Re: BIND 9.5.0-P2 minor rndc errors

2008-08-06 Thread Jeremy C. Reed
On Wed, 6 Aug 2008, Doug Niven wrote: % rndc refresh rndc: 'refresh' failed: unexpected end of input It expects at least one more argument (the zone name): refresh zone [class [view]] % rndc stop % rndc start rndc: connect failed: 127.0.0.1#953: connection refused No start command.

Re: 9.4.2-P2 and listen-on directive

2008-08-07 Thread Jeremy C. Reed
On Thu, 7 Aug 2008, Anatoly Pugachev wrote: Tried to use 9.4.2-P2 release, and have following in named.conf - listen-on { 192.168.1.1; 127.0.0.1; }; but if i check netstat -an command, i see that also other IP addresses from local machine is listening on 53 port, can you please help?

Re: file not found error - Bind Upgrade from 9.3.1 to 9.3.5p1 on Solaris 8

2008-08-11 Thread Jeremy C. Reed
Maybe show us the directory listing, the exact startup command including your -c and the directory setting in your named.conf. And also try starting it up with -g and let us know.

Re: Error with logging channel audit_log

2008-08-12 Thread Jeremy C. Reed
On Tue, 12 Aug 2008, Mark A. Moore wrote: named[25935]: logging channel 'audit_log' file '/var/log/named.log': file not found The permission for named.log is a follows -rw-r--r-- root named. Here is a partial output of named.conf file: logging {

Re: named deamon

2008-08-14 Thread Jeremy C. Reed
On Thu, 14 Aug 2008, Vidya Devi SS wrote: i copied the .conf file(named.conf and reslove.conf and named.pid) from my host PC (linux 2.6.21.5). You don't need to copy named.pid. And copying resolv.conf doesn't make sense unless you really meant to use same configuration. and in my board i

Re: DNS cache poisoning attacks

2008-08-25 Thread Jeremy C. Reed
On Sat, 23 Aug 2008, EL MAAYATI Afaf wrote: As recommended, I've upgraded my DNS server to the version BIND 9.5.1b1 http://www.isc.org/sw/bind/view?release=9.5.1b1 . But I still have the message indicating that my server is still vulnerable # dig @192.168.2.3 +short

RE: Cant get bind 9.5.0-P2 to compile under cc or gcc

2008-09-04 Thread Jeremy C. Reed
config.status:901: creating config.h config.status:1175: executing chmod commands configure:32712: === configuring in lib/bind (/opt/bind9/bind-9.5.0-P2/lib/bind) configure:32815: running /bin/bash ./configure '--prefix=/usr/local' --cache-file=/dev/null --src dir=. configure:32820:

RE: Cant get bind 9.5.0-P2 to compile under cc or gcc

2008-09-05 Thread Jeremy C. Reed
On Fri, 5 Sep 2008, Stone, Mark S. wrote: In response to Mark's email, I pasted the config.log file below. What about my email? :) configure:2419: checking for ar configure:2452: result: no configure:2471: error: ar program not found. Please fix your PATH to include the directory in

RE: Cant get bind 9.5.0-P2 to compile under cc or gcc

2008-09-05 Thread Jeremy C. Reed
On Fri, 5 Sep 2008, Stone, Mark S. wrote: Jeremy, f Thanks for the fast response. I have corrected the path issue to ar. As you pointed out, it was located in /usr/ccs/bin/ar. I made this change with no success. I think you were looking too far up in the log file. It was the last entry in

Re: BIND 9.4.2-P2-W1 stops responding

2008-09-09 Thread Jeremy C. Reed
A question on the severity. Am I reading it correctly that it ranks from low to high as follows: dynamic, debug, info, notice, warning, error, dynamic? Thanks! Low to high is: info (default) notice warning error critical

Re: Problem with Cache file

2008-09-12 Thread Jeremy C. Reed
On Thu, 11 Sep 2008, SRINIVAS K wrote:     I am new guy working on BIND. I am using the bind 9.3.5-P2 for my Debian Linux.My named  not generating the file named_dump.db.I specified the path in the conf file also. If you have your rndc setup, run rndc dumpdb By default it is saved in a

Re: queryport-pool-ports and queryport-pool-updateinterval obsolete in BIND 9.5?

2008-09-15 Thread Jeremy C. Reed
On Mon, 15 Sep 2008, ivan jr sy wrote: I am wondering why queryport-pool-ports and queryport-pool-updateinterval syntaxes are described and documented in BIND 9.5 ARM while it is obsolete'd in the code? It is supported in BIND 9.5.0 but obsolete in newer versions. Even the 9.5.0-P2 ARM

Re: Dnssec questions

2008-09-18 Thread Jeremy C. Reed
On Tue, 16 Sep 2008, Thomas Schulz wrote: Am I correct in assumeing that I can set up our server with the dnssec keys and then without any great rush send the dlv records to isc.org and no resolver will reject our zone because of the partial setup? It should be fine. I have signed domains

Re: isc and other hosts connecting to my NS

2008-10-07 Thread Jeremy C. Reed
On Tue, 7 Oct 2008, Jaap Akkerhuis wrote: http://www.isc.org/ops/ds/ Its not the Domain Survey. Look at the http:// website at the IP in the original email and then look at the links at the bottom of that same webpage for even more details.

Re: isc and other hosts connecting to my NS

2008-10-07 Thread Jeremy C. Reed
On Tue, 7 Oct 2008, Kevin Darcy wrote: Look at the http:// website at the IP in the original email and then look at the links at the bottom of that same webpage for even more details. You mean, the web page that you have to access via an embedded-IP URL, that talks mainly about a DNS

Re: Too many timeouts EDNS

2008-10-14 Thread Jeremy C. Reed
This should be improved in 9.5.1b2 development beta version. (It reduced this logging significantly on my own machines too.)

Re: Problem on installing/config bind

2008-10-27 Thread Jeremy C. Reed
On Tue, 28 Oct 2008, Stephen Liu wrote: # /usr/local/bind/sbin/named -u named -t /usr/local/bind -c /etc/named.conf No printout Start it with -g switch also to Run the server in the foreground and force all logging to stderr. Or look in the log file to see what happened. That may give you

Re: is it safe to chmod +s named?

2008-10-28 Thread Jeremy C. Reed
On Tue, 28 Oct 2008, Jeff Pang wrote: I need to let apache start/stop named. I set: chmod +s named, so httpd (run with nobody) can stop/start it. Is it safe for this behavior? thanks. How does your named listen on network socket? Can you use rndc reconfig or rndc reload instead?

Re: Load old revision of zone

2008-11-10 Thread Jeremy C. Reed
On Mon, 10 Nov 2008, Kevin Darcy wrote: I was going to mention the journalprint utility, but it appears it's been removed :-( Last sighting was 9.3.2 in the bin/tests directory. Anyone know what happened to it? Was it not considered useful enough to maintain? I still see it.