Re: AppArmor, DHCP, Bind9 issue

I think that's a good solution. I edited the config as you did but ended up moving zones into /etc/bind/zones. I guess because Debian already had some littered in /etc/bind but I did not want to give write access to that directory. I think that is your current issue. Classic permissions. "bind"

Re: AppArmor, DHCP, Bind9 issue

Put the zone file in /var/lib/bind and update named.conf. -- Mark Andrews > On 23 Sep 2020, at 00:43, Olivier wrote: >  > Hello, > > I've got one ISC-DHCP server instance (4.4.1) and one Bind9 (9.11.5) instance > installed on a Debian Buster box. > Both come from Debian stable repo. > > I

Upcoming talk on VinylDNS

Back in June I posted a Doodle poll here asking about interest in webinars on DNS zone management tools. The topic that got the most votes was VinylDNS, a project Comcast has sponsored and open-sourced. https://github.com/VinylDNS/vinyldns is

AppArmor, DHCP, Bind9 issue

Hello, I've got one ISC-DHCP server instance (4.4.1) and one Bind9 (9.11.5) instance installed on a Debian Buster box. Both come from Debian stable repo. I would like my DHCP server to update Bind9 database when leases are allocated to DHCP clients. I followed instructions from [1]. I then met

Re: kasp-policy and catalog zones

Hi Christian, There are no plans for this. While technically a secondary can have a "dnssec-policy" statement (acting as a bump-in-the-wire signer), signing a zone is mainly a primary server responsibility and a policy configuration does not need to be transferred to its secondaries. For now I

Re: It is too hard for me to read from this mailing list

On 21.09.20 23:04, Scott Nicholas wrote: You need to visit https://lists.isc.org/mailman/listinfo/bind-users and turn off digest. maybe switch it do digest mode, so it's easy to extract individual mails and sort them... On Mon, Sep 21, 2020, 4:15 PM Allen Chen wrote: It is so hard to