Re: Please upgrade validators to at least BIND-9.7.2 before .com is signed

2011-02-03 Thread Chris Thompson
On Feb 2 2011, Evan Hunt wrote: I believe that to be the case here. I think you've found a relative of the bug that came up last April when .ARPA was signed. I blogged about that one at: http://www.isc.org/community/blog/201004/dnssec-transitions-and-signing-arpa The bug was fixed in all

Re: Again Crashed Bind

2011-02-03 Thread Mark Andrews
Upgrade as recommended in CVE-2010-3613. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org

bind-9.7.2-P3 linux how to debug/troubleshoot query failures?

2011-02-03 Thread Tory M Blue
Hey all, Well I'm reaching out as I'm at a loss. I have a distributed DNS architecture with 2 bind-9.7.2-P3 servers behind an F5 Loadbalancer. I then have another 2 behind another F5 at another location. My app servers are configured with their resolv.conf looking like: (please ignore the domain

RE: Again Crashed Bind

2011-02-03 Thread Juan O
Thank you very much Mark. To: cut...@hotmail.com CC: bind-us...@isc.org From: ma...@isc.org Subject: Re: Again Crashed Bind Date: Fri, 4 Feb 2011 07:23:23 +1100 Upgrade as recommended in CVE-2010-3613. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia

Re: bind-9.7.2-P3 linux how to debug/troubleshoot query failures?

2011-02-03 Thread Barry Margolin
In article mailman.1634.1296765859.555.bind-us...@lists.isc.org, Tory M Blue tmb...@gmail.com wrote: Is there a documented method to troubleshoot, debug why a system believes that they were unable to get an acceptable results from the primary DNS server? Capture the DNS packets and see if

Re: Akadns and Bind

2011-02-03 Thread Barry Margolin
In article mailman.1636.1296781581.555.bind-us...@lists.isc.org, Tory M Blue tmb...@gmail.com wrote: Second email in a single day, crazy. But I've had issues backing up and just need to resolve them Again Bind bind-9.7.2-P3 behind F5 Loadbalancers. I'm running into an issue where one of

Re: Akadns and Bind

2011-02-03 Thread Tory M Blue
On Thu, Feb 3, 2011 at 5:23 PM, Barry Margolin bar...@alum.mit.edu wrote: In article mailman.1636.1296781581.555.bind- SNIPPED www.yahoo.com.    300   IN CNAME fp.wg1.b.yahoo.com. And even when they did, it didn't get involved until you followed the CNAME returned for www.yahoo.com.  Your log