Re: KSK signing zone records

2021-08-30 Thread raf via bind-users
ng the KSK sign the ZSK enough? What difference does the nature of the thing being signed make? cheers, raf ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software wi

KSK signing zone records

2021-08-30 Thread Timothy A. Holtzen via bind-users
rather than the records directly? I'm running bind 9.16.16.  -- Timothy A. Holtzen Campus Network Administrator Nebraska Wesleyan University Public PGP ECC Curve 25519 Key: 11A2 3FDB AD70 12CA D77D C7DD DFFB 7662 24E6 C30D Old Public PGP RSA key: CFB4 3AE8 B726 DEBF 00D9 CCFC 426E 76AF DABC

Re: Logging statements w.r.t. view in Bind 9.16.18

2021-08-24 Thread G.W. Haywood via bind-users
; allow-query { none; } ; recursion no; }; You have recursion turned off for PUBLIC. As I understand it, the conventional wisdom is not to run recursive and non-recursive services on the same BIND instance. Would it make sense then, in your case, to run two separate instances of BIND? Separating

Re: unresolvable pms.psc.gov, but google/cloudflare/unbound work

2021-08-22 Thread John W. Blue via bind-users
out ID 180. Recommend the pms.psc.gov admins give the psc.gov admins the correct hash. Sent from Nine<http://www.9folders.com/> From: Roger Hammerstein Sent: Sunday, August 22, 2021 9:45 AM To: bind-users@lists.isc.org Subject: unresolvable pms.psc.gov, but

Re: tsig question (and documentation bug)

2021-08-20 Thread raf via bind-users
On Fri, Aug 20, 2021 at 09:46:46PM +1000, raf via bind-users wrote: > On Fri, Aug 20, 2021 at 09:33:01PM +1000, raf via bind-users > wrote: > > > Hi, > > > > I want to use TSIG for zone transfers, > > only allowing zone transfers to > > particular IP

Re: tsig question

2021-08-20 Thread raf via bind-users
On Fri, Aug 20, 2021 at 09:33:01PM +1000, raf via bind-users wrote: > Hi, > > I want to use TSIG for zone transfers, > only allowing zone transfers to > particular IP addresses if they > possess the TSIG shared secret. > > The documentation at: > > https://

tsig question

2021-08-20 Thread raf via bind-users
rg/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: [Question] About migration for 9.11.X to 9.16.X.

2021-08-19 Thread G.W. Haywood via bind-users
Hi there, On Thu, 19 Aug 2021, Techs-yama wrote: I'm thinking about BIND Version migration for 9.11.X to 9.16.X. Also, I'm about to check the different default config value and config parameters for the purpose of that now. I would like to ask you all. Are there any other points of observe

RHEL, Centos, Fedora rpm 9.16.20

2021-08-18 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 https://www.five-ten-sg.com/mapper/bind contains links to the source rpm, and build instructions. This .src.rpm contains a .tar.gz file with the ARM documentation, so the rpm rebuild process does not need sphinx- build and associated dependencies

Re: debian11 + bind-9.16.15 + dnssec-policy = lost zonefiles + crashes

2021-08-16 Thread raf via bind-users
On Mon, Aug 16, 2021 at 10:32:35AM +0200, Matthijs Mekking wrote: > Hi, > > On 16-08-2021 04:28, raf via bind-users wrote: > > On Sun, Aug 15, 2021 at 10:35:27PM +1000, raf wrote: > ... > > > > So it's looking good and I'm happy now. But how long > >

Re: debian11 + bind-9.16.15 + dnssec-policy = lost zonefiles + crashes

2021-08-15 Thread raf via bind-users
On Sun, Aug 15, 2021 at 10:35:27PM +1000, raf wrote: > But the real problem is that bind crashed, and dumped > core, and couldn't start at all. There were a hectic > few minutes there. :-) I deleted the coredump and the > key files, and the .jnl files, restored backup > zon

Re: Tracking Down Odd bind Behavior

2021-08-15 Thread Tim Daneliuk via bind-users
On 8/15/21 9:07 AM, G.W. Haywood via bind-users wrote: > Hi there, > > On Sun, 15 Aug 2021, Tim Daneliuk wrote: > >> I have a bind slave instance running on FreeBSD 13-STABLE.  Periodically >> (after >> a few days of perfect operation), it loses its ability to

Re: Tracking Down Odd bind Behavior

2021-08-15 Thread G.W. Haywood via bind-users
Hi there, On Sun, 15 Aug 2021, Tim Daneliuk wrote: I have a bind slave instance running on FreeBSD 13-STABLE. Periodically (after a few days of perfect operation), it loses its ability to resolve at least some names - in this case, git.freebsd.org. ... ... Aug 14 17:07:03 ozzie named[32292

debian11 + bind-9.16.15 + dnssec-policy = lost zonefiles + crashes

2021-08-15 Thread raf via bind-users
Hi, I've just upgraded my bind9 server to debian-11 which has bind-9.16.15. I've been looking forward to this. I had my local dnssec-policy ("annual") all ready to go. But it didn't go well at all. For the first few seconds, I thought it was great. I uncommented my new config to ena

Tracking Down Odd bind Behavior

2021-08-14 Thread Tim Daneliuk via bind-users
I have a bind slave instance running on FreeBSD 13-STABLE. Periodically (after a few days of perfect operation), it loses its ability to resolve at least some names - in this case, git.freebsd.org. When I look at the logs, I see this: ==> /var/log/named/query-errors <== 14-Aug-2021

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-11 Thread raf via bind-users
On Wed, Aug 11, 2021 at 12:14:38PM -0500, Tim Daneliuk via bind-users wrote: > On 8/10/21 11:27 PM, raf via bind-users wrote: > > Does that help at all? > > Very much thank you. I have now discovered my DNS key and corresponding DS > record. I believe the DS record is what

Re: Debug Approach Help?

2021-08-11 Thread Tim Daneliuk via bind-users
On 8/11/21 12:49 PM, Richard T.A. Neal wrote: > There's a very good article on the ISC website which discusses BIND logging: > https://kb.isc.org/docs/aa-01526 > > I recommend reading and implementing the logging as per their suggestion > (backup or make a note of your

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-11 Thread Tim Daneliuk via bind-users
On 8/10/21 11:27 PM, raf via bind-users wrote: > Does that help at all? Very much thank you. I have now discovered my DNS key and corresponding DS record. I believe the DS record is what I have to provide my registrar as I underst

Re: DKIM setup

2021-08-11 Thread Vinícius Ferrão via bind-users
I understood the .ve question. On 11 Aug 2021, at 13:56, Vinícius Ferrão via bind-users mailto:bind-users@lists.isc.org>> wrote: Hello. Ve is Venezuela. It’s a country. Alice is the selector name, you can have whatever you want. https://dmarcly.com/blog/what-is-dkim-selector-and-how

Re: DKIM setup

2021-08-11 Thread Vinícius Ferrão via bind-users
, at 13:47, Bruce Johnson via bind-users wrote: I’m trying to set up DNS records for DKIM in our system; we have a hybrid O365/On-Prem Exchange server and separate Mailman list server, all of which send email from our domain (and are in the spf list in DNS.) I’m a little unclear on the syntax

DKIM setup

2021-08-11 Thread Bruce Johnson via bind-users
of Arizona College of Pharmacy Information Technology Group Institutions do not have opinions, merely customs ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software

Debug Approach Help?

2021-08-11 Thread Tim Daneliuk via bind-users
I am running bind 9.16.19 on two FreeBSD 13-STABLE instances. The master is on a Digital Ocean droplet and works fine. The slave is hosted on physical machine here in our offices. This has always worked flawlessly until recently. Periodically, the slave refuses to resolve names like

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-11 Thread raf via bind-users
. Thanks. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread raf via bind-users
On Tue, Aug 10, 2021 at 09:19:33PM -0500, Tim Daneliuk via bind-users wrote: > On 8/10/21 7:32 PM, raf via bind-users wrote: > > To get the DS record information to convey to the > > registrar, after starting to use the default policy. > > look for the CDS record (the ch

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread Tim Daneliuk via bind-users
On 8/10/21 7:32 PM, raf via bind-users wrote: > To get the DS record information to convey to the > registrar, after starting to use the default policy. > look for the CDS record (the child version of the DS > record) with dig: > > dig CDS EXAMPLE.ORG > > For the def

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread raf via bind-users
On Tue, Aug 10, 2021 at 11:24:31AM -0500, Tim Daneliuk via bind-users wrote: > On 8/10/21 10:07 AM, Matthijs Mekking wrote: > >> So just to be sure I'm doing the right thing, I've added this to my > >> options stanza: > >> > >>  dnssec-policy &q

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread raf via bind-users
On Tue, Aug 10, 2021 at 08:51:04AM -0500, Tim Daneliuk via bind-users wrote: > On 8/10/21 7:51 AM, Matthijs Mekking wrote: > > Hi Klaus, > > > > On 10-08-2021 13:38, Klaus Darilion wrote: > >> Hi Matthijs! > >> > >>> We would like to encourage

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread Tim Daneliuk via bind-users
tp://www.tundraware.com/PGP/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/cont

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread Tim Daneliuk via bind-users
;>> >>> https://kb.isc.org/docs/dnssec-key-and-signing-policy >> >> Some comments to this KB article and dnssec-policy: >> >> - The article should mention how to retrieve the DS record from >> Bind. So just to be sure I'm doing the right thing, I've added

AW: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread Klaus Darilion via bind-users
and-signing-policy > > > > Some comments to this KB article and dnssec-policy: > > > > - The article should mention how to retrieve the DS record from > > Bind. > > I am not sure what you are asking. Do you mean how to convert the DS > from the DNSKEY record

AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread Klaus Darilion via bind-users
mention how to retrieve the DS record from Bind. - How does Bind handle duplicate keyids when generating new keys? Will Bind ensure that there will not be any duplicate key ideas or will it just use the duplicate keys? In the latter case the " rndc dnssec -checkds -key 12345 ..." commands wi

Re: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread FUSTE Emmanuel via bind-users
Le 10/08/2021 à 12:34, Matthijs Mekking a écrit : > Hi Emannuel, > > Thanks for your response. > > On 10-08-2021 11:28, FUSTE Emmanuel via bind-users wrote: >> Le 10/08/2021 à 10:02, Matthijs Mekking a écrit : >>> Hi users, >>> >>> We ar

Re: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread FUSTE Emmanuel via bind-users
Le 10/08/2021 à 10:02, Matthijs Mekking a écrit : > Hi users, > > We are planning to deprecate the options 'auto-dnssec' and > 'inline-signing' in BIND 9.18. The reason for this is because > 'dnssec-policy' is the preferred way of maintaining your DNSSEC zone. > > Deprecati

AW: Does BIND supports ANAME RR

2021-08-09 Thread Klaus Darilion via bind-users
Do you think that we can get rid of CNAME too? regards Klaus > -Ursprüngliche Nachricht- > Von: Ondřej Surý > Gesendet: Montag, 9. August 2021 19:19 > An: Klaus Darilion > Cc: Mark Andrews ; bind-users@lists.isc.org > Betreff: Re: Does BIND supports ANAME RR &g

Re: Add DNS records automatically for static IP's

2021-08-09 Thread tale via bind-users
On Mon, Aug 9, 2021 at 8:46 AM Roberto Carna wrote: > Thanks to all of you, is it possible to use nslookup in order to > update DNS records from Linux hosts to a Windows DNS server (not BIND) Not nslookup, but nsupdate as Brian Cuttler said. nslookup is purely a query tool; nsupdate impl

AW: Does BIND supports ANAME RR

2021-08-09 Thread Klaus Darilion via bind-users
Does every application that uses gethostbyname have a benefit of HTTPS/SVCB? That is what I meant. regards Klaus > -Ursprüngliche Nachricht- > Von: Mark Andrews > Gesendet: Montag, 9. August 2021 15:55 > An: Klaus Darilion > Cc: Evan Hunt ; Gaurav Kansal ; bind- > u

AW: Does BIND supports ANAME RR

2021-08-09 Thread Klaus Darilion via bind-users
> On 09.08.21 13:55, Klaus Darilion via bind-users wrote: > >But honestly SVCB will not solve the ANAME problem. I will take years > > until all resolvers/client would support SVCB whereas ANAME would be > > implemented in the authoritative name server > > resolving on

AW: Does BIND supports ANAME RR

2021-08-09 Thread Klaus Darilion via bind-users
> -Ursprüngliche Nachricht- > Von: bind-users Im Auftrag von Evan > Hunt > Gesendet: Samstag, 7. August 2021 20:21 > An: Gaurav Kansal > Cc: bind-users@lists.isc.org > Betreff: Re: Does BIND supports ANAME RR > > On Sat, Aug 07, 2021 at 11:05:51PM +0530, Gaur

Re: DNSSEC questions

2021-08-09 Thread raf via bind-users
Hi Matthijs, On Mon, Aug 09, 2021 at 11:11:48AM +0200, Matthijs Mekking wrote: > Hi raf, > > On 09-08-2021 10:08, raf via bind-users wrote: > > Hi, > > > > I've got a bunch of DNSSEC questions. > > Any advice would be appreciated. > > > > The

DNSSEC questions

2021-08-09 Thread raf via bind-users
Hi, I've got a bunch of DNSSEC questions. Any advice would be appreciated. The context is a little VM with six little zones, soon to be upgraded to debian-11 and bind-9.16.15. I haven't signed my zones before but now is the time. I'm going to rotate KSKs annually because it's finally so easy

Re: Re: Multisite deployment issue

2021-08-08 Thread Daniel A. Rodriguez via bind-users
Armando Rodriguez via bind-users < bind-users@lists.isc.org> wrote: Was wondering If would be possible to setup a forwarding scheme just for some subdomains, I emphasize the fact that master is publicly accesible and current need is to locally resolv a bunch of subdomains of the same zone. I

dnssec-guide erratum

2021-08-06 Thread raf via bind-users
ut no salt-length 16; }; There should be an integer after "iterations". Based on the following text, the number of iterations should be 10. Should I submit a merge request, or can someone just fix it? cheers, raf ___ Please visit https://lists

Re: Different DNSSEC behaviour between two old versions

2021-08-05 Thread raf via bind-users
server that's doing its own resolving. Apologies for the noise. cheers, raf On Fri, Aug 06, 2021 at 11:56:06AM +1000, raf wrote: > Hi, > > Firstly, I'd like to thank everyone involved with making bind. > I'm used to using old versions (9.10.3 on an old ubuntu host) > and (9.11

Different DNSSEC behaviour between two old versions

2021-08-05 Thread raf via bind-users
Hi, Firstly, I'd like to thank everyone involved with making bind. I'm used to using old versions (9.10.3 on an old ubuntu host) and (9.11.5 on debian-10 stable). And just as I'm about to start using DNSSEC for my domains, debian-11 stable is about to come out in a few days with bind-9.16.15

RE: Add DNS records automatically for static IP's

2021-08-05 Thread Cuttler, Brian R (HEALTH) via bind-users
wiki article if you'd like to see it. Brian -Original Message- From: bind-users On Behalf Of Roberto Carna Sent: Thursday, August 5, 2021 12:19 PM To: ML BIND Users Subject: Add DNS records automatically for static IP's ATTENTION: This email came from an external source. Do not open

Re: Add DNS records automatically for static IP's

2021-08-05 Thread tale via bind-users
On Thu, Aug 5, 2021 at 12:19 PM Roberto Carna wrote: > I have several hosts with static IP's / hostnames and I want to > register them to our private BIND DNS, and they should be updated if > the IP or hostname changes. > > Is there any way to do what I need ? Any Linux

Re: Multisite deployment issue

2021-08-02 Thread Daniel Armando Rodriguez via bind-users
NS ns2.dominio.edu.ar. ;; ADDITIONAL SECTION: ns1.dominio.edu.ar. 3600IN A XXX.XXX.XXX.XXX ns2.dominio.edu.ar. 3600IN A XXX.XXX.XXX.XXY ;; Query time: 33 msec ;; SERVER: XXX.XXX.XXX.XXX#53(XXX.XXX.XXX.XXX) ;; WHEN: lun ago 02 17:36:42 -03 2021 ;; MSG SIZE

Re: Multisite deployment issue

2021-08-02 Thread Daniel Armando Rodriguez via bind-users
ppreciated. ___ Daniel A. Rodriguez Informática, Conectividad y Sistemas Universidad Nacional del Alto Uruguay San Vicente - Misiones - Argentina www.unau.edu.ar ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: should I be seeing piles of gnuism extensions in the test suite?

2021-07-31 Thread Dennis Clarke via bind-users
_ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org htt

should I be seeing piles of gnuism extensions in the test suite?

2021-07-30 Thread Dennis Clarke via bind-users
spoken GreyBeard and suspenders optional ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact

failed trust-anchor-telemetry queries

2021-07-27 Thread Klaus Darilion via bind-users
Hello! Bind version: 9.16.19-1+ubuntu18.04.1+isc+1 Recently I discovered these logs: 09:13:12 named[3234]: _default: sending trust-anchor-telemetry query '_ta-/NULL' 09:13:12 named[3234]: validating ./NSEC: no valid signature found 09:13:12 named[3234]: validating ./SOA: no valid

Re: ITS THE NUMBER OF CORES/THREADS

2021-07-23 Thread Peter via bind-users
update on how to get bind to run with parameters for windows make folder in C:\ named make file called named.bat in the bat file add: sc start named -n 7 in services > ISC BIND recovery tab first failure select run a program check enable actions for stops with errors in run program bro

Re: ITS THE NUMBER OF CORES/THREADS

2021-07-23 Thread Peter via bind-users
Yes I went in services and put in start parameters -n 7 and 9.16.19 started however a bug in windows means it does not save the parameter at least I think it a bug so you have to manually put in -n 7 to start bind. On 23/07/2021 7:53 pm, Ondřej Surý wrote: Thanks, having such a simple

Re: ITS THE NUMBER OF CORES/THREADS

2021-07-23 Thread Peter via bind-users
Well I reported it and we see what happens my main bind is not in a virtual machine I guess I cound disbale Hyper-Threading as a workaround... ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds

ITS THE NUMBER OF CORES/THREADS

2021-07-23 Thread Peter via bind-users
So after ALL that it was down to the number of cores/threads, anything more then 7 cores/threads and 9.16.19 WILL NOT RUN tested in avirtual PC. Man what A BUG ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: Sorry

2021-07-22 Thread Vinícius Ferrão via bind-users
I second that or just improve your skills on Unix systems and runs FreeBSD instead on it. On 22 Jul 2021, at 19:46, John W. Blue via bind-users mailto:bind-users@lists.isc.org>> wrote: I’m not judging but it sounds like to me what you are really describing is PTSD from installing Win

RE: Sorry

2021-07-22 Thread John W. Blue via bind-users
I’m not judging but it sounds like to me what you are really describing is PTSD from installing Windows 7 and “upgrading” it to Windows 10. :D I too use Microsoft products but for infrastructure services facing the open Internet (like DNS) I only use BIND running on FreeBSD. Not knowing

Sorry

2021-07-22 Thread Peter via bind-users
...and I can only think of one reason I am being punished and the dark side of me is saying that the dev have coded bind not to work on my system they know about...yes that is crazy but I'm out of ideals short from building another system and buy another win10 key

New BIND 9.16.19 I think don't run with Intel VLANs

2021-07-21 Thread Peter via bind-users
I have three PC's tested that all work fine on 9.16.15 or 9.17.12 with my Intel VLANs but 9.16.19 simply will not start. Is this a new limitation for BIND on windows now? or a change that causes it not to run if it detects VLANs with the intel APP

Re: Resolve any query to same IP address

2021-07-21 Thread Kevin Darcy via bind-users
On Wed, Jul 21, 2021 at 11:18 AM Jeronimo wrote: > Hi, > > how can I get the same IPv6 address as the answer to any query to my Bind9? > > I am using Ubuntu 20 and Bind 9.11 whit configuration as bellow: > > -- > $ cat /etc/bind/named.conf > include "/etc/b

Re: query-source and listened interfaces

2021-07-13 Thread Kevin Darcy via bind-users
stination combined > with query-source for each view. But it seems similar to running separate > bind instances. I think it would have different cache anyway. > > Can you share why source addresses are important? > > Cheers, > > Petr > On 7/8/21 9:08 AM, Xinyu Wang wrote: > &

Re: non-improving referral

2021-07-08 Thread tale via bind-users
On Thu, Jul 8, 2021 at 1:38 AM Mark Andrews wrote: > AA is NOT set so it is not a valid answer to the question. Ahh that was the part that I overlooked. -- tale ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscr

query-source and listened interfaces

2021-07-08 Thread 201907-bind
, though. Patrick ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information

Re: non-improving referral

2021-07-07 Thread tale via bind-users
https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Contents of bind-users digest...

2021-07-06 Thread Eric Germann via bind-users
Or “make dig” > On Jul 6, 2021, at 11:47, Paul Kosinski via bind-users > wrote: > > On Tue, 6 Jul 2021 12:44:15 + > "MURTARI, JOHN" wrote: > >> Folks, let me add my desire for a quick download dig supporting DoH. It >> could really help with s

Re: Contents of bind-users digest...

2021-07-06 Thread Paul Kosinski via bind-users
included > and we set the LD_LIBRARY_PATH, or a 'static' link? > > > It only takes a 'few minutes' more -- once you spend a few hours getting the > whole environment setup. some don't build it all the time. > > > I'll give ISC Five Stars on Google!  > > &

dig standalone source?

2021-07-05 Thread Eric Germann via bind-users
Has ISC given any thought to releasing dig as a separate source package? It’s good for testing DoH, but you need to build the entire bind package to get it. It would be useful for support analysts without the overhead of compiling all of bind to get it --- Eric Germann ekgermann {at} semperen

Re: Compiling bind 9.17.15 with alternate OpenSSL library

2021-07-05 Thread Eric Germann via bind-users
>> >>> There’s no such option to configure. >>> >>> Ondřej >>> -- >>> Ondřej Surý — ISC (He/Him) >>> >>> My working hours and your working hours may be different. Please do not >>> feel obligated to reply outside your n

Re: Compiling bind 9.17.15 with alternate OpenSSL library

2021-07-05 Thread Eric Germann via bind-users
tory. > > There’s no such option to configure. > > Ondřej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >> On 5. 7. 2021, at 18:2

Compiling bind 9.17.15 with alternate OpenSSL library

2021-07-05 Thread Eric Germann via bind-users
I’m in the process of building a custom version of bind with DoH and would also like to add DNSSEC algorithm 15 for experimental purposes DoH works just fine on the servers I have configured. My “configure" command is ./configure --with-openssl=../openssl-1.1.1k --with-libxml2 --with-j

Re: bind-chroot is not re-positioning my forward and reverse tables

2021-07-01 Thread ToddAndMargo via bind-users
On 7/1/21 9:10 AM, Petr Menšík wrote: Hi, On 6/30/21 5:11 AM, ToddAndMargo via bind-users wrote: On 6/27/21 4:01 PM, Reindl Harald wrote: seriosly i am beginning to wonder if you should simply give up bind-chroot Never quit!  :-) Is is not a bad idea. If you are running SELinux

Re: bind-chroot is not re-positioning my forward and reverse tables

2021-06-29 Thread ToddAndMargo via bind-users
On 6/24/21 9:00 PM, ToddAndMargo via bind-users wrote: Hi All, Fedora 34 bind-chroot-9.16.16-1.fc34.x86_64 I am trying to clean up my bind-chroot forward and reverse files. The goal is to have bind-chroot do its thing by duplicating these two files over into     /var/named/chroot/var

Re: bind-chroot is not re-positioning my forward and reverse tables

2021-06-29 Thread ToddAndMargo via bind-users
On 6/27/21 4:01 PM, Reindl Harald wrote: seriosly i am beginning to wonder if you should simply give up bind-chroot Never quit! :-) it's not the job of the chroot bind-mount setup to mount each and every file and 'file "abc.hosts.rev"' without any path makes no sense just

Re: bind-chroot is not re-positioning my forward and reverse tables

2021-06-27 Thread ToddAndMargo via bind-users
On 6/27/21 3:40 PM, ToddAndMargo via bind-users wrote: On 6/26/21 7:31 PM, ToddAndMargo via bind-users wrote: On 6/24/21 9:00 PM, ToddAndMargo via bind-users wrote: The goal is to have bind-chroot do its thing mount --bind https://bugzilla.redhat.com/show_bug.cgi?id=1972022#c3

Re: bind-chroot is not re-positioning my forward and reverse tables

2021-06-27 Thread ToddAndMargo via bind-users
On 6/26/21 7:31 PM, ToddAndMargo via bind-users wrote: On 6/24/21 9:00 PM, ToddAndMargo via bind-users wrote: The goal is to have bind-chroot do its thing mount --bind https://bugzilla.redhat.com/show_bug.cgi?id=1972022#c3 It is not occurring on my zone files.  Is it suppose to? I have

Re: bind-chroot is not re-positioning my forward and reverse tables

2021-06-26 Thread ToddAndMargo via bind-users
On 6/24/21 9:00 PM, ToddAndMargo via bind-users wrote: The goal is to have bind-chroot do its thing mount --bind https://bugzilla.redhat.com/show_bug.cgi?id=1972022#c3 It is not occurring on my zone files. Is it suppose to? ___ Please visit https

Re: Odd A record in our hosts zone file

2021-06-25 Thread Eric Germann via bind-users
gt; ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ f

bind-chroot is not re-positioning my forward and reverse tables

2021-06-24 Thread ToddAndMargo via bind-users
Hi All, Fedora 34 bind-chroot-9.16.16-1.fc34.x86_64 I am trying to clean up my bind-chroot forward and reverse files. The goal is to have bind-chroot do its thing by duplicating these two files over into /var/named/chroot/var/named/slaves/ with the identical inodes like it does

Re: Managing localhost

2021-06-24 Thread Grant Taylor via bind-users
Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.

RHEL, Centos, Fedora rpm 9.16.18

2021-06-22 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 https://www.five-ten-sg.com/mapper/bind contains links to the source rpm, and build instructions. This .src.rpm contains a .tar.gz file with the ARM documentation, so the rpm rebuild process does not need sphinx- build and associated dependencies

Re: Best DNSSEC documentation for current version?

2021-06-21 Thread John W. Blue via bind-users
From: bind-users on behalf of Brett Delmage Sent: Monday, June 21, 2021 2:58 PM To: bind-users Subject: Best DNSSEC documentation for current version? I am looking to read the best documentation on DNSSEC configuration for the current versions on BIND

Re: Managing localhost

2021-06-21 Thread Kevin Darcy via bind-users
entries in *any* zone, forward or reverse, serve any useful purpose, and may actually cause harm. - Kevin On Mon, Jun 21, 2021 at 12:48 PM wrote: > Hi, > > This book : > https://www.oreilly.com/library/view/dns-and-bind/0596100574/ch04.html > says I should manage the localhost wi

Re: cmdns.dev.dns-oarc.net oddness with windows 10 and bind

2021-06-20 Thread Peter via bind-users
Seems fine now they must of fixed the testing. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-19 Thread Peter via bind-users
Well for the time being I give up I think something like this happen before many years ago, I'm sure someone will post having this iusse. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-19 Thread Peter via bind-users
I getnothing which means good? installed back to the default path. C:\Program Files\ISC BIND 9\bin>named-checkconf C:\Program Files\ISC BIND 9\bin> On 19/06/2021 5:53 pm, Richard T.A. Neal wrote: And what do you get when you run c:\BIND\named-checkconf ? R

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-19 Thread Peter via bind-users
My config runs fine on BIND 9.17.12 so its not the config I even install bind in C:\BIND with a VERY simple config that 9.17.12 runs that 9.16.18 does not and I installed 9.16.18 on a vary new system it simply does not run. named.conf options {     forward only;     forwarders

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Peter via bind-users
(re)start the “ISC BIND” service on my Windows server I get **loads** of entries in the Application log, starting with these three: starting BIND 9.16.18 (Stable Release) running on Windows 10 0 build 17763 1879 for x64 [it’s actually Windows Server being misdetected as Windows 10, but

Re: Limit actions on control channel?

2021-06-18 Thread Paul Kosinski via bind-users
It ought to be possible to write a front-end to listen on the standard control channel and only forward (properly-keyed) 'status' requests to the "real" port that BIND listens to. >From looking at the RNDC exchange via Wireshark however, you'd have to adapt >some of BIND'

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Peter via bind-users
I go back to BIND 9.17.12 and is starts fine install BIND 9.16.18 changed log on to “local system account” like I have done for years go to start BIND get error 1067 in: system logs The ISC BIND service terminated unexpectedly. It has done this 1 time(s). The following corrective action

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Peter via bind-users
Even BIND9.16.18 will not run on windows 10 same error On 18/06/2021 2:21 pm, Ondřej Surý wrote: Hi Peter, the Windows support in 9.17 has been discontinued (as discussed on this very mailing list). So, while technically the BIND 9.17.14/9.17.15 still includes the Windows binaries, the code

Re: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14

2021-06-18 Thread Peter via bind-users
Well I don't know about anyone else but BIND 9.17.14 did not want to start in win 10 “windows could not start the ISC BIND service on local computer Error 1067: the process terminated unexpectedly.” ___ Please visit https://lists.isc.org/mailman

Re: How do I identify if bind9 is using 4 cores?

2021-06-17 Thread Dennis Clarke via bind-users
On 6/17/21 03:47, Manish Rane wrote: > Does this mean and I can assume that bind has started with 4 cores? > > CGroup: /system.slice/named.service >`-3150 /usr/sbin/named -f -u bind -n 4 >

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-17 Thread ToddAndMargo via bind-users
sudo" in a root shell case closed All I have to do is get over hating the sudo command. And I kinda-sorta of expect anyone that uses "bind" (power uses in the extreme -- genius level) to know what # and $ at the prompt means. ___ Plea

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread Todd Chester via bind-users
tart. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users

RHEL, Centos, Fedora rpm 9.16.17

2021-06-16 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 https://www.five-ten-sg.com/mapper/bind contains links to the source rpm, and build instructions. This .src.rpm contains a .tar.gz file with the ARM documentation, so the rpm rebuild process does not need sphinx- build and associated dependencies

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread ToddAndMargo via bind-users
$, but I can see now where that would cause some confusion. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at

A question on logging

2021-06-16 Thread ToddAndMargo via bind-users
bottom of my logging statement that will keep me from having to put a # in front of every line? Many thanks, -T ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of t

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread ToddAndMargo via bind-users
On 6/16/21 2:16 AM, Reindl Harald wrote: Am 16.06.21 um 09:31 schrieb ToddAndMargo via bind-users: ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' meaning 'this line is a comment'.  I guess this is a write-up for a novice. The non-novices here

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread ToddAndMargo via bind-users
On 6/15/21 11:54 PM, G.W. Haywood via bind-users wrote: Hi there, On Wed, 16 Jun 2021, ToddAndMargo wrote: Re: My FC33->FC34 bind-chroot upgrade notes I hope this is the last time I have to revise this! ... Unfortunately perhaps not. :'( ... # means root $ means user ... Someti

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread G.W. Haywood via bind-users
Hi there, On Wed, 16 Jun 2021, ToddAndMargo wrote: Re: My FC33->FC34 bind-chroot upgrade notes I hope this is the last time I have to revise this! ... Unfortunately perhaps not. ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' mean

<    4   5   6   7   8   9   10   11   12   13   >