Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-19 Thread Peter via bind-users
I getnothing which means good? installed back to the default path. C:\Program Files\ISC BIND 9\bin>named-checkconf C:\Program Files\ISC BIND 9\bin> On 19/06/2021 5:53 pm, Richard T.A. Neal wrote: And what do you get when you run c:\BIND\named-checkconf ? R

RE: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-19 Thread Richard T.A. Neal
And what do you get when you run c:\BIND\named-checkconf ? Richard. From: bind-users On Behalf Of Peter via bind-users Sent: 19 June 2021 3:41 pm To: bind-users@lists.isc.org Subject: Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-19 Thread Peter via bind-users
My config runs fine on BIND 9.17.12 so its not the config I even install bind in C:\BIND with a VERY simple config that 9.17.12 runs that 9.16.18 does not and I installed 9.16.18 on a vary new system it simply does not run. named.conf options {     forward only;     forwarders

RE: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Richard T.A. Neal
The next Event Log entry on my system immediately after "using 1 UDP listener per interface" is: loading configuration from 'C:\BIND\etc\named.conf' (because that's my BIND installation folder obviously). If I intentionally make a typo in any of my config files (eg

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Peter via bind-users
(re)start the “ISC BIND” service on my Windows server I get **loads** of entries in the Application log, starting with these three: starting BIND 9.16.18 (Stable Release) running on Windows 10 0 build 17763 1879 for x64 [it’s actually Windows Server being misdetected as Windows 10, but

RE: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Richard T.A. Neal
When you say “in Application logs show fine” – how far does named actually get (if at all)? For example whenever I (re)start the “ISC BIND” service on my Windows server I get *loads* of entries in the Application log, starting with these three: starting BIND 9.16.18 (Stable Release) running

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Peter via bind-users
I go back to BIND 9.17.12 and is starts fine install BIND 9.16.18 changed log on to “local system account” like I have done for years go to start BIND get error 1067 in: system logs The ISC BIND service terminated unexpectedly. It has done this 1 time(s). The following corrective action

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Ondřej Surý
. 6. 2021, at 16:08, Richard T.A. Neal wrote: > > On 18/06/2021 2:48 pm, Peter wrote: > >> Even BIND9.16.18 will not run on windows 10 same error > > I can't reproduce this error - I've just successfully upgraded from BIND > 9.16.15 to BIND 9.16.18 on my Windows (2019) ser

RE: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Richard T.A. Neal
On 18/06/2021 2:48 pm, Peter wrote: > Even BIND9.16.18 will not run on windows 10 same error I can't reproduce this error - I've just successfully upgraded from BIND 9.16.15 to BIND 9.16.18 on my Windows (2019) server. Do you see a more detailed error in Computer Management > Window

Re: Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Peter via bind-users
Even BIND9.16.18 will not run on windows 10 same error On 18/06/2021 2:21 pm, Ondřej Surý wrote: Hi Peter, the Windows support in 9.17 has been discontinued (as discussed on this very mailing list). So, while technically the BIND 9.17.14/9.17.15 still includes the Windows binaries, the code

Windows support has been discontinued in BIND 9.17+ (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Ondřej Surý
Hi Peter, the Windows support in 9.17 has been discontinued (as discussed on this very mailing list). So, while technically the BIND 9.17.14/9.17.15 still includes the Windows binaries, the code has been removed in the git repository, and the issue you are experiencing will not get a fix

Re: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14

2021-06-18 Thread Peter via bind-users
Well I don't know about anyone else but BIND 9.17.14 did not want to start in win 10 “windows could not start the ISC BIND service on local computer Error 1067: the process terminated unexpectedly.” ___ Please visit https://lists.isc.org/mailman

Re: Only zones with wildcards affected on authoritative servers (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Ondřej Surý
the release tarball as of this moment and the > fixed tarballs will be published as soon as they are ready. > > Sorry for any inconvenience this might have caused, we wish we would have > caught this during our extensive testing, but alas we didn’t. > > Thanks, > Ondrej > -- >

Only zones with wildcards affected on authoritative servers (Was: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14)

2021-06-18 Thread Ondřej Surý
> Dear BIND users: > > Yesterday, 16 June 2021, we released monthly maintenance snapshot releases of > our currently supported release branches of BIND. > > Specifically, we released BIND 9.11.33, 9.16.17, and 9.17.14 > > There's no way to say this that isn't embarrassi

Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14

2021-06-17 Thread Michael McNally
Dear BIND users: Yesterday, 16 June 2021, we released monthly maintenance snapshot releases of our currently supported release branches of BIND. Specifically, we released BIND 9.11.33, 9.16.17, and 9.17.14 There's no way to say this that isn't embarrassing, but only after the release

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-17 Thread Reindl Harald
Am 17.06.21 um 21:43 schrieb ToddAndMargo via bind-users: On 6/17/21 3:12 AM, Reindl Harald wrote: however, in the real world just write "sudo command" is the best you can do - for the average user it's complete and leaves no questions for power users which don't like sudo

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-17 Thread ToddAndMargo via bind-users
sudo" in a root shell case closed All I have to do is get over hating the sudo command. And I kinda-sorta of expect anyone that uses "bind" (power uses in the extreme -- genius level) to know what # and $ at the prompt means. ___ Plea

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-17 Thread Reindl Harald
Am 17.06.21 um 07:43 schrieb Todd Chester via bind-users: On 6/16/21 2:52 PM, Reindl Harald wrote: Does this alteration at the top make it any clearer? Note: at the command prompt, I use the following terminology:     # means run as root     $ means run as user Inside

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread Todd Chester via bind-users
tart. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread Reindl Harald
Am 16.06.21 um 20:31 schrieb ToddAndMargo via bind-users: On 6/16/21 2:16 AM, Reindl Harald wrote: Am 16.06.21 um 09:31 schrieb ToddAndMargo via bind-users: ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' meaning 'this line is a comment'.  I

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread ToddAndMargo via bind-users
$, but I can see now where that would cause some confusion. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at

RE: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread Richard T.A. Neal
onstrates using sudo to achieve this. Best, Richard. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.or

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread ToddAndMargo via bind-users
On 6/16/21 2:16 AM, Reindl Harald wrote: Am 16.06.21 um 09:31 schrieb ToddAndMargo via bind-users: ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' meaning 'this line is a comment'.  I guess this is a write-up for a novice. The non-novices here

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread Reindl Harald
Am 16.06.21 um 09:31 schrieb ToddAndMargo via bind-users: ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' meaning 'this line is a comment'.  I guess this is a write-up for a novice. The non-novices here have overlooked it, but I'm much closer

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread ToddAndMargo via bind-users
On 6/15/21 11:54 PM, G.W. Haywood via bind-users wrote: Hi there, On Wed, 16 Jun 2021, ToddAndMargo wrote: Re: My FC33->FC34 bind-chroot upgrade notes I hope this is the last time I have to revise this! ... Unfortunately perhaps not. :'( ... # means root $ means user ... Someti

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-16 Thread G.W. Haywood via bind-users
Hi there, On Wed, 16 Jun 2021, ToddAndMargo wrote: Re: My FC33->FC34 bind-chroot upgrade notes I hope this is the last time I have to revise this! ... Unfortunately perhaps not. ... # means root $ means user ... Sometimes, in your configuration file extracts, you use '#' mean

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread ToddAndMargo via bind-users
On 6/15/21 6:59 PM, ToddAndMargo via bind-users wrote: On 6/15/21 12:51 PM, ToddAndMargo via bind-users wrote: On 6/14/21 10:02 PM, ToddAndMargo via bind-users wrote: Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34.  Here are my notes

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread ToddAndMargo via bind-users
On 6/15/21 12:51 PM, ToddAndMargo via bind-users wrote: On 6/14/21 10:02 PM, ToddAndMargo via bind-users wrote: Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34.  Here are my notes. Hope this helps someone else. -T Here are my

Re: My FC33->FC34 bind-chroot upgrade notes

2021-06-15 Thread ToddAndMargo via bind-users
On 6/14/21 10:02 PM, ToddAndMargo via bind-users wrote: Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34.  Here are my notes. Hope this helps someone else. -T Well, if at first you don't succeed, revise! See changes

My FC33->FC34 bind-chroot upgrade notes

2021-06-14 Thread ToddAndMargo via bind-users
Hi All, Thank you all for the enormous help in me getting bind-chroot working after upgrading to Fedora 34. Here are my notes. Hope this helps someone else. -T Broken bind-chroot repair after upgrading to Fedora 34: # means root $ means user 1) temporary workaround so you can surf

Re: DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-13 Thread Manish Rane
AM Tony Finch wrote: > Walter H. via bind-users wrote: > > > > DOH/DOT is dead; > > > > use DNSSEC instead and no troubles; > > No. > > DNSSEC is about data integrity. It allows me to host my zones with a > collection of semi-trusted third parties withou

Re: DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-13 Thread Tony Finch
Walter H. via bind-users wrote: > > DOH/DOT is dead; > > use DNSSEC instead and no troubles; No. DNSSEC is about data integrity. It allows me to host my zones with a collection of semi-trusted third parties without having to worry about them changing my DNS records. It allows client

Re: DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-12 Thread Walter H. via bind-users
On 12.06.2021 14:24, Richard T.A. Neal wrote: Mainsh – I haven’t done any experimenting with DOT, but there’s a guide for configuring DOH at the following page. It requires BIND 9.17.10 or higher (DOH isn’t being backported to BIND 9.16): https://www.isc.org/blogs/doh-talkdns/ Walter – I’m

RE: DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-12 Thread Richard T.A. Neal
Mainsh – I haven’t done any experimenting with DOT, but there’s a guide for configuring DOH at the following page. It requires BIND 9.17.10 or higher (DOH isn’t being backported to BIND 9.16): https://www.isc.org/blogs/doh-talkdns/ Walter – I’m not sure why you’d say DOH/DOT is dead

Re: DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-12 Thread Walter H. via bind-users
On 12.06.2021 04:52, Manish Rane wrote: Hi Team, I am using BIND 9.11.3-1ubuntu1.12-Ubuntu version for my BIND and planning to use ISC PPA and use 9.16.16. So my queries are 1. Is DOH/DOT officially supported now? 2. And how do I DOH forwarding in my BIND configuration? DOH/DOT is dead

DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-11 Thread Manish Rane
Hi Team, I am using BIND 9.11.3-1ubuntu1.12-Ubuntu version for my BIND and planning to use ISC PPA and use 9.16.16. So my queries are 1. Is DOH/DOT officially supported now? 2. And how do I DOH forwarding in my BIND configuration? ___ Please

cmdns.dev.dns-oarc.net oddness with windows 10 and bind

2021-06-10 Thread Peter via bind-users
So I redone my windows bind setup on a new system and this bug may never get fixed but I wanted to post the oddness of this bug. Bind on New PC as servers 127.0.0.1 for dns on that system cmdns.dev.dns-oarc.net reports fine except for IPv6 test OK I then have two PC's as clients to this DNS

Re: root.hints - apparmor access error with Bind from PPA

2021-06-04 Thread 3coma3
Hi G.W., On 4/6/21 12:33, G.W. Haywood via bind-users wrote: > Hi there, > > On Fri, 4 Jun 2021, 3coma3 wrote: > >> Jun 3 22:03:53 ... apparmor="DENIED" ... "/usr/share/dns/root.hints" ... > > This isn't exactly an answer to your question but I don't th

Re: root.hints - apparmor access error with Bind from PPA

2021-06-04 Thread 3coma3
he following (redundant) permissions: / r, /usr r, /usr/share r, /usr/share/dns r, Then reloaded the apparmor profiles, changed back the zone definition, restarted bind and voila, it started correctly. What's interesting is that after *undoing* the above permissions and going back to the origi

Re: root.hints - apparmor access error with Bind from PPA

2021-06-04 Thread G.W. Haywood via bind-users
, and I haven't used root.hints for years. The hints section (zone ".") in my named.conf is just commented out. https://kb.isc.org/docs/aa-01309 HTH -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscr

Re: root.hints - apparmor access error with Bind from PPA

2021-06-04 Thread Timothe Litt
n-21 22:45, 3coma3 wrote: > Dear list: > > I've used the PPA at https://launchpad.net/~isc/+archive/ubuntu/bind to > upgrade > bind from 9.11.3+dfsg-1ubuntu1.15 (current version for > bionic-{updates,security}) to 9.16.16-2+ubuntu18.04.1+isc+1 > > (I was needing to use the v

root.hints - apparmor access error with Bind from PPA

2021-06-03 Thread 3coma3
Dear list: I've used the PPA at https://launchpad.net/~isc/+archive/ubuntu/bind to upgrade bind from 9.11.3+dfsg-1ubuntu1.15 (current version for bionic-{updates,security}) to 9.16.16-2+ubuntu18.04.1+isc+1 (I was needing to use the validate-except clause and this new version supports it) After

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Danny Mayer via bind-users
On 6/3/21 7:05 PM, Peter via bind-users wrote: Guess not even a subscription will not happen too. I'm having to try and do Bind on ubuntu and it just will not let me edit files like named.conf unless you do some vodoo that I don't understand and even updating the bind like how? Windows

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Danny Mayer via bind-users
On 6/3/21 2:17 PM, Reindl Harald wrote: Am 03.06.21 um 20:12 schrieb Danny Mayer via bind-users: I don't speak for ISC but it's important to understand that support of an operating system costs money and unless a company or organization is willing to step up with money it cannot

Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Peter via bind-users
Guess not even a subscription will not happen too. I'm having to try and do Bind on ubuntu and it just will not let me edit files like named.conf unless you do some vodoo that I don't understand and even updating the bind like how? Windows no problem you want to edit a file no problem can't

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Ondřej Surý
. > On 3. 6. 2021, at 22:14, Peter via bind-users > wrote: > > Maybe they could release a bind for windows ever year with limited support? > But I guess bind will still work long after its not supported which is the > only good thing. > ___

Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Peter via bind-users
Maybe they could release a bind for windows ever year with limited support? But I guess bind will still work long after its not supported which is the only good thing. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Reindl Harald
Am 03.06.21 um 20:12 schrieb Danny Mayer via bind-users: I don't speak for ISC but it's important to understand that support of an operating system costs money and unless a company or organization is willing to step up with money it cannot be expected to continue support

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Danny Mayer via bind-users
the effort was made. FWIW. Danny On 6/3/21 4:03 AM, Richard T.A. Neal wrote: Thanks Vicky and Ondrej for providing clarity. I'll be sad to see it when this happens but as I said in my original post I don't underestimate the sheer amount of effort required to maintain BIND for Windows going

RE: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-03 Thread Richard T.A. Neal
Thanks Vicky and Ondrej for providing clarity. I'll be sad to see it when this happens but as I said in my original post I don't underestimate the sheer amount of effort required to maintain BIND for Windows going forwards so it's completely understandable that you want to focus on platforms

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-02 Thread negativeindex
Lol. End Of The Road. Queue boys 2 men... https://g.co/kgs/8G4XvF On Wed, Jun 2, 2021, 16:10 Victoria Risk wrote: > > On Jun 2, 2021, at 3:24 PM, Peter via bind-users < > bind-users@lists.isc.org> wrote: > > > > Well that sucks no more bind for windows...:( >

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-02 Thread Victoria Risk
> On Jun 2, 2021, at 3:24 PM, Peter via bind-users > wrote: > > Well that sucks no more bind for windows...:( We are supporting BIND 9.16 on Windows, and we are supporting 9.16 through the end of 2024, so we are not at the end of the road yet! https://kb.isc.org/docs/aa-

Deprecating BIND 9.18+ on Windows (or making it community improved and supported

2021-06-02 Thread Peter via bind-users
Well that sucks no more bind for windows...:( ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported)

2021-06-02 Thread Victoria Risk
ill not support Windows with BIND 9.18. I see Ondrej replied on this point. > > If 9.16 is to be the last officially supported Windows version then have you > decided yet which features from 9.17 will be backported into 9.16 and thus > receive official support? We are not goin

Re: Deprecating BIND 9.18+ on Windows (or making it community improved and supported)

2021-06-02 Thread Ondřej Surý
orted Windows version then have you > decided yet which features from 9.17 will be backported into 9.16 and thus > receive official support? > > Easy example: DNS over HTTPS which I believe was initially hoped to be > backported into BIND 9.16 around the April/May timeframe

RE: Deprecating BIND 9.18+ on Windows (or making it community improved and supported)

2021-06-02 Thread Richard T.A. Neal
will be backported into 9.16 and thus receive official support? Easy example: DNS over HTTPS which I believe was initially hoped to be backported into BIND 9.16 around the April/May timeframe this year. Thanks, Richard. -Original Message- From: bind-users On Behalf Of Ondrej Surý Sent

RE: Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-06-01 Thread Richard T.A. Neal
://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: Bind - OPT UDPsize=1232 ?

2021-06-01 Thread Anand Buddhdev
mething like this in your config: server a.b.c.d/n { edns-udp-size 2000; // adjust appropriately } Read the BIND documentation for details so that you understand this fully. Regards, Anand ___ Please visit https://lists.isc.org/mailman/listinf

Re: Bind - OPT UDPsize=1232 ?

2021-06-01 Thread Karl Pielorz
--On 1 June 2021 at 13:03:12 +0200 Anand Buddhdev wrote: On 01/06/2021 12:55, Karl Pielorz wrote: Hi Karl, Anyone know why the Bind query appears to set such a low UDPsize? - We've nothing in our config setting sizes, or maximums. Here's an answer: https://bind9.readthedocs.io/en

Re: Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-06-01 Thread Gregory Sloop
rt for DoH at the operating system level. I spent a little time this weekend setting-up BIND 9.17.13 on Ubuntu 21.04 and configuring the system as a recursive resolver offering DNS over HTTPS using a LetsEncrypt certificate. Is there any interest in me writing this up as a web article, or has every

Re: Bind - OPT UDPsize=1232 ?

2021-06-01 Thread Anand Buddhdev
On 01/06/2021 12:55, Karl Pielorz wrote: Hi Karl, > Anyone know why the Bind query appears to set such a low UDPsize? - > We've nothing in our config setting sizes, or maximums. Here's an answer: https://bind9.readthedocs.io/en/v9_16_16/notes.html#notes-for-bind-9-16-16 Regards,

Bind - OPT UDPsize=1232 ?

2021-06-01 Thread Karl Pielorz
Hi, If I switch between having Bind go lookup a name, and dig - I can see a difference in tcpdump, i.e. Bind 9.16.16: 11:44:19.041785 IP (tos 0x0, ttl 64, id 3613, offset 0, flags [none], proto UDP (17), length 66) Us.54445 > Them.53: 3636 [1au] MX? somedomain.org. ar: . OPT UDPs

Re: Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-05-31 Thread Xavier Humbert via bind-users
On 30/05/2021 17:24, Richard T.A. Neal wrote: DNS over HTTPS support appears to be steadily increasing and it looks like the next version of Windows 10, Windows 10 21H2, will including support for DoH at the operating system level. � I spent a little time this weekend setting-up BIND

Re: Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-05-31 Thread @lbutlr via bind-users
On 30 May 2021, at 12:23, Grant Taylor via bind-users wrote: > On 5/30/21 9:24 AM, Richard T.A. Neal wrote: >> I spent a little time this weekend setting-up BIND 9.17.13 on Ubuntu 21.04 >> and configuring the system as a recursive resolver offering DNS over HTTPS >>

Re: Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-05-30 Thread Grant Taylor via bind-users
On 5/30/21 9:24 AM, Richard T.A. Neal wrote: I spent a little time this weekend setting-up BIND 9.17.13 on Ubuntu 21.04 and configuring the system as a recursive resolver offering DNS over HTTPS using a LetsEncrypt certificate. Nice work. Is there any interest in me writing this up as a web

Re: Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-05-30 Thread Carl Byington via bind-users
sit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.or

Any interest in a write-up showing how to configure BIND 9.17x with DoH and LetsEncrypt?

2021-05-30 Thread Richard T.A. Neal
DNS over HTTPS support appears to be steadily increasing and it looks like the next version of Windows 10, Windows 10 21H2, will including support for DoH at the operating system level. I spent a little time this weekend setting-up BIND 9.17.13 on Ubuntu 21.04 and configuring the system

Re: Problems with compiling BIND 9.17.10 or above ...

2021-05-27 Thread Ondřej Surý
checking for BIO_read_ex... no > checking for BIO_write_ex... no > checking for SSL_CTX_up_ref... no > checking for SSL_CTX_set_min_proto_version... no > checking for ECDSA_sign... no > configure: error: in `/root/tools/software/bind-9.17.13': > configure: error: ECDSA support in OpenSS

Fwd: Problems with compiling BIND 9.17.10 or above ...

2021-05-27 Thread Rick Dicaire
ecking for ECDSA_sign... no configure: error: in `/root/tools/software/bind-9.17.13': configure: error: ECDSA support in OpenSSL is mandatory. But with the command "openssl ciphers -v 'ALL:COMPLEMENTOFALL' | grep ECDSA" I get several lines with ECDSA. What cou

Re: BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-27 Thread Erich Eckner
rom here: https://users.isc.org/~ondrej/bind-9.16.17-pre.tar.xz We would like to hear both success (it’s ok here in the mailing list) and failure stories (please create GitLab issues). Thanks, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org ___ Pl

Re: Problems with compiling BIND 9.17.10 or above ...

2021-05-26 Thread Rick Dicaire
On Wed, May 26, 2021 at 1:07 PM Zhéxué M. @SysAdmin < sys.admin@zhéxué-cloud.eu> wrote: > The path of the library is set correctly... > How are you setting it? ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsub

Problems with compiling BIND 9.17.10 or above ...

2021-05-26 Thread Zhéxué M. @SysAdmin
Dear Ladies and Gentlemen, I wanted to update my BIND server to the current version 9.10.17 and keep getting stuck in the compile process. First I compiled and installed the tool "NGHTTP/2" under "/user/local/nghttp2/1.43.0/". But the "CONFIGURE" - process

Re: BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-26 Thread G.W. Haywood via bind-users
Hi there, On Wed, 26 May 2021, He/Him wrote: we merged a change that substantially reduces a contention between threads and improves the recursive performance ... We are currently running 9.11.26, and 9.11 has always built with no issues. Debian 9.13 (Stretch). $ aunpack bind-9.16.17

Re: BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-25 Thread Petr Bena
e (since a version to be released in June). > Although, we are quite confident that the new code is correct, we would appreciate > if people running different work loads than ours to test the snapshot tarball available > from here: > https://users.isc.org/~ondrej/bind-9.16.17-pre.tar.xz I

Re: BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-25 Thread Ondřej Surý
(already the case, from the very > > beginning) > > and recursive (since a version to be released in June). > > > > Although, we are quite confident that the new code is correct, we would > > appreciate > > if people running different work loads than ours to test

Re: BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-25 Thread Erich Eckner
than ours to test the snapshot tarball available from here: https://users.isc.org/~ondrej/bind-9.16.17-pre.tar.xz I tried to pull the tarball from this url, but only got some gitlab page (which firefox refused to show, but insisted to download). Is this my error or did you accidentally push

BIND 9.16.17-snapshot - testers needed - recursive performance

2021-05-25 Thread Ondřej Surý
beginning) and recursive (since a version to be released in June). Although, we are quite confident that the new code is correct, we would appreciate if people running different work loads than ours to test the snapshot tarball available from here: https://users.isc.org/~ondrej/bind-9.16.17

RE: Using Ansible to manage bind installation/basic setup.

2021-05-21 Thread Stoffel, John (TAI)
Marlborough, MA 01752 508-736-5499 (mobile) E-Mail: john.stof...@toshiba.com<mailto:john.stof...@toshiba.com> Website: Service Now Self Service Portal<https://nassc.service-now.com/ess/navpage.do> From: bind-users On Behalf Of MURTARI, JOHN Sent: Wednesday, May 19, 2021 7:40 AM To

Re: Syslog with BIND on CentOS

2021-05-21 Thread John Thurston
-465-8591 john.thurs...@alaska.gov Department of Administration State of Alaska ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions.

Re: Syslog with BIND on CentOS

2021-05-21 Thread Petr Menšík
Hello John, I think it should be possible to use chroot and have there custom socket mapped directly to rsyslog. bind-chroot should be available in CentOS, try running named-chroot.service instead of named.service. I have not tried it on real installation, but I guess it should be easiest way

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-21 Thread Manish Rane
On 20/05/2021 00:06, Michael McNally wrote: > > > > Hi ISC people, > > > > > RELEASE-NOTES-bind-9.16.16.html > > > > I was just reading the release notes, and noticed: > > > > "The default value of the max-ixfr-ratio option

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Josef Moellers
> Hi ISC people, > > > RELEASE-NOTES-bind-9.16.16.html > > I was just reading the release notes, and noticed: > > "The default value of the max-ixfr-ratio option was changed to > unlimited, for better backwards compatibility in the stable rele

Re: Syslog with BIND on CentOS

2021-05-20 Thread Paul Kosinski via bind-users
If you can have BIND log directly to a file, couldn't you use a FIFO (prwxrwxrwx) or Unix domain socket (srwxrwxrwx) and avoid the disk I/O by sending the log data directly to the forwarder? (E.g., Pulse Audio listens on a socket for audio data from an application, and sends it in real-time

Re: Syslog with BIND on CentOS

2021-05-20 Thread Anand Buddhdev
On 20/05/2021 23:34, John Thurston wrote: Hi John, > My subsequent read of the docs indicates that BIND on CentOS 7, while > being told it is sending to 'syslogd', is sending to 'journald' which is > handling all the messages and forwarding them on to 'syslogd'. I don't > want journ

Syslog with BIND on CentOS

2021-05-20 Thread John Thurston
Many years ago, when we ran ISC BIND on Solaris, we created a logging channel to send the logged-queries to the local syslogd. We then had our local syslogd forward most of the traffic on to a central syslog server. I just tried to re-implement something like that on CentOS, and thought I had

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Manish Rane
on in their base installation any time soon. However, > ISC creates packages of the newst versions for some of the more common > distros like Debian, Ubuntu, CentOS and Fedora. Check out this page for > more information: > > https://www.isc.org/bind/ > > Regards, > Anand &

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Ondřej Surý
gt; and testing before it can be enabled by default. > > Regards, > Anand > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid su

Re: AW: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Anand Buddhdev
Yes, I agree. I noticed the same thing. This feature needs more logging and testing before it can be enabled by default. Regards, Anand ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the

AW: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Klaus Darilion via bind-users
Nevertheless I think there is a bug. IIR the previous default was 100% (switch to AXFR if IXFR would be grater than AXFR) and we also saw plenty of AXFR although the IXFR difference was very small and far away from 100% regards Klaus > -Ursprüngliche Nachricht- > Von: bind-use

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Anand Buddhdev
org/bind/ Regards, Anand ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for m

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Manish Rane
SC people, > > > RELEASE-NOTES-bind-9.16.16.html > > I was just reading the release notes, and noticed: > > "The default value of the max-ixfr-ratio option was changed to > unlimited, for better backwards compatibility in the stable release > series." > > Thank

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Anand Buddhdev
On 20/05/2021 00:06, Michael McNally wrote: Hi ISC people, > RELEASE-NOTES-bind-9.16.16.html I was just reading the release notes, and noticed: "The default value of the max-ixfr-ratio option was changed to unlimited, for better backwards compatibility in the stable release series.&quo

New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-19 Thread Michael McNally
The May 2021 maintenance releases of BIND are available and can be downloaded from the ISC software download page, https://www.isc.org/download A summary of changes in the new releases can be found in their release notes: current supported stable branches: 9.11.32 - https

Re: Using Ansible to manage bind installation/basic setup.

2021-05-19 Thread MURTARI, JOHN
as pretty easy. Had some experience with Puppet in the past. Ansible's use of simple SSH for access instead of requiring a remote client installed does make it a lot easier. Best regards! John ____ From: bind-users on behalf of Jan-Piet Mens via bind-users

Re: Using Ansible to manage bind installation/basic setup.

2021-05-18 Thread Jan-Piet Mens via bind-users
before using them in production; just because something works for me doesn't mean it will satisfy you. :) Good luck, -JP ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds

Using Ansible to manage bind installation/basic setup.

2021-05-17 Thread MURTARI, JOHN
Folks, Thinking of using Ansible to help with standardized bind installations & auto setup. Searched the list Archives/ISC website and didn't see much. Found a variety of Ansible roles/playbooks on Google, but nothing seemed to be the clear preferred favorite?Any recommendat

Re: BIND 9 ARM, html/pdf not in the source?

2021-05-17 Thread Ondřej Surý
.@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. b

Re: BIND 9 ARM, html/pdf not in the source?

2021-05-17 Thread Ondřej Surý
. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 17. 5. 2021, at 12:23, G.W. Haywood via bind-users > wrote: > > Hi there, > > On Sun, 16 May 2021, Ond?ej Sur? wrote: >> On Sun, 16 May 2021, Chuck Aurora wrote: >> > On Sun, 16 May 2021, Ond?ej Sur? wrote: >

Re: BIND 9 ARM, html/pdf not in the source?

2021-05-17 Thread G.W. Haywood via bind-users
ving the software. I feel strongly that I should chime in with my experiences of trying to use Git/Web interfaces to report issues. Not, I hasten to add, issues with BIND - I don't recall ever trying to use ISC's GitLab and I'd have no particular issues with creating an account except that I'd

Re: BIND 9 ARM, html/pdf not in the source?

2021-05-16 Thread Ondřej Surý
much to ask a little bit of inconvenience from the users, so we can actually focus on fixing bugs and improving the software. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe f

<    4   5   6   7   8   9   10   11   12   13   >