Re: Administrivia.

2018-04-23 Thread Ray Bellis
On 23/04/2018 16:34, Chris Thompson wrote: > To further increase our Schadenfreude, please do let the list know just > how ISC managed to let that happen! Or will you be able to blame ARIN? We're blaming ARIN :p 149.20/16 was previously delegated to us with its own DNSKEY / DS, and then we used

Re: Administrivia.

2018-04-23 Thread Chris Thompson
On Apr 23 2018, Ray Bellis wrote: On 23/04/2018 14:18, Anand Buddhdev wrote: If you repeat your query with the +cd option, you'll get a response. DNSViz shows problems with the DNSSEC setup of this zone. The DS and DNSKEY records don't match:

Re: Administrivia.

2018-04-23 Thread Ray Bellis
On 23/04/2018 14:18, Anand Buddhdev wrote: > If you repeat your query with the +cd option, you'll get a response. > > DNSViz shows problems with the DNSSEC setup of this zone. The DS and > DNSKEY records don't match: > > http://dnsviz.net/d/1.20.149.in-addr.arpa/dnssec/ Thanks for the heads up

Re: sporadic timeouts querying bind9

2018-04-23 Thread Klaus Darilion
This time with log file attached Thanks Klaus Am 23.04.2018 um 14:55 schrieb Klaus Darilion via bind-users: > Hi all! > > Upgrading to Ubuntu 16.04 with Bind 9.10.3 did not solved the problem. > > I enabled debug log (trace 2) and query logging. Unless my monitoring > traffic (~20 Queries

Re: Administrivia.

2018-04-23 Thread Anand Buddhdev
On 23/04/2018 15:02, G.W. Haywood via bind-users wrote: > Below is from our own DNS server; I get the same response from all the > public servers that I've tried. > > 8<-- > mail6:~$ >>> dig -x 149.20.1.60 > > ; <<>> DiG

Administrivia.

2018-04-23 Thread G.W. Haywood via bind-users
Hi there, It looks like something has recently changed in the ISC DNS. 8<-- Apr 20 09:00:36 mail6 sm-mta[20203]: NOQUEUE: connect from lists.isc.org [149.20.1.60] Apr 20 13:00:22 mail6 sm-mta[29448]: NOQUEUE: connect from

Re: sporadic timeouts querying bind9

2018-04-23 Thread Klaus Darilion via bind-users
Hi all! Upgrading to Ubuntu 16.04 with Bind 9.10.3 did not solved the problem. I enabled debug log (trace 2) and query logging. Unless my monitoring traffic (~20 Queries every second) the server is idle. The server is a xen domU (on a idle hypervisor) with 4 vCPUs and 20G RAM. Here the logs

Limit Wildcard Entry with RPZ?

2018-04-23 Thread Stelzner, Tore
Hello, a department would like to use the application Sandstorm. This application needs a wildcard DNS entry. But with this every hostname would get an IP address, even such an entry as "we-dont-like-to-work-here". It seems to be possible to set a prefix to the random hostname created by