DoH Support in bind 9.17?

2021-02-17 Thread Carlos Kamtha
Hello. We are looking to add this to our fleet of bind servers based on: https://gitlab.isc.org/isc-projects/bind9/-/wikis/DoH/DOH-and-DoT-Design However, there does not appear to be support for DoH ala bind9.17 atm. Do we have a timeline for its implementation? Cheers. -- -C -- This

Re: underscore in A or PTR records

2021-02-17 Thread Mark Andrews
No. The PTR records that map from IP address to hostname enforce the hostname rules. -- Mark Andrews > On 18 Feb 2021, at 02:20, Sten Carlsen wrote: > >  > >> On 17 Feb 2021, at 12.34, ONRUBIA AVILES Carlos (CCS/MST) >> wrote: >> >> Hello, >> >> Indeed my question was on A record but

Re: Can't use Bind DLZ through LDAPS SSL

2021-02-17 Thread Grant Taylor via bind-users
On 2/16/21 11:54 PM, Dario García Díaz-Miguel via bind-users wrote: Hi everybody, Hi, Since I'm a little bit desperate with this issue, and after asking this on reddit (r/sysadmin) and serverfault with low or none responses, I think it would be worth half an hour or so to test stunnel. It

Re: Can't use Bind DLZ through LDAPS SSL

2021-02-17 Thread Grant Taylor via bind-users
On 2/12/21 4:49 AM, Ted Mittelstaedt wrote: If you are not familiar with stunnel you should have looked up what it was before responding. It's not going to be applicable here and I would not have suggested it if I had known both programs were on the same machine. What does being on the same

Re: underscore in A or PTR records

2021-02-17 Thread Sten Carlsen
> On 17 Feb 2021, at 12.34, ONRUBIA AVILES Carlos (CCS/MST) > wrote: > > Hello, > > Indeed my question was on A record but the issue is on PTR record. > I can configure the following line: > > _ptr.dekil.nl. 3600IN PTR > _81.99-129-109.adsl-dyn.isp.dekil.nl > > It

BIND DLZ - ldap_init and LDAP_PORT function argument values

2021-02-17 Thread Dario García Díaz-Miguel
Hello, I'm checking the source code of bind dlz since we need to use ldaps instead of ldap. I found this on the source code of BIND DLZ: If (ldap_url->lud_port != 389) { db->log(ISC_LOG_ERROR,"%s query must not specify a port", msg); result = ISC_R_FAILURE; goto cleanup; } I understand that

RE: underscore in A or PTR records

2021-02-17 Thread ONRUBIA AVILES Carlos (CCS/MST)
Hello, Indeed my question was on A record but the issue is on PTR record. I can configure the following line: _ptr.dekil.nl. 3600IN PTR _81.99-129-109.adsl-dyn.isp.dekil.nl It workswe can use "_" in both sides. But what is strange is that the following configuration do

Re: underscore in A or PTR records

2021-02-17 Thread Ondřej Surý
> > On 17. 2. 2021, at 9:50, ONRUBIA AVILES Carlos (CCS/MST) > wrote: > > The issue we face is that a telecom provider ask us to implement a PTR record > with a name like “example_try.net" You are mixing the two things here. If the provider has asked you to create a PTR record, why do you

Re: underscore in A or PTR records

2021-02-17 Thread Matus UHLAR - fantomas
On 17.02.21 09:41, ONRUBIA AVILES Carlos (CCS/MST) wrote: What do you mean with " absolutely no, but since underscore is not valid in hostname as per rfc1123, I don't recomment you to use it in hostnamed" ? substitute the last word with "hostnames" (a mistype). I mean that since rfc1123

Re: underscore in A or PTR records

2021-02-17 Thread Reindl Harald
Am 17.02.21 um 10:41 schrieb ONRUBIA AVILES Carlos (CCS/MST): Matus, What do you mean with " absolutely no, but since underscore is not valid in hostname as per rfc1123, I don't recomment you to use it in hostnamed" ? _ is not allowed in hostnames I tried with the following

Re: underscore in A or PTR records

2021-02-17 Thread Reindl Harald
Am 17.02.21 um 09:50 schrieb ONRUBIA AVILES Carlos (CCS/MST): Hello, Thanks for these clarifications. The issue we face is that a telecom provider ask us to implement a PTR record with a name like "example_try.net" point out to that provider it's a bad idea and that they should know that!

RE: underscore in A or PTR records

2021-02-17 Thread ONRUBIA AVILES Carlos (CCS/MST)
Matus, What do you mean with " absolutely no, but since underscore is not valid in hostname as per rfc1123, I don't recomment you to use it in hostnamed" ? I tried with the following configuration in zone " dekil.nl " and bind do not accept it: hello_mail2.dekil.nl. 3600IN A

Re: underscore in A or PTR records

2021-02-17 Thread Matus UHLAR - fantomas
On 17.02.21 08:13, ONRUBIA AVILES Carlos (CCS/MST) wrote: I face the following problem ==> bind do not accept an A record with underscore: Example: example_try A1.2.3.4 Same for a PTR: Example: 1.2.3.4 PTR example_try Is it absolutely forbidden to have in such cases an

RE: underscore in A or PTR records

2021-02-17 Thread ONRUBIA AVILES Carlos (CCS/MST)
Hello, Thanks for these clarifications. The issue we face is that a telecom provider ask us to implement a PTR record with a name like "example_try.net" We tried this configuration but BIND do not accept it. The telecom provider complaints we can not make this DNS configuration and that it must

Re: underscore in A or PTR records

2021-02-17 Thread Mark Andrews
The SRV and TXT records usage is depending on underscore not being part of a hostname. The separator in hostname labels is dash. e.g. my-host.example.net _ssh._tcp.example.net SRV can be safely deployed because there are no legal hostnames starting with _ssh and _tcp. Hostname (and mail

underscore in A or PTR records

2021-02-17 Thread ONRUBIA AVILES Carlos (CCS/MST)
Hello , I face the following problem ==> bind do not accept an A record with underscore: Example: example_try A1.2.3.4 Same for a PTR: Example: 1.2.3.4 PTR example_try Is it absolutely forbidden to have in such cases an '_'? I know that it is possible for SRV or TXT