On 6/7/23 12:17 AM, Jesus Cea wrote:
The list is quite long, in a few minutes I have a 859 unique requests
with the same configuration error. Interestingly, quite a few from
"ntp.org". For example:
resolver: notice: DNS format error from 102.130.49.148#53 resolving
You need to be an administrator to do this as it's a privileged operation.
Danny
On 6/7/23 5:53 AM, Bozhidar Petrov wrote:
Hi,
Please pardon the amateur question but I'm getting "an error occurred
while creating registry keys" from the BIND 9 installer.
How can I resolve this?
Thank you.
I wrote the Windows BIND installer to install the BIND daemon (named) as
a service with minimum privileges. It creates a service account with
minimum privileges if the service account does not already exist. It was
never intended to install tools. You don't need the installer if you
only want
out directly,
such as an option to make the entire startup sequence non-parallel and
verbose, thus revealing the exact point of failure.
On 2022-02-17 17:15, Danny Mayer wrote:
I can short-cut that a little! :) A 1067 error is always the Windows
named service failing to start. The reasons
I can short-cut that a little! :) A 1067 error is always the Windows
named service failing to start. The reasons behind it are much harder to
figure out. I've seen these over the years but I don't know off the top
of my head why.
Danny
On 2/17/22 9:26 AM, Ondřej Surý wrote:
Log isn’t going
As the original developer of the Windows version of bind9, I can tell
you that ISC has removed support for the WIndows version from their
newer versions of the code and there are other changes that would need a
lot of work to catch back up. Since BIND9 is under continuous
development you'd be
On 2/1/22 11:14 AM, jukka.pakka...@qnet.fi wrote:
Just read from the 9.18.0 release notes that Windows is not supported.
Since don't remember reading expressly stated that Windows support
would end with 9.16.x branch, inquiring if there is more information
about future Windows compatibility
You might want to consider using the BIND9 docker image. With docker and
kubernetes which has an internal load balancer you can run this on any
Windows platform and don't need anything special. You point to the IP
address of the kubernetes load balancer and it takes care of where to
find the
On 6/3/21 7:05 PM, Peter via bind-users wrote:
Guess not even a subscription will not happen too.
I'm having to try and do Bind on ubuntu and it just will not let me
edit files like named.conf unless you do some vodoo that I don't
understand and even updating the bind like how? Windows no
On 6/3/21 2:17 PM, Reindl Harald wrote:
Am 03.06.21 um 20:12 schrieb Danny Mayer via bind-users:
I don't speak for ISC but it's important to understand that support
of an operating system costs money and unless a company or
organization is willing to step up with money it cannot
I don't speak for ISC but it's important to understand that support of
an operating system costs money and unless a company or organization is
willing to step up with money it cannot be expected to continue support.
There was originally a need and the money for BIND9 on Windows which is
why
--
Ondřej Surý — ISC (He/Him)
My working hours and your working hours may be different. Please do not feel
obligated to reply outside your normal working hours.
On 13. 5. 2021, at 17:29, Danny Mayer wrote:
On 5/13/21 9:45 AM, Ondřej Surý wrote:
Hey,
just a follow-up with a recent real life
On 5/13/21 9:45 AM, Ondřej Surý wrote:
Hey,
just a follow-up with a recent real life example.
I’ve spent few days hunting a problem on Windows that got introduced by a fix
to outgoing UDP selection code. While having bugs in normal (and this was
really one-liner), it’s abnormal to not have
On 5/10/21 5:11 AM, Ondřej Surý wrote:
On 10. 5. 2021, at 10:29, Richard T.A. Neal wrote:
At this time I don't therefore believe that running BIND via WSL or WSL2 on
Windows Server is a viable reliable solution.
Thanks for the analysis.
The alternative is as I outlined in the first email,
If you are talking about BIND9 atomic replacement on Windows then it
does, at least when I wrote that piece of code. It very carefully makes
sure it doesn't lose the file.
Danny
On 11/12/18 6:21 PM, Mark Andrews wrote:
> It really depends on the platform.
>
> Windows doesn’t support atomic
t;>>>> hey.com, the ntp is ntp.hey.com." I am more on the lines of "hey
>>>>> domain thingie. You know where a lot of your basic network resources
>>>>> are. If you have a ntp server do you know where it is just like you
>>>>> kno
On 9/22/2018 9:50 AM, Reindl Harald wrote:
>
>
> Am 22.09.18 um 03:39 schrieb Danny Mayer:
>>> but *nobody* cares about what is a good idea when the question was
>>> simply "does ntp discovery work" where the answer is simply no
>>
>> No,
On 9/21/2018 6:33 PM, Reindl Harald wrote:
>
>
> Am 21.09.18 um 22:19 schrieb Danny Mayer:
>> On 9/21/2018 3:57 PM, Mauricio Tavares wrote:
>>>>> The discussion was about automated _discovery_ of the DNS name of your
>>>>> NTP server using an a
On 9/21/2018 3:57 PM, Mauricio Tavares wrote:
> On Fri, Sep 21, 2018 at 3:14 PM, Danny Mayer wrote:
>> On 9/21/2018 7:56 AM, Ray Bellis wrote:
>>> On 21/09/2018 12:47, Danny Mayer wrote:
>>>
>>>> Putting on both my BIND9 and NTP hats for a moment:
>>
On 9/21/2018 7:56 AM, Ray Bellis wrote:
> On 21/09/2018 12:47, Danny Mayer wrote:
>
>> Putting on both my BIND9 and NTP hats for a moment:
>>
>> This answer makes no sense. NTP uses standard DNS FQDN's for all of its
>> references to NTP servers whether it's using p
On 9/19/2018 10:12 AM, Andrew Latham wrote:
> You can add SRV records for NTP to your domain if that is what you are
> asking.
>
NTP doesn't use SRV records and I don't see a use case to do so.
Therefore I have no idea why this would be any benefit. You can add NTP
specific FQDN's as A or
On 9/19/2018 11:19 AM, Ray Bellis wrote:
> On 19/09/2018 15:59, Mauricio Tavares wrote:
>
>>> An NTP serice doesn't belong to a domain, so maybe not (I don't know of
>>> one off my mind).
>>>
>> Not necessarily; I can name a few universities and business who
>> offer their own NTP servers
On 2/4/2012 12:36 PM, Spain, Dr. Jeffry A. wrote:
The BIND9.9.0rc2.zip Windows installer allows for a “Tools Only”
installation. With this you can avoid having to enter the service
account information that will not be needed. However, the only tools you
get are dig.exe, nslookup.exe, and a
On 1/17/2012 5:57 AM, Ben Laurie wrote:
On 17 January 2012 04:31, Danny Mayer ma...@gis.net
mailto:ma...@gis.net wrote:
This breaks O/S's that don't support Unix sockets, specifically Windows.
Please explain why Unix domain sockets are more effective and secure
rather than
On 12/15/2011 5:52 AM, Vbvbrj wrote:
On 15.12.2011 03:11, Danny Mayer wrote:
On 12/14/2011 2:35 PM, Vbvbrj wrote:
Bind 9.8.1 P1 installed in D:\bind9.
Config files and other zone files and log files in D:\bind_config
Service configuration: Path to executable
D:\bind9\bin\named.exe -c D
On 12/14/2011 2:36 PM, Vbvbrj wrote:
Hello.
I've setup BIND to serve the requests to lan instead of Microsoft DNS by
first setting bind as a secondary dns server for Microsoft DNS, copy the
zones, and making the BIND the master. In order for domain member hosts
to update the records of the
On 12/15/2011 11:43 AM, Vbvbrj wrote:
On 15.12.2011 15:39, Danny Mayer wrote:
Thanks for answering.
I want to keep all the files related to bind in one folder, not across
the system folder. And keeping the named.conf in the system32 folder may
be lost when the system is reinstalled
On 12/14/2011 2:35 PM, Vbvbrj wrote:
Bind 9.8.1 P1 installed in D:\bind9.
Config files and other zone files and log files in D:\bind_config
Service configuration: Path to executable
D:\bind9\bin\named.exe -c D:\bind_config\etc\named.conf
I haven't looked at this part of the code in a long
On 11/28/2011 4:33 PM, Bill Owens wrote:
I think that if I had to use a Windows workstation my first installs
would be the ISC binary kit and wireshark, since AFAIK Windows doesn't
come with a packet capture program either. . .
There is one. I forget what it's called. I think it's in one of
On 11/24/2011 11:21 AM, Jan-Piet Mens wrote:
Jeffry,
I have had a tendency to dig axfr from my Windows workstation
+1 to you for using `dig' on Windows; most don't even know it exists
and suffer the `nslookup' pain. ;-)
It comes with the Windows version of BIND9.
Danny
On 11/22/2011 11:17 AM, Spain, Dr. Jeffry A. wrote:
When bind 9.9.0b2 starts up, the syslog shows the following messages:
Nov 22 10:18:19 nstest2 named[17190]: using default UDP/IPv6 port range:
[1024, 65535]
Nov 22 10:18:19 nstest2 named[17190]: listening on IPv6 interfaces, port 53
Nov
On 10/14/2011 1:49 PM, Walter Smith wrote:
Hello folks,
I would like to setup latest BIND/named [slaves] within VMware
environment - is there any implications I should be aware of?
Since I saw some issues running NTPd on VMware - thinking may be 'named'
might have similar issues...
On 4/5/2011 8:05 PM, Mark Andrews wrote:
In message alpine.bsf.2.00.1104052216180.2...@bikeshed.isc.org, Dan Mahoney
w
rites:
On Tue, 5 Apr 2011, Jukka Pakkanen wrote:
I'm moving one of our DNS servers (Win 2003 R2, v9.7.0) to a new 2008 R2 x6
4
server.
After installing v9.8.0 I
On 10/11/2010 8:01 AM, Adam Tkac wrote:
Hello all,
I would like to ask you for the reason why there are separate versions
of libdns, libisc friends, called export libraries in BIND 9.7
series.
If I understand correctly those export libs are supposed to be used
from non-BIND9
On 8/11/2010 3:32 PM, Gary Gladney wrote:
Are you using a domain admin account or local admin account? If you
using a domain admin account the system you are doing the install on has
be part of the windows domain that you are adding the account to. If
it's a local account then the problem maybe
On 8/13/2010 3:25 AM, Chiesa Stefano wrote:
Hello all.
Our Bind installaton is on a virtual VMWare ESX W2k3 server.
I've just upgraded our public primary dns server from 9.6.0-p1 to
9.7.1-p2.
After more or less 15 minutes of work the following messages appear in
the log:
13-Aug-2010
On 8/11/2010 1:13 PM, HelixGalaxy wrote:
Hello all,
I have a fresh installation of Windows Server 2008 (not R2).
Trying to install BIND 9.7.1-P2 ver and when runing the installer,
putting in the password, I get this error:
Unable Create Account for the Service
The installer just
On 8/1/2010 1:22 PM, Jukka Pakkanen wrote:
Lately have seen in our 9.7.1-P1 server following errors:
SOCKET_RECV: Windows error code: 1236, returning ISC error 54
And this warning:
*** POKED TIMER ***
Browsing the net told that this is/was a a common problem to even
earlier Bind
On 7/24/2010 5:10 AM, Warren Kumari wrote:
On Jul 23, 2010, at 2:37 PM, Danny Mayer wrote:
On 7/22/2010 11:08 PM, Merton Campbell Crockett wrote:
Thanks for the confirmation that the problem was related to DNSSEC.
I didn't see your message until I got home from work; however, I did
find
On 7/22/2010 11:33 AM, Phil Mayers wrote:
On 22/07/10 12:19, Rock July wrote:
Windows Vista and 7 clients will query both type A and query even
The OS might make the query, but the application will (should) be using
getaddrinfo, and this will return the IPv4 addresses first, so it
On 7/22/2010 11:08 PM, Merton Campbell Crockett wrote:
Thanks for the confirmation that the problem was related to DNSSEC.
I didn't see your message until I got home from work; however, I did
find the root of the problem late this afternoon. At each of our
Internet egress and ingress
On 7/23/2010 8:50 AM, Phil Mayers wrote:
On 23/07/10 13:23, Danny Mayer wrote:
On 7/22/2010 11:33 AM, Phil Mayers wrote:
On 22/07/10 12:19, Rock July wrote:
Windows Vista and 7 clients will query both type A and query even
The OS might make the query, but the application will (should
On 7/16/2010 8:59 AM, Alan Clegg wrote:
With the signing of the root and all of the related activities, I
thought I'd take this opportunity to let you know that I'll be giving a
presentation at OSCON (O'Reilly's Open Source Convention) next week in
Portland.
On 7/7/2010 12:57 PM, Kalman Feher wrote:
If you really do have such a small pipe (with your email address I assume
Sweden. I didn't think Swedes even knew there were link types other than
fibre ;) )then perhaps you're throttling it to the point where your NTP sync
drops off.
NTP hat
That
On 7/4/2010 12:37 AM, Vasant Srisanan wrote:
I install at c:\Servers\named
But can't start it.
How I do,for start it.
Thank you.
C:net start named
However I suspect that you don't have a named.conf file and that is
required to start named. Check your event log for named errors.
Danny
Kevin Oberman wrote:
Date: Mon, 08 Mar 2010 10:03:26 -0800
From: Michael Sinatra mich...@rancid.berkeley.edu
Sender: bind-users-bounces+oberman=es@lists.isc.org
On 3/7/10 10:46 AM, Danny Mayer wrote:
Autokey is not a cryptographic signature protocol. It *is* a
authentication protocol
Pedro Rafael Sánchez Aranda wrote:
**Hello,
I'm new on BIND, and I tried to install and configure both 9.7.0-P1 and
9.6.2-P1 versions on a Windows XP SP3. In both cases they were correct
installations but they produce the same error:
starting BIND 9.x.x-P1 -g
built with default
found 1
Michael Sinatra wrote:
On 02/24/10 01:25, Jonathan de Boyne Pollard wrote:
DNScurve advocates, on the other hand, point out that DNS isn't
encrypted. Well, neither is the phone book. So what?
So the protocol is vulnerable to both local and remote forgery attacks,
just like other
Chandan Laskar wrote:
Dear All,
We are using ISC Bind 9.5.0 in Windows 2000 server with SP4 environment
for one of our DNS. After installation initially it was working fine but
last few days in a interval of 48 hours (approx) ISC Bind service
terminated unexpectedly. After observing the
jv wrote:
This is my first mail on this list. I hope I am at the right place. I
have loaded BIND 9.7.0b3 under Windows. Now I would like to compile it.
Could someone help me with what is exactly to be done (and if I should
install a special compiler).
Thank you for your help!
--
Joel
jv wrote:
Thank you! Evan,
I have not VisualStudio which is commercial. Do you think I can use an
other compiler or do you think VisualStudio light is enough (Version
2008 seems available).
Best
It should work fine.
Danny
--
This message has been scanned for viruses and
dangerous
Romain De Rasse wrote:
Hi,
I succeeded in compile ISC Bind for Windows. I'm now trying to enable
fixed rrset (--enable-fixed-rrset for the configure file). But I
did'nt find how to change options for a Windows compilation.
Can anyone help me ?
#define DNS_RDATASET_FIXED 1
in config.h
Chris Buxton wrote:
On Dec 4, 2009, at 10:12 AM, Joe Baptista wrote:
On Fri, Dec 4, 2009 at 12:26 PM, Chris Buxton cbux...@menandmice.com wrote:
nslookup will only understand IDN if BIND is compiled with that
option in the ./configure step.
might be a good idea if it was the default
jefsey wrote:
At 11:06 06/12/2009, Chris Buxton wrote:
On Dec 5, 2009, at 6:34 AM, JFC Morfin wrote:
Chris Buxton cbux...@menandmice.com 4 décembre 2009 20:29
The reason IDN support in the BIND query tools (dig, host,
nslookup) is not the default is because it relies on a 3rd party
jefsey wrote:
At 06:36 06/12/2009, Danny Mayer wrote:
JFC Morfin wrote:
I wish to set-up my BIND DNS server on window XP as a service. I
checked
the automatic start-up. Unfortunately it did not work. The readme1st
guide only says that the way to do it is as usual, what does not
help me
JFC Morfin wrote:
I wish to set-up my BIND DNS server on window XP as a service. I checked
the automatic start-up. Unfortunately it did not work. The readme1st
guide only says that the way to do it is as usual, what does not help me
since I never did it. When I try using mmc there is no way I
Doug Barton wrote:
Pamela Rock wrote:
For all it's worth, using wireshark, I can see IPv6 UDP queries successfully
traversing in/out. Ping6 works successfully. There is no firewall running
anywhere(IPv4 or 6). Still get
[r...@dig-client ~]# dig -6 a test.domain @bindserver6 +tcp
Cathy Almond wrote:
Doug Barton wrote:
Pamela Rock wrote:
For all it's worth, using wireshark, I can see IPv6 UDP queries
successfully traversing in/out. Ping6 works successfully. There is no
firewall running anywhere(IPv4 or 6). Still get
[r...@dig-client ~]# dig -6 a test.domain
ato...@people.net.au wrote:
According to this link: https://www.isc.org/node/474
The dynamic update vulnerability affects all BIND 9 versions, but what
about BIND 8? Is it not affected or not tested?
As we are running BIND 8 (can't upgrade to BIND 9 due to restricted to
Windows2000), how
Matus UHLAR - fantomas wrote:
On 29.07.09 22:37, Abello, Vinny wrote:
Considering 2003, 2003 R2, 2008, and 2008 R2 (technically done, but will
officially release in October) have been released, I don't think dropping
support for an ancient operating system from 9.5 years ago and roughly 3
Jukka Pakkanen wrote:
Unfortunately W2K was dropped a while ago, no safe version available for it.
Actually, less than a year ago. It became necessary.
Danny
I know this is a very lame question, But I have been out of the Bind loop
for a number of years ( yes I went over to the dark side
Chris Thompson wrote:
On Jul 28 2009, sth...@nethelp.no wrote:
% dig +short a dns3.potomacnetworks.com @a.gtld-servers.net
216.250.243.230
As long as that host record exists, with an IP different from what
your authoritative servers reply with, you are going to have problems,
because
Kevin Darcy wrote:
Ezra Taylor wrote:
Hello All:
How can I create a CNAME that points to another
domain. Example below. Is the below example possible?
stars.mydomain.com http://stars.mydomain.com INCNAME
stars.otherdomain.com http://stars.otherdomain.com.
Chris Buxton wrote:
On Jun 30, 2009, at 6:15 AM, bind9 wrote:
1) skipping zone transfer as master 213.173.250.146#53 (source
0.0.0.0#0) is unreachable
(cached) seem to indicate that the slave has cached a knowledge about
the master being
unreachable. It isn't. I can nslookup on the master
Stephane Bortzmeyer wrote:
On Sun, Jul 12, 2009 at 08:42:27PM +0200,
Mark Elkins m...@posix.co.za wrote
a message of 31 lines which said:
Arg 3 should be 5 (or maybe 3) - the algorithm.
No, you must bnot use a hard-wired list in your code, because the list
of algorithmps
Scott Haneda wrote:
On Jun 23, 2009, at 3:01 PM, Hauke Lampe wrote:
Scott Haneda wrote:
$dig sugardimplesdesigns.com SOA @ns1.hostwizard.com +short
Do you block 53/tcp anywhere on the path to your nameserver?
It rejects TCP queries:
| dig +tcp sugardimplesdesigns.com SOA
Peter Dambier wrote:
Hello Martin,
since a major outage at my provider, dtag.de or Deutsche Telecom AG, I have
trouble
with f.root-servers.net. Sometimes dig ... +vc does help me to see
f.root-servers.net.
The real problem is anycast. With udp it behaves different than with tcp.
Except that if it fails to get an answer it will try a different
authorative nameserver.
Danny
Jonathan Petersson wrote:
IIRC it's 3 seconds.
On Tue, Apr 28, 2009 at 12:42 AM, Jeff Pang hostmas...@duxieweb.com wrote:
When a Bind requests another Bind for a name resolving, what's the
timeout
Karl Auer wrote:
Hi there.
I want to work around the XP won't use IPv6 as a DNS transport issue.
So I downloaded the latest precompiled BIND (9.6.0-P1) for Windows from
the ISC site, and read the following in the readme first file:
This is a release of BIND 9.5 for Window 2000/XP/2003.
Hal Dell wrote:
Hello... Anyone know of a place to download a Windows Binary
Installation Kit for recent version of Bind with DLZ option enabled. As
I understand it -- this feature is a compile time option. If not -- is
it easy to compile with this option on?
If you are asking about a
Carl Fretwell wrote:
Hi Everyone
I have installed BIND 9.6.0-P1 on a Windows Server 2003 x64 system but
when I come to start the âISC BINDâ service I always get a 1067 error
which I read somewhere was due to permissions so made sure the user
account password etc was correct still
Kevin Darcy wrote:
But, as far as I can tell, there's no *practical* reason to disallow
underscores, other than the fact that it may trip the standards-checking
code of some _other_ piece of software. So, piece of software A
disallows underscores because it's worried about causing a problem
Michael Milligan wrote:
hongyi.z...@gmail.com wrote:
You *must* reference the location using the same URI if you expect to
see the same expected results.
Thanks for your detailed explanations. Another issue: what do you
mean by saying URI? What's the differences between URI and URL?
Vinny Abello wrote:
Baird, Josh wrote:
Actually, yes, if you have dynamic DNS registration enabled on the
client/host and server, an 'A' record will automatically be created in
the AD zone.
It needs to be registered in the domain first. Otherwise any system
could mascarade as another system.
Vinny Abello wrote:
-Original Message-
From: Danny Mayer [mailto:ma...@gis.net]
Sent: Sunday, February 08, 2009 8:32 PM
To: Vinny Abello
Cc: Baird, Josh; bind-users@lists.isc.org
Subject: Re: Case For Microsoft DNS v. BIND 9 - Or Best Practices
ForCoexisting
Vinny Abello wrote
wiskbr...@hotmail.com wrote:
The case the windows team made was ease of adding entries, you simply
add into the MMC, or even easier, when you join a host into a domain, it
adds itself.
This is not even true. To add a host to a domain you have to register it
manually, either by going into ADS
From: bind-users-boun...@lists.isc.org on behalf of Danny Mayer
Sent: Sat 2/7/2009 2:29 PM
To: wiskbr...@hotmail.com
Cc: bind-users@lists.isc.org
Subject: Re: Case For Microsoft DNS v. BIND 9 - Or Best Practices
ForCoexisting
wiskbr...@hotmail.com wrote
Kobi Shachar wrote:
Recently I upgraded my bind machine to a new windows 2008 server web
edition 32 bit with 2 E5420 quad core CPU's.
The server is configured with about 7000 master zone files.
Since the upgrade, BIND hangs every 5-10 hours.
I checked the logs and I saw these lines
Thilanka Samarasekera wrote:
Can someone tell me how a BIND 9 server selects what forwarder its going
to use? I read that BIND 8 used roundtrip time through a ping but I
cannot find how BIND 9 does that. Does it round-robin between the
forwarders that are set? Thanks in advance.
T
You
Lalvani, Hiro wrote:
Hi ,
I need small help regarding this issue.
I have looked at the file openssldsa_link.c under the BIND-9.3 and found
below code snapshot where the problem occured.
status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa);
Jukka Pakkanen wrote:
Chiesa Stefano wrote:
Hi all.
Maybe it's not a new issue, but...
I have a Windows 2003 SP2 with a 9.4.2 release that worked fine for
years.
Today I wanted to upgrade my release to 9.6.
I installed it but when I try to start the service the system says:
Event Type:
Chiesa Stefano wrote:
Hi all.
Maybe it's not a new issue, but...
I have a Windows 2003 SP2 with a 9.4.2 release that worked fine for
years.
Today I wanted to upgrade my release to 9.6.
I installed it but when I try to start the service the system says:
Event Type: Error
Event Source:
Doug Barton wrote:
Vinny Abello wrote:
Just for clarification, is there any downside to this autoconf fix
vs. how it was previously working?
It was not working correctly previously, so no.
Does autoconf still not understand AMD64 on FreeBSD
You're confusing autoconf and the configure
83 matches
Mail list logo
