Re: Problems with caching server that forwards to an internal split-brain authoritative server

2022-03-10 Thread Mark Andrews
zone "." IN { > type hint; > file "named.ca"; > }; > include "/etc/named.rfc1912.zones"; > include "/etc/named.root.key"; > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > >

Re: filter queries for A records from some clients

2022-03-10 Thread Mark Andrews
- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing li

Re: Access denied Bind9

2022-03-07 Thread Mark Andrews
t; ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 S

Re: Bind keeps adding RRSIGs to zone file after switching to dnssec policy

2022-03-05 Thread Mark Andrews
You switched your server from ‘auto-dnssec maintain;’ to ‘dnssec-policy mypolicy;’ and removed ‘inline-signing yes;’. Put back ‘inline-signing yes;’ if you want named to maintain two instances of the zone. -- Mark Andrews > On 6 Mar 2022, at 03:49, Josef Vybíhal wrote: > > Hi

Re: BIND 9.18.0 and Mac OS X 10.15.7 - cannot build

2022-02-21 Thread Mark Andrews
ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour

Re: copy EDNS options to resolver response

2022-02-19 Thread Mark Andrews
EDNS is hop by hop. There is no copying by any compliant server. -- Mark Andrews > On 20 Feb 2022, at 06:32, Brian J. Murrell wrote: > On Sat, 2022-02-19 at 19:02 +0100, Matus UHLAR - fantomas wrote: >> >> what's the point of this setup? >> BIND can resolv

Re: freebsd ipfw question

2022-02-17 Thread Mark Andrews
f this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 211

Re: ipv6 adoption

2022-02-16 Thread Mark Andrews
for your time and expertise. > > > Andy Baker > > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.is

Re: odd MX entry error in zone file

2022-02-03 Thread Mark Andrews
getaddrinfo to work. Whether lookup failures are fatal or not is controlled by command line options. See the man page. -- Mark Andrews > On 4 Feb 2022, at 04:56, Bruce Johnson via bind-users > wrote: > > I added a new zone to our domain today and ran named-checkzone and got the

Re: DNSSEC validation via AD bit?

2022-01-30 Thread Mark Andrews
lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

2022-01-26 Thread Mark Andrews
ally know if it could help, but I generate the ZSK keys this way : > > > > /usr/local/sbin/dnssec-keygen -3 -a 8 -b 1024 -P now -A now -I +45d -D +47d > _ > > > > Cheers!! > > > > > El 2022-01-25 02:48, Mark Andrews escribió: > &

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

2022-01-24 Thread Mark Andrews
ing easier to see what I'm referring to. > I'm talking about ZSK keys in the questions I am asking in blue. > > > > > El 2022-01-25 00:36, Mark Andrews escribió: > >> >> How 'named' manages DNSSEC is very different to how 'dnssec-si

Re: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

2022-01-24 Thread Mark Andrews
;> maintenance infrequently, so I guess if you move the key after its >> deletion time but before the next key maintenance cycle, things will get >> out of sync. But I have not checked whether my guess is right or not. >> >> Tony. > _________

Re: CDS records created from ZSK records?

2022-01-24 Thread Mark Andrews
rts several models so it is hard to a) tell if there was a bug in our code or b) an error on your part. Assuming that you are not using dnssec-policy you should be able to use 'dnssec-settime -D sync date/offset’ on the ZSK’s to tell named to stop publishing the CDS records but remember you

Re: Error staring named, permissions denied on named.ca

2021-12-09 Thread Mark Andrews
ind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/ma

Re: DNSSEC implementation on IPv6 PTR Zones

2021-11-18 Thread Mark Andrews
You do it exactly the same as any other zone. You create DNSKEYs. You sign the zone. You add DS records to the parent zone. -- Mark Andrews > On 18 Nov 2021, at 20:28, Divya wrote: > >  > Dear Admin, > > Has anybody implemented DNSSEC on IPv6 reverse zones? &

Re: Master-Slave with IPv6 only?

2021-11-07 Thread Mark Andrews
Use notify-explicit. -- Mark Andrews > On 7 Nov 2021, at 20:30, Walter H. via bind-users > wrote: > > Hello, > > I have this situation: > > both the master and the slave are dualstack (have both an IPv4 and IPv6 > address), > but the master is not reachable

Re: named service suddenly fails to start

2021-11-05 Thread Mark Andrews
s mailing listbind-users@lists.isc.orghttps://lists.isc.org/mailman/listinfo/bind-users-- Mark Andrews, ISC1 Seymour St., Dundas Valley, NSW 2117, AustraliaPHONE: +61 2 9871 4742  INTERNET: ma...@isc.org___ Please visit https://lists.isc.org/mailm

Re: named service suddenly fails to start

2021-11-04 Thread Mark Andrews
support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE:

Re: 9.16.22 - rndc reload not sending to secondaries.

2021-11-03 Thread Mark Andrews
ent of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- M

Re: ECS-IP in the RPZ-Log?

2021-10-27 Thread Mark Andrews
__ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind

Re: Certbot rfc2136

2021-10-26 Thread Mark Andrews
> On 26 Oct 2021, at 21:23, Paul van der Vlis wrote: > > Hi Mark, and others, > > Op 25-10-2021 om 23:58 schreef Mark Andrews: >>> On 26 Oct 2021, at 08:02, Paul van der Vlis wrote: >>> >>> Hello, >>> >>> I've made some pro

Re: Certbot rfc2136

2021-10-25 Thread Mark Andrews
; ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more in

Re: Certbot rfc2136

2021-10-24 Thread Mark Andrews
_ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > &g

Re: use dig query

2021-10-24 Thread Mark Andrews
s list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark A

Re: consolidating Reverse Zones

2021-10-21 Thread Mark Andrews
sers to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailm

Re: libisc-9.16.15-Debian.so: undefined symbol: uv_udp_connect

2021-09-29 Thread Mark Andrews
aid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Austra

Re: Query regarding tmp-xxxx files in ../named/zones

2021-09-15 Thread Mark Andrews
tact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _

Re: [External] : Re: NS query on bind9

2021-09-15 Thread Mark Andrews
T_IMPLEMENTED) in response. > But bind9 is rejecting our response and sends SERVFAIL. > > Attached is the PCAP. > > Please share your views again on this. Thanks in advance! > > Regards, > Sonal > > > > -Original Message- > From: Mark Andrews [m

Re: NS query on bind9

2021-09-14 Thread Mark Andrews
is causing the returned response to be rejected. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: SMIMEA syntax question

2021-09-03 Thread Mark Andrews
-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Plea

Re: KSK signing zone records

2021-09-02 Thread Mark Andrews
Just give it time. Named will choose the appropriate DNSKEY when it comes time to re-sign the RRset. -- Mark Andrews > On 3 Sep 2021, at 03:26, Timothy A. Holtzen wrote: > > Okay, so if I'm interpreting this correctly. When the new alg 14 KSKs > were created and then th

Re: KSK signing zone records

2021-09-01 Thread Mark Andrews
heers, > raf > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/c

Re: KSK signing zone records

2021-08-31 Thread Mark Andrews
ation. >> >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > fr

Re: KSK signing zone records

2021-08-30 Thread Mark Andrews
ubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users

Re: Does BIND support "conservative" (RFC 6781, sec 4.1.4) algorithm rollovers?

2021-08-30 Thread Mark Andrews
approach and I am not sure it would work... > > michael > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscri

Re: strange dnssec question

2021-08-17 Thread Mark Andrews
e for it. The two sets of NS records are supposed to be the same. Mark > On Wed, Aug 18, 2021 at 6:23 AM Mark Andrews wrote: > Delegate the zone. Do NOT add a DS for it. > > -- > Mark Andrews > >> On 17 Aug 2021, at 23:47, Edwardo Garcia wrote: >> >>  &

Re: strange dnssec question

2021-08-17 Thread Mark Andrews
Delegate the zone. Do NOT add a DS for it. -- Mark Andrews > On 17 Aug 2021, at 23:47, Edwardo Garcia wrote: > >  > Hola > > We have dnssec working for long time but need now to have a subdomain > excluded, we are going to be use it to replace an internal blacklis

Re: 9.16.19 repeated crashes on FreeBSD 12.2-p6

2021-08-12 Thread Mark Andrews
what am i misunderstanding? Named calls set{re}uid(2), when running with `named -u`, which DISABLES core dumps of the process unless the kernel has been told otherwise. This has to be done by the ADMINISTRATOR as it is a SYSTEM WIDE configuration knob. There is no per process knob. See the afore men

Re: 9.16.19 repeated crashes on FreeBSD 12.2-p6

2021-08-12 Thread Mark Andrews
are with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dun

Re: Switching key types for authorizing updates

2021-08-12 Thread Mark Andrews
e development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- M

Re: Does BIND supports ANAME RR

2021-08-09 Thread Mark Andrews
have a benefit of >> HTTPS/SVCB? That is what I meant. >> regards >> Klaus >> >>> -Ursprüngliche Nachricht- >>> Von: Mark Andrews >>> Gesendet: Montag, 9. August 2021 15:55 >>> An: Klaus Darilion >>> Cc: Evan Hunt ; Ga

Re: Does BIND supports ANAME RR

2021-08-09 Thread Mark Andrews
If you mean stop publishing CNAME as meaning “the server for this service is …” then yes. HTTPS can be published along side MX, A, and . Just start doing it. Mark -- Mark Andrews > On 10 Aug 2021, at 07:13, Klaus Darilion wrote: > > Do you think that we can get rid of

Re: Does BIND supports ANAME RR

2021-08-09 Thread Mark Andrews
also have code that can read and display presentation format. ANAME is dead. -- Mark Andrews > On 9 Aug 2021, at 21:53, Klaus Darilion via bind-users > wrote: > >  >> >> -Ursprüngliche Nachricht- >> Von: bind-users Im Auftrag von Evan >> Hunt >

Re: Using catz (catalog zones): BIND does not remove the catz-journal file on the slave

2021-07-29 Thread Mark Andrews
this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users --

Re: Compile problems on musl/arm32 since 9.16.8

2021-07-18 Thread Mark Andrews
est for this situation please? > > > > I'm sure I have failed to provide enough details at this stage. Please be > gentle... > > Thanks > > Ed W > > _______ > Please visit https://lists.isc.org/mailman/listinfo

Re: query-source and listened interfaces

2021-07-08 Thread Mark Andrews
_ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list >

Re: non-improving referral

2021-07-07 Thread Mark Andrews
: 176 msec ;; SERVER: 64.70.78.82#53(64.70.78.82) ;; WHEN: Thu Jul 08 15:09:04 AEST 2021 ;; MSG SIZE rcvd: 121 % > On 8 Jul 2021, at 01:03, tale wrote: > > On Mon, Jul 5, 2021 at 8:20 PM Mark Andrews wrote: >> This is an error with the delegation of ok.contact. The NS records at th

Re: compile flag to disable AAAA responses is unrecognized

2021-07-06 Thread Mark Andrews
--enable-filter- > Scott Strattner > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscrip

Re: Problem with internal/external VIEWs

2021-07-05 Thread Mark Andrews
.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-user

Re: non-improving referral

2021-07-05 Thread Mark Andrews
this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users

Re: dig standalone source?

2021-07-05 Thread Mark Andrews
gt; > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andre

Re: 'managed-keys' is deprecated ??

2021-06-14 Thread Mark Andrews
; > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ P

Re: 9.11 to 9.16: need directions

2021-06-13 Thread Mark Andrews
Mbox names are user\.host.example where \. embeds a period in the label. -- Mark Andrews > On 13 Jun 2021, at 21:09, Eric Germann via bind-users > wrote: > > bind doesn’t support @ signs for the email contact. It would be > root.rn6.xyz.local > > Line 15,

Re: 9.11 to 9.16: need directions

2021-06-12 Thread Mark Andrews
the .local. -- Mark Andrews > On 13 Jun 2021, at 10:33, ToddAndMargo via bind-users > wrote: > > On 6/12/21 5:30 PM, ToddAndMargo via bind-users wrote: >> Hi All, >> I just upgraded from Fedora 33 to Fedora 34. >> Bind was updated from 9.11 to 9.16 in Fedora

Re: no _smtp_tls in published zone

2021-06-01 Thread Mark Andrews
s.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.o

Re: configure notify for ixfer?

2021-06-01 Thread Mark Andrews
s list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mar

Re: Inline signing fails dnsviz test - STILL [LONG]

2021-05-16 Thread Mark Andrews
dig -v > DiG 9.16.15 > > > On 5/16/2021 12:06 AM, Mark Andrews wrote: >> >>> On 16 May 2021, at 10:17, Dan Egli via bind-users >>> wrote: >>> >>> On 5/10/2021 12:38 PM, Tony Finch wrote: >>>> Dan Egli >>>> wrote: &

Re: Inline signing fails dnsviz test - STILL [LONG]

2021-05-15 Thread Mark Andrews
/pri/keys"; > inline-signing yes; > dnssec-policy default; > }; > }; > Help? If you have errors reaching me, try d...@eglifamily.name, as it doesn't > seem to be having issues. > --Dan Egli > From my Test Server > > ___

Re: ISC Bind as secondary to Windows Server: bad bitmap error on named xfer.

2021-05-12 Thread Mark Andrews
There is enough information to reproduce. Dig does have +besteffort but it doesn’t recover from this. You don’t want default handling to accept broken records so just skipping isn’t good behavior. It should be possible to extend +besteffort to print bad records in unknown format. -- Mark

Re: [External] strange queries incrementing letter by letter

2021-05-07 Thread Mark Andrews
Some piece of software trying to speed up resolution by resolving names as you type. -- Mark Andrews > On 8 May 2021, at 04:21, Kevin A. McGrail wrote: > >  > Weird. > > Thoughts are: > > Bad software? What we call ratware. > > UDP/TCP Firewall issues? &

Re: Bind won't listen

2021-05-06 Thread Mark Andrews
aid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley

Re: Bind refusing my DKIM key

2021-05-06 Thread Mark Andrews
e information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org __

Re: took a while to figure out why all your tests fail

2021-05-06 Thread Mark Andrews
First of all the user running the tests needs to be able to write to bin/tests/system. See the permission denied from tee. -- Mark Andrews > On 7 May 2021, at 08:20, Dennis Clarke via bind-users > wrote: > >  > > I very carefully created an airgap test system for th

Re: Slightly baffled about Undefined symbols that are in OpenSSL

2021-05-05 Thread Mark Andrews
Use a non EoL version of OpenSSL. -- Mark Andrews > On 5 May 2021, at 22:32, Dennis Clarke via bind-users > wrote: > >  > This has kept me spinning in a few hours since yesterday. So I gave a > try at configure and compile of bind-9.11.31 on ye Fujitsu/Oracle SPARC > S

Re: managed-keys-error since BIND-9.16.15

2021-05-02 Thread Mark Andrews
0:20:28.532 general: error: > /var/named/slave/example.com.hosts.jnw: journal file corrupt: expected serial > 2021050100, got 2021050300 > 03-May-2021 00:20:28.532 general: error: zone example.com/IN: > dns_journal_compact failed: unexpected error > > Thank you. > Kin

Re: managed-keys-error since BIND-9.16.15

2021-04-30 Thread Mark Andrews
Named should automatically correct this error. The journal version was not updated when the transaction header was updated. This has been corrected and named detects the unexpected transaction header and writes out a corrected journal. -- Mark Andrews > On 30 Apr 2021, at 21:16, Tom wr

Re: Configuring the location of named .jnl files

2021-04-26 Thread Mark Andrews
__ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > >

Re: Configuring the location of named .jnl files

2021-04-25 Thread Mark Andrews
riptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Austr

Re: Ask for automated KSK roll with DS checking

2021-04-15 Thread Mark Andrews
becoming rough later in west. Fair. Good. > > Seeing that I still need some scripting, does anyone already have scripts > that work? > > -- > Bob Harold > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-us

Re: Ask for automated KSK roll with DS checking

2021-04-15 Thread Mark Andrews
> Fair Isle: South 3 to 5, occasionally 6 later. Slight or moderate, > becoming rough later in west. Fair. Good. > > Seeing that I still need some scripting, does anyone already have scripts > that work? > > -- > Bob Harold > > _

Re: Preventing a particular type of nameserver abuse

2021-04-14 Thread Mark Andrews
opment of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley

Re: No logging of failed queries

2021-04-13 Thread Mark Andrews
Real world configurations would have a catch all view after the more specific views. Add one. -- Mark Andrews > On 13 Apr 2021, at 22:41, Sachchidanand Upadhyay via bind-users > wrote: > >  > Hi, > >I am using bind's geoip feature, created one ACL to all

Re: Zone 126.0.0.1 has 0 SOIA records

2021-04-12 Thread Mark Andrews
oftware with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117,

Re: forwarding zone setup from a BIND slave (without recursion?)

2021-04-07 Thread Mark Andrews
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-us

Re: Maximum limit in a NAPTR RR

2021-03-31 Thread Mark Andrews
iptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871

Re: 9.16.13 overwrote master files

2021-03-29 Thread Mark Andrews
GIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On Mon, 2021-03-29 at 12:54 +1100, Mark Andrews wrote: >> What do you have in options? > > options { >directory "/var/named"; >allow-recursion { "friends"; }; >dnssec-enable yes; >

Re: 9.16.13 overwrote master files

2021-03-28 Thread Mark Andrews
__ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing

Re: Timeout setting

2021-03-26 Thread Mark Andrews
> On 26 Mar 2021, at 20:44, FUSTE Emmanuel > wrote: > > Le 25/03/2021 à 22:15, Mark Andrews a écrit : >> This is a bug in postfix. Temporary failures in the DNS are not supposed to >> result in permanent failure at the SMTP level. SERVFAIL is not NXDOMAIN. >>

Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure

2021-03-25 Thread Mark Andrews
ailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https

Re: Timeout setting

2021-03-25 Thread Mark Andrews
This is a bug in postfix. Temporary failures in the DNS are not supposed to result in permanent failure at the SMTP level. SERVFAIL is not NXDOMAIN. -- Mark Andrews > On 26 Mar 2021, at 04:12, Julien Salort wrote: > > Hello, > > > I have a VPS running postfix and bind

Re: Compile Errors, Apple Silicon (M1), BIND 9.16.13

2021-03-22 Thread Mark Andrews
> > James. > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.i

Re: Broken signatures on packages.sury.org

2021-03-17 Thread Mark Andrews
buster InRelease > The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 > DEB.SURY.ORG Automatic Signing Key > > I haven't seen any official word from ISC that there are new keys to > grab, so wanted to check that someone isn't messing about with your > reposit

Re: Using NAT64 for IPv6 only DNS resolvers

2021-03-15 Thread Mark Andrews
nd-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.o

Re: Zone set for dynamic updating isn't updating

2021-03-04 Thread Mark Andrews
they add additional constraints. Additionally if you are running as root named does not have permission to override file permissions root normally has. -- Mark Andrews > On 5 Mar 2021, at 05:59, Bruce Johnson wrote: > > We have one zone set for Active directory to update dynamically

Re: BIND server; dig vs dig +trace on failing lookup.

2021-03-02 Thread Mark Andrews
.org/mailman/listinfo/bind-users to > >> unsubscribe from this list > > >> ISC funds the development of this software with paid support > >> subscriptions. Contact us at https://www.isc.org/contact/ for more > >> information

Re: BIND server; dig vs dig +trace on failing lookup.

2021-03-02 Thread Mark Andrews
-Greg > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/conta

Re: dnstap shows little logging at debug 10

2021-03-01 Thread Mark Andrews
t;closing dnstap". > > Any idea what I am doing wrong? > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support

Re: Impact on removing IPV6 DNS Server from client terminals when Dual-stack is enabled

2021-02-28 Thread Mark Andrews
ps://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bin

Re: TXT & SPF Record Syntax

2021-02-28 Thread Mark Andrews
t; > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please

Re: Filtering A records in combination with DNS64

2021-02-18 Thread Mark Andrews
us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET:

Re: underscore in A or PTR records

2021-02-17 Thread Mark Andrews
No. The PTR records that map from IP address to hostname enforce the hostname rules. -- Mark Andrews > On 18 Feb 2021, at 02:20, Sten Carlsen wrote: > >  > >> On 17 Feb 2021, at 12.34, ONRUBIA AVILES Carlos (CCS/MST) >> wrote: >> >> Hello, >>

Re: underscore in A or PTR records

2021-02-17 Thread Mark Andrews
isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _

Re: Problems with interfaces going down

2021-02-14 Thread Mark Andrews
>> > _______ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/co

Re: Problems with interfaces going down

2021-02-14 Thread Mark Andrews
___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mail

Re: Trying again on SERVFAIL

2021-02-11 Thread Mark Andrews
things faster. I’ve seem day long outages in the last 7 days. They still happen. Personally I was happy the emails queued. -- Mark Andrews > On 11 Feb 2021, at 23:26, Alessandro Vesely wrote: > > On Wed 10/Feb/2021 22:38:05 +0100 J Doe wrote: >> Out of curiosity, what s

Re: Bind 9.11 serving up false answers for a single domain.

2021-02-10 Thread Mark Andrews
Because they are connected at different points in the network and as such see different network faults. The servers can all be working fine, it the connections between them that are not working. -- Mark Andrews > On 11 Feb 2021, at 04:54, sami's strat wrote: > >  >

Re: Bind 9.11 serving up false answers for a single domain.

2021-02-09 Thread Mark Andrews
ygZNd/h0SxXWlQXi+W3G9LN > +4z/qxtl9dGD1ka54Ln3MAVxB1Tp4pt0ri4qPLmfGKf/HA== > couldn't get address for 'internet-dns3.state.ma.us': not found > couldn't get address for 'internet-dns1.state.ma.us': not found > couldn't get address for 'internet-dns

Re: Bind 9.11 serving up false answers for a single domain.

2021-02-09 Thread Mark Andrews
.state.ma.us': not found > couldn't get address for 'internet-dns3.state.ma.us': not found > couldn't get address for 'internet-dns2.state.ma.us': not found > dig: couldn't get address for 'internet-dns1.state.ma.us': no more -- Mark An

Re: Forward zone does not work when allow recursive is restrictive

2021-02-09 Thread Mark Andrews
_ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for

<    1   2   3   4   5   6   7   8   9   10   >