Re: Email migration and MX records

2023-01-04 Thread Matthew Richardson
Bruce Johnson via bind-users wrote:- >We’re making an O365 tenant switchover for our domain (a subdomain of the >arizona.edu domain) and moving from our Barracuda cloud email SMTP to the >University’s tenant, but email cannot flow until the Arizona.edu O365 tenant >can take over our email

Re: unresolvable pms.psc.gov, but google/cloudflare/unbound work

2021-08-22 Thread Matthew Richardson
It looks slightly more subtle than a straight failure. There is a DS record in psc.gov pointing to key 180 in ha.psc.gov:- >ha.psc.gov. 56 IN DS 180 7 1 >8A631C83457F4BDB3C450A725DFDB267C4BAC1CC This points correctly to the key. However digest algorith 1 is now

Re: Dnssec delegation NS RRset

2021-03-27 Thread Matthew Richardson
You may find people can give better answers if you tell us the domain name. The issue does not sound like glue, but there is not enough informmation to go on. Best wishes, Matthew -- >From: "@lbutlr via bind-users" >To: bind-users >Cc: >Date: Sat, 27 Mar 2021 03:30:09 -0600 >Subject:

Re: Scripting dnssec-verify - processing command output

2021-02-07 Thread Matthew Richardson
fy is sending the output in question to STDERR >instead of STDOUT. > > >On Sat, 06 Feb 2021 19:02:28 + >Matthew Richardson wrote: > >> I have been using Perl to do a reasonable amount of scripting, running bind >> utilities and processing the results into variabl

Scripting dnssec-verify - processing command output

2021-02-06 Thread Matthew Richardson
I have been using Perl to do a reasonable amount of scripting, running bind utilities and processing the results into variables. The details below are from Bind 9.11.27 on Centos 7. The code:- $resp = `dig -t soa example.com`; print "dig resp:'$resp'\n"; gets the result of the dig

Re: rpmbuild problem with 9.11.22 on Centos

2020-08-30 Thread Matthew Richardson
Dear Carl, Thanks very much: you were spot on correct! Installing epel-rpm-marcos got the compiles working on both Centos 7 & 6. Best wishes, Matthew -- >From: Carl Byington >To: Matthew Richardson , bind-users@lists.isc.org >Cc: >Date: Sat, 29 Aug 2020 13:53:48 -0

rpmbuild problem with 9.11.22 on Centos

2020-08-29 Thread Matthew Richardson
Today I have been trying to compile 9.11.22 on Centos 7 with a procedure that has been used successfully on many previous releases. The last version I compiled successfully was 9.11.19. The process involves downloading the Copr source RPM and then compiling with rpmbuild. Today's output is:-

Re: Dumb Question is an A or AAAA record required?

2020-07-09 Thread Matthew Richardson
rns NODATA rather than timing out. In the old days (10-15 years ago), I think a timeout may have triggered the failback from MX to A, but I am not sure. Best wishes, Matthew -- >From: Anand Buddhdev >To: Matthew Richardson , bind-users > >Cc: >Date: Thu, 9 Jul 2020 17:06:13

Re: Dumb Question is an A or AAAA record required?

2020-07-09 Thread Matthew Richardson
On a related issues there were (perhaps long ago) issues if the A record for a domain had an SMTP server on it, where email could sometimes be delivered to that A record rather than the MX. I had (again long ago: 10-15 years) actually seen this occur. Do people think that this problem could

Re: NAT and Question Section Mismatch

2020-04-21 Thread Matthew Richardson
Out of interest, what "ip inspect" settings exist in the Cisco 2911 config? Do any of these reference "dns"? If so, this may be your problem... Best wishes, Matthew -- >From: John Wiles >To: Tony Finch >Cc: "bind-users@lists.isc.org" >Date: Tue, 21 Apr 2020 14:08:24 -0400 >Subject: RE:

Re: oddity with trubuiltpambula.com.au

2020-04-19 Thread Matthew Richardson
The answer is that the .au registry has NS (delegation) records for the webcity.com.au servers, but those servers return NS records for the instanthosting.com.au servers. As you observed, they have the same IPs. This can be shown using "dig +trace":- >; <<>> DiG 9.11.17 <<>> +trace

Re: Bind 9.11.13 - inline re-signing stops

2020-03-05 Thread Matthew Richardson
ded the results to issue #1627. > >If I need to try again, please let me know... :-) > >There are a few more days before I need to restart Named. > >Best wishes, >Matthew > > -- >>From: Ond?ej Surý >>To: Matthew Richardson >>Cc: BIND Users >&g

Re: Bind 9.11.13 - inline re-signing stops

2020-02-22 Thread Matthew Richardson
Ond?ej Surý >To: Matthew Richardson >Cc: BIND Users >Date: Thu, 20 Feb 2020 18:07:50 +0100 >Subject: Re: Bind 9.11.13 - inline re-signing stops >Hi Matthew, > >we’ll write some generic instruction on how to get a coredump from a running >named >(without crashing i

Re: Bind 9.11.13 - inline re-signing stops

2020-02-18 Thread Matthew Richardson
quot;. Do you have any step by step instructions for a novice to achieve this? The machine is running Centos 7, and Bind is built using rpmbuild from the source rpm provided by ISC. With many thanks. Best wishes, Matthew -- >From: Ond?ej Surý >To: Matthew Richardson >Cc: bind-users@

Re: Bind 9.11.13 - inline re-signing stops

2020-02-18 Thread Matthew Richardson
our advice of marking it private as I will be uploading config, zonefiles and logs. If the attachments are removed, I am happy for it to be public as they are the only confidential part. Best wishes, Matthew -- >From: Ond?ej Surý >To: Matthew Richardson >Cc: bind-users@lists.isc.or

Bind 9.11.13 - inline re-signing stops

2020-02-05 Thread Matthew Richardson
I have an interesting issue with a hidden master running 9.11.13 and configured with inline signing on a number of zones, configured thus:- >zone "42.201.193.in-addr.arpa" { >type master; >file "zones/master/42.201.193.in-addr.arpa.db"; >inline-signing yes; >auto-dnssec maintain;

Re: Debug logging for auto-dnssec inline signing

2019-11-11 Thread Matthew Richardson
Tony Finch wrote:- >> What "category" should one be logging in order to get details of DNSSEC >> inline signing when running Bind 9.8.11? > >I guess you mean 9.11.8 :-) The 9.8 branch ended with 9.8.8 and it has >been unsupported for ages. Correct - I need to practice my proof reading skills

Debug logging for auto-dnssec inline signing

2019-11-09 Thread Matthew Richardson
What "category" should one be logging in order to get details of DNSSEC inline signing when running Bind 9.8.11? I have an authoratitive master server with a number of domains set with:- inline-signing yes; auto-dnssec maintain; and have a suspicion that Bind has simply stopped

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

2019-05-27 Thread Matthew Richardson
.1.8-stable >[root@li1523-85 ~]# ls /root/rpmbuild/SOURCES >libevent-2.1.8-stable.tar.gz libevent-nonettests.patch >[root@li1523-85 ~]# For my part, I am not concerned about this as I am not using DNSTAP and only mention the issue in case others encounter it. Best wishes, Matthew --

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

2019-05-27 Thread Matthew Richardson
uf-c-compiler is needed by isc-bind-9.11.7-1.1.el6.x86_64 Thus far, I have failed on Centos 6 to identify how or where to install these two depedencies, for which I would ideally like a package rather than compiling from source. I have tried (what I thought was obvious) of installing the current Centos 6

Re: isc-bind-esv Repository - "yum update" doing undesirable things!

2019-05-13 Thread Matthew Richardson
t scl" with SRPMs. Does this give the previous behaviour? Also, what is the correct location from which to download the SRPMs? With many thanks. Best wishes, Matthew -- >From: Micha? K?pie? >To: Matthew Richardson >Cc: bind-users@lists.isc.org >Date: Thu, 9 May 2019 09:19:13 +

isc-bind-esv Repository - "yum update" doing undesirable things!

2019-05-08 Thread Matthew Richardson
I have been using the isc-bind-esv repository on Centos 7 since it was created. On each upgrade, a "yum update" has done the correct thing by upgrading from the running version to the latest version. Today (happily on a cloned test server!) I repeated this with the upgrade being from 9.11.6 to