Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-24 Thread Ondřej Surý 
Honestly, it's pretty hard to help you, as you provided only snippets of 
configuration.

If you want the help here, you should provide:

1. full (sanitized) configuration file - named-checkconf -px is your friend

2. full state of the zone before

3. full state of the zone after

4. named.log - at least the parts where it shows loading of the zone, rndc 
commands and what happens after; increasing debugging level might sometimes 
help (add -d xx to your named invocation)

Without these, we would be just guessing in the dark.

Also you are running BIND 9.16.30; the current version that includes all the 
bugfixes and security fixes is BIND 9.16.39, but our general recommendation is 
to upgrade to latest 9.18 version (9.18.13 as of now).

Ondrej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.



> On 20. 3. 2023, at 4:53, Nagesh Thati  wrote:
> 
> HI,
> I am still not able to reload the named with the $include file updated 
> content. Any help would be appreciated.
> Thanks.
> 
> On Fri, Mar 17, 2023 at 12:43 PM Nagesh Thati  wrote:
> Hi,
> I tried syntax, but it didn't work.
> Thanks.
> 
> On Fri, Mar 17, 2023 at 11:41 AM Sachchidanand Upadhyay  
> wrote:
> Hi,
> 
>   Have you checked the syntax?
> 
>   try this:
> 
>$INCLUDE "/var/named/zones/masters/rpz.local.data";
> 
> Regards,
> Sachchidanand
> 
> From: tcpnag...@gmail.com
> To: m3...@m3047.net
> Cc: bind-users@lists.isc.org
> Sent: Friday, March 17, 2023 9:18:32 AM
> Subject: Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading 
> content and dig not working
> 
> Thanks for the reply Fred Morris,
> Yes, even after serial number increment and reconfig and reload also not 
> picking up the include file data.
> 
> 
> On Fri, Mar 17, 2023 at 2:45 AM Fred Morris  wrote:
> Hello
> 
> On Thu, 16 Mar 2023, Nagesh Thati wrote:
> > [...]
> > When named is restarted using systemctl above rpz rules are working fine,
> > but when I add a new rule *nagesh3.com  A 3.4.5.6
> > * manually in
> > the include file and run "rndc reconfig and rndc reload", named is not
> > picking up the updated include file and *nagesh3.com * 
> > rpz
> > rule is not working.
> 
> Are you incrementing the SOA serial number?
> 
> --
> 
> Fred Morris, internet plumber
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-24 Thread Petr Menšík 

Have you checked named has permissions to read the file you have modified?

Just rndc reload should catch modified files. You can also specify just 
the zone modified.


Is there any output in journalctl -xeu named about those changes? Try 
dig @localhost example.org soa to check which version is loaded. Command 
"rndc zonestatus example.org" might help too. Replace example.org with 
your zone name.


Try also "sudo -u bind named-checkconf -z". Modify -u bind to other user 
if that is not the username of running named.service. If that does not 
report anything useful, then consult journalctl.


Cheers,
Petr

On 3/20/23 04:53, Nagesh Thati wrote:

HI,
I am still not able to reload the named with the $include file updated 
content. Any help would be appreciated.

Thanks.

On Fri, Mar 17, 2023 at 12:43 PM Nagesh Thati  wrote:

Hi,
I tried syntax, but it didn't work.
Thanks.

On Fri, Mar 17, 2023 at 11:41 AM Sachchidanand Upadhyay
 wrote:

Hi,

  Have you checked the syntax?

  try this:

/$INCLUDE "/var/named/zones/masters/rpz.local.data";/
/
/
/Regards,/
/Sachchidanand/


*From: *tcpnag...@gmail.com
*To: *m3...@m3047.net
*Cc: *bind-users@lists.isc.org
*Sent: *Friday, March 17, 2023 9:18:32 AM
*Subject: *Re: BIND 9.16.30 - $INCLUDE file in the rpz zone
file not reloading content and dig not working

Thanks for the reply Fred Morris,
Yes, even after serial number increment and reconfig and
reload also not picking up the include file data.


On Fri, Mar 17, 2023 at 2:45 AM Fred Morris 
wrote:

Hello

On Thu, 16 Mar 2023, Nagesh Thati wrote:
> [...]
> When named is restarted using systemctl above rpz rules
are working fine,
> but when I add a new rule *nagesh3.com
  A 3.4.5.6
> * manually in
> the include file and run "rndc reconfig and rndc
reload", named is not
> picking up the updated include file and *nagesh3.com
 * rpz
> rule is not working.

Are you incrementing the SOA serial number?

--

Fred Morris, internet plumber

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to

unsubscribe from this list

ISC funds the development of this software with paid
support subscriptions. Contact us at
https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to

unsubscribe from this list

ISC funds the development of this software with paid support
subscriptions. Contact us at https://www.isc.org/contact/ for
more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users



--
Petr Menšík
Software Engineer, RHEL
Red Hat,https://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-19 Thread Nagesh Thati 
HI,
I am still not able to reload the named with the $include file updated
content. Any help would be appreciated.
Thanks.

On Fri, Mar 17, 2023 at 12:43 PM Nagesh Thati  wrote:

> Hi,
> I tried syntax, but it didn't work.
> Thanks.
>
> On Fri, Mar 17, 2023 at 11:41 AM Sachchidanand Upadhyay 
> wrote:
>
>> Hi,
>>
>>   Have you checked the syntax?
>>
>>   try this:
>>
>>*$INCLUDE "/var/named/zones/masters/rpz.local.data";*
>>
>> *Regards,*
>> *Sachchidanand*
>>
>> --
>> *From: *tcpnag...@gmail.com
>> *To: *m3...@m3047.net
>> *Cc: *bind-users@lists.isc.org
>> *Sent: *Friday, March 17, 2023 9:18:32 AM
>> *Subject: *Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not
>> reloading content and dig not working
>>
>> Thanks for the reply Fred Morris,
>> Yes, even after serial number increment and reconfig and reload also not
>> picking up the include file data.
>>
>>
>> On Fri, Mar 17, 2023 at 2:45 AM Fred Morris  wrote:
>>
>>> Hello
>>>
>>> On Thu, 16 Mar 2023, Nagesh Thati wrote:
>>> > [...]
>>> > When named is restarted using systemctl above rpz rules are working
>>> fine,
>>> > but when I add a new rule *nagesh3.com  A 3.4.5.6
>>> > * manually in
>>> > the include file and run "rndc reconfig and rndc reload", named is not
>>> > picking up the updated include file and *nagesh3.com <
>>> http://nagesh3.com>* rpz
>>> > rule is not working.
>>>
>>> Are you incrementing the SOA serial number?
>>>
>>> --
>>>
>>> Fred Morris, internet plumber
>>>
>>> --
>>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>>> from this list
>>>
>>> ISC funds the development of this software with paid support
>>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>>> information.
>>>
>>>
>>> bind-users mailing list
>>> bind-users@lists.isc.org
>>> https://lists.isc.org/mailman/listinfo/bind-users
>>>
>>
>> --
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>
>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>
>>
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>>
>
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-17 Thread Nagesh Thati 
Hi,
I tried syntax, but it didn't work.
Thanks.

On Fri, Mar 17, 2023 at 11:41 AM Sachchidanand Upadhyay 
wrote:

> Hi,
>
>   Have you checked the syntax?
>
>   try this:
>
>*$INCLUDE "/var/named/zones/masters/rpz.local.data";*
>
> *Regards,*
> *Sachchidanand*
>
> --
> *From: *tcpnag...@gmail.com
> *To: *m3...@m3047.net
> *Cc: *bind-users@lists.isc.org
> *Sent: *Friday, March 17, 2023 9:18:32 AM
> *Subject: *Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not
> reloading content and dig not working
>
> Thanks for the reply Fred Morris,
> Yes, even after serial number increment and reconfig and reload also not
> picking up the include file data.
>
>
> On Fri, Mar 17, 2023 at 2:45 AM Fred Morris  wrote:
>
>> Hello
>>
>> On Thu, 16 Mar 2023, Nagesh Thati wrote:
>> > [...]
>> > When named is restarted using systemctl above rpz rules are working
>> fine,
>> > but when I add a new rule *nagesh3.com  A 3.4.5.6
>> > * manually in
>> > the include file and run "rndc reconfig and rndc reload", named is not
>> > picking up the updated include file and *nagesh3.com <
>> http://nagesh3.com>* rpz
>> > rule is not working.
>>
>> Are you incrementing the SOA serial number?
>>
>> --
>>
>> Fred Morris, internet plumber
>>
>> --
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>
>> ISC funds the development of this software with paid support
>> subscriptions. Contact us at https://www.isc.org/contact/ for more
>> information.
>>
>>
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>>
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-17 Thread Sachchidanand Upadhyay via bind-users 
Hi, 

Have you checked the syntax? 

try this: 

$INCLUDE "/var/named/zones/masters/rpz.local.data"; 

Regards, 
Sachchidanand 


From: tcpnag...@gmail.com 
To: m3...@m3047.net 
Cc: bind-users@lists.isc.org 
Sent: Friday, March 17, 2023 9:18:32 AM 
Subject: Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading 
content and dig not working 

Thanks for the reply Fred Morris, 
Yes, even after serial number increment and reconfig and reload also not 
picking up the include file data. 


On Fri, Mar 17, 2023 at 2:45 AM Fred Morris < [ mailto:m3...@m3047.net | 
m3...@m3047.net ] > wrote: 


Hello 

On Thu, 16 Mar 2023, Nagesh Thati wrote: 
> [...] 
> When named is restarted using systemctl above rpz rules are working fine, 
> but when I add a new rule * [ http://nagesh3.com/ | nagesh3.com ] < [ 
> http://nagesh3.com/ | http://nagesh3.com ] > A 3.4.5.6 
> * manually in 
> the include file and run "rndc reconfig and rndc reload", named is not 
> picking up the updated include file and * [ http://nagesh3.com/ | nagesh3.com 
> ] < [ http://nagesh3.com/ | http://nagesh3.com ] >* rpz 
> rule is not working. 

Are you incrementing the SOA serial number? 

-- 

Fred Morris, internet plumber 

-- 
Visit [ https://lists.isc.org/mailman/listinfo/bind-users | 
https://lists.isc.org/mailman/listinfo/bind-users ] to unsubscribe from this 
list 

ISC funds the development of this software with paid support subscriptions. 
Contact us at [ https://www.isc.org/contact/ | https://www.isc.org/contact/ ] 
for more information. 


bind-users mailing list 
[ mailto:bind-users@lists.isc.org | bind-users@lists.isc.org ] 
[ https://lists.isc.org/mailman/listinfo/bind-users | 
https://lists.isc.org/mailman/listinfo/bind-users ] 




-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list 

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information. 


bind-users mailing list 
bind-users@lists.isc.org 
https://lists.isc.org/mailman/listinfo/bind-users 
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-16 Thread Nagesh Thati 
Thanks for the reply Fred Morris,
Yes, even after serial number increment and reconfig and reload also not
picking up the include file data.


On Fri, Mar 17, 2023 at 2:45 AM Fred Morris  wrote:

> Hello
>
> On Thu, 16 Mar 2023, Nagesh Thati wrote:
> > [...]
> > When named is restarted using systemctl above rpz rules are working fine,
> > but when I add a new rule *nagesh3.com  A 3.4.5.6
> > * manually in
> > the include file and run "rndc reconfig and rndc reload", named is not
> > picking up the updated include file and *nagesh3.com *
> rpz
> > rule is not working.
>
> Are you incrementing the SOA serial number?
>
> --
>
> Fred Morris, internet plumber
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-16 Thread Fred Morris 

Hello

On Thu, 16 Mar 2023, Nagesh Thati wrote:

[...]
When named is restarted using systemctl above rpz rules are working fine,
but when I add a new rule *nagesh3.com  A 3.4.5.6
* manually in
the include file and run "rndc reconfig and rndc reload", named is not
picking up the updated include file and *nagesh3.com * rpz
rule is not working.


Are you incrementing the SOA serial number?

--

Fred Morris, internet plumber

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-16 Thread Nagesh Thati 
Hi Team,
I have configured a named with rpz,
*options section has,*


*response-policy {zone "rpz.local";} qname-wait-recurse
no;*

*Zone Section in named.conf,*



*zone "rpz.local" {type master;file
"/var/named/zones/masters/db.rpz.local";};*

*Zone file content,*










*> cat db.rpz.local;; rpz.local;$TTL2h ; default TTL$ORIGIN
 rpz.local.@SOA nonexistent.nodomain.none. dummy.nodomain.none. 1
12h 15m 3w 2h; name server is never accessed but out-of-zone NS
 nonexistant.nodomain.none.$INCLUDE /var/named/zones/masters/rpz.local.data*


*Include file content,*


*> cat rpz.local.datanagesh1.com  A 1.2.3.4*
*nagesh2.com  A 2.3.4.5*

When named is restarted using systemctl above rpz rules are working fine,
but when I add a new rule *nagesh3.com  A 3.4.5.6
* manually in
the include file and run "rndc reconfig and rndc reload", named is not
picking up the updated include file and *nagesh3.com * rpz
rule is not working.

Can someone please help me with named reloading from the updated include
file without restarting the named service.

Thanks
Nagesh.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users