Re: DKIM setup

2021-08-11 Thread Vinícius Ferrão via bind-users
, at 13:47, Bruce Johnson via bind-users wrote: I’m trying to set up DNS records for DKIM in our system; we have a hybrid O365/On-Prem Exchange server and separate Mailman list server, all of which send email from our domain (and are in the spf list in DNS.) I’m a little unclear on the syntax

Re: DKIM setup

2021-08-11 Thread Vinícius Ferrão via bind-users
I understood the .ve question. On 11 Aug 2021, at 13:56, Vinícius Ferrão via bind-users mailto:bind-users@lists.isc.org>> wrote: Hello. Ve is Venezuela. It’s a country. Alice is the selector name, you can have whatever you want. https://dmarcly.com/blog/what-is-dkim-selector-and-how

Re: AW: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-11 Thread Tim Daneliuk via bind-users
On 8/10/21 11:27 PM, raf via bind-users wrote: > Does that help at all? Very much thank you. I have now discovered my DNS key and corresponding DS record. I believe the DS record is what I have to provide my registrar as I understand

Re: Debug Approach Help?

2021-08-11 Thread Tim Daneliuk via bind-users
lease visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Tracking Down Odd bind Behavior

2021-08-14 Thread Tim Daneliuk via bind-users
.org/support Aug 14 17:07:03 ozzie named[32292]: Aug 14 17:07:03 ozzie named[32292]: command channel listening on 127.0.0.1#953 Aug 14 17:07:03 ozzie named[32292]: 14-Aug-2021 17:07:03.167 general: notice: all zones loaded Aug 14 17:07:03 ozzie

Re: Tracking Down Odd bind Behavior

2021-08-15 Thread G.W. Haywood via bind-users
failures start happening again and post relevant extracts. -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact

Re: Tracking Down Odd bind Behavior

2021-08-15 Thread Tim Daneliuk via bind-users
On 8/15/21 9:07 AM, G.W. Haywood via bind-users wrote: > Hi there, > > On Sun, 15 Aug 2021, Tim Daneliuk wrote: > >> I have a bind slave instance running on FreeBSD 13-STABLE.  Periodically >> (after >> a few days of perfect operation), it loses its ability to

RHEL, Centos, Fedora rpm 9.16.20

2021-08-18 Thread Carl Byington via bind-users
://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: [Question] About migration for 9.11.X to 9.16.X.

2021-08-19 Thread G.W. Haywood via bind-users
You could also spend some quality time in the mailing list archives. -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions

Re: Logging statements w.r.t. view in Bind 9.16.18

2021-08-24 Thread G.W. Haywood via bind-users
ting logs is then trivial. -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/cont

bind extended dns error

2021-09-07 Thread Sachchidanand Upadhyay via bind-users
ts.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.19 or any version newer than 9.16.15 does not start on Windows Server 2019

2021-09-08 Thread G.W. Haywood via bind-users
- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing

Reloading new certs for DNS over HTTPS

2021-09-09 Thread Eric Germann via bind-users
Twitter: @ekgermann Telegram || Signal || Phone +1 {dash} 419 {dash} 513 {dash} 0712 GPG Fingerprint: 89ED 36B3 515A 211B 6390 60A9 E30D 9B9B 3EBF F1A1 ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: Reloading new certs for DNS over HTTPS

2021-09-09 Thread Grant Taylor via bind-users
ts.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Query regarding tmp-xxxx files in ../named/zones

2021-09-15 Thread Rajnish Kamboj via bind-users
te etc.) these temp files. Regards Rajnish Kamboj ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at

Problem resolving

2021-09-16 Thread Danilo Godec via bind-users
Thanks,     Danilo ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind

Re: CNAME query

2021-09-23 Thread Danilo Godec via bind-users
ith 'example.com'...   Regards,    Danilo On 23. 09. 21 13:36, Sonal Pahuja wrote: > Can some one please help me on this > > *From:* Sonal Pahuja > *Sent:* Thursday, September 23, 2021 10:26:48 A

Re: CNAME query

2021-09-23 Thread Havard Eidnes via bind-users
types at the same name, and at the top of the zone you must have SOA and NS records). 2) an SOA record in the authority section, as above. 3) the 'aa' flag set again, as above. 4) no DNSSEC processing etc., as above. Best regards, - Håvard _______ Please visit https://lists.isc.

RE: Query regarding tmp-xxxx files in ../named/zones

2021-09-28 Thread Rajnish Kamboj via bind-users
ome errors (improper shutdown etc.) then does Named uses these tmp- files to correct its database after restart? Regards Rajnish Kamboj -Original Message- From: Mark Andrews Sent: Thursday, September 16, 2021 11:53 AM To: Rajnish Kamboj Cc: bind-users@lists.isc.org Subject: Re: Query

Re: Freezing a Zone vs. Stopping the DNS Server

2021-09-29 Thread FUSTE Emmanuel via bind-users
s is the safe way to proceed. Emmanuel. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mail

Re: force nameserver(bind) information exchanges with clients via tcp only

2021-09-30 Thread Carl Byington via bind-users
nfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

RE: Query regarding tmp-xxxx files in ../named/zones

2021-10-03 Thread Rajnish Kamboj via bind-users
(improper shutdown etc.) then does Named uses these tmp- files to correct its database after restart? Regards Rajnish Kamboj -Original Message----- From: bind-users On Behalf Of Rajnish Kamboj via bind-users Sent: Wednesday, September 29, 2021 9:30 AM To: bind-users@lists.isc.org Subject:

Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Rajnish Kamboj via bind-users
will appear? Note: We are not planning an BIND upgrade currently. This will help me to skip scenarios which may lead to the above issue. Thanks in advance. Regards Rajnish Kamboj ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users t

RE: Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Rajnish Kamboj via bind-users
Message- From: Ondřej Surý Sent: Monday, October 18, 2021 3:28 PM To: Rajnish Kamboj Cc: bind-users@lists.isc.org Subject: Re: Query on issue#2389 BIND 9.16.10 Hi, there were several security issues since 9.16.10, you should be running either last 9.16.x release (9.16.21 as of time writing

RE: Query on issue#2389 BIND 9.16.10

2021-10-18 Thread Rajnish Kamboj via bind-users
the quick resolution as soon as possible. Continuing on mail thread “bind-users@lists.isc.org<mailto:bind-users@lists.isc.org>” we have asked for more info on top of your response. We shall be more than happy if you look into the last thread and share more info on the scenario. Regards R

Re: consolidating Reverse Zones

2021-10-21 Thread Grant Taylor via bind-users
00.110.8/21 example, the more that I realize that you're probably wanting to have two incrementing numbers, the 8-15 for the 3rd octet and 0-255 for the 4th octet. I don't think that $GENERATE can do that. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptogra

Re: CNAME for google sites

2021-10-25 Thread Xavier Humbert via bind-users
signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind

RE: Query on issue#2389 BIND 9.16.10

2021-10-26 Thread Rajnish Kamboj via bind-users
gards Rajnish Kamboj -Original Message- From: Ondřej Surý Sent: Monday, October 18, 2021 4:39 PM To: Rajnish Kamboj Cc: bind-users@lists.isc.org Subject: Re: Query on issue#2389 BIND 9.16.10 All the information available is always written down in the issue you have already referenced. That’s always

RHEL, Centos, Fedora rpm 9.16.22

2021-10-28 Thread Carl Byington via bind-users
://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

9.16.22 - rndc reload not sending to secondaries.

2021-11-03 Thread Speagle, Andy via bind-users
- Andy Speagle ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing

named service suddenly fails to start

2021-11-04 Thread Bruce Johnson via bind-users
ms ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information

Re: named service suddenly fails to start

2021-11-04 Thread Bruce Johnson via bind-users
re allowed in A records :-) Does named-checkzone not check for this? -- Bruce Johnson University of Arizona College of Pharmacy Information Technology Group Institutions do not have opinions, merely customs ___ Please visit https://lists.isc.org/mail

Re: named service suddenly fails to start

2021-11-04 Thread Bruce Johnson via bind-users
titutions do not have opinions, merely customs ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/conta

Re: named service suddenly fails to start

2021-11-04 Thread Grant Taylor via bind-users
On 11/4/21 1:27 PM, Bruce Johnson via bind-users wrote: named-checkconf -z revealed a name had been entered with underscores. The person responsible has been sacked. (not really, merely reminded no underscores are allowed in A records :-) You might want to apologize to them. Underscores are

Master-Slave with IPv6 only?

2021-11-07 Thread Walter H. via bind-users
n named.conf on slave; Thanks, Walter smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid suppor

Re: host your subdomain on your own ?

2021-11-13 Thread Grant Taylor via bind-users
ing resolve to 127.0.0.1 and / or ::1. That information can be published in globally accessible DNS, but it will likely be of very limited value. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit http

Re: host your subdomain on your own ?

2021-11-13 Thread Grant Taylor via bind-users
t al.), not globally routed, firewalled, etc. If this is not a fair expansion, please enlighten me. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-u

Re: host your subdomain on your own ?

2021-11-13 Thread Grant Taylor via bind-users
gle DNS figure out my private Active Directory? ... But WHY?!?!?!". -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from th

Re: DNSSEC implementation on IPv6 PTR Zones

2021-11-18 Thread Grant Taylor via bind-users
RoI for higher counts. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software

RHEL, Centos, Fedora rpm 9.16.23

2021-11-19 Thread Carl Byington via bind-users
://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Recommendations for replacing a master server without breaking DNSSEC

2021-11-23 Thread Ralph Seichter via bind-users
to be doing something wrong re DNSSEC. I'd appreciate you sharing any experiences and recommendations you may have in this matter. Thanks! -Ralph ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC

Re: Recommendations for replacing a master server without breaking DNSSEC

2021-11-26 Thread Ralph Seichter via bind-users
t;rsync" between Alpha and Beta whenever I made a change. In any case, I guess all is well that ends well. ;-) -Ralph ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of th

Re: A good name for development branch releases package

2021-11-30 Thread Xavier Humbert via bind-users
signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc

Re: A good name for development branch releases package

2021-12-01 Thread G.W. Haywood via bind-users
fusion. -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users

Re: A good name for development branch releases package

2021-12-01 Thread Ron Hall via bind-users
bind9- if were voting Ron Hall Senior System Administrator IT Services - NCS Core Infrastructure & Applications 514 398 3718 From: bind-users on behalf of Petr Menšík Sent: Wednesday, December 1, 2021 8:43:55 AM To: Ondřej Surý Cc: bind-users@lists.isc

Re: Rear View RPZ: PTR records from local knowledge

2021-12-02 Thread Greg Rivers via bind-users
lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Rear View RPZ: PTR records from local knowledge

2021-12-02 Thread Grant Taylor via bind-users
and RPZ. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid

Re: bind-chroot queries on symbolic Links to named.conf

2021-12-09 Thread Grant Taylor via bind-users
especially for deeper files. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with p

Error staring named, permissions denied on named.ca

2021-12-09 Thread Bruce Johnson via bind-users
itutions do not have opinions, merely customs ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-user

Re: Error staring named, permissions denied on named.ca

2021-12-09 Thread Bruce Johnson via bind-users
Ugh, forgot about that…that was it. Thanks! On Dec 9, 2021, at 3:48 PM, Mark Andrews mailto:ma...@isc.org>> wrote: Almost certainly SELinux or AppArmor on the new platform getting in the way. On 10 Dec 2021, at 06:08, Bruce Johnson via bind-users mailto:bind-users@lists.isc.org&g

Millions of './ANY/IN' queries denied

2021-12-15 Thread Danilo Godec via bind-users
bad thing by using fail2ban to block these IPs?     Regards, Danilo ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https:

Re: Millions of './ANY/IN' queries denied

2021-12-15 Thread Grant Taylor via bind-users
On 12/15/21 4:51 AM, Danilo Godec via bind-users wrote: Hello, Hi, I'm noticing some unusual activity where 48 external IPs generated over 2M queries that have all been denied (just today): 15-Dec-2021 00:01:42.023 security: info: client @0x7f96180b3fe0 194.48.217.14#59698 (.):

RHEL, Centos, Fedora rpm 9.16.24

2021-12-15 Thread Carl Byington via bind-users
://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

DNS cache poisoning - am I safe if I limit recursion to trusted local networks?

2021-12-29 Thread Danilo Godec via bind-users
and if someone guessed my internal network IPs and spoofed the IP, my DNS server would happily accept their requests? Or is it even wider than that?     Danilo ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: DNS cache poisoning - am I safe if I limit recursion to trusted local networks?

2021-12-30 Thread Danilo Godec via bind-users
On 29. 12. 21 19:24, tale wrote: On Wed, Dec 29, 2021 at 5:31 AM Danilo Godec via bind-users wrote: I have an authoritative DNS server for a domain, but I was also going to use the same server as a recursive DNS for my internal network, limiting recursion by the IP. Apparently, this is a bad

Re: DNS cache poisoning - am I safe if I limit recursion to trusted local networks?

2022-01-03 Thread Grant Taylor via bind-users
facing servers. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software wit

Re: DNS cache poisoning - am I safe if I limit recursion to trusted local networks?

2022-01-03 Thread Grant Taylor via bind-users
S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more inf

How to show run the active configuration on bind

2022-01-04 Thread Mik J via bind-users
can I make sure which value is used ? Thank you ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.o

Re: DNS cache poisoning - am I safe if I limit recursion to trusted local networks?

2022-01-04 Thread Grant Taylor via bind-users
I can defend it when asked. Hence my seeking to better understand. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

2022-01-08 Thread Eric Germann via bind-users
and this > blacklist include legitimate domain names. > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscription

Re: what is wrong with DNS name 'covid19booster.healthservice.ie' ? : Google : what is Google's secret DNS service ?

2022-01-08 Thread G.W. Haywood via bind-users
250 52.214.178.78 It Works For Me, I can browse to the location, but I try not to get in the nameserver's way (and I had my booster a couple of months ago...) For some amusement and education try dig +trace covid19booster.healthservice.ie and spend some quality time with the BIND documentat

dnssec rookie question

2022-01-10 Thread Danilo Godec via bind-users
bad in some way? Should I change that?   Thanks, Danilo ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at http

Failing DNS Server Diagnostic Help Requested

2022-01-13 Thread Tim Daneliuk via bind-users
appreciated as well ... (We have a fair bit of other logging data to be examined, I just didn't want to spam the whole list with all that ...) -- Tim Daneliuk tun...@tundraware.com PGP Key: http://www.

Re: your mail

2022-01-15 Thread G.W. Haywood via bind-users
replies go to the wrong place, you need to be able to show that and find out why. What exactly are you trying to achieve which cannot be achieved by simply using a public DNS service, or one provided by your ISP? -- 73, Ged. ___ Please visit https://lis

Re: your mail

2022-01-15 Thread G.W. Haywood via bind-users
Hi there, On Sat, 15 Jan 2022, Diego Garcia wrote: On Sat, Jan 15, 2022 at 2:14 PM G.W. Haywood via bind-users wrote: > On Sat, 15 Jan 2022, Diego Garcia wrote: > > ... > > network unreachable resolving 'play.google.com/A/IN': 216.239.36.10#53 > > ... &g

AW: Bind 9, dnssec, and .key .private files physical deletion after the key id becomes deleted from zone (the key becomes outdated)

2022-01-24 Thread Klaus Darilion via bind-users
IIRC, Bind needs the key as long as there are signatures in the zone generated by this key. After key deactivation I waited the RRSIG lifetime before deleting them. regards Klaus Von: bind-users Im Auftrag von egoitz--- via bind-users Gesendet: Montag, 24. Jänner 2022 13:00 An: bind-users

Re: Response Policy Regular Expression Question

2022-01-24 Thread Havard Eidnes via bind-users
zone (or if it's explicitly queried for). Regards, - Håvard _______ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more inf

DNSSEC validation via AD bit?

2022-01-30 Thread Gregory Shapiro via bind-users
validation? Note that DANE doesn't allow for treating the authoritative server differently so I don't believe we can use the AA bit as a substitute for the AD bit. Thanks! ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: ISC BIND & Windows

2022-02-01 Thread Danny Mayer via bind-users
tinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

odd MX entry error in zone file

2022-02-03 Thread Bruce Johnson via bind-users
harmacy Information Technology Group Institutions do not have opinions, merely customs -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact

Re: dnssec: ds showing hidden 3+ days after key roll

2022-02-10 Thread Larry Rosenman via bind-users
ilman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

2022-02-11 Thread Jakob Bohm via bind-users
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10 This public discussion message is non-binding and may contain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC

Bind: Standard Ports And Non Standard Ports

2022-02-11 Thread Tim Daneliuk via bind-users
omcast madness? TIA, Tim P.S. My guess is that this so-call "security" service is no such thing, or at least its not the only thing. They are probably harvesting DNS lookups to sell as marketing data, or at least that would be my first guess. -- Visit https://lists.isc.org/ma

Is there a community product maintaining Windows support?

2022-02-11 Thread Jakob Bohm via bind-users
://www.wisemo.com Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10 This public discussion message is non-binding and may contain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: Bind: Standard Ports And Non Standard Ports

2022-02-11 Thread Jakob Bohm via bind-users
On 2022-02-11 16:20, Tim Daneliuk via bind-users wrote: After some months of poking around, we are now certain that our so-called "Business" service from Comcast is compromising our DNS servers because of their execrable "Security Edge" garbage.  (They are willing to r

Re: Bind: Standard Ports And Non Standard Ports

2022-02-12 Thread Greg Choules via bind-users
; tests between the machines inside and the machines outside to establish > whether port number is the problem. e.g. use "dig -p" > > Thanks, Greg > > > On Fri, 11 Feb 2022 at 16:30, Jakob Bohm via bind-users < > bind-users@lists.isc.org> wrote: > >>

Setup a hidden master

2022-02-14 Thread Andrew Baker via bind-users
relates to the domain registrars. Once I "hide" the master server, do I also need to remove it from the list of name servers for the domain on the registrar's sites or is it ok to leave it even though it can't be queried? Thanks in advance Andy Baker -- Visit https://lists.i

RE: Setup a hidden master

2022-02-14 Thread Andrew Baker via bind-users
Thanks for the quick response and confirmation Ondřej You have helped take my paranoia levels down at least one notch! Andy Baker From: Ondřej Surý Sent: Tuesday, February 15, 2022 10:12 AM To: Andrew Baker Cc: bind-users@lists.isc.org Subject: Re: Setup a hidden master Hi, do both, or at

Re: Setup a hidden master

2022-02-15 Thread Grant Taylor via bind-users
to refer to itself. Are there any recommendations around MNAMEs in a hidden primary situation? -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the developm

about apply Deckard to test BIND named

2022-02-15 Thread Sun Guonian via bind-users
nce ! Best Regards,SUN Guonian P.S.Deckard's homepage on github.com is https://github.com/CZ-NIC/deckard -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.

Re: about apply Deckard to test BIND named

2022-02-16 Thread Sun Guonian via bind-users
16. 2. 2022, at 8:32, Sun Guonian via bind-users > wrote: > > Hi, > > I notice that Deckard project can be used to test > knot/knot-resolver/unbound/pdns except BIND. > And I try to write the configuration and template files for named, but it > didn't wor

ipv6 adoption

2022-02-16 Thread Andrew Baker via bind-users
(preferably with idiot proof examples)? I must decide fairly quickly if we roll this zone back to our domain registrar who is setup to handle ipv6 or do we strike out and bring our DNS setup up to date and future proofed! Thanks for your time and expertise. Andy Baker -- Visit https://lists.is

RE: ipv6 adoption

2022-02-16 Thread Mike Lewinski via bind-users
+1 upgrade it anyway before it reaches EOL. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users ma

Re: ipv6 adoption

2022-02-16 Thread Grant Taylor via bind-users
e beta / early adopters distro releases. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Cont

Re: ipv6 adoption

2022-02-16 Thread G.W. Haywood via bind-users
s does not yet support IPv6, then a tunnel broker like HE (and others) are workable. FWIW I've been using DNSSEC with HE slaves since October 2017. I'm happy to report that I've never had any problem with the service. -- 73, Ged. -- Visit https://lists.isc.org/mailman/listi

Re: ipv6 adoption

2022-02-16 Thread Grant Taylor via bind-users
On 2/16/22 9:24 AM, G.W. Haywood via bind-users wrote: FWIW I've been using DNSSEC with HE slaves since October 2017.  I'm happy to report that I've never had any problem with the service. Please clarify if you are talking about DNSSEC for your own zone that they are doing seco

RE: ipv6 adoption

2022-02-16 Thread Andrew Baker via bind-users
Plaza Tower, 3rd Floor | PO Box: 15224, Doha – Qatar  E-mail: a.ba...@salaminternational.com| Website: www.salaminternational.com -Original Message- From: bind-users On Behalf Of Mark Tinka Sent: Wednesday, February 16, 2022 6:53 PM To: bind-users@lists.isc.org Subject: Re:

Re: ipv6 adoption

2022-02-17 Thread G.W. Haywood via bind-users
The reverse zones are delegated to us but they aren't signed. -- 73, Ged. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more i

Re: Is there a community product maintaining Windows support?

2022-02-17 Thread Jakob Bohm via bind-users
d it yourself.  That's the can-do attitude that OSS started with.  I remember the first time I ever downloaded an real OSS code and built it myself.  It was rzsz - zmodem code for windows.  Back in the BBS days, really.  That's the only way you got that binary.  It was a total gas and I

Re: Bind: Standard Ports And Non Standard Ports

2022-02-17 Thread Jakob Bohm via bind-users
ontain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for mor

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

2022-02-17 Thread Jakob Bohm via bind-users
st few things in the Application Event Log (Source: named) before it terminates? Richard. -Original Message----- From: bind-users On Behalf Of Jakob Bohm via bind-users Sent: 11 February 2022 12:19 pm To: bind-users Subject: Windows 9.16.25 fails to start (1067 Terminated unexpectedly) Dear

Re: Is there a community product maintaining Windows support?

2022-02-17 Thread Danny Mayer via bind-users
;d be in a constant race to keep up. It's not worth the effort. I have recommended that you use the docker image version of BIND9 and run that on your Windows box. Danny On 2/17/22 7:42 AM, Jakob Bohm via bind-users wrote: Fortunately (or unfortunately), the existing port of the 9.16.x bin

Re: Is there a community product maintaining Windows support?

2022-02-17 Thread Jakob Bohm via bind-users
22 7:42 AM, Jakob Bohm via bind-users wrote: Fortunately (or unfortunately), the existing port of the 9.16.x bind code to Windows is built with Microsoft tools (MSVC2019) and contains its own handling of differences between Windows and Unix. If a maintainer stepped up to maintain the source for a por

Re: Is there a community product maintaining Windows support?

2022-02-17 Thread Jakob Bohm via bind-users
the docker image version of BIND9 and run that on your Windows box. Danny On 2/17/22 7:42 AM, Jakob Bohm via bind-users wrote: Fortunately (or unfortunately), the existing port of the 9.16.x bind code to Windows is built with Microsoft tools (MSVC2019) and contains its own handling of differenc

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

2022-02-17 Thread Jakob Bohm via bind-users
ainful and requires expertise with extremely high learning curve. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. On 17. 2. 2022, at 15:08, Jakob Bohm via bind-users wrote:  On

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

2022-02-17 Thread Paul Kosinski via bind-users
ate -- it would certainly make harder the reverse engineering of software from Microsoft and others who build on top of Windows. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Cont

Re: Is there a community product maintaining Windows support?

2022-02-17 Thread Jakob Bohm via bind-users
On 2022-02-17 18:01, Reindl Harald wrote: Am 17.02.22 um 17:36 schrieb Jakob Bohm via bind-users: This is truly tragic, and quite counterproductive action by ISC. no, it's just stop wasting time for things not really used in the real production world Messing about with docker virtualiz

Re: Windows 9.16.25 fails to start (1067 Terminated unexpectedly)

2022-02-18 Thread Jakob Bohm via bind-users
g on Windows is extremely painful and requires expertise with extremely high learning curve. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. On 17. 2. 2022, at 15:08, Jakob Bohm via bi

Has anyone run Sophos Server Protection on a linux system running bind?

2022-02-18 Thread Bruce Johnson via bind-users
rsity of Arizona College of Pharmacy Information Technology Group Institutions do not have opinions, merely customs -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at

Re: Has anyone run Sophos Server Protection on a linux system running bind?

2022-02-18 Thread Jon Bruce via bind-users
.m., Bruce Johnson via bind-users wrote: We getting a centralized IT push to install the university’s sophos product on all servers, including linux: https://docs.sophos.com/central/Customer/help/en-us/central/Customer/concepts/SPLCommandLineOptions.html We have three systems running bind: a p

<    5   6   7   8   9   10   11   12   13   14   >