Re: [RESOLVED] Re: No response from localhost with "allow-query { any; };"

2020-09-04 Thread Crist Clark
>From release notes: Notes for BIND 9.16.1 Known Issues UDP network ports used for listening can no longer simultaneously be used for sending traffic. An example configuration which triggers this issue would be one which uses the same address:port pair for listen-on(-v6) statements as for

[RESOLVED] Re: No response from localhost with "allow-query { any; };"

2020-09-04 Thread Axel Rau
> Am 01.09.2020 um 22:28 schrieb Axel Rau : > > tcp queries are being answered, but udp queries receive no response. > This is independent of client location (local, remote). > > A ktrace shows 8 bytes are written on fd 89, the 8 bytes read on fd 88. > The next read gets an errno 35 (see

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Axel Rau
tcp queries are being answered, but udp queries receive no response. This is independent of client location (local, remote). A ktrace shows 8 bytes are written on fd 89, the 8 bytes read on fd 88. The next read gets an errno 35 (see below). clueless, Axel root@ns5:/var/log # uname -a FreeBSD

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Axel Rau
> Am 01.09.2020 um 16:57 schrieb Petr Menšík : > > Please include any listen-on { ... } and listen-on-v6 { ... } clauses. > > It seems any of 127.0.0.1; ::1; nor localhost; is listed in them. > Because it is not listening on localhost socket, it would not answer any > queries. > Voilà:

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Petr Menšík
root@ns5:/ # nc -vu localhost 53 >>> Connection to localhost 53 port [udp/domain] succeeded! >>> >>> From master server: >>> [hermes:local/etc/namedb] root# nc -v ns5.lrau.net 53 >>> Connection to ns5.lrau.net 53 port [tcp/domain] succeeded! >>>

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Axel Rau
;> >> >> Any help greatly appreciated, >> Axel >> >> PS: >> >> part of named.conf: >> allow-notify { >> hermes-ns5; >> }; >> allow-transfer { >> full-trusted; >> ns5-ping; >

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Axel Rau
Thanks for your answer! > Am 01.09.2020 um 16:18 schrieb Warren Kumari : > > The output you included doesn't really show very much, other than that nc > connect to port 53. > > I'd suggest: > dig ns5.lrau.net @localhost > dig ns5.lrau.net

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Warren Kumari
ciated, > Axel > > PS: > > part of named.conf: > allow-notify { > hermes-ns5; > }; > allow-transfer { > full-trusted; > ns5-ping; > ns4-he; > management-hosts; >

Re: No response from localhost with "allow-query { any; };"

2020-09-01 Thread Ondřej Surý
port [udp/domain] succeeded! > > > Any help greatly appreciated, > Axel > > PS: > > part of named.conf: > allow-notify { > hermes-ns5; > }; > allow-transfer { > full-trusted; > ns5-ping; >

No response from localhost with "allow-query { any; };"

2020-09-01 Thread Axel Rau
; }; allow-query { any; }; allow-query-cache { recursive-users; }; allow-recursion { recursive-users; }; root@ns5:/usr/local/etc/namedb/working/slave # named -V BIND 9.16.5 (Stable Release) running on FreeBSD amd64 12.1-RELEASE-p8 FreeBSD 12.1-RELEASE-p8 GENERIC built

Re: Allow-Query=any

2016-01-07 Thread Matus UHLAR - fantomas
On 07.01.16 09:56, Ejaz wrote: How to control from the DNS bind "Query type Any" such as. If someone does look up with query type =any, results will display the SOA section, mail and Name server information, which I don't want display all info.. only specific information so, instead of

Re: Allow-Query=any

2016-01-07 Thread Reindl Harald
Am 07.01.2016 um 07:56 schrieb Ejaz: How to control from the DNS bind “Query type Any” such as. If someone does look up with query type =any, results will display the SOA section, mail and Name server information, which I don’t want display all info.. only specific information while what you

Re: Allow-Query=any

2016-01-07 Thread G.W. Haywood
Hi there, On Thu, 7 Jan 2016, Reindl Harald wrote: ... when somebody wants a information which exists in the DNS he can ask for that information - unconditionally laptop3:~$ >>> dig -t any lloyds.co.uk ; <<>> DiG 9.9.5-9+deb8u4-Debian <<>> -t any lloyds.co.uk ;; global options: +cmd ;; Got

Re: Allow-Query=any

2016-01-07 Thread Reindl Harald
Am 07.01.2016 um 21:18 schrieb G.W. Haywood: Hi there, On Thu, 7 Jan 2016, Reindl Harald wrote: ... when somebody wants a information which exists in the DNS he can ask for that information - unconditionally you don't get it if i want to ask for your SOA or NS-records then i ask for them

Re: Allow-Query=any

2016-01-07 Thread Robert Edmonds
Warren Kumari wrote: > Olafur and Joe (the authors of this) are far from clueless idiots. +1 > In addition, please try to moderate your tone - people come to the BIND > Users list for assistance - your argumentative (and often insulting) posts > are not helpful to building a community. +1 --

RE: Allow-Query=any

2016-01-07 Thread Darcy Kevin (FCA)
: Thursday, January 07, 2016 4:41 PM To: bind-users@lists.isc.org Subject: Re: Allow-Query=any Am 07.01.2016 um 22:31 schrieb Warren Kumari: > Reindl, did you read the draft referred to in the HINFO? ( > https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/ ). It > clearly outli

Re: Allow-Query=any

2016-01-07 Thread Warren Kumari
inal Message- > From: bind-users-boun...@lists.isc.org [mailto: > bind-users-boun...@lists.isc.org] On Behalf Of Reindl Harald > Sent: Thursday, January 07, 2016 4:41 PM > To: bind-users@lists.isc.org > Subject: Re: Allow-Query=any > > > Am 07.01.2016 um 22:31 schrieb W

Re: Allow-Query=any

2016-01-07 Thread Reindl Harald
Am 07.01.2016 um 22:31 schrieb Warren Kumari: Reindl, did you read the draft referred to in the HINFO? ( https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/ ). It clearly outlines the reasons that cloudfare is doing this. This document was discussed in the DNSOP WG, and was presented

Re: Allow-Query=any

2016-01-07 Thread Warren Kumari
On Thu, Jan 7, 2016 at 3:25 PM Reindl Harald wrote: > > > Am 07.01.2016 um 21:18 schrieb G.W. Haywood: > > Hi there, > > > > On Thu, 7 Jan 2016, Reindl Harald wrote: > > > >> ... when somebody wants a information which exists in > >> the DNS he can ask for that