Bug#1106677: bind9: suggestion to use forwarders in named.conf.options disappeared without a trace
retitle 1106677 bind9: Vcs-Git field needs to be updated for trixie thanks El 28/5/25 a las 13:37, Ondřej Surý escribió: simply said, BIND 9 is a full DNSSEC Validating Resolver. If you want to use your DNS provider resolvers, you can just use the stub resolver[*] and you don't need to run `named` at all. Ok, just as a clarification: I was actually using bind9 as a caching server, which is a small improvement (and not the same) as putting the provider resolvers in resolv.conf. I'll follow your hint and try systemd-resolved instead. (I'll apply the patch, thanks.) Thanks a lot! I was starting to believe debhelper was misbehaving while creating the package...
Bug#1106677: bind9: suggestion to use forwarders in named.conf.options disappeared without a trace
tags 1106677 patch
severity 1106677 important
thanks
Ok, part of the problem (but only part) is that the Vcs-Git field
in debian/control needs to be updated for trixie.
I'm attaching a trivial patch, and I'm also raising to important
because I believe this is the kind of change that should be allowed
in a point release in case you decide to ignore it for trixie.
(The remaining of the bug should be considered normal or minor)
( btw: To avoid this confusion happening again, I think it would be better
if the field pointed to the latest version, even if the current version
in stable is in another older branch, but that's of course up to you )
Now, back to the problem I had: The forwarded options that I miss
were removed in commit [4617c800] with this changelog entry:
Remove obsolete or useless configuration from named.conf.options (Closes:
#1042899)
However the proposal in such bug is to remove "listen-on-v6 { any; };"
but nothing in the bug report is said about "forwarders".
So: Why is the "forwarders" directive obsolete or useless?
What am I supposed to use instead?
If it's not really obsolete, could we please get those commented lines back?
Or maybe the idea was to make the file as short as possible and let the user
look for such information elsewhere?
Thanks.--- a/debian/control
+++ b/debian/control
@@ -40,7 +40,7 @@ Build-Depends-Indep: fonts-freefont-otf,
xindy
Standards-Version: 4.6.2
Vcs-Browser: https://salsa.debian.org/dns-team/bind9
-Vcs-Git: https://salsa.debian.org/dns-team/bind9.git -b debian/9.19
+Vcs-Git: https://salsa.debian.org/dns-team/bind9.git -b debian/9.20
Homepage: https://www.isc.org/downloads/bind/
Package: bind9
Bug#1106677: bind9: suggestion to use forwarders in named.conf.options disappeared without a trace
Hi Santiago, > On 28. 5. 2025, at 11:43, Santiago Vila wrote: > > So: Why is the "forwarders" directive obsolete or useless? > What am I supposed to use instead? > > If it's not really obsolete, could we please get those commented lines back? > > Or maybe the idea was to make the file as short as possible and let the user > look for such information elsewhere? simply said, BIND 9 is a full DNSSEC Validating Resolver. If you want to use your DNS provider resolvers, you can just use the stub resolver[*] and you don't need to run `named` at all. Additionally, as the DNSSEC validation is enabled by default, it can run into all kind of problems when the upstream resolver is not DNSSEC capable. With all that in mind, it makes a little sense to recommend using the upstream (ISP) resolvers by default in the configuration file. (I'll apply the patch, thanks.) * - or systemd-resolved or dnsmasq Ondrej -- Ondřej Surý (He/Him) [email protected]
Bug#1106677: bind9: suggestion to use forwarders in named.conf.options disappeared without a trace
severity 1106677 normal thanks Well, the wrong vcs field is annoying but does not really affect the functionality of the package itself, so keeping this as normal. I just hope you can look at it before the release. Thanks.
Bug#1106677: bind9: suggestion to use forwarders in named.conf.options disappeared without a trace
Package: bind9
Version: 1:9.20.9-1
Hello.
After upgrading a server today, I noticed that the
default file /etc/bind/named.conf.options is now like this:
options {
directory "/var/cache/bind";
};
However, I expected something similar to the file
debian/extras/etc/named.conf.options
in the source package, since there is a debian/bind9.install
file to install it.
How does the second file becomes the first one when
the package is built?
I was trying to figure out why the commented lines:
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
are not provided anymore, but I was unable to determine it
from the git history.
Thanks.
