Re: USADOTGOV.NET Root Problems?

2010-07-24 Thread Danny Mayer
On 7/24/2010 5:10 AM, Warren Kumari wrote: > > On Jul 23, 2010, at 2:37 PM, Danny Mayer wrote: > >> On 7/22/2010 11:08 PM, Merton Campbell Crockett wrote: >>> Thanks for the confirmation that the problem was related to DNSSEC. >>> >>> I didn't see your message until I got home from work; however,

Re: USADOTGOV.NET Root Problems?

2010-07-24 Thread Michael Sinatra
On Sat, 24 Jul 2010, Warren Kumari wrote: On Jul 23, 2010, at 2:37 PM, Danny Mayer wrote: On 7/22/2010 11:08 PM, Merton Campbell Crockett wrote: Thanks for the confirmation that the problem was related to DNSSEC. I didn't see your message until I got home from work; however, I did find the

dnssec-signzone gets verbose

2010-07-24 Thread Göran Uddeborg
After upgrading to bind 9.7.1 recently, some of my scripts started to output text when they shouldn't. Digging a little, I quickly found that dnssec-signzone now unconditionally writes information like this on stderr: Verifying the zone using the following algorithms: RSASHA1. Zone signin

Re: zone syntax question

2010-07-24 Thread Joseph S D Yao
On Sat, Jul 24, 2010 at 04:32:21PM +0100, Matthew Seaman wrote: > On 24/07/2010 16:17:13, Joseph S D Yao wrote: > > Quick, knee-jerk, which of these is > > one day? > > 86300 > > 68300 > > 863000 > > It's a trick question, right? Very good! ;-) -- /

Re: zone syntax question

2010-07-24 Thread Matthew Seaman
On 24/07/2010 16:17:13, Joseph S D Yao wrote: > Quick, knee-jerk, which of these is > one day? > 86300 > 68300 > 863000 It's a trick question, right? Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard

Re: zone syntax question

2010-07-24 Thread Joseph S D Yao
On Tue, Jul 20, 2010 at 10:07:54AM +0100, Sam Wilson wrote: ... > I *would* recommend using @ everywhere possible - it's so much less > liable to typos than using the real domain and unnecessary obfuscation > is not your friend when it comes to DNS administration. :) :) ... Seconded. I would a

Re: USADOTGOV.NET Root Problems?

2010-07-24 Thread Tony Finch
On Sat, 24 Jul 2010, Warren Kumari wrote: > On Jul 23, 2010, at 2:37 PM, Danny Mayer wrote: > > > > Why would any inspection policy not allow fragmented UDP packets? > > There's nothing wrong with that. > > Because it's "hard" The issue is that then you need to buffer > fragments until you get

Re: Multiple masters expected behavior?

2010-07-24 Thread Barry Margolin
In article , Peter Laws wrote: > On 07/22/10 19:57, Barry Margolin wrote: > > In article, > > Peter Laws wrote: > > > >> I have multiple interfaces on my master and multiple interfaces on most of > >> my slaves. > >> > > > >> > >> Is that expected behavior? > > > > Yes. What if the first s

Re: IPv6 Records on an IPv4 Network

2010-07-24 Thread Phil Mayers
On 07/24/2010 03:57 AM, Danny Mayer wrote: Applications that depend on specific behaviors are broken. You should I think we're going to have to agree to disagree here. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailma

Re: USADOTGOV.NET Root Problems?

2010-07-24 Thread Warren Kumari
On Jul 23, 2010, at 2:37 PM, Danny Mayer wrote: > On 7/22/2010 11:08 PM, Merton Campbell Crockett wrote: >> Thanks for the confirmation that the problem was related to DNSSEC. >> >> I didn't see your message until I got home from work; however, I did >> find the root of the problem late this aft