Re: dnssec validation issue

2017-08-30 Thread dhungyel
Hi Mukund > Are you able to reproduce the bug with the latest stock version of BIND > 9.9? 9.9.4 is very old and that branch has had numerous bugfixes since. > I'm not able to reproduce such a validation failure with 9.9.11: At the moment the latest patched version of bind available for

Re: Testing...

2017-08-30 Thread Hika van den Hoven
Hoi Tony, Wednesday, August 30, 2017, 6:44:32 PM, you wrote: > Grant Taylor wrote: >> >> There is additional footer content (as well as headers) in messages from the >> mailing list. >> >> Does Gmail detect that and ignore it? Or is the message simply folded into >>

Re: Testing...

2017-08-30 Thread Alan Clegg
On 8/30/17 12:44 PM, Tony Finch wrote: > There are reasons I am no longer a postmaster... And they all said Ramen... AlanC signature.asc Description: OpenPGP digital signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to

Re: Testing...

2017-08-30 Thread Tony Finch
Grant Taylor wrote: > > There is additional footer content (as well as headers) in messages from the > mailing list. > > Does Gmail detect that and ignore it? Or is the message simply folded into > the conversation in Gmail? No, I believe deduplication is based

Re: Testing...

2017-08-30 Thread Grant Taylor
On 08/30/2017 09:49 AM, Tony Finch wrote: You seem to be using Gmail which does de-duplication across all messages in your account, so your messages received from the list are deleted since they are duplicates of the copies in your sent-mail folder. There is additional footer content (as well

Re: filter-aaaa-on-v4 not available in Windows binary?

2017-08-30 Thread Victoria Risk
> On Aug 30, 2017, at 8:55 AM, pLAN9 wrote: > > Apologies all, I missed an Event Viewer entry: > > "C:\Program Files\ISC BIND 9\etc\named.conf:19: option 'filter--on-v4' > was not enabled at compile time" > > So it appears I DO have to recompile… I see that Mark has made

Re: Testing...

2017-08-30 Thread Tony Finch
Alan Clegg wrote: > > It appears that I just don't see my own posts for whatever reason. 8-) You seem to be using Gmail which does de-duplication across all messages in your account, so your messages received from the list are deleted since they are duplicates of the copies in

Re: Testing...

2017-08-30 Thread Alan Clegg
On 8/30/17 11:25 AM, Adamiec, Lawrence wrote: > I see your email on the list. Thanks to those that have responded both on- and off-list. It appears that I just don't see my own posts for whatever reason. 8-) [You know how long it's been since I debugged a mailing list issue??!] No additional

Re: Testing...

2017-08-30 Thread Warren Kumari
... yes, yes you are. I'm explicitly responding in case you have the mailman "Don't send me my own posts" (not metoo) option. W On Wed, Aug 30, 2017 at 11:20 AM, Alan Clegg wrote: > I don't think I can post to this list for some reason. > > I'd like to be able to respond to

Re: Testing...

2017-08-30 Thread Adamiec, Lawrence
I see your email on the list. Thank you. Larry __ Lawrence Adamiec Web Developer/UNIX Admin Information Technology Services (ITS) Chicago-Kent College of Law Illinois Institute of Technology 565 W. Adams St. Chicago, IL 60661 On Wed, Aug 30, 2017 at

Testing...

2017-08-30 Thread Alan Clegg
I don't think I can post to this list for some reason. I'd like to be able to respond to questions, but my responses never seem to show up... this is just a test to see if I am visible on the list. Thanks! AlanC signature.asc Description: OpenPGP digital signature

Re: bind-chroot, runs, works, dies

2017-08-30 Thread Reindl Harald
Am 30.08.2017 um 15:21 schrieb Tony Finch: Petr Mensik wrote: But presence of pid files also work as notification of completed initialization (which is done BEFORE forking and finishing ExecStart command). named writes its pidfile relatively early during startup. The

Re: filter-aaaa-on-v4 not available in Windows binary?

2017-08-30 Thread Mark Andrews
In message <20170830112841.gk2...@harrier.slackbuilds.org>, /dev/rob0 writes: > On Tue, Aug 29, 2017 at 02:12:43PM -0500, pLAN9 wrote: > > I have downloaded the latest 9.11.2 BIND running on Windows 10 and > > have set up a successful caching-only server. When I try to add > >

Re: dnssec validation issue

2017-08-30 Thread Mukund Sivaraman
Hi Ganga On Thu, Aug 24, 2017 at 09:33:32AM +0600, Ganga R. Dhungyel wrote: > With dnssec-validation turned on, resolving sites like www.icann.org > fails. The alternative is to remove validation > which of course is not the desired solution. Are you able to reproduce the

Re: bind-chroot, runs, works, dies

2017-08-30 Thread Tony Finch
Petr Mensik wrote: > > But presence of pid files also work as notification of completed > initialization (which is done BEFORE forking and finishing ExecStart > command). named writes its pidfile relatively early during startup. The parent doesn't exit until the child daemon

Re: dnssec validation issue

2017-08-30 Thread Stephane Bortzmeyer
On Thu, Aug 24, 2017 at 09:33:32AM +0600, Ganga R. Dhungyel wrote a message of 677 lines which said: > # dig @localhost www.icann.org A +dnssec When you suspect a DNSSEC issue, always retry dig with +cd (Checking Disabled). And post the result.

Re: dnssec validation issue

2017-08-30 Thread Tony Finch
Ganga R. Dhungyel wrote: > > **debug log > > 23-Aug-2017 16:17:57.567 dnssec: debug 3: > validating @0x7f3ffc96e4d0: www.vip.icann.org A: > attempting insecurity proof > > With dnssec-validation turned on, resolving sites like www.icann.org fails. I think that

Re: email notification in bind?

2017-08-30 Thread /dev/rob0
On Tue, Aug 29, 2017 at 06:14:51PM +0530, rams wrote: > Do we have email notification feature in Bind when zone update > fails. In addition to what Grant said, "No," in effect, you might want to clarify the problem and goal. Do you mean when updating zone data with nsupdate(1)? Or are you

Re: filter-aaaa-on-v4 not available in Windows binary?

2017-08-30 Thread /dev/rob0
On Tue, Aug 29, 2017 at 02:12:43PM -0500, pLAN9 wrote: > I have downloaded the latest 9.11.2 BIND running on Windows 10 and > have set up a successful caching-only server. When I try to add > "filter--on-v4 yes" to the global "options" section of > named.conf, the Windows BIND service fails