Anycast and views match-destination

2012-08-16 Thread sasa sasa
So I use match-destination in BIND views on a server with multiple interfaces. If I want to configure one of these interfaces to be part of an anycast network, should I change match-destination to the anycast loopback address in that particular view? Any thoughts? Thanks

Re: playing with 9.9.2b1 and ECDSA

2012-08-16 Thread Tony Finch
Tony Finch d...@dotat.at wrote: 15-Aug-2012 19:56:31.969 general: error: zone fanf2.ucam.org/IN: update_sigs:add_sigs - sign failure This turned out to be because /dev/random inside my chroot was set up incorrectly. FreeBSD has a somewhat unusual way of dealing with device nodes. Tony. --

Re: SRV query with no domain?

2012-08-16 Thread Christopher Cain
Of course a dig query will fail without the domain appended. Dig takes you query at face value and will not append domains from your search suffix list like nslookup and ping will. You ALWAYS have to fully qualify your requests when using dig. Chris. On 12-08-15 3:29 PM, wbr...@e1b.org

Re: SRV query with no domain?

2012-08-16 Thread Niall O'Reilly
On 16 Aug 2012, at 15:42, Christopher Cain wrote: Of course a dig query will fail without the domain appended. Dig takes you query at face value and will not append domains from your search suffix list like nslookup and ping will. You ALWAYS have to fully qualify your requests when using

Re: playing with 9.9.2b1 and ECDSA

2012-08-16 Thread Doug Barton
On 08/16/2012 03:49 AM, Tony Finch wrote: Tony Finch d...@dotat.at wrote: 15-Aug-2012 19:56:31.969 general: error: zone fanf2.ucam.org/IN: update_sigs:add_sigs - sign failure This turned out to be because /dev/random inside my chroot was set up incorrectly. FreeBSD has a somewhat unusual

Version statement...

2012-08-16 Thread Jeff Justice
I am trying to mask our DNS servers version output to a custom string, but it doesn't seem to be working for me. In a nutshell, I have added this to my options block of my named.conf: version [DNS Server]; But when I do a query, it still shows the actual version number i.e. BIND 9.9.1-P2,

Re: Version statement...

2012-08-16 Thread David Miller
On 8/17/2012 1:13 AM, Jeff Justice wrote: I am trying to mask our DNS servers version output to a custom string, but it doesn't seem to be working for me. In a nutshell, I have added this to my options block of my named.conf: version [DNS Server]; options { version string;

Re: Version statement...

2012-08-16 Thread Jeff Justice
Doesn't seem to work with or without the brackets. Does it matter what order it appears in the options list? Or a limit on number of characters? Jeff On Aug 17, 2012, at 12:34 AM, David Miller dmil...@tiggee.com wrote: On 8/17/2012 1:13 AM, Jeff Justice wrote: I am trying to mask our DNS