Re: DNS RPZ triggers

2017-01-27 Thread Mukund Sivaraman
Hi ard On Fri, Jan 27, 2017 at 08:51:14PM +, der...@mskcc.org wrote: > Hi All, > > Back in December 2016, I worked on a problem in which a particular hostname > (a website) would not resolve from our DNS servers, but Level3, Google DNS, > and OpenDNS resolved it. It was clear that

DNS RPZ triggers

2017-01-27 Thread derasa
Hi All, Back in December 2016, I worked on a problem in which a particular hostname (a website) would not resolve from our DNS servers, but Level3, Google DNS, and OpenDNS resolved it. It was clear that somewhere outside our network there was policy (security or otherwise) that prevented us

Re: dnssec key events too often?

2017-01-27 Thread Sten Carlsen
Right, thank you so much. I now will look at logging to reduce the clutter in the syslog since this does not call for any attention on my side. Thanks. On 27/01/2017 20:53, Mark Andrews wrote: > In message , Sten Carlsen > writes: >> Hi all >>

Re: dnssec key events too often?

2017-01-27 Thread Mark Andrews
In message , Sten Carlsen writes: > > Hi all > > I have recently started using dnssec on my authoritative zones. I have > bind 9.9.4 (Centos7). > > I see for each zone: > > ... > > general: info: zone s-carlsen.dk/IN/external (signed):

dnssec key events too often?

2017-01-27 Thread Sten Carlsen
Hi all I have recently started using dnssec on my authoritative zones. I have bind 9.9.4 (Centos7). I see for each zone: ... general: info: zone s-carlsen.dk/IN/external (signed): next key event: 26-Jan-2017 02:03:40.860: 1 Time(s) general: info: zone s-carlsen.dk/IN/external

Re: bind-9.11.0-P2 on Debian 9.0 (stretch)

2017-01-27 Thread Wolfgang Riedel
Hi Fajar, OK sounds familiar to me ;-) OK let me try your proposal and install libssl1.0-dev and see if I can get bind-9.11.0-P2 to build. Many thanks, Wolfgang > On 27 Jan 2017, at 14:40PM, Fajar A. Nugraha wrote: > > On Fri, Jan 27, 2017 at 7:20 PM, Wolfgang Riedel

Re: bind-9.11.0-P2 on Debian 9.0 (stretch)

2017-01-27 Thread Thomas Schulz
> Just wonder if there is some agreed guidance on what steps I SHOULD take = > to get bind-9.11.0-P2 successfully build on Debian 9.0? > > > /usr/bin/ld: //lib64/libcrypto.a(a_object.o): > relocation R_X86_64_PC32 against symbol `ASN1_OBJECT_free' > can not be used when making a shared object;

Re: bind-9.11.0-P2 on Debian 9.0 (stretch)

2017-01-27 Thread Fajar A. Nugraha
On Fri, Jan 27, 2017 at 7:20 PM, Wolfgang Riedel wrote: > Just wonder if there is some agreed guidance on what steps I SHOULD take > to get bind-9.11.0-P2 successfully build on Debian 9.0? > > The generic recommendation on debian would probably be 'use whatever the distro comes

Re: bind-9.11.0-P2 on Debian 9.0 (stretch)

2017-01-27 Thread Wolfgang Riedel
Hi Folks, many thanks for the candidate feedback and the deep dive on what I should not have done ;-) Not a big deal as it’s just a VM and I can easily start from scratch but I am burning a lot of time trying instead of learning. Just wonder if there is some agreed guidance on what steps I