--- On Mon, 12/28/09, Kevin Oberman <ober...@es.net> wrote:
> From: Kevin Oberman <ober...@es.net>
> Subject: Re: IPv6 TCP
> To: "Pamela Rock" <prock...@yahoo.com>
> Cc: bind-users@lists.isc.org, "Chuck Anderson" <c...@wpi.edu>
> Date: Monday, December 28, 2009, 6:07 PM
> > Date: Mon, 28 Dec 2009 13:31:50
> -0800 (PST)
> > From: Pamela Rock <prock...@yahoo.com>
> > Sender: bind-users-bounces+oberman=es....@lists.isc.org
> >
> > --- On Mon, 12/28/09, Chuck Anderson <c...@wpi.edu>
> wrote:
> >
> > > From: Chuck Anderson <c...@wpi.edu>
> > > Subject: Re: IPv6 TCP
> > > To: bind-users@lists.isc.org
> > > Date: Monday, December 28, 2009, 3:58 PM
> > > On Mon, Dec 28, 2009 at 07:56:56AM
> > > -0800, Pamela Rock wrote:
> > > > I posted this query a while ago but have not
> yet been
> > > able to resolve the issue...
> > > >
> > > > I have a DNS server and client that can ping
> each
> > > other using ping6. The following query works:
> > > >
> > > > dig -6 test.com +notcp
> > > >
> > > > When I query TCP with IPv6 I get the
> following error:
> > > >
> > > > r...@test:/home/janderson/bind-9.6.1-P1 dig
> -6
> > > test.com @bind6 +tcp
> > > > socket.c:4922: 22/Invalid argument
> > > > dig: isc_socket_connect: unexpected error
> > >
> > > I get this with the stock CentOS 5.4 dig:
> > >
> > > # rpm -qf `which dig`
> > > bind-utils-9.3.6-4.P1.el5_4.1
> >
> > I am running Red Hat 5 / 64 bit and I had to compile
> > openssl-0.9.8k.tar to get a clean BIND 9.6.1-P1
> configure.
> >
> > My build process looks like the following
> > named[3921]: built with '--enable-threads'
> '--with-openssl=/usr/local/ssl/bin' '--enable-ipv6'
> >
> > What's wierd in that PING6 works and DIG IPv6 + UDP
> works as well.
> > DIG IPv6 + TCP fails.
> >
> > If anyone has 9.6.1-P1 and can run an IPv6 / TCP based
> dig
> > successfully, I'd be interested in knowing about your
> platform. What
> > O/S, HW, etc did you use to build BIND?
>
> Seems to work for me. FreeBSD 8.0, bind 9.6.1-P2 (P1 is
> obsolete),
> OpenSSL 0.9.8k. I've had no problems at all. I can even get
> the
> signatures, though we have not published any trust anchors,
> so you can't
> really use them, yet.
>
> I built the standard FreeBSD port with openssl, threads,
> SIGCHASE, and
> IPv6. Nothing special.
>
> > dig -6 www.es.net @ns1.es.net +tcp +dnssec
>
This query is to anyone in general, based on the previous dig statement, does
the following command make sense??
dig -6 www.es.net @some:ipv6:address +tcp
I'm wondering if the combination of -6, @some:ipv6:address, and +tcp even make
sense. That is ultimately what I'm trying to achieve.
> ; <<>> DiG 9.6.1-P2 <<>> -6
> www.es.net @ns1.es.net +tcp +dnssec
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR,
> id: 12531
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4,
> ADDITIONAL: 13
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096
> ;; QUESTION SECTION:
> ;www.es.net.
> IN A
>
> ;; ANSWER SECTION:
> www.es.net.
> 600 IN
> CNAME www2.es.net.
> www.es.net.
> 600 IN
> RRSIG CNAME 5 3 600 20100111110009
> 20091228100009 41782 es.net.
> odSa/PcvfYH1UM+GPxi+mahnTisgn6rL9apCpHm0y6SLIzmpHycP+Ph2
> cA4aXNCA4736qWU7/MScHBul7cWsc94VJxE89wVw6GkDIu58I9/NiVBD
> Tl6nfTZCJ3PyIHWEx2sFHMZKhiw6nIi7SBWj9RwkDB0jU6K8J9C5ge2s
> 5r8=
> www2.es.net.
> 86400 IN
> A 198.128.3.112
> www2.es.net.
> 86400 IN
> RRSIG A 5 3 86400 20100111110009
> 20091228100009 41782 es.net.
> FGJKOxfkG7m3zKd0R0/s6hDCTSZP66oGxQxWXjeObtPOtKgAsFUACQbF
> CZ/FRGMS+ryu6fC2C0DIePKYqeXGT5QSpcUi9t5iCY72ccRHG34hPSGr
> nJHS+VrWENmrJ/I6X4aq/hdIXvpBz5ePgBl5w34toWDFoIyUJcpUkxUn
> 9+k=
>
> ;; AUTHORITY SECTION:
> es.net.
> 600
> IN NS ns1.es.net.
> es.net.
> 600
> IN NS ns-aoa.es.net.
> es.net.
> 600
> IN NS ns-lvk.es.net.
> es.net.
> 600
> IN RRSIG NS 5 2 600
> 20100111110009 20091228100009 41782 es.net.
> Y5StioMeHIdl74pI4ch+blK5q924ozUbDR5Fwz7Mfk+TOiIheRfPg2X4
> wuigN+0MfC5aE7HRmG/86mki8FUDY0LyzcO5aJFc5rHVHYjDBgBLh9Q5
> 2STPPQN6jkNki9Ux7WDeV79Fi8fRFJKP4q6bMdGB5x56um+0zXMiuk3E
> za4=
>
> ;; ADDITIONAL SECTION:
> ns1.es.net.
> 86400 IN
> A 198.128.2.10
> ns1.es.net.
> 600 IN
> AAAA 2001:400:14:2::10
> ns-aoa.es.net.
> 600 IN
> A 198.124.252.22
> ns-aoa.es.net.
> 600 IN
> AAAA 2001:400:6000::22
> ns-lvk.es.net.
> 600 IN
> A 198.129.252.34
> ns-lvk.es.net.
> 600 IN
> AAAA 2001:400:910:1::2
> ns1.es.net.
> 86400 IN
> RRSIG A 5 3 86400 20100111110009
> 20091228100009 41782 es.net.
> mdhO23R+FTzv7iLldu8o9EPQY3+TDat/uv50oNdygiSl+YwLE2DYpJJn
> rImx9+VxKaoV8/BzBYKVWy6FVrq3ug0O2zPpdX3zSH2ywtfkgLKQJ8e0
> gqOhV7N2LzEHgGdt+gpPkIpC1hJGpAo3rXyLVxOjPwdxxD3ppfVCilsU
> 8WY=
> ns1.es.net.
> 600 IN
> RRSIG AAAA 5 3 600 20100111110009
> 20091228100009 41782 es.net.
> Kiwtuv+j5pQw+hW86R+DrAQVVxr8U7Qq1QmX34M+ve6Bq7tXGIKGenBO
> eS2jxr2ABInFnlGUOQ2Y71eBvfTkOvl0D9bDTA2mNZ0ixUY7u9/anbOe
> adK1m1gyO+BfTek/VbZEE56iU8ltlrp1SDFpmHz+xryj30jDy2eTlvyU
> FjE=
> ns-aoa.es.net.
> 600 IN
> RRSIG A 5 3 600 20100111110009
> 20091228100009 41782 es.net.
> dMLiS6evREtQFRtWclSlxrhUOZq0iTRyBvAuExJpBFB7IBHhcINNc9S+
> iSZ8FEBq88z5ZS8kcoVoJqvbUJyJEIOmzOz2Tzo7hANMeIyK8PU4Jkny
> zwZj8c5+gggKeUsGAhARybw8w5DnutnLPQ9uFFlDcXkc46BgIAoRMA3h
> m54=
> ns-aoa.es.net.
> 600 IN
> RRSIG AAAA 5 3 600 20100111110009
> 20091228100009 41782 es.net.
> h8PVol1KgVwU/RDVY4xO8snLIMPd6oYEM2JmSM/4yk/feuPaYr4vTlQB
> auFXloyJsfhQzD1dtnyYG/KXQdS3HSB5deu/OcCx4+amslNrDHnBrPsQ
> 5VrxdvZDuHeFue55tQgGoT3nLLNB3kgOWv7W6WObdqBhtZe+7nQgb78G
> B1M=
> ns-lvk.es.net.
> 600 IN
> RRSIG A 5 3 600 20100111110009
> 20091228100009 41782 es.net.
> WlZHU9xsqJrk8r7TC6S0Zx8x2Y4kLVHMJPhVHRkfeYBQIcs9bXerTHGG
> aTUoFA6FZzIXN4v84HrHap1qQ4/bixbgPzqDNW1veFZBWzq82BN6Np1o
> VyiLWi6fYBCVIqnodvZT74sP8eCv6zjpwqnEb8HWwd0ZO2XtyCMIHMzb
> f5o=
> ns-lvk.es.net.
> 600 IN
> RRSIG AAAA 5 3 600 20100111110009
> 20091228100009 41782 es.net.
> IQ4C5PTDtMaFdfFRtLH9NTDfwI54EVSjV8FdZxj2vp2xACdUaY/ei/Of
> XGmELPtPORE5ckLDT03M0enl+jYL6o0ub8JIKfVfj7D5sq7gsgecIKLL
> vDA5kB62xROI3BefXsK2OUDzKUQSB+QiywtGKPCrfqyPFCabr7Q2tYRf
> 5xQ=
>
> ;; Query time: 15 msec
> ;; SERVER: 2001:400:14:2::10#53(2001:400:14:2::10)
> ;; WHEN: Mon Dec 28 14:52:17 2009
> ;; MSG SIZE rcvd: 1760
>
> Here is the exact compile command for named/unix/main.c:
> cc -pthread
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2 -I./include
> -I./unix/include -I.
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/lwres/include
> -I../../lib/lwres/unix/include
> -I../../lib/lwres/include
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/dns/include
> -I../../lib/dns/include
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/bind9/include
> -I../../lib/bind9/include
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/isccfg/include
> -I../../lib/isccfg/include
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/isccc/include
> -I../../lib/isccc/include
> -I/usr/ports/dns/bind96/work/bind-9.6.1-P2/lib/isc/include
> -I../../lib/isc -I../../lib/isc/include
> -I../../lib/isc/unix/include
> -I../../lib/isc/pthreads/include
> -I../../lib/isc/x86_32/include
> -D_REENTRANT -DDIG_SIGCHASE=1 -D_THREAD_SAFE -O2 -pipe
> -fno-strict-aliasing -I/usr/local/include/libxml2
> -I/usr/local/include -W -Wall
> -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat
> -Wpointer-arith -fno-strict-ali
> asing -DVERSION=\"9.6.1-P2\"
> -DCONFIGARGS="\"'--localstatedir=/var'
> '--disable-linux-caps' '--with-randomdev=/dev/random'
> '--with-openssl=/usr' '--with-libxml2=/usr/local'
> '--without-idn' 'STD_CDEFINES=-DDIG_SIGCHASE=1'
> '--enable-threads' '--sysconfdir=/etc/namedb'
> '--prefix=/usr' '--mandir=/usr/share/man'
> '--infodir=/usr/share/info/'
> '--build=i386-portbld-freebsd8.0'
> 'build_alias=i386-portbld-freebsd8.0' 'CC=cc' 'CFLAGS=-O2
> -pipe -fno-strict-aliasing' 'LDFLAGS=
> -rpath=/usr/lib:/usr/local/lib' 'CXX=c++' 'CXXFLAGS=-O2
> -pipe -fno-strict-aliasing'\""
> -DNS_LOCALSTATEDIR=\"/var\"
> -DNS_SYSCONFDIR=\"/etc/namedb\" -c ./main.c
> --
> R. Kevin Oberman, Network Engineer
> Energy Sciences Network (ESnet)
> Ernest O. Lawrence Berkeley National Laboratory (Berkeley
> Lab)
> E-mail: ober...@es.net
> Phone: +1 510
> 486-8634
> Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D
> EBB3 987B 3751
>
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
