RHEL, Centos, Fedora rpm 9.14.8

2019-11-20 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 https://www.five-ten-sg.com/mapper/bind contains links to the source rpms, and build instructions. -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAl3VnVMACgkQL6j7milTFsGv4ACfZBdGLuzuSS+5n1+yU4XGlH3u

Re: bind 9.11.3 - resolving troubles running as a caching server

2019-11-20 Thread Ondřej Surý
The cache shows you that the forwarder reported that there’s no such record returned from the upstream resolvers. The NXRRSET means - Non-eXistant Resource Record Set, e.g. your resolvers cached the non-existence of the name returned from the upstream resolvers. The other option would be

Re: bind 9.11.3 - resolving troubles running as a caching server

2019-11-20 Thread Bind Mailinglist
Hello Ondřej Many thanks for your answer. Hope debugging can help me without server overloading. They have around 1500 queries/s peakload during eveninghours. It will need some time to log exactly this effect. At the moment I have the following lines disabled:     // forwarders {     //

Re: nsupdate with respone-policy zone

2019-11-20 Thread mail-list-users
Thank you very much, this did the trick. Have a nice day! ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: nsupdate with respone-policy zone

2019-11-20 Thread Tony Finch
mail-list-us...@materna.de wrote: > > server 127.0.0.1 > debug no > zone testoverride > update add zzz.google.de 604800 A 127.0.0.1 > send The problem is that nsupdate needs fully-qualified domain names - you can't omit the zone name like you can in zone files. So your script needs to be zone

nsupdate with respone-policy zone

2019-11-20 Thread mail-list-users
Hello, I try to update my RPZ Zone 'testoverride' with nsupdate. Sadly I get only 127.0.0.1#56851: view public: updating zone 'testoverride/IN': update failed: update RR is outside zone (NOTZONE) as error message. How do I update a RPZ zone with nsupdate? Do I miss something? Do I understand

Re: bind 9.11.3 - resolving troubles running as a caching server

2019-11-20 Thread Ondřej Surý
Hi, you mentioned “forwarders” - what are these and how does answer look like on the upstream forwarders? I would recommend enabling higher debug level (start with -d 1) and look into logs what was the answer from the forwarders preceding the failure. Ondrej -- Ondřej Surý — ISC > On 20

bind 9.11.3 - resolving troubles running as a caching server

2019-11-20 Thread Bind Mailinglist
Hello list I'm glad there is such an active list. Hope there is anybody out there who can help me with my little problem. :-) We are running six bind server ( all Ubuntu LTS 18.04 with bind 9.11.3 ), so they are pretty up to date. Three of them have authoritative zones, one is for testing and two

Re: Log rolling stopped working in 9.11.12 ?

2019-11-20 Thread Matus UHLAR - fantomas
Am 19.11.19 um 18:23 schrieb John Thurston: A) Should I expect these file permissions be altered by a minor update? I know I started at 9.11.8 and have updated to 9.11.9 and 9.11.10 without seeing this behavior. On 11/19/2019 8:34 AM, Reindl Harald wrote: yes, every by a package owned