RE: SRV records etc

2015-02-11 Thread Darcy Kevin (FCA)
This is, of course, *not* what SRV records were intended for. In my experience, 
most of these proof of domain ownership idiots will also offer TXT records as 
an alternative.

Speaking of SRV misuse/misapplication, Microsoft's use of SRV records as a 
generic domain-remapping mechanism for Exchange Autodiscover (so people can 
cheap out on their SSL certs, usually not realizing that, in the absence of 
ubiquitous DNSSEC, they are downgrading their security by doing so, TNSTAAFL) 
falls into the same category. Semantically, PTR records could have served the 
same function more compactly/efficiently, but would have the same 
security-downgrade issue. (Despite misconceptions to the contrary, the use of 
PTR records is *not* limited to reverse mappings).

- Kevin

-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Lightner, Jeff
Sent: Wednesday, February 11, 2015 8:40 AM
To: comp-protocols-dns-b...@isc.org
Subject: RE: SRV records etc

SRV definitely still required for some applications.   Some cloud based 
application providers have you add them to verify you own the domain to which 
they're tying their services so you don't use them to hijack other people's 
domains.

-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry Margolin
Sent: Tuesday, February 10, 2015 9:14 PM
To: comp-protocols-dns-b...@isc.org
Subject: Re: SRV records etc

In article mailman.1603.1423618610.26362.bind-us...@lists.isc.org,
 Kevin Oberman rkober...@gmail.com wrote:

 HINFO is getting pretty rare. The security issues are pretty obvious 
 and its advantages are rather limited.

I thought they were deprecated ages ago, but I can't find anything official 
about that.

--
Barry Margolin
Arlington, MA
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: SRV records etc

2015-02-11 Thread Barry Margolin
In article mailman.1608.1423662027.26362.bind-us...@lists.isc.org,
 Lightner, Jeff jlight...@dsservices.com wrote:

 SRV definitely still required for some applications.   Some cloud based 
 application providers have you add them to verify you own the domain to which 
 they're tying their services so you don't use them to hijack other people's 
 domains.

I was talking about HINFO, not SRV.

 
 -Original Message-
 From: bind-users-boun...@lists.isc.org 
 [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry Margolin
 Sent: Tuesday, February 10, 2015 9:14 PM
 To: comp-protocols-dns-b...@isc.org
 Subject: Re: SRV records etc
 
 In article mailman.1603.1423618610.26362.bind-us...@lists.isc.org,
  Kevin Oberman rkober...@gmail.com wrote:
 
  HINFO is getting pretty rare. The security issues are pretty obvious 
  and its advantages are rather limited.
 
 I thought they were deprecated ages ago, but I can't find anything official 
 about that.
 
 --
 Barry Margolin
 Arlington, MA
 ___
 Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
 from this list
 
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

-- 
Barry Margolin
Arlington, MA
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Daniel Ryslink

Hello

What uncle Google found for me:

http://www.bind9.net/BIND-FAQ

Quote:

Q:
Why do I get the following errors:

general: errno2result.c:109: unexpected error:
general: unable to convert errno to isc_result: 14: Bad address
client: UDP client handler shutting down due to fatal receive error: 
unexpected error


A:
This is the result of a Linux kernel bug.
See: http://marc.theaimsgroup.com/?l=linux-netdevm=113081708031466w=2;

Kernel 2.6.32 end of support date was 6/1/2014, and if I am not 
mistaken, Bind 9.8 is not supported anymore either (only branches 9.9 
and 9.10)


I don't want to bother you with obvious answers, but IMO you should 
consider upgrading to supported versions of both your OS and BIND, since 
there were some serious security issues reported and patched lately and 
your vulnerable system may be at a risk.


Maybe ISC people will have some solution for you, but generally, people 
are encouraged to keep up with the supported versions.


--
Best Regards,
Daniel Ryšlink
System Administrator

Dial Telecom a. s.
Křižíkova 36a/237
186 00 Praha 3, Česká Republika
Tel.:+420.226204627
daniel.rysl...@dialtelecom.cz
---
www.dialtelecom.cz
Dial Telecom, a.s.
Jednoduše se připojte
---

On 02/11/2015 01:04 PM, Md. Mahbubul Alam Reyad wrote:

Hi Mukund

Its bind-9.8.2-0.23 and the OS is Red Hat Enterprise Linux Server release 6.0 
(kernel- 2.6.32-431.17.1.el6.x86_64)

Sincerely Yours
---
Md. Mahbubul Alam Reyad
Assistant Manager
CORE-IP Network || Technology
Cell: +880 1976672281 || Skype: new_reyad
www.qubee.com.bd
T +88 02 8812113 || F +88 02 8812115


-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mukund Sivaraman
Sent: Wednesday, February 11, 2015 5:43 PM
To: Md. Mahbubul Alam Reyad
Cc: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Hi Mahbubul

On Wed, Feb 11, 2015 at 11:39:19AM +, Md. Mahbubul Alam Reyad wrote:

Hi all

Recently I am getting the following error in my DNS. Can anyone know the reason, 
impact  solution of this error?

general: error: unable to convert errno to isc_result: 92: Protocol
not available
general: error: socket.c:1700: unexpected error:

Which version of BIND is this? What OS (and its version) are you using it on?

Mukund
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

RE: Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Lightner, Jeff
On RHEL the kernel doesn't change within the main release (RHEL6) in this case 
will always be 2.6.32-xx and RHEL does the support including back porting 
bug and security fixes into their extended release (which isn't the same as the 
base kernel).   They do the same thing for the BIND release they support within 
the main RHEL release.

To go to a 3.x kernel one would have to go to RHEL7 but that isn't necessary 
given the way RedHat does support. 

Jeffrey C. Lightner
Sr. UNIX Administrator
 
DS Services of America, Inc.
2300 Windy Ridge
Suite 600 N
Atlanta, GA  30339
 
P: 678-486-3516
C: 678-772-0018
F: 678-460-3603
E: jlight...@dsservices.com


-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Daniel Ryslink
Sent: Wednesday, February 11, 2015 3:33 PM
To: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Hello

What uncle Google found for me:

http://www.bind9.net/BIND-FAQ

Quote:

Q:
Why do I get the following errors:

general: errno2result.c:109: unexpected error:
general: unable to convert errno to isc_result: 14: Bad address
client: UDP client handler shutting down due to fatal receive error: 
unexpected error

A:
This is the result of a Linux kernel bug.
See: http://marc.theaimsgroup.com/?l=linux-netdevm=113081708031466w=2;

Kernel 2.6.32 end of support date was 6/1/2014, and if I am not mistaken, Bind 
9.8 is not supported anymore either (only branches 9.9 and 9.10)

I don't want to bother you with obvious answers, but IMO you should consider 
upgrading to supported versions of both your OS and BIND, since there were some 
serious security issues reported and patched lately and your vulnerable system 
may be at a risk.

Maybe ISC people will have some solution for you, but generally, people are 
encouraged to keep up with the supported versions.

--
Best Regards,
Daniel Ryšlink
System Administrator

Dial Telecom a. s.
Křižíkova 36a/237
186 00 Praha 3, Česká Republika
Tel.:+420.226204627
daniel.rysl...@dialtelecom.cz
---
www.dialtelecom.cz
Dial Telecom, a.s.
Jednoduše se připojte
---

On 02/11/2015 01:04 PM, Md. Mahbubul Alam Reyad wrote:
 Hi Mukund

 Its bind-9.8.2-0.23 and the OS is Red Hat Enterprise Linux Server 
 release 6.0 (kernel- 2.6.32-431.17.1.el6.x86_64)

 Sincerely Yours
 ---
 Md. Mahbubul Alam Reyad
 Assistant Manager
 CORE-IP Network || Technology
 Cell: +880 1976672281 || Skype: new_reyad www.qubee.com.bd T +88 02 
 8812113 || F +88 02 8812115


 -Original Message-
 From: bind-users-boun...@lists.isc.org 
 [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mukund 
 Sivaraman
 Sent: Wednesday, February 11, 2015 5:43 PM
 To: Md. Mahbubul Alam Reyad
 Cc: bind-users@lists.isc.org
 Subject: Re: Getting Error || unable to convert errno to isc_result

 Hi Mahbubul

 On Wed, Feb 11, 2015 at 11:39:19AM +, Md. Mahbubul Alam Reyad wrote:
 Hi all

 Recently I am getting the following error in my DNS. Can anyone know the 
 reason, impact  solution of this error?

 general: error: unable to convert errno to isc_result: 92: Protocol 
 not available
 general: error: socket.c:1700: unexpected error:
 Which version of BIND is this? What OS (and its version) are you using it on?

   Mukund
 ___
 Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
 unsubscribe from this list

 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

RE: Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Lightner, Jeff
Possible yes but I'd suspect it had been addressed if it were severe enough - I 
haven't actually looked at it.   Another poster suggested a later update to 
BIND that is available in RHEL repository that may have addressed it if the 
version the OP has doesn't.

I just wanted to make the note about RHEL's methodology as it confuses folks 
(and security scanning tools) that only look at the base upstream version 
component of a package name rather than RHEL's extended versioning in the name. 
  RedHat sends errata alerts when they address things to let folks know to 
update packages to their latest extended version. Just because you see a 
kernel 2.6.32 it doesn't mean it is exactly the same as the upstream vanilla 
version with that number.   It DOES mean that NEW features in upstream versions 
such as 3.x won't be there (unless of course a security issue that affects 3.x 
is found to also affect 2.6.32 at which point they'll backport).

-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Daniel Ryslink
Sent: Wednesday, February 11, 2015 5:04 PM
To: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Okay, sorry, did not know about the backporting.

Still, isn't it possible that this old bug is still present in this version of 
RHEL6?

--
S pozdravem,
Daniel Ryšlink
System Administrator

Dial Telecom a. s.
Křižíkova 36a/237
186 00 Praha 3, Česká Republika
Tel.:+420.226204627
daniel.rysl...@dialtelecom.cz
---
www.dialtelecom.cz
Dial Telecom, a.s.
Jednoduše se připojte
---

On 02/11/2015 10:32 PM, Lightner, Jeff wrote:
 On RHEL the kernel doesn't change within the main release (RHEL6) in this 
 case will always be 2.6.32-xx and RHEL does the support including back 
 porting bug and security fixes into their extended release (which isn't the 
 same as the base kernel).   They do the same thing for the BIND release they 
 support within the main RHEL release.

 To go to a 3.x kernel one would have to go to RHEL7 but that isn't necessary 
 given the way RedHat does support.



 -Original Message-
 From: bind-users-boun...@lists.isc.org 
 [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Daniel Ryslink
 Sent: Wednesday, February 11, 2015 3:33 PM
 To: bind-users@lists.isc.org
 Subject: Re: Getting Error || unable to convert errno to isc_result

 Hello

 What uncle Google found for me:

 http://www.bind9.net/BIND-FAQ

 Quote:

 Q:
 Why do I get the following errors:

 general: errno2result.c:109: unexpected error:
 general: unable to convert errno to isc_result: 14: Bad address
 client: UDP client handler shutting down due to fatal receive error:
 unexpected error

 A:
 This is the result of a Linux kernel bug.
 See: http://marc.theaimsgroup.com/?l=linux-netdevm=113081708031466w=2;

 Kernel 2.6.32 end of support date was 6/1/2014, and if I am not 
 mistaken, Bind 9.8 is not supported anymore either (only branches 9.9 
 and 9.10)

 I don't want to bother you with obvious answers, but IMO you should consider 
 upgrading to supported versions of both your OS and BIND, since there were 
 some serious security issues reported and patched lately and your vulnerable 
 system may be at a risk.

 Maybe ISC people will have some solution for you, but generally, people are 
 encouraged to keep up with the supported versions.

 --
 Best Regards,
 Daniel Ryšlink
 System Administrator

 Dial Telecom a. s.
 Křižíkova 36a/237
 186 00 Praha 3, Česká Republika
 Tel.:+420.226204627
 daniel.rysl...@dialtelecom.cz
 ---
 www.dialtelecom.cz
 Dial Telecom, a.s.
 Jednoduše se připojte
 ---

 On 02/11/2015 01:04 PM, Md. Mahbubul Alam Reyad wrote:
 Hi Mukund

 Its bind-9.8.2-0.23 and the OS is Red Hat Enterprise Linux Server 
 release 6.0 (kernel- 2.6.32-431.17.1.el6.x86_64)

 Sincerely Yours
 ---
 Md. Mahbubul Alam Reyad
 Assistant Manager
 CORE-IP Network || Technology
 Cell: +880 1976672281 || Skype: new_reyad www.qubee.com.bd T +88 02
 8812113 || F +88 02 8812115


 -Original Message-
 From: bind-users-boun...@lists.isc.org 
 [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mukund 
 Sivaraman
 Sent: Wednesday, February 11, 2015 5:43 PM
 To: Md. Mahbubul Alam Reyad
 Cc: bind-users@lists.isc.org
 Subject: Re: Getting Error || unable to convert errno to isc_result

 Hi Mahbubul

 On Wed, Feb 11, 2015 at 11:39:19AM +, Md. Mahbubul Alam Reyad wrote:
 Hi all

 Recently I am getting the following error in my DNS. Can anyone know the 
 reason, impact  solution of this error?

 general: error: unable to convert errno to isc_result: 92: Protocol 
 not available
 general: error: socket.c:1700: unexpected error:
 Which version of BIND is this? What OS (and its version) are 

Re: Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Daniel Ryslink

Okay, sorry, did not know about the backporting.

Still, isn't it possible that this old bug is still present in this 
version of RHEL6?


--
S pozdravem,
Daniel Ryšlink
System Administrator

Dial Telecom a. s.
Křižíkova 36a/237
186 00 Praha 3, Česká Republika
Tel.:+420.226204627
daniel.rysl...@dialtelecom.cz
---
www.dialtelecom.cz
Dial Telecom, a.s.
Jednoduše se připojte
---

On 02/11/2015 10:32 PM, Lightner, Jeff wrote:

On RHEL the kernel doesn't change within the main release (RHEL6) in this case 
will always be 2.6.32-xx and RHEL does the support including back porting 
bug and security fixes into their extended release (which isn't the same as the 
base kernel).   They do the same thing for the BIND release they support within 
the main RHEL release.

To go to a 3.x kernel one would have to go to RHEL7 but that isn't necessary 
given the way RedHat does support.

Jeffrey C. Lightner
Sr. UNIX Administrator
  
DS Services of America, Inc.

2300 Windy Ridge
Suite 600 N
Atlanta, GA  30339
  
P: 678-486-3516

C: 678-772-0018
F: 678-460-3603
E: jlight...@dsservices.com


-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Daniel Ryslink
Sent: Wednesday, February 11, 2015 3:33 PM
To: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Hello

What uncle Google found for me:

http://www.bind9.net/BIND-FAQ

Quote:

Q:
Why do I get the following errors:

general: errno2result.c:109: unexpected error:
general: unable to convert errno to isc_result: 14: Bad address
client: UDP client handler shutting down due to fatal receive error:
unexpected error

A:
This is the result of a Linux kernel bug.
See: http://marc.theaimsgroup.com/?l=linux-netdevm=113081708031466w=2;

Kernel 2.6.32 end of support date was 6/1/2014, and if I am not mistaken, Bind 
9.8 is not supported anymore either (only branches 9.9 and 9.10)

I don't want to bother you with obvious answers, but IMO you should consider 
upgrading to supported versions of both your OS and BIND, since there were some 
serious security issues reported and patched lately and your vulnerable system 
may be at a risk.

Maybe ISC people will have some solution for you, but generally, people are 
encouraged to keep up with the supported versions.

--
Best Regards,
Daniel Ryšlink
System Administrator

Dial Telecom a. s.
Křižíkova 36a/237
186 00 Praha 3, Česká Republika
Tel.:+420.226204627
daniel.rysl...@dialtelecom.cz
---
www.dialtelecom.cz
Dial Telecom, a.s.
Jednoduše se připojte
---

On 02/11/2015 01:04 PM, Md. Mahbubul Alam Reyad wrote:

Hi Mukund

Its bind-9.8.2-0.23 and the OS is Red Hat Enterprise Linux Server
release 6.0 (kernel- 2.6.32-431.17.1.el6.x86_64)

Sincerely Yours
---
Md. Mahbubul Alam Reyad
Assistant Manager
CORE-IP Network || Technology
Cell: +880 1976672281 || Skype: new_reyad www.qubee.com.bd T +88 02
8812113 || F +88 02 8812115


-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mukund
Sivaraman
Sent: Wednesday, February 11, 2015 5:43 PM
To: Md. Mahbubul Alam Reyad
Cc: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Hi Mahbubul

On Wed, Feb 11, 2015 at 11:39:19AM +, Md. Mahbubul Alam Reyad wrote:

Hi all

Recently I am getting the following error in my DNS. Can anyone know the reason, 
impact  solution of this error?

general: error: unable to convert errno to isc_result: 92: Protocol
not available
general: error: socket.c:1700: unexpected error:

Which version of BIND is this? What OS (and its version) are you using it on?

Mukund
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to
unsubscribe from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

BIND and GHOST: MySQL DLZ module possibly vulnerable

2015-02-11 Thread Chuck Aurora
Hello BIND users,

When the GHOST vulnerability in GNU libc was disclosed, we received
many questions from customers and users about how BIND was affected.

Our official position is, as always, that operators should upgrade all
linked libraries to unaffected versions, regardless of whether BIND can
trigger the bug.

And while we found no reason for concern about the GHOST vulnerability
being exploitable in the main core of named, additional scrutiny of code
contributed to BIND (the contrib directory in the source tarballs)
shows that the MySQL DLZ module is potentially exploitable due to its
use of gethostbyname().

We therefore recommend that BIND operators who are using DLZ, if they
are using the contributed MySQL module, should take immediate action to
upgrade their glibc to fix the GHOST vulnerability.
-- 
Chuck Aurora : ISC Software Support : chu...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Md. Mahbubul Alam Reyad
Hi

So, perhaps I need to update the bind package. 

Can anyone suggest, how can I install updated bind rpm in RHEL6.0?

Sincerely Yours
---
Md. Mahbubul Alam Reyad
Assistant Manager
CORE-IP Network || Technology
Cell: +880 1976672281 || Skype: new_reyad
www.qubee.com.bd
T +88 02 8812113 || F +88 02 8812115


-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Lightner, Jeff
Sent: Thursday, February 12, 2015 5:01 AM
To: bind-users@lists.isc.org
Subject: RE: Getting Error || unable to convert errno to isc_result

Possible yes but I'd suspect it had been addressed if it were severe enough - I 
haven't actually looked at it.   Another poster suggested a later update to 
BIND that is available in RHEL repository that may have addressed it if the 
version the OP has doesn't.

I just wanted to make the note about RHEL's methodology as it confuses folks 
(and security scanning tools) that only look at the base upstream version 
component of a package name rather than RHEL's extended versioning in the name. 
  RedHat sends errata alerts when they address things to let folks know to 
update packages to their latest extended version. Just because you see a 
kernel 2.6.32 it doesn't mean it is exactly the same as the upstream vanilla 
version with that number.   It DOES mean that NEW features in upstream versions 
such as 3.x won't be there (unless of course a security issue that affects 3.x 
is found to also affect 2.6.32 at which point they'll backport).

-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Daniel Ryslink
Sent: Wednesday, February 11, 2015 5:04 PM
To: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Okay, sorry, did not know about the backporting.

Still, isn't it possible that this old bug is still present in this version of 
RHEL6?

--
S pozdravem,
Daniel Ryšlink
System Administrator

Dial Telecom a. s.
Křižíkova 36a/237
186 00 Praha 3, Česká Republika
Tel.:+420.226204627
daniel.rysl...@dialtelecom.cz
---
www.dialtelecom.cz
Dial Telecom, a.s.
Jednoduše se připojte
---

On 02/11/2015 10:32 PM, Lightner, Jeff wrote:
 On RHEL the kernel doesn't change within the main release (RHEL6) in this 
 case will always be 2.6.32-xx and RHEL does the support including back 
 porting bug and security fixes into their extended release (which isn't the 
 same as the base kernel).   They do the same thing for the BIND release they 
 support within the main RHEL release.

 To go to a 3.x kernel one would have to go to RHEL7 but that isn't necessary 
 given the way RedHat does support.



 -Original Message-
 From: bind-users-boun...@lists.isc.org 
 [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Daniel Ryslink
 Sent: Wednesday, February 11, 2015 3:33 PM
 To: bind-users@lists.isc.org
 Subject: Re: Getting Error || unable to convert errno to isc_result

 Hello

 What uncle Google found for me:

 http://www.bind9.net/BIND-FAQ

 Quote:

 Q:
 Why do I get the following errors:

 general: errno2result.c:109: unexpected error:
 general: unable to convert errno to isc_result: 14: Bad address
 client: UDP client handler shutting down due to fatal receive error:
 unexpected error

 A:
 This is the result of a Linux kernel bug.
 See: http://marc.theaimsgroup.com/?l=linux-netdevm=113081708031466w=2;

 Kernel 2.6.32 end of support date was 6/1/2014, and if I am not 
 mistaken, Bind 9.8 is not supported anymore either (only branches 9.9 
 and 9.10)

 I don't want to bother you with obvious answers, but IMO you should consider 
 upgrading to supported versions of both your OS and BIND, since there were 
 some serious security issues reported and patched lately and your vulnerable 
 system may be at a risk.

 Maybe ISC people will have some solution for you, but generally, people are 
 encouraged to keep up with the supported versions.

 --
 Best Regards,
 Daniel Ryšlink
 System Administrator

 Dial Telecom a. s.
 Křižíkova 36a/237
 186 00 Praha 3, Česká Republika
 Tel.:+420.226204627
 daniel.rysl...@dialtelecom.cz
 ---
 www.dialtelecom.cz
 Dial Telecom, a.s.
 Jednoduše se připojte
 ---

 On 02/11/2015 01:04 PM, Md. Mahbubul Alam Reyad wrote:
 Hi Mukund

 Its bind-9.8.2-0.23 and the OS is Red Hat Enterprise Linux Server 
 release 6.0 (kernel- 2.6.32-431.17.1.el6.x86_64)

 Sincerely Yours
 ---
 Md. Mahbubul Alam Reyad
 Assistant Manager
 CORE-IP Network || Technology
 Cell: +880 1976672281 || Skype: new_reyad www.qubee.com.bd T +88 02
 8812113 || F +88 02 8812115


 -Original Message-
 From: bind-users-boun...@lists.isc.org 
 

RE: Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Md. Mahbubul Alam Reyad
Hi Mukund

Its bind-9.8.2-0.23 and the OS is Red Hat Enterprise Linux Server release 6.0 
(kernel- 2.6.32-431.17.1.el6.x86_64)

Sincerely Yours
---
Md. Mahbubul Alam Reyad
Assistant Manager
CORE-IP Network || Technology
Cell: +880 1976672281 || Skype: new_reyad
www.qubee.com.bd
T +88 02 8812113 || F +88 02 8812115


-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mukund Sivaraman
Sent: Wednesday, February 11, 2015 5:43 PM
To: Md. Mahbubul Alam Reyad
Cc: bind-users@lists.isc.org
Subject: Re: Getting Error || unable to convert errno to isc_result

Hi Mahbubul

On Wed, Feb 11, 2015 at 11:39:19AM +, Md. Mahbubul Alam Reyad wrote:
 Hi all
 
 Recently I am getting the following error in my DNS. Can anyone know the 
 reason, impact  solution of this error?
 
 general: error: unable to convert errno to isc_result: 92: Protocol 
 not available
 general: error: socket.c:1700: unexpected error:

Which version of BIND is this? What OS (and its version) are you using it on?

Mukund
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Getting Error || unable to convert errno to isc_result

2015-02-11 Thread Md. Mahbubul Alam Reyad
Hi all

Recently I am getting the following error in my DNS. Can anyone know the 
reason, impact  solution of this error?

general: error: unable to convert errno to isc_result: 92: Protocol not 
available
general: error: socket.c:1700: unexpected error:


Sincerely Yours
---
Md. Mahbubul Alam Reyad
Assistant Manager
CORE-IP Network || Technology
Cell: +880 1976672281 || Skype: new_reyad
www.qubee.com.bdhttp://www.qubee.com.bd/
T +88 02 8812113 || F +88 02 8812115
[Description: Description: logo-02]

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

RE: SRV records etc

2015-02-11 Thread Lightner, Jeff
SRV definitely still required for some applications.   Some cloud based 
application providers have you add them to verify you own the domain to which 
they're tying their services so you don't use them to hijack other people's 
domains.

-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry Margolin
Sent: Tuesday, February 10, 2015 9:14 PM
To: comp-protocols-dns-b...@isc.org
Subject: Re: SRV records etc

In article mailman.1603.1423618610.26362.bind-us...@lists.isc.org,
 Kevin Oberman rkober...@gmail.com wrote:

 HINFO is getting pretty rare. The security issues are pretty obvious 
 and its advantages are rather limited.

I thought they were deprecated ages ago, but I can't find anything official 
about that.

--
Barry Margolin
Arlington, MA
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users