Re: should I be seeing piles of gnuism extensions in the test suite?

-- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 8. 2021, at 0:06, Dennis Clarke wrote: > > What you are saying is that your testsuite is not portable. It may or >

Re: Breaking change between 9.16.20 and 9.16.21 (check-names) ?

Hi, we cannot really help you if anonymize everything and don’t provide any details at all. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 23. 9. 2021, at 10:54, Thib D wrote: > > Hello, > > I am currently rolling the 9.16.21 on a few bind servers. Most of the se

Re: Breaking change between 9.16.20 and 9.16.21 (check-names) ?

This should be the right workaround at this moment, so I wonder why it didn’t work. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 23. 9. 2021, at 13:51, Thib D wrote: > > Hi Ondrej, > > Thanks for your reply, > > I'm afraid I am unable to share any more detail rega

Re: Query on issue#2389 BIND 9.16.10

, but don’t shift your costs to us. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 10. 2021, at 11:52, Rajnish Kamboj via bind-users > wrote: > >

Re: Query on issue#2389 BIND 9.16.10

it here for your convenience: ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Query on issue#2389 BIND 9.16.10

, but don’t shift your costs to us. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 10. 2021, at 11:52, Rajnish Kamboj via bind-users > wrote: > 

Re: Query on issue#2389 BIND 9.16.10

-- Ondřej Surý (He/Him) ond...@isc.org > On 18. 10. 2021, at 11:51, Rajnish Kamboj via bind-users > wrote: > > Hi Team, > Currently we are using Bind version 9.16.10, > > My Query > I recently found that there is an issue with the 9.16.10 version. "Issue#2389 >

Re: Query on issue#2389 BIND 9.16.10

All the information available is always written down in the issue you have already referenced. That’s always the case - even with security issues, there’s only 1 month+ delay to give people chance to upgrade. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may

Re: Bind9 changes RCODE

ds. While this doesn’t clearly violate any rules, it doesn’t make me very happy - the topic of this is list is to help BIND 9 users, not debug an application developed by a commercial company. I would suggest you limit your post to this mailing list. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On

Re: libisc-9.16.15-Debian.so: undefined symbol: uv_udp_connect

Using ldd is a good debugging step, but I would start with deleting the obsolete copy of libuv from /usr/local. That helps in 99% of cases like this. > Either packagers on Debian made mistake Definitely not ;-) Ondrej. -- Ondřej Surý (He/Him) ond...@isc.org > On 30. 9. 2021, at 14:39

Re: libisc-9.16.15-Debian.so: undefined symbol: uv_udp_connect

Only you can answer that question… it’s your system. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 10. 2021, at 0:04, Maihöfer via bind-users > wrote: >

Re: Broken trust chain presumably due to some zone operators using LetsEncrypt certificates

Hi Richard, this is not the case. slack.com botched their DS/DNSKEY deployment (there’s a thread on dns-operations about it). Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 10. 2021, at 18:46, Richard T.A. Neal wrote: > > For those of you facing a curious issue with BIN

Notice of plan to deprecate DLZ drivers (not DLZ modules)

of DLZ drivers: dlz_bdb_driver.c dlz_bdbhpt_driver.c dlz_dlopen_driver.c dlz_drivers.c dlz_filesystem_driver.c dlz_ldap_driver.c dlz_mysql_driver.c dlz_odbc_driver.c dlz_postgres_driver.c dlz_stub_driver.c List of DLZ modules: bdbhpt filesystem ldap mysql mysqldyn perl sqlite3 wildcard Ondřej -- Ondřej

Re: force nameserver(bind) information exchanges with clients via tcp only

-- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 2. 10. 2021, at 1:12, Donika Mirdita > wrote: > > Hello Petr, > > This setup was not meant to address

Re: CPU core load not distributing with bind 9.16.21

You need to set your kernel to evenly distribute the traffic from NIC queues to the threads. Google rx-flow-hashing -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 27. 9. 2

Re: Strange named freezing

Does the jail have enough entropy? That would be my first guess… -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 12. 2021, at 7:18, Nikita Druba wrote: > >

Re: host your subdomain on your own ?

you might describe why you want to do ? Ondrej -- Ondřej Surý (He/Him) ond...@isc.org signature.asc Description: Message signed with OpenPGP ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the d

Re: ERROR: Failed to create fetch for DNSKEY update

far, you shared a **single line** from the log and nothing else. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software wi

Re: use dig query

Dig arguments are positional and they always were. See the Simple Usage and Multiple Queries sections in the manual page for details. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal

Re: Query on issue#2389 BIND 9.16.10

-- Ondřej Surý (He/Him) ond...@isc.org > On 27. 10. 2021, at 7:03, Mayank Maheshwari M > wrote: > > Hi Ondrej, > > Thanks for all your responses so far. > > As per the recommendation from BIND community we plan to proceed with an > upgrade to latest BIND vers

Re: A good name for development branch releases package

I like bind-next too - shame we didn’t think of it when we created the repositories. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 12. 2021, at 17:56, Petr Menšík wrote: > > Well, why not, I like that. Only slight disadvantage to bind9-dev is it > is never called simila

Re: A good name for development branch releases package

What if you call it bind9-git or bind9-snapshot? The monthly releases are development snapshots anyway... Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 12. 2021, at 13:07, Petr Menšík wrote: > > Mainline seems strange term to me. I think it should be used also by ISC >

Re: Millions of './ANY/IN' queries denied

FTR RRL will not help on this case. There’s no difference between response with TC and response with REFUSED. It would make a difference only if there was NOERROR response with data. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do

Re: Millions of './ANY/IN' queries denied

IP addresses doesn’t need access to your DNS? If yes, then go ahead. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 15. 12. 2021, at 12:51, Danilo Godec via bind-users > wrote: > > Hello, > > > I'm noticing some unusual activity where 48 external IPs generated over > 2M

Re: Millions of './ANY/IN' queries denied

Not responding would make the client susceptible to spoofing, and named have no way of deciding whether the other side is legitimate or not. The out-of-configure-zone question could come from misconfiguration somewhere and not be malicious at all. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org

Re: A good name for development branch releases package

I quite like the nginx naming - stable and mainline. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 30. 11. 2021, at 16:10, Petr Menšík wrote: > > Hello B

Re: ITS THE NUMBER OF CORES/THREADS

Thanks, having such a simple reproducer is helpful. Can you try if adding `-n 8` vs `-n 7` have the same effect? Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 23

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

FTR Jason has been warned before to stop sending this nonsense about Hidden Google Internet and I’ve put them on the moderation list for now. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: your mail

John, welcome to the list of people being moderated. Trolling and harassing other users on the lists is not welcomed here. Please pick your fights elsewhere. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated

Re: Setup a hidden master

Hi, do both, or at least the firewall. But you absolutely must remove the hidden primary from the list of NS both in the parent and child zones. That’s the most important thing to do. Start with that, the rest is just additional layers. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours

Re: Obsoleting keep-response-order option in BIND 9.19/9.20+

Thanks Fred, those are all good advices for the DNS over TCP implementors. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 11. 2. 2022, at 18:32, Fred Morris wr

Re: Problems building bind 9.18.1 on FreeBSD

You don’t have to have sphinx-build installed for manpages to be generated. There’s nothing complicated in the build system. All is pretty standard stuff. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Is there a community product maintaining Windows support?

rs and weird quirks of the Windows SDK. Also we are not actively rejecting the idea of having Windows port - and I think I pretty much explained the conditions the ISC would accept the Windows port in the previous emails. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your worki

Re: about apply Deckard to test BIND named

I guess you can possibly workaround this by disabling jemalloc from named build and hope that the static shims for jemalloc calls will trump the preloaded functions from libfaketime. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

- debugging on Windows is extremely painful and requires expertise with extremely high learning curve. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 17. 2. 2022, at 15:08, Ja

Re: Issue Using Wildcards for Subdimain Redirecing

if you start using real domain and describing what you need to achieve instead of how you want to do that would be a good start. Step back and describe why are you doing things like this. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do

Re: Errors loading Named ( 9.16.26) on RHEL 7.9

The server isn’t same. All the libraries that you are using to compile BIND 9 needs to be at same or higher version, which isn’t the case here. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: ipv6 adoption

ost EOL (June 2022), so you should upgrade to bullseye in any case. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bin

Re: blackhole option anomaly

Hi, please fill the issue in our GitLab: https://gitlab.isc.org/isc-projects/bind9/-/issues/new?issuable_template=Bug Thank you, -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: about apply Deckard to test BIND named

would be a bare minimum here. 4. Create an issue (I thought there’s already one as integrating Deckard has been on our TODO list for couple of years now), and track all the ideas and progress there. GL #2088: https://gitlab.isc.org/isc-projects/bind9/-/issues/2088 -- Ondřej Surý (He/Him

Re: Recent upgrade

eshark) to look what happens on the wire when the failure occurs would help. You can also run named with extra debugging level to provide more insight. Cheers, Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply o

Re: BIND 9.18.0 and Mac OS X 10.15.7 - cannot build

/docs/dr_459.htm (e.g. this was fixed in 2014 in the C standard) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 2. 2022, at 5:26, Larry Stone wr

Re: dns_dnssec_findzonekeys2: error reading WHATEVER.private: file not found

th the upstream patch releases. The other option provided by ISC is to run BIND 9 inside a docker container, so you don’t have to worry about the PPA messing with the base system, but the docker container is exactly “Ubuntu 20.04 + ISC PPA”. Cheers, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org M

Re: Forwarding zone, setup

Is static-stub something you are looking for? Reference documentation: https://bind9.readthedocs.io/en/v9_18_0/reference.html?highlight=static-stub#zone-types And in human terms: https://jpmens.net/2011/01/25/binds-new-static-stub-zone-type/ Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My

Re: Bind: Standard Ports And Non Standard Ports

and rants. The experience shows that sticking to the technical questions leads to more pleasant experience on the mailing list. Thanks. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: Problems building bind 9.18.1 on FreeBSD

Making general statements like this is neither helpful to those “maintainers” (they can speak for themselves, do they) nor the the upstream developers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outs

Re: Problems building bind 9.18.1 on FreeBSD

n the Supported Platforms: https://bind9.readthedocs.io/en/v9_18_1/requirements.html#supported-platforms Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.

Re: Problems building bind 9.18.1 on FreeBSD

ssues?scope=all=closed=Macports For all of these, we either prepared and/or merged a fix or provided a workaround (for the second issue on the list, you need to run autoreconf -if). Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Problems building bind 9.18.1 on FreeBSD

And we are not planning to depend on specific supervisor, but in fact, we are happy to add **optional** support for any available supervisor **if it makes sense**. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not fe

Re: Periodic SERVFAIL for TLD .BY

Read the thread, this has been already answered on the list. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 2. 4. 2022, at 19:48, Dzmitry Shykuts wrote: > &

Re: V 9.18.1 not listen on port 853 after rndc reload

This is already being tracked as https://gitlab.isc.org/isc-projects/bind9/-/issues/3122 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 21. 3. 2022, at 17

Re: Periodic SERVFAIL for TLD .BY

for the SERVFAIL TTL to expire. The maximum value is ``30`` seconds; any higher value is silently reduced. The default is ``1`` second. And see if that helps. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply

Re: "make test" not working?

porting bugs. You omitted quite serious information about the build until the very last moment when you reported you found the issue. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal w

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

Hi Anand, what is your open files limit before starting the server? (ulimit -n) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 28. 1. 2022, at 14:33, An

Re: "make test" not working?

peat that again - you should understand what you are doing and why you are doing that - that includes all your local patches, changes to the default options and any other modifications to the build system. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hou

Re: 9.17.21 RUNTIME_CHECK(csock->tls.tls != ((void *)0)) failed

12:41:25 dns named[6281]: creating IPv4 interface ixl1.15 failed; >> interface ignored >> >> and the named process no longer listens on TCP port 853. >> >> Also tried this on 9.17.22, and the same problem occurs. > > Now also tried on 9.18.0, and the same pr

Re: "make test" not working?

ng and why it is failing? Both ‘make test’ and ‘make check’ works as expected. ` Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.o

Re: Python support

in the DNSSEC Signing Guide: Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 31. 1. 2022, at 9:39, Josef Moellers wrote: > > Mooi'n, > > I was wo

Re: "make test" not working?

Please don’t, use gitlab. The message is just autoconf quirk. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 2. 2022, at 15:28, Josef Moellers wrote: > > PS The

Obsoleting keep-response-order option in BIND 9.19/9.20+

liant DNS client and hence we plan to directly make the option to do nothing instead of graceful removal which would force us to support the option for the next 6 years. The option will be marked obsolete, so named-checkconf will issue a warning, and removed in BIND 9.21+ development release. 1.

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

That’s a question that you need to ask people running these nameservers: 159.134.0.11; 159.134.0.12; The domain works fine from here and those servers serve only your ISP it seems. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

Again - it’s your configured forwarders at fault. There’s no Google Hidden Internet. Just stop using the forwarders, named is capable to resolve the names on its own. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated

Re: Dnstap Re: Deprecation notice for BIND 9.20+: Unix Domain Sockets for control channel (rndc)

Hi Fred, the Dnstap UDS support is only tangential to this - the support for AF_UNIX is implemented in the fstrm library and is outside of the scope for this change. Ondřej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel

Deprecation notice for BIND 9.20+: Unix Domain Sockets for control channel (rndc)

rg/isc-projects/bind9/-/issues/1759 This is tracked under https://gitlab.isc.org/isc-projects/bind9/-/issues/4311 Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

Deprecation notice force BIND 9.20+: dnssec-must-be-secure option

must-be-secure option in named.conf will be now a fatal error In BIND 9.18 and BIND 9.20: 1. Using dnssec-must-be-secure option in named.conf will issue a deprecation warning This is tracked under https://gitlab.isc.org/isc-projects/bind9/-/issues/4263 Thanks. -- Ondřej Surý (He/Him) ond...@isc.

Re: Help about DNS documentation

abs.ripe.net/author/bert_hubert/introducing-tdns-the-teachable-authoritative-dns-server/ Once you actually grasp how the DNS protocol works, some answers will become obvious. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obliga

Re: Question about URL being logged by resolver

It means something in your network sent a query containing the literal URL below. The message is just misleading - the resolver tries to do QNAME minimization on it, it fails, switches to full name which ends with NXDOMAIN from root. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours

Re: Can we enable serve-stale parameter in bind

engineering in the first place. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 6. 11. 2023, at 3:04, Prasanna Mathivanan (pmathiva) via bind-users > wrote: > >

Re: 9.18 BIND not iterated over all authoritative nameservers

Please don’t use Postel’s Law as excuse for implementations that break standards: https://datatracker.ietf.org/doc/html/rfc9413--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.On 28. 10

Re: Unhelpful startup message re: RPZ

Hi John,GitLab is a good place to fill well-defined feature requests.Thanks,--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.On 21. 9. 2023, at 18:22, John Thurston wrote: I

Re: unresolvable pms.psc.gov, but google/cloudflare/unbound work

it works now. I can confirm this works in BIND 9.18.17 and higher. And it's absolutely not BIND 9's fault. Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. --

Re: One of my zones is failing, don't know why.

need to look closely when named starts why the zone isn’t loaded. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 5. 10. 2023, at 19:26, William D. Colburn wr

Re: bind9 service problem with BIND 9.10.3

You are using an end-of-life BIND 9 on end-of-life Ubuntu. Start with that…There is no point in debugging a version with unfixed bugs and security vulnerabilities.Ondřej --Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply

Re: help me with the ipv6 PTR generation

dig -x 2001:db8::1 also works -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 24. 8. 2023, at 8:49, Jan-Piet Mens wrote: > >  >> >> IPv6 PTR record

Re: Moving to a IPv4 only server

on the server, firewall at the provider) might be blocking DNS queries to the outside world. You should diagnose that - try sending DNS queries to those addresses by hand and look what’s happening on the wire (tcpdump, wireshark, etc. are your friends). Ondřej -- Ondřej Surý — ISC (He/Him) My

Re: Bind and systemd-resolved

I think you also might want to mask the service: https://fedoramagazine.org/systemd-masking-units/ -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 4. 2022, at 17:20, Ra

Re: Communication error when we do axfr query for the large size zone

We can’t really help you if you withhold information. You need to learn to provide complete information if you want other people to help you instead of letting them guess what does you environment look like. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may

Re: Communication error when we do axfr query for the large size zone

> bind 9.16.13 This. You are running outdated unsupported version of BIND 9. You need to upgrade to latest 9.16 version at least. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working ho

Re: getting answers from DNS queries

> I asked this last week, but I didn't an answer. Probably because I still don’t know what you mean. You need to better articulate your problem and your question. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not f

Re: getting answers from DNS queries

That’s much better - you should search for dnstap, initial pointer might be: https://kb.isc.org/docs/aa-01342 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: High memory consumption in bind 9.18.2

Also please note that proper measurement of memory consumption is needed. There’s some good (semi-accurate) stuff at SO and it needs to be correlated with the statschannel output from named. Running “free” doesn’t measure memory consumption by any program. Ondřej -- Ondřej Surý — ISC (He/Him

Re: High memory consumption in bind 9.18.2

Hi Klarstein, Gathering the output of named statschannel should be good enough for initial assessment (json please). For 9.18, make sure the jemalloc is being used at runtime. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel

Re: Problem resolving a domain

s) were not responsive to queries over UDP. (157.83.102.245, 157.83.102.246, 157.83.126.245, 157.83.126.246) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 5.

Re: Bad CNAME treatment consistency beetween direct CNAME request vs A request

160-c.gandi.net.) (UDP) ;; WHEN: Fri May 13 15:57:49 CEST 2022 ;; MSG SIZE rcvd: 87 So, there’s nothing like “cache polution”, named correctly caches the records returned by the authoritative servers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours

Re: Problem resolving a domain

loudly. They are non-compliant and need to deploy the fix at their side. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 5. 2022, at 15:16, Rainer Duffn

Re: Request to use "Canonical/Mirror"

Also see https://datatracker.ietf.org/doc/html/rfc8499 for canonical DNS terminology document. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 14. 5. 2022, at 1

Re: Dynamic A records similar to nip.io or xip

Yeah, I concur that writing a small DLZ module or maybe even just **plugin** is a way to go. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 24. 5. 2022, at

Re: High memory consumption in bind 9.18.2

You did not provided any details, so we can’t really help you. What is “RAM consumption” anyway? VSZ, RSS, numbers pulled from stats channel from named? What’s the hardware, what is the configuration, how was BIND 9 compiled (or packaged)? The more details, the better Ondrej -- Ondřej Surý

Re: Only one DS key comes back in query

You don’t put DS into child zone, the DS record goes to parent zone, so your question doesn’t make sense in this context. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: Correct response to NS request in case of dual delegation when one delegation returns REFUSED

ng dig. Beyond that, if you need more help, you’ll need to go into more details. > My conclusion is that Windows DNS is an abomination. And relying on an > inherently faulty behavior leads straight to hell. I cannot confirm or deny this conclusion... Ondrej -- Ondřej Surý (He/Him) ond..

Re: Only one DS key comes back in query

Hubert was exactly right here: https://berthub.eu/articles/posts/anonymous-help/ Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 16. 5. 2022, at 19:06, frank pica

Re: High memory consumption in bind 9.18.2

And what did you find looking at the new data? What are the differences? And by how much?You should not expect other people doing the analysis for yourself.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: Can't modify an existing SPF record

> On 8. 7. 2022, at 18:05, Roberto Carna wrote: > > using the CLI in the BIND master What does this mean and how exactly are you changing the zone? List all the steps that you are doing when changing the zone contents. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and you

Re: Specifying EDNS payload size with dig queries

+bufsize= -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 6. 2022, at 19:44, Fred Morris wrote: > > Self explanatory? Maybe it's the nomenclature but I c

Re: Compilation problems with 9.16.30

You need to provide little bit more detail about the environment - operating system, compiler used, output of ./configure (including the options used). There’s no such thing as too many *relevant* details… Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may

Re: Compilation problems with 9.16.30 {External}

the dependencies (which you are probably doing anyway), so what’s the point of having this old “chassis” when you are welding new bits on top of it? Perhaps running BIND 9 in a container would be easier? Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may

Re: Compilation problems with 9.16.30 {External}

, -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 15. 6. 2022, at 20:31, William D. Colburn wrote: > Compiler: gcc -std=gnu99 >gcc (GCC) 4.4.7 20120313 (Red Hat

Re: High memory consumption in bind 9.18.2

Hi, we cannot really help you if you ignore everything that was said to you regarding the memory measurements. Ondrej. -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: BIND9.18.4 won't compile on my Ubuntu 18.04

Hi Marco,use this patch[1] on older Ubuntu or use Sphinx from pypi1. https://salsa.debian.org/dns-team/bind9/-/blob/debian/9.18/debian/patches/0001-Disable-treat-warnings-as-errors-in-sphinx-build.patchUbuntu 18.04 has too old Sphinx included.Ondrej--Ondřej Surý — ISC (He/Him)My working hours

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

Sandro, you did nothing wrong. No need to apologize from your side. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 6. 2022, at 17:45, Sandro wrote: >

<    1   2   3   4   5   >