Ok Peter Thanks a Lot for your valuable inputs and thanks too for bearing up with my silly question if any as i am new to dnssec.:)
Thanks & Best Regards Parth Monga On Mon, Apr 16, 2012 at 3:30 PM, <[email protected]>wrote: > Send Pdns-users mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.powerdns.com/mailman/listinfo/pdns-users > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Pdns-users digest..." > > > Today's Topics: > > 1. Re: Huge PDNS+DNSSEC setup-Need help (Peter van Dijk) > (Peter van Dijk) > 2. Re: epollmplexer.cc (Juraj Lutter) > 3. Re: epollmplexer.cc (Peter van Dijk) > 4. Re: some Solaris issues (Peter van Dijk) > 5. NSEC RR - pdns 2.9.22 (Sven Broeske) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 16 Apr 2012 07:41:53 +0200 > From: Peter van Dijk <[email protected]> > Subject: Re: [Pdns-users] Huge PDNS+DNSSEC setup-Need help (Peter van > Dijk) > To: pdns-users Users <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset=iso-8859-1 > > Hi, > > On Apr 15, 2012, at 15:00 , PARTH MONGA wrote: > > > So as you said key rollovers are not mandate,so that means if i created > ksk and zsk for a domain so that will last long during a zone lifecycle > till its live and secured > > So i am new to dnssec can you please give me the best practice in > handling keys like when should i intentionally go for a key rollover and > which key is to be rollovered ksk or zsk or both and how frequent. > > Please show some light on this. > > You asked the same two days earlier. There's no need to repeat. I cannot > provide you with best practices for your organization. > > Kind regards, > -- > Peter van Dijk > Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ > > > > ------------------------------ > > Message: 2 > Date: Mon, 16 Apr 2012 08:04:12 +0200 > From: Juraj Lutter <[email protected]> > Subject: Re: [Pdns-users] epollmplexer.cc > To: Peter van Dijk <[email protected]> > Cc: pdns-users Users <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset=us-ascii > > No. epollmplexer is still being built on Solaris for some reason. > > > > On 16 Apr 2012, at 07:40, Peter van Dijk <[email protected]> > wrote: > > > Hi Juraj, > > > > On Apr 15, 2012, at 1:41 , Juraj Lutter wrote: > > > >> is epollmplexer.cc referenced from somewhere? If not, is there any > >> reason to build it? It can't be built on Solaris. > > > > > > epollmplexer is used when building the recursor on Linux. On Solaris, > > it will build with either portsmplexer or devpollmplexer. See > pdns/Makefile-recursor > > and pdns/sysdeps-recursor/ for more information. > > > > Kind regards, > > -- > > Peter van Dijk > > Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ > > > > _______________________________________________ > > Pdns-users mailing list > > [email protected] > > http://mailman.powerdns.com/mailman/listinfo/pdns-users > > > ------------------------------ > > Message: 3 > Date: Mon, 16 Apr 2012 08:10:48 +0200 > From: Peter van Dijk <[email protected]> > Subject: Re: [Pdns-users] epollmplexer.cc > To: pdns-users Users <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset=us-ascii > > Hi Juraj, > > On Apr 16, 2012, at 8:04 , Juraj Lutter wrote: > > > No. epollmplexer is still being built on Solaris for some reason. > > > If you are doing 'make pdns_recursor' inside a pdns checkout: don't do > that (we should probably document this or even make it impossible). The > only recommended and supported way to build the recursor is from a recursor > distribution, either acquired as a tarball called pdns-recursor-* or from > typing ./dist-recursor inside a pdns checkout. > > If you are seeing epollmplexer trying to build in a different scenario, > please let me know! > > Apologies for the confusion. > > Kind regards, > -- > Peter van Dijk > Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ > > > > ------------------------------ > > Message: 4 > Date: Mon, 16 Apr 2012 11:17:30 +0200 > From: Peter van Dijk <[email protected]> > Subject: Re: [Pdns-users] some Solaris issues > To: pdns-users Users <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/plain; charset=us-ascii > > Hello Juraj, > > On Apr 15, 2012, at 10:26 , Juraj Lutter wrote: > > > On http://buildfarm.opencsw.org/~wilbury/pdns-3.1-rc2-patches/ you can > > find a patch against 3.1-rc2 which replaces call to ``rdtsc'' > > instruction by a call to gethrtime() function which does the same thing > > and is Solaris API compliant. The patch is only for SPARC platform, on > > x86 you still can use ``rdtsc'' > > > I'd be happy to apply it. I do have a question. Both historically and as a > result of some of your patches, we now have checks for '__sun' and > '__sun+__SVR4', and your patch uses __SPARC__. I have to ask: which check > is right in which situation? > > Kind regards, > -- > Peter van Dijk > Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ > > > > ------------------------------ > > Message: 5 > Date: Mon, 16 Apr 2012 11:40:35 +0200 > From: Sven Broeske <[email protected]> > Subject: [Pdns-users] NSEC RR - pdns 2.9.22 > To: [email protected] > Message-ID: <[email protected]> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi folks, > > Regarding the pdns documentation it should be possible to use the NSEC > RR since version 2.9.21. Therefore, I tried to create a NSEC RR with the > value "sub.test.de. A NS SOA". Unfortunately, I get always a SERVFAIL if > I try to 'dig' the domain test.de on my nameserver. > > The log file of the pdns server shows the following problem: > "Exception building answer packet (Unknown record was stored > incorrectly, need 3 fields, got 4: sub.test.de. A NS SOA) sending out > servfail" > > As far as I know "sub.test.de." should be interpreted as first field > (next domain name) and "A NS SOA" as second field (list of types). > > The questions which are resulting: > What would be the third field? > Why is every RR in the "list of types" interpreted as separate field? > What would be the correct configuration? > > Versions: > pdns-backend-mysql 2.9.22-8+squeeze2 > pdns-server 2.9.22-8+squeeze2 > > Linux foobar 2.6.26-2-amd64 #1 SMP Tue Jan 25 05:59:43 UTC 2011 x86_64 > GNU/Linux > > If you need further information, don't hesitate to ask. > > Thanks in advance. > > Best regards, > Sven > > > ------------------------------ > > _______________________________________________ > Pdns-users mailing list > [email protected] > http://mailman.powerdns.com/mailman/listinfo/pdns-users > > > End of Pdns-users Digest, Vol 111, Issue 21 > ******************************************* >
_______________________________________________ Pdns-users mailing list [email protected] http://mailman.powerdns.com/mailman/listinfo/pdns-users
