Re: DNSSEC doubt

2023-06-22 Thread Daniel A. Rodriguez via bind-users
Thanks, I was reading but wasn't able to decode that. Best regards El 22 de junio de 2023 4:27:21 p. m. GMT-03:00, "Ondřej Surý" escribió: >It’s not. TL;DR use dnssec-policy. > >The more elaborate version of the TL;DR can be found in the DNSSEC Guide here:

Re: DNSSEC doubt

2023-06-22 Thread Ondřej Surý
It’s not. TL;DR use dnssec-policy. The more elaborate version of the TL;DR can be found in the DNSSEC Guide here: https://bind9.readthedocs.io/en/v9.18.16/dnssec-guide.html -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to

Re: DNSSEC doubt

2023-06-22 Thread Jiaming Zhang
Hi Daniel, As far as from my experience, you’ll need to create a KSK and a ZSK first. But you can also use script to generate these key pairs. However, it is (at least with the few registrars I have experience) mandatory to enter your first DS record manually, and then you could use CDS (if

DNSSEC doubt

2023-06-22 Thread Daniel A. Rodriguez via bind-users
I wonder if it's mandatory make a manual deployment prior to an automated setup.-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for

RHEL, Centos, Rocky, Fedora rpm 9.16.42

2023-06-22 Thread Carl Byington via bind-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 https://www.five-ten-sg.com/mapper/bind contains links to the source rpm, and build instructions. This .src.rpm contains a .tar.gz file with the ARM documentation, so the rpm rebuild process does not need sphinx- build and associated dependencies.

Re: Permission issue ¿?

2023-06-22 Thread Daniel A. Rodriguez via bind-users
Just changed the dirt, sorry for the noise El 22 de junio de 2023 1:25:57 p. m. GMT-03:00, "Ondřej Surý" escribió: >Which would not be a problem. But we can’t help the OP without the config >(named-checkconf -px) > >-- >Ondřej Surý — ISC (He/Him) > >My working hours and your working hours may

Re: Permission issue ¿?

2023-06-22 Thread Ondřej Surý
Which would not be a problem. But we can’t help the OP without the config (named-checkconf -px) -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 22. 6. 2023, at 17:53, Marco

Re: Permission issue ¿?

2023-06-22 Thread Marco
Am 22.06.2023 um 11:47:50 Uhr schrieb Daniel Armando Rodriguez via bind-users: > drwxr-sr-x   4 root bind 4,0K jun 22 11:17 . That means that the group bind is not allowed to write into that directory. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Permission issue ¿?

2023-06-22 Thread Daniel Armando Rodriguez via bind-users
As of this morning I'm getting this error on log, and was working fine previously loading configuration from '/etc/bind/named.conf' directory '/etc/bind' is not writable /etc/bind/named.conf.options:2: parsing failed: permission denied /etc/bind detail drwxr-sr-x   4 root bind 4,0K jun 22

RE: Tools to mesure performance and benchmarking of a DNS

2023-06-22 Thread sami . rahal
Hello thank you for the details regards -Message d'origine- De : bind-users De la part de bind-users-requ...@lists.isc.org Envoyé : jeudi 22 juin 2023 13:00 À : bind-users@lists.isc.org Objet : bind-users Digest, Vol 4265, Issue 1 Send bind-users mailing list submissions to

Re: AW: Tools to mesure performance and benchmarking of a DNS

2023-06-22 Thread Petr Špaček
Tools listed by Klaus below are mostly suitable for authoritative servers. For resolvers the only tool with sensible methodology I know of is DNS Shotgun: https://dns-shotgun.readthedocs.io/ When you select a tool, make sure you drill down into it's load generator model and judge it's