Re: [Windows] [9.16.45] Missing IPv4 DNS prevents tools from working

2024-01-21 Thread Ted Mittelstaedt
Yes, this bug can be fixed. Just find a software developer and pay him some money.  Or fix it yourself, you have the code. I suppose ISC does not want you to buy a paid support subscription to fix this one but maybe they do, you could try contacting them. Oh, wait.  You must be wanting this

Re: Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

2022-05-06 Thread Ted Mittelstaedt
On 5/6/2022 12:45 AM, Reindl Harald wrote: in the past our CISCO ISP router with "DNS ALG" even rewrote zone transfers and invented a zero TTL for each and every CNAME it saw Probably doing that to retaliate for dynamic DNS providers abusing DNS and people abusing dynamic DNS providers

Re: Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

2022-05-06 Thread Ted Mittelstaedt
On 5/5/2022 11:19 PM, Bjørn Mork wrote: Mark Andrews writes: How about configuring forwarder(s) if you have to operate a resolver in such an environment? Hoping that the answer from the intercepting server isn't too different from what you'd expect from a forwarder. In my environment, I'

Hell breaks loose in the afternoon with format error from X.X.X.X#53 resolving ./NS: non-improving referral

2022-05-05 Thread Ted Mittelstaedt
Thought I would document this in case anyone else gets bit by it I have several nameservers and other servers on a Comcast copper connection (cable internet) in the office using a Technicolor Business Router CGA4131COM modem. This is Comcast's de-facto standard modem as of 2022 for business

Re: Bind: Standard Ports And Non Standard Ports

2022-02-11 Thread Ted Mittelstaedt
I have Comcast Business with 2 name servers behind it and 50 or so domain names hosted on them. No problems at all. Never heard of Security Edge. We could have a discussion on your setup and compare notes but your problems have nothing to do with port 53 filtering in the Comcast network, IMHO.

Re: Is there a community product maintaining Windows support?

2022-02-11 Thread Ted Mittelstaedt
I just became a maintainer on the apcupsd project. I don't know if bind for windows is built like apcupsd is, by using mingw32 but unfortunately there's problems with the mingw32 project these days, it's gone through a lot of transitions. Getting a working build environment for apcupsd at lea

Re: Can't use Bind DLZ through LDAPS SSL

2021-02-12 Thread Ted Mittelstaedt
to use it. Thank you so much. Regards. Dario Garcia Díaz-Miguel GGCS-SES Unit GGCS SKMF Infrastructure Division GMV C\ de Isaac Newton, 11 28760, Tres Cantos, Madrid España +34 918 07 21 00 +34 918 07 21 99 www.gmv.com -Mensaje original- Date: Fri, 12 Feb 2021 01:29:17 -0800

Re: Can't use Bind DLZ through LDAPS SSL

2021-02-12 Thread Ted Mittelstaedt
. Thank you so much. Regards. Dario Garcia Díaz-Miguel GGCS-SES Unit GGCS SKMF Infrastructure Division GMV C\ de Isaac Newton, 11 28760, Tres Cantos, Madrid España +34 918 07 21 00 +34 918 07 21 99 www.gmv.com -Mensaje original- Date: Fri, 12 Feb 2021 01:29:17 -0800 From: Ted M

Re: Can't use Bind DLZ through LDAPS SSL

2021-02-12 Thread Ted Mittelstaedt
Instead of beating your head against DLZ can't you simply put the DLZ query into stunnel and connect to the openldap server that way? Ted On 2/11/2021 10:39 PM, Dario García Díaz-Miguel wrote: Hi there, I really don't know If this is the correct place to ask about Bind DLZ, but I'm afraid th

Re: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-07-23 Thread Ted Mittelstaedt
On 7/23/2020 7:44 AM, charlie derr wrote: While it would still *technically* be security by obscurity, it would seem to me that there's some value to this approach because access to the compiled binary wouldn't necessarily be easy to obtain (especially if the sysadmin provisioning the system

Re: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-07-22 Thread Ted Mittelstaedt
On 7/22/2020 9:59 PM, Michael De Roover wrote: On 7/23/20 6:28 AM, Ted Mittelstaedt wrote: Linux is 10 times worse because they aren't even including the c compiler or development tools anymore. Every distribution I've laid my hands on so far has GCC packages and most developmen

Re: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-07-22 Thread Ted Mittelstaedt
On 7/20/2020 4:05 PM, Mark Andrews wrote: Distributions also need to look at their own practices. They ask us to supply long term support but do not actually integrate the maintenance releases but instead cherry-pick just the security fixes. Maintenance is not just security fixes. That me

Re: AW: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-07-20 Thread Ted Mittelstaedt
On 7/20/2020 11:23 AM, Michael De Roover wrote: If that is true, I hereby lost all faith in humanity.. well whatever faith I had left. This has been going on for like half a decade now. Nobody ever went broke catering to the human desire for ease

Re: AW: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-07-20 Thread Ted Mittelstaedt
: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Ted Mittelstaedt Sent: Friday, July 17, 2020 12:57 PM To: bind-users@lists.isc.org Subject: Re: AW: Debian/Ubuntu: Why was the service renamed from bind9 to named? Your personal experience is not the gobal truth. It is your opini

Re: AW: Debian/Ubuntu: Why was the service renamed from bind9 to named?

2020-07-17 Thread Ted Mittelstaedt
Your personal experience is not the gobal truth. It is your opinion but other experienced pepole see it different than you. Hmm I'm a bit late to this discussion but I will chime in with the others. The service always was called "named" pronounced "name Dee" it was called that in the Nutsh

Re: ISC considering a change to the BIND open source license

2016-06-15 Thread Ted Mittelstaedt
On 6/14/2016 11:19 PM, Noel Butler wrote: On 15/06/2016 10:29, Ted Mittelstaedt wrote: On 6/14/2016 4:28 PM, Noel Butler wrote: On 15/06/2016 05:38, Ted Mittelstaedt wrote: It seems some on the list are short on philosophy? Well here is the actual philosophy and I'll apologize in ad

Re: ISC considering a change to the BIND open source license

2016-06-14 Thread Ted Mittelstaedt
On 6/14/2016 4:28 PM, Noel Butler wrote: On 15/06/2016 05:38, Ted Mittelstaedt wrote: It seems some on the list are short on philosophy? Well here is the actual philosophy and I'll apologize in advance that it won't fit in a SMS message for those people unable to have deep tho

Re: ISC considering a change to the BIND open source license

2016-06-14 Thread Ted Mittelstaedt
On 6/14/2016 11:47 AM, Mukund Sivaraman wrote: Hi Evan On Tue, Jun 14, 2016 at 05:45:59PM +, Evan Hunt wrote: May I ask you to expand on why the MPL is a problem? So far the distros have all been supportive. The BSD camp dislikes copyleft because copyleft prevents exactly what we're tr

Re: ISC considering a change to the BIND open source license

2016-06-14 Thread Ted Mittelstaedt
On 6/14/2016 1:42 PM, Mukund Sivaraman wrote: On Tue, Jun 14, 2016 at 08:06:55PM +, Evan Hunt wrote: On Tue, Jun 14, 2016 at 12:38:14PM -0700, Ted Mittelstaedt wrote: In reality, there IS no "middle ground" If you truly believe a piece of software SHOULD be freely licensed,

Re: ISC considering a change to the BIND open source license

2016-06-14 Thread Ted Mittelstaedt
It seems some on the list are short on philosophy? Well here is the actual philosophy and I'll apologize in advance that it won't fit in a SMS message for those people unable to have deep thoughts more complex than a SMS message. Hopefully you are not one of them. You are asking about GPL but

Re: ISC considering a change to the BIND open source license

2016-06-14 Thread Ted Mittelstaedt
On 6/14/2016 10:45 AM, Evan Hunt wrote: On Tue, Jun 14, 2016 at 10:10:16AM -0700, Ted Mittelstaedt wrote: I disagree with this but who am I to stand in the way of the goddam almighty dollar, you're going to do it anyway regardless of what anyone says, this comment thing is just w

Re: ISC considering a change to the BIND open source license

2016-06-14 Thread Ted Mittelstaedt
I disagree with this but who am I to stand in the way of the goddam almighty dollar, you're going to do it anyway regardless of what anyone says, this comment thing is just window dressing. I would request that you consider doing one thing before kicking all the BSD distributions in the teeth

Re: Crypto failure Issues

2015-07-24 Thread Ted Mittelstaedt
Did you compile both openssl and bind or are you using a prebuilt binary? There are (apparently) problems with OpenSSL 1.0.2 on the 32 bit Solaris 10 platform. This was discussed on the openssl-users mailing list a few months ago. The "fix" was building with an openssl 1.0.1 version on that pla

Re: ISC Courses

2013-04-26 Thread Ted Mittelstaedt
s then it's cost them the same to send you to class vs paying you the extra time to learn it yourself is the same. Ted Mittelstaedt Internet Partners, Inc. On 4/26/2013 10:47 AM, rohan.he...@cwjamaica.com wrote: Hello, Can anyone say why Bind course offering appears so expensive? Is something e

Re: Change in statistics format

2012-11-15 Thread Ted Mittelstaedt
Hi Peter, Would you consider donating that script to ISC so they can bundle it with the BIND distribution? I have a whole library of scripts like yours which I've collected over the last 10 years. Most of the hosts that are linked to as where these scripts are located are long gone and the

Survey - how many people running ISP nameservers define "minimal-responses" - was Re: What is the deal on missing "Authority Section" and "additional section" from google's DNS servers?

2012-07-11 Thread Ted Mittelstaedt
arren said: "...Many things (correctly (IMO)) ignore the info in additional section due to past entertainment with cache poising, etc" then what would be best practices for an ISP? Ted On 7/11/2012 8:03 AM, Warren Kumari wrote: On Jul 11, 2012, at 6:30 AM, Ted Mittelstaedt wrote:

Re: What is the deal on missing "Authority Section" and "additional section" from google's DNS servers?

2012-07-11 Thread Ted Mittelstaedt
On 7/10/2012 6:37 PM, Michael Hoskins (michoski) wrote: -Original Message- From: Ted Mittelstaedt Date: Tuesday, July 10, 2012 6:24 PM To: "bind-users@lists.isc.org" Subject: What is the deal on missing "Authority Section" and "additionalsection&q

What is the deal on missing "Authority Section" and "additional section" from google's DNS servers?

2012-07-10 Thread Ted Mittelstaedt
Hi All, I manage an ISP that runs BIND 9.6-ESV-R7-P1 (to be fair it was running 9.6-ESV-R6 until an hour ago but I'm not that dumb to post the location of an unpatched nameserver to the mailing list) One of our customers reported that she was having problems with her mailserver not sendi