BIND, DHCP, and CVE-2014-0160 (the OpenSSL Heartbleed bug)

2014-04-11 Thread Michael McNally
Earlier this week, the OpenSSL project (http://openssl.org) announced CVE-2014-0160, disclosing a very serious security flaw in the OpenSSL library, affecting versions 1.0.1 and 1.0.2-beta (including OpenSSL 1.0.1f and 1.0.2-beta1) In many stories, this vulnerability is being referred to as the

Windows dig resolv.conf

2014-04-11 Thread Frederic Woodbridge
Apologies if this has been discussed; I searched the archives and didn't find anything. I'd like to know why the search and domain settings in the Windows %systemroot%\system32\drivers\etc\resolv.conf don't seem to make a difference. Anyone know? Thanks. Fred Woodbridge

Re: Windows dig resolv.conf

2014-04-11 Thread Chris Thompson
On Apr 11 2014, Frederic Woodbridge wrote: Apologies if this has been discussed; I searched the archives and didn't find anything. I'd like to know why the search and domain settings in the Windows %systemroot%\system32\drivers\etc\resolv.conf don't seem to make a difference. Anyone know?

Inline signing and views.

2014-04-11 Thread Jack Tavares
Hello - Is it possible to enable inline signing of a zone in 2 different views with 2 different keys? I have the following config: view external { match-clients { 1.1.1.1; }; zone test.com. { type master; file external.test.com.; allow-update {

Re: Clients Matching Multiple Views

2014-04-11 Thread John Wobus
On Apr 9, 2014, at 4:14 AM, Steven Carr wrote: However, assuming you are using views on the same IP address and not splitting it across internal/external servers as that would screw up NS records), you can reuse the same zone file so those zones that appear in both internal and external views

Re: Clients Matching Multiple Views

2014-04-11 Thread Marty Lee
On 11 Apr 2014, at 18:59, John Wobus jw...@cornell.edu wrote: On Apr 9, 2014, at 4:14 AM, Steven Carr wrote: However, assuming you are using views on the same IP address and not splitting it across internal/external servers as that would screw up NS records), you can reuse the same zone file

Re: Clients Matching Multiple Views

2014-04-11 Thread Doug Barton
On 04/11/2014 10:59 AM, John Wobus wrote: My understanding has been that two views that are masters for a zone can safely share a zone file if the zone isn't dynamic (e.g. dnsupdate, dnssec auto signing, etc), but that two views of a slave zone shouldn't do that: you could have two different