Re: Exclude a domain from DNSSEC validation, like Unbound's domain-insecure.

2012-04-30 Thread Chris Thompson
On Apr 30 2012, Warren Kumari wrote: On Apr 26, 2012, at 2:51 PM, Jan-Piet Mens wrote: [...] From a Comcast talk at SATIN 2012 I believe they called that a negative trust anchor, and IIRC, the author wanted to publish a draft of its operation. Haven't seen it yet though, and it's probably off

Operational Notification -- Segmentation Fault in resolver.c Affects BIND 9.6-ESV-R6, 9.7.5, 9.8.2, 9.9.0

2012-04-30 Thread Michael McNally
Operational Notification -- Segmentation Fault in resolver.c Affects BIND 9.6-ESV-R6, 9.7.5, 9.8.2, 9.9.0 Summary: ISC has discovered a race condition in the resolver code that can cause a recursive nameserver running BIND 9.6-ESV-R6, 9.7.5, 9.8.2, or 9.9.0 to crash with a segmentation

Re: Exclude a domain from DNSSEC validation, like Unbound's domain-insecure.

2012-04-30 Thread Gilles Massen
On 30/4/12 13:56 , Chris Thompson wrote: http://tools.ietf.org/html/draft-livingood-negative-trust-anchors-01 Being actively discussed on DNSOP list It *was* being actively discussed there, up until about 10 days ago. Since then the participants seem to have stopped, maybe from sheer

Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Augie Schwer
I must be doing something wrong, because what I want to do doesn't seem that difficult. I have a range of IPs bound to a local interface: lo:1 Link encap:Local Loopback inet addr:10.0.0.1 Mask:255.255.255.224 And I want to convince Bind to listen on sub-set of the given range (

dynamic update to SOA records

2012-04-30 Thread cloud cache
Hello, How to use nsupdate to dynamic update the SOA records? For example, I want to update the zone's contact email and main NS server name. Thanks. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: dynamic update to SOA records

2012-04-30 Thread Mark Andrews
In message 2a078dfa10a22fe23c0ad67b92b58...@mail.mxes.net, cloud cache writes: Hello, How to use nsupdate to dynamic update the SOA records? For example, I want to update the zone's contact email and main NS server name. Thanks. update add zone ttl SOA . send Just make sure

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Jeremy C. Reed
On Mon, 30 Apr 2012, Augie Schwer wrote: I must be doing something wrong, because what I want to do doesn't seem that difficult. I have a range of IPs bound to a local interface: lo:1 Link encap:Local Loopback inet addr:10.0.0.1 Mask:255.255.255.224 And I want to

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Tony Finch
Augie Schwer augie.sch...@gmail.com wrote: I have a range of IPs bound to a local interface: lo:1 Link encap:Local Loopback inet addr:10.0.0.1 Mask:255.255.255.224 And I want to convince Bind to listen on sub-set of the given range ( 10.0.0.2 for example ) You can't do

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Anand Buddhdev
On 30/04/2012 23:56, Augie Schwer wrote: I must be doing something wrong, because what I want to do doesn't seem that difficult. I have a range of IPs bound to a local interface: lo:1 Link encap:Local Loopback inet addr:10.0.0.1 Mask:255.255.255.224 This means you've got

Re: dynamic update to SOA records

2012-04-30 Thread Tony Finch
cloud cache i...@cloudcache.net wrote: How to use nsupdate to dynamic update the SOA records? For example, I want to update the zone's contact email and main NS server name. Like this: $ dig +noall +answer soa fanf2.ucam.org fanf2.ucam.org. 3600IN SOA black.dotat.at.

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Augie Schwer
I think you've all missed the netmask there, 10.0.0.2 is in that range. augie@augnix:~$ sudo ifconfig lo:1 10.0.0.1 netmask 255.255.255.224 augie@augnix:~$ ifconfig lo:1 lo:1 Link encap:Local Loopback inet addr:10.0.0.1 Mask:255.255.255.224 augie@augnix:~$ ping 10.0.0.2 -c 1

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Larry Brower
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04/30/2012 04:56 PM, Augie Schwer wrote: I must be doing something wrong, because what I want to do doesn't seem that difficult. I have a range of IPs bound to a local interface: lo:1 Link encap:Local Loopback inet

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Augie Schwer
Thanks for the reply, please see my previous e-mail about the address being perfectly pingable on that interface. We run PowerDNS and Unbound with a similar interface configuration without a problem, I'm sure Bind can too, I just need to know what the special config. option I'm missing is. Any

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Alan Clegg
On 4/30/2012 7:14 PM, Augie Schwer wrote: I think you've all missed the netmask there, 10.0.0.2 is in that range. augie@augnix:~$ sudo ifconfig lo:1 10.0.0.1 netmask 255.255.255.224 Netmask says what addresses are REACHABLE on that interface, not the addresses assigned to that interface.

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread michoski
On 4/30/12 4:14 PM, Augie Schwer augie.sch...@gmail.com wrote: I think you've all missed the netmask there, 10.0.0.2 is in that range. augie@augnix:~$ sudo ifconfig lo:1 10.0.0.1 netmask 255.255.255.224 augie@augnix:~$ ifconfig lo:1 lo:1 Link encap:Local Loopback inet

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Larry Brower
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 04/30/2012 07:13 PM, Augie Schwer wrote: Thanks for the reply, please see my previous e-mail about the address being perfectly pingable on that interface. Whats that have to do with anything? It being pingable only means something is

Re: Convice Bind to listen on IP alias with a range of IPs.

2012-04-30 Thread Mark Andrews
In message cbc4a14e.28bd2%micho...@cisco.com, michoski writes: On 4/30/12 4:14 PM, Augie Schwer augie.sch...@gmail.com wrote: I think you've all missed the netmask there, 10.0.0.2 is in that range. augie@augnix:~$ sudo ifconfig lo:1 10.0.0.1 netmask 255.255.255.224 augie@augnix:~$