Re: loading zone: creating database: out of memory
At somepoint memory has to run out :-) Is this a 32 bit build or a 64 bit build? Have you set the per process resource limits appropriately. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
ISC BIND 9.5.2-P1 is now available
BIND 9.5.2-P1 is now available. BIND 9.5.2-P1 is a SECURITY PATCH for BIND 9.5.2. It addresses a potential cache poisoning vulnerability, in which data in the additional section of a response could be cached without proper DNSSEC validation. Bugs should be reported to bind9-b...@isc.org. BIND 9.5.2-P1 can be downloaded from: ftp://ftp.isc.org/isc/bind9/9.5.2-P1/bind-9.5.2-P1.tar.gz PGP signatures of the distribution are at: ftp://ftp.isc.org/isc/bind9/9.5.2-P1/bind-9.5.2-P1.tar.gz.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/bind-9.5.2-P1.tar.gz.sha256.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/bind-9.5.2-P1.tar.gz.sha512.asc The signatures were generated with the ISC public key, which is available at https://www.isc.org/about/openpgp A binary kit for Windows XP, Windows 2003 and Windows 2008 is at: ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.zip ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.debug.zip PGP signatures of the binary kit are at: ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.zip.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.zip.sha512.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.debug.zip.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.debug.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.5.2-P1/BIND9.5.2-P1.debug.zip.sha512.asc Changes since 9.5.2: 2772. [security] When validating, track whether pending data was from the additional section or not and only return it if validates as secure. [RT #20438] -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
ISC BIND 9.4.3-P4 is now available
BIND 9.4.3-P4 is now available. BIND 9.4.3-P4 is a SECURITY PATCH for BIND 9.4.3. It addresses a potential cache poisoning vulnerability, in which data in the additional section of a response could be cached without proper DNSSEC validation. Bugs should be reported to bind9-b...@isc.org. BIND 9.4.3-P4 can be downloaded from: ftp://ftp.isc.org/isc/bind9/9.4.3-P4/bind-9.4.3-P4.tar.gz PGP signatures of the distribution are at: ftp://ftp.isc.org/isc/bind9/9.4.3-P4/bind-9.4.3-P4.tar.gz.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/bind-9.4.3-P4.tar.gz.sha256.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/bind-9.4.3-P4.tar.gz.sha512.asc The signatures were generated with the ISC public key, which is available at https://www.isc.org/about/openpgp A binary kit for Windows XP, Windows 2003 and Windows 2008 is at: ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.zip ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.debug.zip PGP signatures of the binary kit are at: ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.zip.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.zip.sha512.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.debug.zip.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.debug.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.4.3-P4/BIND9.4.3-P4.debug.zip.sha512.asc Changes since 9.4.3-P3: 2772. [security] When validating, track whether pending data was from the additional section or not and only return it if validates as secure. [RT #20438] -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
ISC BIND 9.6.1-P2 is now available
BIND 9.6.1-P2 is now available. BIND 9.6.1-P2 is a SECURITY PATCH for BIND 9.6.1. It addresses a potential cache poisoning vulnerability, in which data in the additional section of a response could be cached without proper DNSSEC validation. Bugs should be reported to bind9-b...@isc.org. BIND 9.6.1-P2 can be downloaded from: ftp://ftp.isc.org/isc/bind9/9.6.1-P2/bind-9.6.1-P2.tar.gz PGP signatures of the distribution are at: ftp://ftp.isc.org/isc/bind9/9.6.1-P2/bind-9.6.1-P2.tar.gz.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/bind-9.6.1-P2.tar.gz.sha256.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/bind-9.6.1-P2.tar.gz.sha512.asc The signatures were generated with the ISC public key, which is available at https://www.isc.org/about/openpgp A binary kit for Windows XP, Windows 2003 and Windows 2008 is at: ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.zip ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.debug.zip PGP signatures of the binary kit are at: ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.zip.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.zip.sha512.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.debug.zip.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.debug.zip.sha256.asc ftp://ftp.isc.org/isc/bind9/9.6.1-P2/BIND9.6.1-P2.debug.zip.sha512.asc Changes since 9.6.1-P1: 2772. [security] When validating, track whether pending data was from the additional section or not and only return it if validates as secure. [RT #20438] -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Occasional errors from res_nsearch
Hi, I am using Solaris (5.10 Sparc as well as i386) server to run an application (written in C language) which uses Bind library client implementation (available on Solaris box by default, version 4.9.4). On processing consecutive lookup requests using the function res_nsearch, many of the initial requests fail, and after some time, it starts resolving the requests. Error code returned is either 1 or 2, but after some time it starts working fine with eror code 0. Nslookup command works perfectly fine, resolving all valid domains correctly. We have nis service also configured on the servers. Could that be an issue here? Cumulative log of replies from res_nsearch (for domain google.com): - function ret val: 1 Error Msg DNS lookup failed: Response is 'No address associated with name'. Resolved IP: function ret val: 1 Error Msg DNS lookup failed: Response is 'No address associated with name'. Resolved IP: function ret val: 1 Error Msg DNS lookup failed: Response is 'No address associated with name'. Resolved IP: function ret val: 1 Error Msg DNS lookup failed: Response is 'No address associated with name'. Resolved IP: function ret val: 1 Error Msg DNS lookup failed: Response is 'No address associated with name'. Resolved IP: function ret val: 0 Error Msg Resolved IP: 74.125.67.100 function ret val: 0 Error Msg Resolved IP: 74.125.53.100 function ret val: 0 Error Msg Resolved IP: 74.125.45.100 function ret val: 0 Error Msg Resolved IP: 74.125.67.100 function ret val: 0 Error Msg Resolved IP: 74.125.53.100 function ret val: 0 Error Msg Resolved IP: 74.125.45.100 function ret val: 0 Error Msg Resolved IP: 74.125.67.100 function ret val: 0 Error Msg Resolved IP: 74.125.53.100 - Thanks in anticipation, Divakar. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
