memory management troubles/rndc flush hangs bind

2010-06-08 Thread Stas Pirogov
Hello, first let me apologize for the length of this message. I will try to be as short as I can. Today we have around 20 servers running bind 9.4 and 9.6 (latest versions) on CentOS 5.x (between 5.2 and 5.5) with 2.6 64bit kernel. Our servers have around 35000 zones with overall of 250M of

odd behaviour on caching ns with views

2010-06-08 Thread Torsten
Hi, I've observed an odd behaviour in one of our customers caching nameservers (running an ISC 9.6.1-P3 installation on a RHEL5.4 box). The server uses views for different parts of the customer environment: options { directory /named/custenv/; query-source address 10.10.3.22

Re: disable dnssec in bind resolver

2010-06-08 Thread Jan Buchholz
Thanks @all, sorry i was out of office yesterday. I'll discuss the issue this week on the german Linux Tag in Berlin. What your meaning off firewalls, who looks into packets and block them if the filter don´t know a flag. First i´ve fixed the problem with edns no; Jan

Re: disable dnssec in bind resolver

2010-06-08 Thread Warren Kumari
On Jun 8, 2010, at 6:26 AM, Jan Buchholz wrote: Thanks @all, sorry i was out of office yesterday. I'll discuss the issue this week on the german Linux Tag in Berlin. What your meaning off firewalls, who looks into packets and block them if the filter don´t know a flag. Some high security

Re: disable dnssec in bind resolver

2010-06-08 Thread Mark Andrews
In message d7c8ada3-f213-4ae9-9fbe-8d613d97d...@kumari.net, Warren Kumari wri tes: On Jun 8, 2010, at 6:26 AM, Jan Buchholz wrote: Thanks @all, sorry i was out of office yesterday. I'll discuss the issue this week on the german Linux Tag in Berlin. What your meaning off firewalls, who

BIND 9.7.1rc1 is now available.

2010-06-08 Thread Mark Andrews
BIND 9.7.1rc1 is now available. BIND 9.7.1rc1 is a release candidate of the 9.7.1 maintenance release for BIND 9.7. BIND 9.7.1rc1 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.7.1rc1/bind-9.7.1rc1.tar.gz The PGP signature of the distribution is

ISC Bind 9.6.2-P1 Assertation Failure

2010-06-08 Thread Sukman
Hello... I got an assertation failure on my ISC Bind 9.6.2-P1 Here are the error message: 08-Jun-2010 13:54:45.037 general: critical: resolver.c:3091: REQUIRE(fctx-state == fetchstate_done || fctx-state == fetchstate_init) failed 08-Jun-2010 13:54:45.037 general: critical: exiting (due to