Re: Possible to condition a view based on the interface the query comes in on?

2021-11-22 Thread Fred Morris
Thanks for the suggestions, folks. Using views with RPZs just gets problematic. Sharing vs forwarding: forwarding seems cleaner and although there are two copies of /BIND/ I don't know that that visibility really hurts anything. Plus that potentially allows the "rear view" resolver to live on a

Re: DNSSEC implementation on IPv6 PTR Zones

2021-11-22 Thread Divya
Not able to sign the zone for 2409::/28 dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.9.0.4.2.ip6.arpa. -t Zone Pls help.. With Regards From: "Divya" To: m...@posix.co.za Cc:

Re: DNSSEC implementation on IPv6 PTR Zones

2021-11-22 Thread Tony Finch
Divya wrote: > How to create DS for 2409::/28 The fun / maddening part of managing reverse DNS is getting to know how your RIR handles it, and the weird differences from common-or-garden forward domain registrations. In your case, 2409::/28 is allocated by APNIC. They have a bit of

Re: DNSSEC implementation on IPv6 PTR Zones

2021-11-22 Thread Divya
How to create DS for 2409::/28 With Regards Divya Parashar From: m...@posix.co.za To: bind-users@lists.isc.org Cc: "Divya" Sent: Thursday, November 18, 2021 3:44:56 PM Subject: Re: DNSSEC implementation on IPv6 PTR Zones And I can testify that this works. I have 2001:42a0::/32