BIND 9.8.2b2

2011-07-07 Thread Mark Andrews
Introduction BIND 9.8.1b2 is the second beta release of BIND 9.8. This document summarizes changes from BIND 9.8.0 to BIND 9.8.1b2. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest versions of BIND 9 software can alwa

Re: about AUTHORITY SECTION

2011-07-07 Thread Feng He
2011/7/8 Kevin Darcy : > > I think it's worth emphasizing that in the first case, the contents of the > Authority Section were *mandatory* (see RFC 2308, Negative Caching), whereas > in the second case the authoritative nameserver was *optionally* providing > NS records in the Authority Section. I

BIND 9.4-ESV-R5rc1

2011-07-07 Thread Mark Andrews
Introduction BIND 9.4-ESV-R5rc1 is the first release candidate of BIND 9.4-ESV-R5. This document summarizes changes from BIND 9.4-ESV-R4 to BIND 9.4-ESV-R5rc1. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest release

BIND 9.7.4rc1

2011-07-07 Thread Mark Andrews
Introduction BIND 9.7.4rc1 is the first release candidate of BIND 9.7.4. This document summarizes changes from BIND 9.7.3 to BIND 9.7.4rc1. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest version of BIND 9 software c

Re: "Key : Delaying activation to match the DNSKEY TTL."

2011-07-07 Thread Evan Hunt
> I only saw this message when the key first became active, I haven't seen > it since. However, based on your description, and given I'm always > signing a fresh zone rather than resigning one, it seems I'd always see > this message, as dnssec-signzone would never have an existing DNSKEY > RRset to

Re: "Key : Delaying activation to match the DNSKEY TTL."

2011-07-07 Thread Paul B. Henson
On Wed, Jul 06, 2011 at 06:56:57PM -0700, Evan Hunt wrote: > Apparently it thought this was the first time it was being published, > anyway. That information doesn't come from the publication date but > from before-and-after comparison of the DNSKEY RRset. > > If this message came from dnssec-s

Re: about AUTHORITY SECTION

2011-07-07 Thread Kevin Darcy
On 7/7/2011 1:50 AM, Torinthiel wrote: On 07/07/11 04:56, pa...@laposte.net wrote: Hello, I got two different forms of AUTHORITY SECTION from the dig, for example, $ dig mydots.net @ns7.dnsbed.com ;<<>> DiG 9.4.2-P2.1<<>> mydots.net @ns7.dnsbed.com ;; global options: printcmd ;; Got answer:

Re: Split-DNS + Views + master/slave

2011-07-07 Thread Jay Ford
On Thu, 7 Jul 2011, Ewald Jenisch wrote: So here is my question: How do I set up two servers (master/slave) using views (for internal and external clients) so that both of them hold the the correct data and return the correct answers to their respective clients (inside and outside)? Thanks much

Re: Split-DNS + Views + master/slave

2011-07-07 Thread /dev/rob0
On Thu, Jul 07, 2011 at 05:59:29PM +0200, Ewald Jenisch wrote: > So here is my question: How do I set up two servers (master/slave) > using views (for internal and external clients) so that both of > them hold the the correct data and return the correct answers to > their respective clients (ins

Re: Split-DNS + Views + master/slave

2011-07-07 Thread Ewald Jenisch
On Thu, Jul 07, 2011 at 11:24:22AM -0500, Brad Bendily wrote: > I am glad to be able to answer an email on this list. > I literally did this same thing 4 days ago and had the exact same > problem. > Here is the answer you seek: > > https://www.isc.org/faq/item/182 > Bingo - that's exactly what I

RE: Split-DNS + Views + master/slave

2011-07-07 Thread Brad Bendily
I am glad to be able to answer an email on this list. I literally did this same thing 4 days ago and had the exact same problem. Here is the answer you seek: https://www.isc.org/faq/item/182 bb > -Original Message- > From: bind-users-bounces+brad.bendily=la@lists.isc.org > [mailto:

Split-DNS + Views + master/slave

2011-07-07 Thread Ewald Jenisch
Hi, I'm in the process of setting up two DNS-servers (master/slave). Response of these servers should be different as to where the queries come from (inside our network vs. external). For this purpose I thought about using views. Here's an excerpt from what I got in my named.conf: Master-DNS: --