Re: Move from Development to Production

First of all, the latest published version is 9.18.6, so why would you use a version that's ~two months old? Second, ISC does publish packages for EPEL, it's all listed here: https://www.isc.org/download/ <https://www.isc.org/download/> (the COPR link), so you can use that. --

Re: BIND >= 9.18, jemalloc and EL7

, but it's ultimately your decision It's little bit similar with libuv - you will be better running with latest upstream release, but you can get away with older versions too. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do no

Re: address/prefix length mismatch

intention and whether it’s a typo in the network or in the bits - did the origin author meant 10.10.0.0-10.10.1.255 or 10.20.1.0-10.10.1.255 or something completely else (like 10.10.1.0-10.10.2.255 based on wrong assumption?) -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may

Re: address/prefix length mismatch

hers have already answered that, I would be just repeating their answers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On Wed, Aug 24, 2022 at 10:33

Re: address/prefix length mismatch

. That’s wrong. 10.60.0.0/23 means 10.60.0.0 to 10.60.1.255 range. > How do I configure this ACL in named.conf.local so that it takes the whole > range? Correctly specified range (without address/host bits) does takes the whole range. Ondrej -- Ondřej Surý — ISC (He/Him) My working

Re: Thread handling

ies updated with nsupdate works reasonably well in smaller deployments. Cheers, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > Regards > Hamid Maadani > >

Re: Thread handling

ly confident that any advantage from shared cache will be lost because the extra latency caused by communication with the MongoDB (or any other no-sql systems). Perhaps, describing the use case first (why do you want to use MongoDB at all) might have the benefit of not wasting time on your end. O

Re: High memory consumption in bind 9.18.2

What Emmanuel said… -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 4. 8. 2022, at 19:15, Emmanuel Fusté wrote: > > Le 04/08/2022 à 17:48, Dmitri Pavlov a écrit >

Re: DNSSEC adoption

Not really. Using ECDSA (or EdDSA) CSK is pretty lightweight even during rollover. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 3. 8. 2022, at 19:10, Peter wr

Re: High memory consumption in bind 9.18.2

. We are refactoring the database for storing the resource records in 9.20 and it's probably better spent time to work on the refactoring than look at this. As usual, we would accept any well commented and well thought patches. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your wo

Re: High memory consumption in bind 9.18.2

I don’t see jemalloc anywhere in your setup scripts. Preferably use the latest upstream jemalloc version available. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > O

Re: Bind 9.11/RHEL7 Server Freezes FUTEX_WAKE_PRIVATE

than anything else. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 2. 8. 2022, at 0:29, Grant Taylor via bind-users > wrote: > On 8/1/22 4:21 PM, Greg Ch

Re: High memory consumption in bind 9.18.2

lable at https://www.isc.org/support 01-Aug-2022 22:09:59.363 01-Aug-2022 22:09:59.363 found 8 CPUs, using 8 worker threads 01-Aug-2022 22:09:59.363 using 8 UDP listeners per interface Swap:488612 USS:29592668 PSS:29593610 RSS:29596988 Ondrej -- Ond

Re: DNSSEC signing of an internal zone gains nothing (unless??)

to secondaries, or provided by a secure signing system, etc… Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 8. 2022, at 18:40, John W. Blue via bind-users >

Re: High memory consumption in bind 9.18.2

-> configure -> > make -> make install. All default values. I’ll try that. I have a custom script that tweaks some values (you can see that in the log snippets I sent). Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: High memory consumption in bind 9.18.2

ed to libxml2 version: 20910 01-Aug-2022 18:18:20.127 compiled with json-c version: 0.15 01-Aug-2022 18:18:20.127 linked to json-c version: 0.15 01-Aug-2022 18:18:20.127 compiled with zlib version: 1.2.11 01-Aug-2022 18:18:20.127 linked to zlib version: 1.2.11 $ smem -P name[d] -a SWAP:1032108 USS:

Re: High memory consumption in bind 9.18.2

med, or is this allocated in the libraries? > Should the memory reduction apply to our experiment? The question doesn’t really make sense. We have not measured any increase in our test scenarios, which doesn’t mean you can’t find different scenarios with a memory increase. Ondrej -- Ondřej

Re: High memory consumption in bind 9.18.2

> On 1. 8. 2022, at 16:14, Doug Whitfield wrote: > > as monitored from "top" RES value Please read the whole thread on measuring the real consumed memory. The '“top” RES value' has little or no value at all. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My w

Re: High memory consumption in bind 9.18.2

There’s no generic tool. The one that was mentioned in the article was tailored for that specific bug in jemalloc. In any case, the article is only tangential to the topic here. It talks about a issue in the jemalloc that was triggered by a specific code in named. Ondřej -- Ondřej Surý — ISC

Re: CNAME resolution weirdness

sees truncation. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 26. 7. 2022, at 1:02, Boian Bonev via bind-users > wrote: > > Hello, > > For the Devua

Re: Basic setup instructions

Sorry, but you are being too terse. What is DNS setup? Which website? What *exactly* are you doing? Would you be able to help yourself with such little information you gave us? Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel

Re: Basic setup instructions

macOS 10.10 reach end-of-life 5 years ago. You can try installing recent enough compiler with C11/C17 support and up-to-date libraries, but you are mostly on your own. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated

Re: High memory consumption in bind 9.18.2

free buffet where you come and just take. And don’t be mistaken - I was not helping you specifically, I was just disputing your claim that BIND 9.18 takes more memory than 9.16 because that claim didn’t match our own measurements. Have a nice day, -- Ondřej Surý — ISC (He/Him) My working

Re: High memory consumption in bind 9.18.2

some memory as compared to the default system allocator 2. our expectations are to go even lower during the 9.19/9.20 development cycle, but no promises yet Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to

Re: How to make SRV records work with caching resolvers?

Could you for the purpose of the debugging share the DNS traffic between the phone device and the resolver? I think stepping back a little might help debug the issue. Perhaps people on the list might notice something that might help. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and

Re: Can't modify an existing SPF record

> On 8. 7. 2022, at 18:05, Roberto Carna wrote: > > using the CLI in the BIND master What does this mean and how exactly are you changing the zone? List all the steps that you are doing when changing the zone contents. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and you

Re: Specifying EDNS payload size with dig queries

+bufsize= -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 6. 2022, at 19:44, Fred Morris wrote: > > Self explanatory? Maybe it's the nomenclature bu

Re: High memory consumption in bind 9.18.2

And what did you find looking at the new data? What are the differences? And by how much?You should not expect other people doing the analysis for yourself.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: BIND9.18.4 won't compile on my Ubuntu 18.04

Hi Marco,use this patch[1] on older Ubuntu or use Sphinx from pypi1. https://salsa.debian.org/dns-team/bind9/-/blob/debian/9.18/debian/patches/0001-Disable-treat-warnings-as-errors-in-sphinx-build.patchUbuntu 18.04 has too old Sphinx included.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and

Re: High memory consumption in bind 9.18.2

Hi, we cannot really help you if you ignore everything that was said to you regarding the memory measurements. Ondrej. -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: Compilation problems with 9.16.30 {External}

the dependencies (which you are probably doing anyway), so what’s the point of having this old “chassis” when you are welding new bits on top of it? Perhaps running BIND 9 in a container would be easier? Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Compilation problems with 9.16.30 {External}

, -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 15. 6. 2022, at 20:31, William D. Colburn wrote: > Compiler: gcc -std=gnu99 >gcc (GCC) 4.4.7 20120313 (Red Hat

Re: Compilation problems with 9.16.30

You need to provide little bit more detail about the environment - operating system, compiler used, output of ./configure (including the options used). There’s no such thing as too many *relevant* details… Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

Sandro, you did nothing wrong. No need to apologize from your side. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 6. 2022, at 17:45, Sandro wrote: >

Re: Dynamic A records similar to nip.io or xip

Yeah, I concur that writing a small DLZ module or maybe even just **plugin** is a way to go. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 24. 5. 2022, at

Re: High memory consumption in bind 9.18.2

Hi Klarstein, Gathering the output of named statschannel should be good enough for initial assessment (json please). For 9.18, make sure the jemalloc is being used at runtime. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel

Re: High memory consumption in bind 9.18.2

Also please note that proper measurement of memory consumption is needed. There’s some good (semi-accurate) stuff at SO and it needs to be correlated with the statschannel output from named. Running “free” doesn’t measure memory consumption by any program. Ondřej -- Ondřej Surý — ISC (He/Him

Re: Correct response to NS request in case of dual delegation when one delegation returns REFUSED

ng dig. Beyond that, if you need more help, you’ll need to go into more details. > My conclusion is that Windows DNS is an abomination. And relying on an > inherently faulty behavior leads straight to hell. I cannot confirm or deny this conclusion... Ondrej -- Ondřej Surý (He/Him) ond...@is

Re: High memory consumption in bind 9.18.2

You did not provided any details, so we can’t really help you. What is “RAM consumption” anyway? VSZ, RSS, numbers pulled from stats channel from named? What’s the hardware, what is the configuration, how was BIND 9 compiled (or packaged)? The more details, the better Ondrej -- Ondřej Surý

Re: Only one DS key comes back in query

Hubert was exactly right here: https://berthub.eu/articles/posts/anonymous-help/ Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 16. 5. 2022, at 19:06, frank pica

Re: Only one DS key comes back in query

You don’t put DS into child zone, the DS record goes to parent zone, so your question doesn’t make sense in this context. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: Request to use "Canonical/Mirror"

Also see https://datatracker.ietf.org/doc/html/rfc8499 for canonical DNS terminology document. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 14. 5. 2022, at 1

Re: Problem resolving a domain

loudly. They are non-compliant and need to deploy the fix at their side. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 5. 2022, at 15:16, Rainer Duffn

Re: Bad CNAME treatment consistency beetween direct CNAME request vs A request

160-c.gandi.net.) (UDP) ;; WHEN: Fri May 13 15:57:49 CEST 2022 ;; MSG SIZE rcvd: 87 So, there’s nothing like “cache polution”, named correctly caches the records returned by the authoritative servers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours

Re: Problem resolving a domain

s) were not responsive to queries over UDP. (157.83.102.245, 157.83.102.246, 157.83.126.245, 157.83.126.246) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 5.

Re: success resolving xxx after disabling EDNS

as EDNS Can **you** tell if the problem why the server didn’t respond was IPv6 and not EDNS over IPv6? It’s impossible to tell whether the IPv4 and IPv6 addresses are handled on the same machine not to mention same software. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your

Re: Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

articular issue. They were crippling the TTL to 0 in the wrong direction. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind

Re: Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

rsonally go with VPN as a first option. Other than that this is classical example of GIGO (garbage in, garbage out). Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Vi

Re: success resolving xxx after disabling EDNS

7 The main tuning is that people should not write their own DNS server if they can’t implement it properly, but hey that’s what we have on the Internet now... Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obliga

Re: Unrecognized Options --enable-threads

ls whatsoever. Modern systems are usually managed by using software from packages. However, the broad topic of system administration is out of topic for this list. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: getting answers from DNS queries

toring software. Also monitoring DNS traffic on the mirror doesn’t tell you anything **how** the DNS server sees the queries, so dnstap is going to be better solution for most deployments. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different

Re: Attempting to configure an ISC BIND repository on Red Hat Linux 7.9

I am actually thinking the similar thing that the COPR is being filtered from where you are. Try gnutls-cli to connect to the site whether it gives you the correct cert and everything. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Tuning Authoritative Memory Usage

Pull the memory stats from the statschannel (json or xml). Also make sure you run 9.18 with jemalloc (you can use jemalloc with 9.16, but it needs to be linked explicitly with LDFLAGS or pre-loaded). Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different

Re: Tuning Authoritative Memory Usage

From top of my head - try setting the max-cache-size to infinite. The internal views might still pre-allocate some stuff based on available memory. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply

Re: getting answers from DNS queries

That’s much better - you should search for dnstap, initial pointer might be: https://kb.isc.org/docs/aa-01342 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. >

Re: getting answers from DNS queries

> I asked this last week, but I didn't an answer. Probably because I still don’t know what you mean. You need to better articulate your problem and your question. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do

Re: Bind and systemd-resolved

I think you also might want to mask the service: https://fedoramagazine.org/systemd-masking-units/ -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 4. 2022, at 17:20, Ra

Re: Communication error when we do axfr query for the large size zone

> bind 9.16.13 This. You are running outdated unsupported version of BIND 9. You need to upgrade to latest 9.16 version at least. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working ho

Re: Communication error when we do axfr query for the large size zone

We can’t really help you if you withhold information. You need to learn to provide complete information if you want other people to help you instead of letting them guess what does you environment look like. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Bind and systemd-resolved

r defaults for dig via ${HOME}/.digrc. This file is read and any options in it are applied before the command line arguments. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

Re: Periodic SERVFAIL for TLD .BY

Read the thread, this has been already answered on the list. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 2. 4. 2022, at 19:48, Dzmitry Shykuts wrote: > &

Re: Periodic SERVFAIL for TLD .BY

SERVFAIL TTL to expire. The maximum value is ``30`` seconds; any higher value is silently reduced. The default is ``1`` second. And see if that helps. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Problems building bind 9.18.1 on FreeBSD

ssues?scope=all&state=closed&search=Macports For all of these, we either prepared and/or merged a fix or provided a workaround (for the second issue on the list, you need to run autoreconf -if). Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be differ

Re: Problems building bind 9.18.1 on FreeBSD

emD. And we are not planning to depend on specific supervisor, but in fact, we are happy to add **optional** support for any available supervisor **if it makes sense**. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not

Re: Problems building bind 9.18.1 on FreeBSD

n the Supported Platforms: https://bind9.readthedocs.io/en/v9_18_1/requirements.html#supported-platforms Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.

Re: Problems building bind 9.18.1 on FreeBSD

Making general statements like this is neither helpful to those “maintainers” (they can speak for themselves, do they) nor the the upstream developers. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outs

Re: V 9.18.1 not listen on port 853 after rndc reload

This is already being tracked as https://gitlab.isc.org/isc-projects/bind9/-/issues/3122 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 21. 3. 2022, at 17

Re: Problems building bind 9.18.1 on FreeBSD

You don’t have to have sphinx-build installed for manpages to be generated. There’s nothing complicated in the build system. All is pretty standard stuff. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Forwarding zone, setup

Is static-stub something you are looking for? Reference documentation: https://bind9.readthedocs.io/en/v9_18_0/reference.html?highlight=static-stub#zone-types And in human terms: https://jpmens.net/2011/01/25/binds-new-static-stub-zone-type/ Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My

Re: Errors loading Named ( 9.16.26) on RHEL 7.9

The server isn’t same. All the libraries that you are using to compile BIND 9 needs to be at same or higher version, which isn’t the case here. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: dns_dnssec_findzonekeys2: error reading WHATEVER.private: file not found

16 with the upstream patch releases. The other option provided by ISC is to run BIND 9 inside a docker container, so you don’t have to worry about the PPA messing with the base system, but the docker container is exactly “Ubuntu 20.04 + ISC PPA”. Cheers, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org

Re: Recent upgrade

eshark) to look what happens on the wire when the failure occurs would help. You can also run named with extra debugging level to provide more insight. Cheers, Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply o

Re: BIND 9.18.0 and Mac OS X 10.15.7 - cannot build

/docs/dr_459.htm (e.g. this was fixed in 2014 in the C standard) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 2. 2022, at 5:26, Larry Stone wr

Re: Issue Using Wildcards for Subdimain Redirecing

if you start using real domain and describing what you need to achieve instead of how you want to do that would be a good start. Step back and describe why are you doing things like this. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Is there a community product maintaining Windows support?

rs and weird quirks of the Windows SDK. Also we are not actively rejecting the idea of having Windows port - and I think I pretty much explained the conditions the ISC would accept the Windows port in the previous emails. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your worki

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

- debugging on Windows is extremely painful and requires expertise with extremely high learning curve. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 17. 2. 2022, at 15:08, Ja

Re: ipv6 adoption

s almost EOL (June 2022), so you should upgrade to bullseye in any case. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind

Re: about apply Deckard to test BIND named

I guess you can possibly workaround this by disabling jemalloc from named build and hope that the static shims for jemalloc calls will trump the preloaded functions from libfaketime. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: about apply Deckard to test BIND named

would be a bare minimum here. 4. Create an issue (I thought there’s already one as integrating Deckard has been on our TODO list for couple of years now), and track all the ideas and progress there. GL #2088: https://gitlab.isc.org/isc-projects/bind9/-/issues/2088 -- Ondřej Surý (He/Him

Re: blackhole option anomaly

Hi, please fill the issue in our GitLab: https://gitlab.isc.org/isc-projects/bind9/-/issues/new?issuable_template=Bug Thank you, -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: Setup a hidden master

Hi, do both, or at least the firewall. But you absolutely must remove the hidden primary from the list of NS both in the parent and child zones. That’s the most important thing to do. Start with that, the rest is just additional layers. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours

Re: Obsoleting keep-response-order option in BIND 9.19/9.20+

Thanks Fred, those are all good advices for the DNS over TCP implementors. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 11. 2. 2022, at 18:32, Fred Morris wr

Re: Bind: Standard Ports And Non Standard Ports

rants. The experience shows that sticking to the technical questions leads to more pleasant experience on the mailing list. Thanks. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Obsoleting keep-response-order option in BIND 9.19/9.20+

nt DNS client and hence we plan to directly make the option to do nothing instead of graceful removal which would force us to support the option for the next 6 years. The option will be marked obsolete, so named-checkconf will issue a warning, and removed in BIND 9.21+ development release. 1.

Re: "make test" not working?

porting bugs. You omitted quite serious information about the build until the very last moment when you reported you found the issue. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal w

Re: "make test" not working?

Please don’t, use gitlab. The message is just autoconf quirk. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 2. 2022, at 15:28, Josef Moellers wrote: > > PS The

Re: "make test" not working?

ke: Nothing to be done for 'test’. I will repeat that again - you should understand what you are doing and why you are doing that - that includes all your local patches, changes to the default options and any other modifications to the build system. Ondrej -- Ondřej Surý (He/Him) ond

Re: "make test" not working?

ng and why it is failing? Both ‘make test’ and ‘make check’ works as expected. ` Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailm

Re: 9.17.21 RUNTIME_CHECK(csock->tls.tls != ((void *)0)) failed

gt;> Jan 24 12:41:25 dns named[6281]: creating IPv4 interface ixl1.15 failed; >> interface ignored >> >> and the named process no longer listens on TCP port 853. >> >> Also tried this on 9.17.22, and the same problem occurs. > > Now also tried on 9.18.0,

Re: Python support

DNSSEC Signing Guide: Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 31. 1. 2022, at 9:39, Josef Moellers wrote: > > Mooi'n, > > I was wo

Re: BIND 9.16.25 "file descriptor exceeds limit" messages

Hi Anand, what is your open files limit before starting the server? (ulimit -n) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 28. 1. 2022, at 14:33, An

Re: your mail

John, welcome to the list of people being moderated. Trolling and harassing other users on the lists is not welcomed here. Please pick your fights elsewhere. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

FTR Jason has been warned before to stop sending this nonsense about Hidden Google Internet and I’ve put them on the moderation list for now. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

Again - it’s your configured forwarders at fault. There’s no Google Hidden Internet. Just stop using the forwarders, named is capable to resolve the names on its own. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

That’s a question that you need to ask people running these nameservers: 159.134.0.11; 159.134.0.12; The domain works fine from here and those servers serve only your ISP it seems. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Strange named freezing

Does the jail have enough entropy? That would be my first guess… -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 12. 2021, at 7:18, Nikita Druba wrote: > > Wh

Re: Millions of './ANY/IN' queries denied

FTR RRL will not help on this case. There’s no difference between response with TC and response with REFUSED. It would make a difference only if there was NOERROR response with data. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Millions of './ANY/IN' queries denied

Not responding would make the client susceptible to spoofing, and named have no way of deciding whether the other side is legitimate or not. The out-of-configure-zone question could come from misconfiguration somewhere and not be malicious at all. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org

Re: Millions of './ANY/IN' queries denied

IP addresses doesn’t need access to your DNS? If yes, then go ahead. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 15. 12. 2021, at 12:51, Danilo Godec via bind-users > wrote: > > Hello, > > > I'm noticing some unusual activity where 48 external IPs generated over &g

Re: A good name for development branch releases package

I like bind-next too - shame we didn’t think of it when we created the repositories. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 1. 12. 2021, at 17:56, Petr Menšík wrote: > > Well, why not, I like that. Only slight disadvantage to bind9-dev is it > is never called similar w

<    1   2   3   4   5   6   >