony Aberenthy wrote: > Nice Daemon wrote: > > No, I'm certainly not stupid. > > Invariably the mark of someone who IS stupid. > > Longer version. > If I am not stupid then I can say something intelligent to make the point. The point was that Henning started in

Re: Bind ntpd on certain interface?

2009-08-14 Thread Henning Brauer
* Nice Daemon [2009-08-14 08:48]: > Second, that coders (like you, Henning) feel like 'Gods', untouchable (I > never had any intention in this) and 'above all others', which leads to the > above mentioned tone or harsh atmosphere. I could just have decided to not help you. You'd still be looking

Re: Bind ntpd on certain interface?

2009-08-14 Thread Tony Aberenthy
Nice Daemon wrote: > No, I'm certainly not stupid. Invariably the mark of someone who IS stupid. Longer version. If I am not stupid then I can say something intelligent to make the point. If the only thing I can come up with it to say I am not stupid, then that implies at least a total lack of im

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
On Fri, Aug 14, 2009 at 12:06 PM, Mattieu Baptiste wrote: > On Fri, Aug 14, 2009 at 11:53 AM, Nice Daemon > wrote: > > > > > > > You probably rape children in your spare time, > > > > > > This is obviously the point you enjoy to tell the world for the nth time > > that you're totally insane. > >

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
On Fri, Aug 14, 2009 at 12:07 PM, Rod Whitworth wrote: > On Fri, 14 Aug 2009 11:31:38 +0200, Nice Daemon wrote: > > >The OpenBSD mailing list is the only place I don't seem to be welcome. > Some people are desperate for "market share"... > > What don't you understand about the oft expressed p

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
On Fri, Aug 14, 2009 at 11:56 AM, Philip Guenther wrote: > On Fri, Aug 14, 2009 at 2:31 AM, Nice Daemon > wrote: > ... > > No, I'm certainly not stupid. I'm just *re*acting (to remind you; in case > > you are actually able to *read*, you should already know it). People > > (Henning, Theo) started

Re: Bind ntpd on certain interface?

2009-08-14 Thread Rod Whitworth
On Fri, 14 Aug 2009 11:31:38 +0200, Nice Daemon wrote: >The OpenBSD mailing list is the only place I don't seem to be welcome. Some people are desperate for "market share"... What don't you understand about the oft expressed project aims of having an operating system for its developers? The f

Re: Bind ntpd on certain interface?

2009-08-14 Thread Mattieu Baptiste
On Fri, Aug 14, 2009 at 11:53 AM, Nice Daemon wrote: > > > > You probably rape children in your spare time, > > > This is obviously the point you enjoy to tell the world for the nth time > that you're totally insane. > > Why don't you tell people that they're reincarnations of Adolf Hitler? Cong

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
> > No, I'm certainly not stupid. I'm just *re*acting (to remind you; in case > > you are actually able to *read*, you should already know it). People > > (Henning, Theo) started to bark at me when I asked for help. They didn't > > provide any help, they just needed someone to throw their words at.

Re: Bind ntpd on certain interface?

2009-08-14 Thread Philip Guenther
On Fri, Aug 14, 2009 at 2:31 AM, Nice Daemon wrote: ... > No, I'm certainly not stupid. I'm just *re*acting (to remind you; in case > you are actually able to *read*, you should already know it). People > (Henning, Theo) started to bark at me when I asked for help. They didn't > provide any help, t

Re: Bind ntpd on certain interface?

2009-08-14 Thread Theo de Raadt
> No, I'm certainly not stupid. I'm just *re*acting (to remind you; in case > you are actually able to *read*, you should already know it). People > (Henning, Theo) started to bark at me when I asked for help. They didn't > provide any help, they just needed someone to throw their words at. Seems >

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
> > > Can you please leave? > > > > > > > Can you please force me? > > > > Honestly are you really that stupid to not understand when your welcome? No, I'm certainly not stupid. I'm just *re*acting (to remind you; in case you are actually able to *read*, you should already know it). People (Henni

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
On Fri, Aug 14, 2009 at 11:06 AM, Theo de Raadt wrote: > Can you please leave? > Can you please force me?

Re: Bind ntpd on certain interface?

2009-08-14 Thread Theo de Raadt
Can you please leave?

Re: Bind ntpd on certain interface?

2009-08-14 Thread Nice Daemon
Hi Theo :D On Fri, Aug 14, 2009 at 10:42 AM, Theo de Raadt wrote: > > First, the very harsh atmosphere that prevails on the mailing lists. > > You know, you have an option available to you regarding this. > I know. Thanks for this redundant hint. One word: ADHD. > > You could come to the concl

Re: Bind ntpd on certain interface?

2009-08-14 Thread Theo de Raadt
> First, the very harsh atmosphere that prevails on the mailing lists. You know, you have an option available to you regarding this. You could come to the conclusion that you are not entitled and stop posting, and it will work out better in the long term. I did not read anything more you said.

Re: Bind ntpd on certain interface?

2009-08-14 Thread Stuart Henderson
On 2009/08/14 08:20, Nice Daemon wrote: > Hi, > > On Thu, Aug 13, 2009 at 8:53 PM, Stuart Henderson wrote: > > > On 2009-08-13, Nice Daemon wrote: > > > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 (this is > > > carp IP in upstream VLAN, AFTER your hint) > > > > that's defin

Re: Bind ntpd on certain interface?

2009-08-13 Thread Nice Daemon
Hi, On Thu, Aug 13, 2009 at 5:03 PM, Henning Brauer wrote: > * Nice Daemon [2009-08-13 17:00]: > > On Thu, Aug 13, 2009 at 4:46 PM, Henning Brauer >wrote: > > > * Nice Daemon [2009-08-13 16:33]: > > > > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 > (this is > > > > carp IP

Re: Bind ntpd on certain interface?

2009-08-13 Thread Nice Daemon
Hi, On Thu, Aug 13, 2009 at 8:53 PM, Stuart Henderson wrote: > On 2009-08-13, Nice Daemon wrote: > > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 (this is > > carp IP in upstream VLAN, AFTER your hint) > > that's definitely wrong, you ended up setting your broadcast address t

Re: Bind ntpd on certain interface?

2009-08-13 Thread Stuart Henderson
On 2009-08-13, Nice Daemon wrote: > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 (this is > carp IP in upstream VLAN, AFTER your hint) that's definitely wrong, you ended up setting your broadcast address to 255.255.255.255 instead of setting the netmask. most likely you got b

Re: Bind ntpd on certain interface?

2009-08-13 Thread Henning Brauer
* Nice Daemon [2009-08-13 17:00]: > On Thu, Aug 13, 2009 at 4:46 PM, Henning Brauer wrote: > > * Nice Daemon [2009-08-13 16:33]: > > > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 (this is > > > carp IP in upstream VLAN, AFTER your hint) > > it might be after my hint, but you

Re: Bind ntpd on certain interface?

2009-08-13 Thread Nice Daemon
Hi Henning, On Thu, Aug 13, 2009 at 4:46 PM, Henning Brauer wrote: > * Nice Daemon [2009-08-13 16:33]: > > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 (this is > > carp IP in upstream VLAN, AFTER your hint) > > it might be after my hint, but you didn't follow my advice. I

Re: Bind ntpd on certain interface?

2009-08-13 Thread Henning Brauer
* Nice Daemon [2009-08-13 16:33]: > inet xx.yyy.253.225 netmask 0xff00 broadcast 255.255.255.255 (this is > carp IP in upstream VLAN, AFTER your hint) it might be after my hint, but you didn't follow my advice. you want netmask 0x there. aka /32. aka 255.255.255.255. -- Henning Brau

Re: Bind ntpd on certain interface?

2009-08-13 Thread Nice Daemon
Hi Henning, thanks, that fixed that issue. However, I don't think that the routes/networks are messed up: inet 10.10.0.3 netmask 0xff00 broadcast 10.10.0.255 (this is backend server VLAN) inet 10.20.30.11 netmask 0xff00 broadcast 10.20.30.255 (this is for pfsync) inet xx.yyy.254.231 netm

Re: Bind ntpd on certain interface?

2009-08-13 Thread Henning Brauer
* Nice Daemon [2009-08-13 16:04]: > Hi list, > > getting nearer to the point of deployment of a really nice relayd/pf/pfsync > setup I came across an issue. > > I'd like to run ntpd to syncronize against ntp servers that are in our > network. > > However, it only works on the machine with *acti

Re: bind

2009-08-03 Thread Dag Richards
configure: error: ar program not found. Please fix your PATH to include the directory in which ar resides, or set AR in the environment with the full path to ar. *** Error code 1 The likely solution is listed in the error message. dark knight neo wrote: Hello everyone, I'm trying compilin

Re: bind

2009-08-03 Thread Stuart Henderson
http://www.openbsd.org/faq/faq4.html#AddFileSet On 2009-08-03, dark knight neo wrote: > Hello everyone, > I'm trying compiling the patch of bind .. and the following error occur: > > # patch -p0 < 007_bind.patch > Hmm... Looks like a unified diff to me... > The text leading up to this was: > ---

Re: bind

2009-08-03 Thread Bryan Irvine
Read the error in your best pirate voice and you'll find the answer. -B On Mon, Aug 3, 2009 at 2:21 PM, dark knight neo wrote: > Hello everyone, > I'm trying compiling the patch of bind .. and the following error occur: > > # patch -p0 < 007_bind.patch > Hmm... Looks like a unified diff to me...

Re: bind

2009-08-03 Thread Marco Peereboom
The patch has dark night magic in it!oneONE!!! On Mon, Aug 03, 2009 at 06:21:43PM -0300, dark knight neo wrote: > Hello everyone, > I'm trying compiling the patch of bind .. and the following error occur: > > # patch -p0 < 007_bind.patch > Hmm... Looks like a unified diff to me... > The text

Re: bind 9.x DoS

2009-07-30 Thread Daniel Melameth
On Thu, Jul 30, 2009 at 2:21 PM, Maurice Janssen wrote: > I noticed that there's a patch for 4.4 , 4.5 and 4.6 on the FTP-servers, but > a checkout of the -stable tree still gives me the unpatched revision. > Shouldn't this fix be in CVS with a OPENBSD_4_x tag? Appears these commits were made a

Re: bind 9.x DoS

2009-07-30 Thread Maurice Janssen
Robert wrote: Short followup: Theo has commited an identical diff to -current. Looking at the cvs tags for update.c rev 1.7, this patch applies to 4.6, 4.5, 4.4 and 4.3. I noticed that there's a patch for 4.4 , 4.5 and 4.6 on the FTP-servers, but a checkout of the -stable tree still gives me

Re: bind 9.x DoS

2009-07-28 Thread Robert
Short followup: Theo has commited an identical diff to -current. Looking at the cvs tags for update.c rev 1.7, this patch applies to 4.6, 4.5, 4.4 and 4.3. Because i was asked offlist before: You can wait for the errata, apply the unofficial patch from my previous mail or get the updated file fr

Re: bind 9.x DoS

2009-07-28 Thread Brian Keefer
On Jul 28, 2009, at 8:40 PM, Robert wrote: On Wed, 29 Jul 2009 04:57:29 +0200 frantisek holop wrote: morning, https://www.isc.org/node/474 http://www.kb.cert.org/vuls/id/725188 -f Hi, it's late/early so the following comes without warranty. Compiles, install and works for me on -current

Re: bind 9.x DoS

2009-07-28 Thread Robert
On Wed, 29 Jul 2009 04:57:29 +0200 frantisek holop wrote: > morning, > > https://www.isc.org/node/474 > http://www.kb.cert.org/vuls/id/725188 > > -f Hi, it's late/early so the following comes without warranty. Compiles, install and works for me on -current amd64/i386 both on master and slave

Re: bind 9.x DoS

2009-07-28 Thread Brian Keefer
On Jul 28, 2009, at 7:57 PM, frantisek holop wrote: morning, https://www.isc.org/node/474 http://www.kb.cert.org/vuls/id/725188 -f -- if its stupid and it works - its not stupid Works great vs. this snapshot: OpenBSD 4.6-current (GENERIC) #46: Wed Jul 15 20:15:31 MDT 2009 dera...@spa

Re: BIND and file descriptors

2008-10-02 Thread Otto Moerbeek
On Thu, Oct 02, 2008 at 02:00:44AM -0700, sexyboy wrote: > Hi All, > > I have applied the 004 and 005 patches and I still have a same problem. > The named kick itself out, I can not see anything suspicious in a log file > the only massage is when hit top command I can see this: > PID USERNAME P

Re: BIND and file descriptors

2008-10-02 Thread sexyboy
Hi All, I have applied the 004 and 005 patches and I still have a same problem. The named kick itself out, I can not see anything suspicious in a log file the only massage is when hit top command I can see this: PID USERNAME PRI NICE SIZE RES STATEWAIT TIMECPU COMMAND 4670 named

Re: BIND workaround for older versions?

2008-08-14 Thread Nick Holland
Raimo Niskanen wrote: > On Fri, Jul 25, 2008 at 07:36:43AM +0200, Guido Tschakert wrote: >> Stuart Henderson schrieb: >> > On 2008-07-24, Mike Shaw <[EMAIL PROTECTED]> wrote: >> >> Regarding the cache poisoning patch (which I see for 4.3). Are there >> >> any effective workarounds for OpenBSD 4.0/

Re: : BIND workaround for older versions?

2008-08-14 Thread Raimo Niskanen
On Fri, Jul 25, 2008 at 07:36:43AM +0200, Guido Tschakert wrote: > Stuart Henderson schrieb: > > On 2008-07-24, Mike Shaw <[EMAIL PROTECTED]> wrote: > >> Regarding the cache poisoning patch (which I see for 4.3). Are there > >> any effective workarounds for OpenBSD 4.0/4.1? > > > > The 4.2 patch

Re: BIND and file descriptors

2008-08-12 Thread Otto Moerbeek
On Tue, Aug 12, 2008 at 09:22:15PM +0200, Otto Moerbeek wrote: > The key is question is: do you see named processes in the state > ip6_opt in top(1)? If so, patch 005 certainly will help, even if you > are not actively using ipv6. correction, that should be wait channel (column WAIT), not state.

Re: BIND and file descriptors

2008-08-12 Thread Otto Moerbeek
On Tue, Aug 12, 2008 at 03:08:19PM -0400, Steven Surdock wrote: > Steve, > > I saw this exact same behavior on a couple of servers with a 4.3-stable > build from 7/28. Due to some differences in the way I built the -stable > release I decided to try again from scratch. The 8/4 build of bsd + >

Re: BIND and file descriptors

2008-08-12 Thread Steven Surdock
Steve, I saw this exact same behavior on a couple of servers with a 4.3-stable build from 7/28. Due to some differences in the way I built the -stable release I decided to try again from scratch. The 8/4 build of bsd + base43.tgz have been working fine. This seems to support the suggestion that

Re: BIND and file descriptors

2008-08-11 Thread Brian Keefer
On Aug 11, 2008, at 8:34 AM, Steve Shockley wrote: Is anyone having issues between patched BIND and running out of file descriptors? If you run a nameserver that has any kind of significant traffic at all, I suggest you subscribe to [EMAIL PROTECTED] . There have been many discussions on

Re: BIND and file descriptors

2008-08-11 Thread Ted Unangst
On 8/11/08, Steve Shockley <[EMAIL PROTECTED]> wrote: > Is anyone having issues between patched BIND and running out of file > descriptors? I saw the thread at > http://marc.info/?m=121711077022388, but that's somewhat > vague. > > The problem: I deployed two OpenBSD 4.3 BIND servers to replace a

Re: BIND and CNAME-ing

2008-07-28 Thread Brian
o redirect with. Please correct me if I'm wrong. --- On Mon, 7/28/08, Parvinder Bhasin <[EMAIL PROTECTED]> wrote: > From: Parvinder Bhasin <[EMAIL PROTECTED]> > Subject: Re: BIND and CNAME-ing > To: "Paul de Weerd" <[EMAIL PROTECTED]> > Cc: [EMA

Re: BIND and CNAME-ing

2008-07-28 Thread Parvinder Bhasin
Thanks Paul!!! Wow!!! is the only thing that comes to my mind. Didn't even know that DNAME existed. I will definately read up on it. Thanks a bunch! -Parvinder Bhasin On Jul 25, 2008, at 12:14 AM, Paul de Weerd wrote: On Thu, Jul 24, 2008 at 04:49:55PM -0700, Parvinder Bhasin wrote: Thanks

Re: BIND OpenBSD patch and ISC

2008-07-27 Thread Theo de Raadt
> Just a simple question: is the OpenBSD patch for bind is the same > solution as ISC ? Are they use the same RN ? The patch release for older OpenBSD releases contains the same horrid solution that ISC came up with, since it is 100% their code. Of course, the bind included in all OpenBSD release

Re: BIND OpenBSD patch and ISC

2008-07-25 Thread Ted Unangst
On 7/25/08, Amaury De Ganseman <[EMAIL PROTECTED]> wrote: > Hi, > > Just a simple question: is the OpenBSD patch for bind is the same > solution as ISC ? Are they use the same RN ? It's not identical to what you'll find on the ISC servers.

Re: BIND and CNAME-ing

2008-07-25 Thread Paul de Weerd
On Thu, Jul 24, 2008 at 04:49:55PM -0700, Parvinder Bhasin wrote: > Thanks guys for clearing this up. So in short you cannot CNAME an entire > domain (domain.com IN CNAME google.com < can't do ). You should google for DNAME some time. Then form your own opinion on the topic matter ;)

Re: BIND workaround for older versions?

2008-07-25 Thread Guido Tschakert
Stuart Henderson schrieb: > On 2008-07-24, Mike Shaw <[EMAIL PROTECTED]> wrote: >> Regarding the cache poisoning patch (which I see for 4.3). Are there >> any effective workarounds for OpenBSD 4.0/4.1? > > The 4.2 patch should also work for 4.1 > > I can confirm that the 4.2 patch works with 4.

Re: BIND and CNAME-ing

2008-07-24 Thread Parvinder Bhasin
Thanks guys for clearing this up. So in short you cannot CNAME an entire domain (domain.com IN CNAME google.com < can't do ). Thanks for the input. Really appreciate it. Cheers! -Parvinder Bhasin On Jul 24, 2008, at 6:10 AM, Giancarlo Razzolini wrote: Almir Karic escreveu: On W

Re: BIND workaround for older versions?

2008-07-24 Thread Mike Shaw
Ah...perfect. Thanks Stuart and Aaron. -Mike On Thu, Jul 24, 2008 at 2:57 PM, Aaron Stellman <[EMAIL PROTECTED]> wrote: > On Thu, Jul 24, 2008 at 02:48:45PM -0500, Mike Shaw wrote: >> Regarding the cache poisoning patch (which I see for 4.3). Are there >> any effective workarounds for OpenBSD

Re: BIND workaround for older versions?

2008-07-24 Thread Stuart Henderson
On 2008-07-24, Mike Shaw <[EMAIL PROTECTED]> wrote: > Regarding the cache poisoning patch (which I see for 4.3). Are there > any effective workarounds for OpenBSD 4.0/4.1? The 4.2 patch should also work for 4.1

Re: BIND workaround for older versions?

2008-07-24 Thread Aaron Stellman
On Thu, Jul 24, 2008 at 02:48:45PM -0500, Mike Shaw wrote: > Regarding the cache poisoning patch (which I see for 4.3). Are there > any effective workarounds for OpenBSD 4.0/4.1? > > I have a couple older boxes I will be upgrading, but I'd like to CMA > in the meantime. > > Thanks! > -Mike > Pe

Re: BIND and CNAME-ing

2008-07-24 Thread Giancarlo Razzolini
Almir Karic escreveu: > On Wed, Jul 23, 2008 at 01:17:04PM -0700, Parvinder Bhasin wrote: > >> Hi, >> >> I am stuck at this situation: >> >> Where I have a domain: abc.com : >> >> I would like to have user who type http://abc.com (without the www) >> redirected to a a different site for exam

Re: BIND and CNAME-ing

2008-07-24 Thread Almir Karic
On Wed, Jul 23, 2008 at 01:17:04PM -0700, Parvinder Bhasin wrote: > Hi, > > I am stuck at this situation: > > Where I have a domain: abc.com : > > I would like to have user who type http://abc.com (without the www) > redirected to a a different site for example : www.xyz.com > Redirection for

Re: BIND and CNAME-ing

2008-07-23 Thread Daniel Ouellet
Parvinder Bhasin wrote: HTTP redirects don't apply to our setup. From the info that I gather, I really can't do CNAME so I will just write small script to accomodate changing of Ips. May we the question wasn't so clear. You refer to "Redirection" in the original question, now you say IP's

Re: BIND and CNAME-ing

2008-07-23 Thread Parvinder Bhasin
HTTP redirects don't apply to our setup. From the info that I gather, I really can't do CNAME so I will just write small script to accomodate changing of Ips. -Parvinder Bhasin On Jul 23, 2008, at 1:33 PM, Jussi Peltola wrote: Short answer: use HTTP redirects. Long answer: provide more inf

Re: BIND and CNAME-ing

2008-07-23 Thread Daniel Ouellet
Parvinder Bhasin wrote: Hi, I am stuck at this situation: Where I have a domain: abc.com : I would like to have user who type http://abc.com (without the www) redirected to a a different site for example : www.xyz.com Redirection for www.abc.com to www.xyz.com works fine. From memory, t

Re: BIND and CNAME-ing

2008-07-23 Thread Jussi Peltola
Short answer: use HTTP redirects. Long answer: provide more information, and read about the HTTP Host: header and think how it applies to your setup.

Re: Bind stopped Listening on UDP port suddenly in 4.2

2008-04-29 Thread Matthew Dempsky
On Tue, Apr 29, 2008 at 3:54 PM, Siju George <[EMAIL PROTECTED]> wrote: > Bind is no longer listening on udp 127.0.0.1.53. Are you basing this conclusion on something other than the absence of the word "LISTEN" on the UDP lines? (UDP sockets are stateless, so netstat doesn't print anything out f

Re: Bind stopped Listening on UDP port suddenly in 4.2

2008-04-29 Thread jean-philippe luiggi
Hello, As of netstat's output, there's something using port 53/udp. Using 'lsof -i udp' (if 'lsof' is already installed) should give more informations about the program using this port. If it's "named", use 'dig +trace @127.0.0.1 www.google.com' to see the responses (where the data are going/co

Re: Bind stopped Listening on UDP port suddenly in 4.2

2008-04-29 Thread Prabhu Gurumurthy
Siju George wrote: Hi, I was using the Internet and name resolution suddenly stopped. When I checked I found out = $ netstat -an |grep 53 tcp0 0 127.0.0.1.953 *.*LISTEN tcp0 0 59.93.35.248.53

Re: Bind 4.9.2

2008-03-25 Thread Michael Spratt
ntract man.. Otherwise I would never worry about it.. :) -Mike -Original Message- From: Unix Fan [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 26, 2008 12:48 AM To: misc@openbsd.org Cc: [EMAIL PROTECTED] Subject: Re: Bind 4.9.2 Michael Spratt wrote: > ... > I obtained the list of po

Re: Bind 4.9.2

2008-03-25 Thread Unix Fan
Michael Spratt wrote: > ... > I obtained the list of pornographic sites from urlblacklist.com The DNS > server will then respond to users who query port sites with an A record that > points to a local web server that will serve them a "nono" page and log > their ip. >. > ...because we ar

Re: Bind 4.9.2

2008-03-25 Thread Michael Spratt
o: Michael Spratt Subject: Re: Bind 4.9.2 Now, it's a bit more clear. :) I've installed a chrooted bind server from scratch about 3 years ago and it's no easy job. My guess is you have everything under control right now, but I'd recommend using Perl instead of plain C. It&#x

Re: Bind 4.9.2

2008-03-25 Thread Michael Spratt
HI thanks for responding.. www.unixwiz.net/techtips/bind9-chroot.html Gave me the instructions I needed to get going with the BIND install. I believe OBSD 4.3 will have bind 9.4.2 in the base install however I couldn't wait. I'm currently running OBSD 4.2 and now have bind 9.4.2 running on it a

Re: BIND and logging channels in 4.2-current

2007-12-17 Thread J.D. Carlson
On Mon, Dec 17, 2007 at 06:57:02AM -0700, Darren Spruell wrote: > > > > > > But nothing gets logged to the file. I see entries in /var/log/daemon when > > I > > do a rndc querylog and I see entries in /var/log/messages. > > Doesn't seem to me that you're actually sending any log messages to > th

  1   2   >