Re: Troubleshooting scripted named startup

2022-12-28 Thread Philip Prindeville
://gitlab.isc.org/isc-projects/bind9/-/issues/2895 > > > Ondrej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >> On 28. 12. 2022, at 1:5

Re: Bind failures following update/reboot w/ 9.18.1

2022-12-27 Thread Philip Prindeville
eck what your firewall(s) is/are > prepared to let through, check whether DNS/TCP is allowed at all, check if > something is doing IP fragmentation (though I wouldn't expect this to come > into play with a packet ~1k). > > I hope some of that is useful. > Cheers, Greg >

Re: Bind failures following update/reboot w/ 9.18.1

2022-12-27 Thread Philip Prindeville
> On May 14, 2022, at 12:35 AM, Matus UHLAR - fantomas > wrote: > > On 13.05.22 10:06, Philip Prindeville wrote: >> After rebooting my OpenWRT router with Bind 9.18.1 yesterday, I started >> seeing a lot of: >> >> >> May 12 19:24:06 OpenW

Troubleshooting scripted named startup

2022-12-27 Thread Philip Prindeville
Hi, I notice that went Bind 9.18.7 comes up on OpenWRT, and I'm running it as a local resolver, resolution initially doesn't work and I get a lot of noise in /var/log/messages like: Dec 27 17:27:12 OpenWrt named[13171]: validating org/DS: no valid signature found Dec 27 17:27:12 OpenWrt

Re: Sparklight and DNSSEC

2022-09-26 Thread Philip Prindeville
> On Sep 24, 2022, at 3:20 AM, Bjørn Mork wrote: > > Philip Prindeville writes: > >> How many ISP's squelch DNSSEC like that? I hope it's not a common practice! > > More common than you'd like to think. See Geoff's excellent world map > at https://stats.labs

Seeing lots of DNS issues on OpenWRT

2022-09-23 Thread Philip Prindeville
Hi all, I've changed locations (moved houses) and consequently ISPs (now on Sparklight, used to have CTC) and I'm seeing a slew of DNS issues I didn't have before like: Sep 23 11:42:13 OpenWrt3 named[28113]: timed out resolving 'wdatpsngatewaytmcacane.trafficmanager.net/A/IN': 9.9.9.9#53 Sep

Sparklight and DNSSEC

2022-09-23 Thread Philip Prindeville
Hi all, I was seeing a lot of noise about RRSIG's using the Sparklight name servers dns1.cableonet.net and c1dns.cableone.net, like this: Sep 23 10:44:24 OpenWrt3 named[28113]: validating net/SOA: got insecure response; parent indicates it should be secure Sep 23 10:44:24 OpenWrt3

Using nsupdate remotely

2022-07-11 Thread Philip Prindeville
Hi, I have a remote subnet that has its own DHCP server, but wants to update the domain which spans several locations and subnets. What do I need to do on both ends (remote DHCP server and central DNS server) to push updates over? On the DHCP server, I'll need a persistent key, and I'll need

Re: Bind failures following update/reboot w/ 9.18.1

2022-05-13 Thread Philip Prindeville
e > into play with a packet ~1k). > > I hope some of that is useful. > Cheers, Greg > > On Fri, 13 May 2022 at 17:07, Philip Prindeville > wrote: > After rebooting my OpenWRT router with Bind 9.18.1 yesterday, I started > seeing a lot of: > > > May 12 19

Re: Supporting LOC RR's

2022-05-13 Thread Philip Prindeville
> That's interesting, and clever work to solve the problem of making APs into > reliable location references. > > They are doing a more involved/automated version of what I suggested - using > GPS (in their case built-in GPS, plus AP-AP communication) for APs to locate > themselves. Once

Bind failures following update/reboot w/ 9.18.1

2022-05-13 Thread Philip Prindeville
After rebooting my OpenWRT router with Bind 9.18.1 yesterday, I started seeing a lot of: May 12 19:24:06 OpenWrt named[11061]: validating ./NS: no valid signature found May 12 19:24:06 OpenWrt named[11061]: validating net/DS: no valid signature found May 12 19:24:06 OpenWrt named[11061]: no

Re: Supporting LOC RR's

2022-04-12 Thread Philip Prindeville
> On Apr 12, 2022, at 6:36 AM, Timothe Litt wrote: > > > On 12-Apr-22 01:46, Philip Prindeville wrote: >> Does anyone use LOC RR's? And if so, how? >> >> I've had some Apple devices get seriously confused by their location >> services an

Supporting LOC RR's

2022-04-11 Thread Philip Prindeville
Does anyone use LOC RR's? And if so, how? I've had some Apple devices get seriously confused by their location services and I'm trying to provide strong hints. It would also be nice to prime WiFi 6 Certified WAPs with their locations based on LOC RR's since we happen to have convenient

Re: Using nsupdate in scripts

2022-03-14 Thread Philip Prindeville
> On Mar 14, 2022, at 5:11 PM, Philip Prindeville > wrote: > > > >> On Mar 14, 2022, at 4:25 PM, Tony Finch wrote: >> >> Philip Prindeville wrote: >>> >>> But I've noticed that since I added the following to my options { }: >&g

Re: Using nsupdate in scripts

2022-03-14 Thread Philip Prindeville
> On Mar 14, 2022, at 4:25 PM, Tony Finch wrote: > > Philip Prindeville wrote: >> >> But I've noticed that since I added the following to my options { }: >> >>allow-transfer { none; }; >>dnssec-validation auto; >>lis

Using nsupdate in scripts

2022-03-13 Thread Philip Prindeville
Hi all, I have some scripting that generates zone files for RFC-1918 addresses for the DHCP static reservations when isc-dhcp starts up on OpenWRT: https://github.com/openwrt/packages/blob/master/net/isc-dhcp/files/dhcpd.init#L551-L583 I push the single monolithic file over here: