Re: Transitioning to new algorithm for DNSSEC

2022-05-05 Thread nicolas
Hi, On 5/5/22 6:37 PM, frank picabia wrote: Hi, I've been running a Bind set up with DNSSEC for many years. It was done following the guide at the digitalocean site. What I don't find in a nice guide, is how to change your algorithm to a more current one, and seamlessly make your domain run

Don't understand why I get a FORMERR (quad-A - ipv6 related)

2012-04-25 Thread Nicolas Michel
as Windows network resolvers, I don't get any timeout since I get the blank response immediately for the quad-A record (with no error as return code) and it immediately try to resolve with single-A. => I know the root cause is the enablement of IPV6 on the clients and that part of the pro

Re: Don't understand why I get a FORMERR (quad-A - ipv6 related)

2012-04-25 Thread Nicolas Michel
software dev to decide wether to raise an error or not in that case?) Nicolas ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailma

[IPv6] Managing dynamic /64 reverse zones inside a static /48 (no delegation)

2012-09-25 Thread Nicolas C.
zens of /64 IPv6 reverse zones, so I'm checking here in case I forgot something. Regards, Nicolas ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.or

Shared dynamic zone on external view?

2012-11-07 Thread Nicolas C.
ve this message in the logs. zone /IN/internal: refresh: unexpected rcode (SERVFAIL) from master IPv4-of-my-DNS#53 (source IPv4-of-my-DNS#0) Regards, Nicolas ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Shared dynamic zone on external view?

2012-11-08 Thread Nicolas C.
Le 08/11/2012 13:20, /dev/rob0 a écrit : On Thu, Nov 08, 2012 at 09:23:05AM +1100, Mark Andrews wrote: In message <509a8796.7060...@nryc.fr>, "Nicolas C." writes: I have a dynamic zone on an external view, this zone is updated with a TSIG key from outside of our network. Ther

Slowing down bind answers ?

2014-01-02 Thread Nicolas C.
o do it at a network-level (with iptables) but I'm curious to know if it's possible to do it directly with bind. Regards, Nicolas ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind

Re: Slowing down bind answers ?

2014-01-04 Thread Nicolas C.
On 03/01/2014 18:00, wbr...@e1b.org wrote: From: Mark Andrews After that specify a final date for them to fix their machines by after which you will send NXDOMAIN responses. Sometimes sending a poisoned reponse is the only way to get peoples attention. zone "." { type master; file "em

Re: Slowing down bind answers ?

2014-01-05 Thread Nicolas C.
On 05/01/2014 18:17, Sten Carlsen wrote: You might also make a list of those who use the old server, send a message (assuming the management system allows identification) that the service goes down at a specific date in e.g. a month from that date. And then remove it. Threats are not much worth i

Re: DDNS from DHCPv4 and DHCPv6

2014-04-04 Thread Nicolas C.
in production in my campus. If you can read french, I wrote an article about it : https://conf-ng.jres.org/2013/document_revision_1437.html?download Feel free to ask me (or the isc-dhcp-users list) if you need help. Cheers, Nicolas ___ Please visit ht

Forwarded lookup failing on no valid RRSIG

2020-12-17 Thread Nicolas Bock
Hi, When I configure my named to forward to our corporate DNS servers (10.0.0.2 and 10.0.0.3), I end up getting error messages such as Dec 17 20:58:06 dns-server named[843946]: fetch: www.canonical.com/A Dec 17 20:58:06 dns-server named[843946]: fetch: com/DS Dec 17 20:58:06

Re: Forwarded lookup failing on no valid RRSIG

2020-12-18 Thread Nicolas Bock
kQWXaBcBo//NUX2asBLus8S7sJ9BDxpGUAsS9o+TdRlq YkIHBA== > > ;; Query time: 0 msec > ;; SERVER: 127.0.0.1#53(127.0.0.1) > ;; WHEN: Fri Dec 18 12:38:34 AEDT 2020 > ;; MSG SIZE rcvd: 395 > > [beetle:~] marka% > > >> On 18 Dec 2020, at 11:36, Nicolas Bock wrote: >

Re: BIND through COPR after CentOS

2020-12-18 Thread Nicolas Bock
On Fri, Dec 18 2020, John Thurston wrote: > We have been using the ISC COPR packages for BIND on CentOS. With the > demise of CentOS, we (along with a few other people on the planet) need > to consider where we will move our applications. > > We have been completely happy with the packages provi

Re: Forwarded lookup failing on no valid RRSIG

2020-12-18 Thread Nicolas Bock
SES aware. It > will need to be updated for you to validate through it. > > -- > Mark Andrews > > > On 19 Dec 2020, at 05:07, Nicolas Bock > wrote: > > > > Hi Mark, > > > > Thanks so much for the reply. I ran this command and am > > gett

Re: Forwarded lookup failing on no valid RRSIG

2020-12-23 Thread Nicolas Bock
On Sun, Dec 20 2020, Mark Andrews wrote: >> On 21 Dec 2020, at 06:04, Matthew Pounsett wrote: >> >> >> >> On Fri, 18 Dec 2020 at 18:08, Nicolas Bock >> wrote: >> Thanks Mark. Am I correct then that I need to either convince the >> administra

[9.7.0a2] Build in separate directory

2009-08-26 Thread Nicolas Pelletier
, -- Nicolas --- Makefile.in.orig 2009-06-26 02:06:42.0 +0900 +++ Makefile.in 2009-08-26 16:49:41.0 +0900 @@ -53,7 +53,7 @@ $(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${mandir}/man1 install:: isc-config.sh installdirs - ${INSTALL_SCRIPT} ${top_srcdir}/isc-config.sh ${DESTDIR

Update-policy to deny rexep based A records?

2018-04-09 Thread Nicolas Ecarnot
ildcard I tried many combinations of this line, and the only allowed syntax so far is : deny "*" wildcard "*"; which I guess means "No one won't update anything". 1 : It is doable to achieve such a filter? 2 : If yes, may someone suggest the correct syntax? Thank

TR: Slave Zones for Bind 9.11

2018-06-17 Thread Nicolas Breuer
Hello All, I have been migrated from Bind 9.8 to 9.11 Some big changes on the new version. I have a zone file common for two views (one internal & one with recursion ON) I have removed the file option in the zone configuration and I can now share the same zone on the two views. I suspect the z

Re: TR: Slave Zones for Bind 9.11

2018-06-17 Thread Nicolas Breuer
two views is only to allow recursion on our internal ip’s. > Le 17 juin 2018 à 21:04, Evan Hunt a écrit : > >> On Sun, Jun 17, 2018 at 05:32:34PM +0000, Nicolas Breuer wrote: >> I have removed the file option in the zone configuration and I can now share >> the same zon

RE: TR: Slave Zones for Bind 9.11

2018-06-18 Thread Nicolas Breuer
1000x thanks Evan for your advises. I will try to modify the configuration with the allow-recursion options. -Message d'origine- De : Evan Hunt [mailto:e...@isc.org] Envoyé : dimanche 17 juin 2018 22:59 À : Nicolas Breuer Cc : bind-users@lists.isc.org Objet : Re: TR: Slave

RE: TR: Slave Zones for Bind 9.11

2018-06-18 Thread Nicolas Breuer
ailto:e...@isc.org] Envoyé : dimanche 17 juin 2018 22:59 À : Nicolas Breuer Cc : bind-users@lists.isc.org Objet : Re: TR: Slave Zones for Bind 9.11 On Sun, Jun 17, 2018 at 07:10:11PM +, Nicolas Breuer wrote: > I’m not using the in-view. > So, per default this is copied into memory In c