Re: nsupdate with RPZ

's not your use case, tell us what your use case is in more detail and perhaps the list can help. Chris Buxton ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@list

Re: Suggestions for a distributed DNS zone hosting solution I'm designing

product to do what you’ve described. BIND on Linux will do everything you’ve described, if properly set up. You could set up some simple scripting to give you secure DDNS so that you can update the data from anywhere. I hope that helps. Chris Buxton Sent from my iPhone > On Mar 6, 2018, at 10

Re: BIND 9.11 no longer respects edns-udp-size?

zones assumes that an SOA query will retrieve all of the required information (SOA, NS, and supporting A/ records) to successfully insert the zone apex into the cache. Chris Buxton ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: Issues with Stub Zone

d? It may be that the behavior you're expecting is more in line with type "static-stub" than with type "stub". Regards, Chris Buxton > On May 7, 2019, at 4:08 PM, Ben Lavender wrote: > > Hi, > > I've been trying to configure a stub zone using both BIND 9.8x

Re: Can we provide recursion for forward zones in response to iterative queries?

forwarding for the subzones also, pointing to the forwarders. Without the delegation, the conditional forwarding won't work -- the MS DNS servers will respond authoritatively. But without the conditional forwarding, the MS DNS servers will send iterative queries, not

Re: Logging statements w.r.t. view in Bind 9.16.18

them, or perhaps live with the log messages from that public view. Perhaps your SIEM (if you use one) could split the data based on the view name in the log messages. Regards, Chris Buxton > On Aug 24, 2021, at 7:44 AM, Gaurav Kansal wrote: > > Hi Ged, > > Actually recursion

Re: nsupdate -g always uses master from SOA to form SPN

configure it. Regards, Chris Buxton > On Aug 26, 2021, at 7:32 AM, Magnus Holmgren > wrote: > > When using GSS-TSIG, nsupdate (with the -g flag) always forms the SPN from the > master server specified in the SOA record, rather than the server specified > with the server comma

Re: KSK signing zone records

I honestly don’t remember the reasoning, only the outcome. Maybe Mark or someone else from ISC can shed some light? I couldn’t find the answer to this regular (but infrequent) question in the ISC KB. Regards, Chris Buxton > On Aug 30, 2021, at 3:40 PM, raf via bind-users > wrote: >

Re: Add DNS records automatically for static IP's

these devices register themselves, they might get decommissioned. Perhaps much later, but eventually upgrades happen and needs change. How are you cleaning up the stale records? Your DHCP server will do that for you, for DHCP clients. Regards, Chris Buxton > On Aug 5, 2021, at 9:19 AM, Roberto Ca

Re: KSK signing zone records

What algorithm(s) are you using for ZSK and KSK? If they’re not the same algorithm, then both will be used to sign the entire zone. Regards, Chris Buxton > On Aug 30, 2021, at 9:08 AM, Timothy A. Holtzen via bind-users > wrote: > > Signed PGP part > I've had an issue with

Re: DNSTAP overload condition logging

Hi Carsten, From our reading of the code, it appears that when the buffer fills up, it refuses to accept new entries. Older events are not overwritten, but newer events are refused. The fstrm_iothr_submit() function can return success, failure, or “fstrm_res_again”, which indicates the queue

<    1   2   3   4