RE: dnssec-keygen not available in Bind9.16-utils package?

2023-03-24 Thread David Carvalho via bind-users
Thank you so much for your help. Unfortunately it seems bind-utils 9.11 and 9.16 can not co-exist (at least in Oracle Linux 8). I had problems with dependencies and didn’t force anything until having more information. Thanks once again! Regards David Carvalho From: bind-users On Behalf

Re: dnssec-keygen not available in Bind9.16-utils package?

2023-03-24 Thread Petr Menšík
I have tried it on fresh RHEL 8.7.0, which should be similar to what you get on Oracle Linux 8. Just already released RHEL. $ dnf install bind9.16 -y # installs also recommended bind9.16-utils. $ dnf swap bind9.16-utils bind-utils Replaces successfully only utilities with older version $

RE: dnssec-keygen not available in Bind9.16-utils package?

2023-03-24 Thread David Carvalho via bind-users
Brilliant! Thank you so much! Regards David From: Petr Menšík Sent: 24 March 2023 11:05 To: David Carvalho ; bind-users@lists.isc.org Subject: Re: dnssec-keygen not available in Bind9.16-utils package? I have tried it on fresh RHEL 8.7.0, which should be similar to what you get on

Re: Bind not sending notifies for some time

2023-03-24 Thread Ondřej Surý
> On 24. 3. 2023, at 14:36, Klaus Darilion via bind-users > wrote: > > Is there some rate liming in Bind? https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-notify-rate -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different.

RE: Bind not sending notifies for some time

2023-03-24 Thread Klaus Darilion via bind-users
> > https://bind9.readthedocs.io/en/stable/reference.html#namedconf-statement-notify-rate Will that feature throttle Notifys or stop them completely for some minutes? Thanks Klaus -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the

PPA for Raspbian distros

2023-03-24 Thread Andrew P .
Greetings. Per chance, is there a repo of pre-built bind code for the Raspberry Pi platform? I tried using the PPA specified at https://launchpad.net/~isc/+archive/ubuntu/bind but it didn't support the release on my DNS server host (buster). I received the error Ign:2

Re: PPA for Raspbian distros

2023-03-24 Thread Ondřej Surý
Hi, launchpad publishes packages only for Ubuntu, not for Debian and kind-of direct derivatives like Raspbian. If your RPi is at least ARMv7, you can try using: https://bind.debian.net/bind/ Unfortunately, Raspbian armhf is an absolute mess, reusing armhf for architecture name for a different

Re: dnssec-keygen not available in Bind9.16-utils package?

2023-03-24 Thread Jiaming Zhang
Hello David, I have Oracle Linux 8 instance running bind 9.11.x as well bind 9.16.x and confirm that there’s no dnssec-*​ utilities in the bind9.16-utils​. Although the 9.11 and 9.16 version cannot coexist, you can insead installing the bind9.16-utils​ install bind-utils​. It works still

RE: dnssec-keygen not available in Bind9.16-utils package?

2023-03-24 Thread David Carvalho via bind-users
Hi. Thanks for the reply. Very useful information! Kind regards David Carvalho From: Jiaming Zhang Sent: 24 March 2023 12:33 To: David Carvalho ; 'Petr Menšík' ; bind-users@lists.isc.org Subject: Re: dnssec-keygen not available in Bind9.16-utils package? Hello David, I have

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-24 Thread Petr Menšík
Have you checked named has permissions to read the file you have modified? Just rndc reload should catch modified files. You can also specify just the zone modified. Is there any output in journalctl -xeu named about those changes? Try dig @localhost example.org soa to check which version is

Re: DNSSEC error resolving gpo.gov ?

2023-03-24 Thread Petr Menšík
That is done also by bind 9.11, not only infoblox. It creates both digests on common operations. On 3/14/23 16:23, John W. Blue via bind-users wrote: Keep in mind that SHA1 may not have been included by choice. If gpo.gov is using Infoblox there is a, what I like to call, Infoblox-ism in

Re: BIND 9.16.30 - $INCLUDE file in the rpz zone file not reloading content and dig not working

2023-03-24 Thread Ondřej Surý
Honestly, it's pretty hard to help you, as you provided only snippets of configuration. If you want the help here, you should provide: 1. full (sanitized) configuration file - named-checkconf -px is your friend 2. full state of the zone before 3. full state of the zone after 4. named.log -

RE: DNSSEC error resolving gpo.gov ?

2023-03-24 Thread John W. Blue via bind-users
Petr, Thanks for sharing that tidbit of info. Off the top of your head do you know if that can be disabled? John -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Petr Menšík Sent: Friday, March 24, 2023 8:32 AM To: bind-users@lists.isc.org

Bind not sending notifies for some time

2023-03-24 Thread Klaus Darilion via bind-users
Hi! root@cc-tld-sbg1:/var/log/tld-acct-by-customer# dpkg -l|grep bind9 ii bind9 1:9.18.6-1+ubuntu22.04.1+isc+1 amd64Internet Domain Name Server Please help me debugging this issue: We have a TLD zone with ~3mio delegations and updates every