Re: head scratcher: nsupdate, Bind views, and TLSA record updates

2017-11-01 Thread Kevin via bind-users
I think it's sorted, thanks all. -Kevin From: "Tony Finch" To: bind-us...@isc.org Sent: Wednesday, November 1, 2017 2:50:32 AM Subject: Re: head scratcher: nsupdate, Bind views, and TLSA record updates Mark Andrews wrote: > > More correctly

Re: head scratcher: nsupdate, Bind views, and TLSA record updates

2017-10-31 Thread Kevin via bind-users
HFswpMP+FVjPZKyIGsUU ooU= The TLSA record _25._tcp.mail.thesandiegos.com does not. $ dig TLSA _25._tcp.mail.thesandiegos.com @75.149.33.153 +dnssec +short I'm really at a loss as to what's going on inside of Bind. -Kevin > > On Tue, Oct 31, 2017 at 3:39 PM, Kevin via bind-users > <

Re: head scratcher: nsupdate, Bind views, and TLSA record updates

2017-10-31 Thread Kevin via bind-users
n Kumari" <war...@kumari.net> > > To: "Kevin" <bind-users...@thesandiegos.com> > > Cc: "bind-users" <bind-users@lists.isc.org> > > Sent: Tuesday, October 31, 2017 11:28:58 AM > > Subject: Re: head scratcher: nsupdate, Bind views, and

Re: head scratcher: nsupdate, Bind views, and TLSA record updates

2017-10-31 Thread Kevin via bind-users
ists.isc.org> > Sent: Tuesday, October 31, 2017 11:28:58 AM > Subject: Re: head scratcher: nsupdate, Bind views, and TLSA record updates > > On Tue, Oct 31, 2017 at 1:50 PM, Kevin via bind-users > <bind-users@lists.isc.org> wrote: >> I'm running into an odd issue with Bi

Re: head scratcher: nsupdate, Bind views, and TLSA record updates

2017-10-31 Thread Kevin via bind-users
t was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf - Original Message - > From: "Warren Kumari" <war...@kumari.net&

head scratcher: nsupdate, Bind views, and TLSA record updates

2017-10-31 Thread Kevin via bind-users
I'm running into an odd issue with Bind 9.9.4 whereby I'm trying to run a scripted nsupdate to rotate TLSA records. I'm running nsupdate via a Bash script that executes the following nsupdate batch commands which are directed to a Bind "view" that is accessible from the wider internet: server