Unconditional "call home" is always problematic but discretionary "call home" (per the URL) is much better. However, be aware that some environments (such as Payment Card Industry standards) require that all outbound traffic have a business justification. This could be justified, it's just going to be an administrative hassle to document the need and go through a management approval process.
________________________________ From: bind-users <bind-users-boun...@lists.isc.org> on behalf of Ondřej Surý <ond...@isc.org> Sent: Thursday, June 13, 2019 9:22:53 AM To: G.W. Haywood Cc: bind-users@lists.isc.org Subject: [EXTERNAL] Re: A policy for removing named.conf options. Hey, we’ve been discussing the “call home” feature on several occasions and usually something more pressing crawls at top of the TODO list, but here’s the issue we have as a starter: https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgitlab.isc.org%2fisc-projects%2fbind9%2fissues%2f421&c=E,1,5RfyTpYfPh7xliqVD4MiTRmekNfpBmTXzQmVptTqjqm1ew4vcDjQwzkKiVAlJhtyT_HqrdNmh4vqy-Umg9NGAUvDh_3a7EB7SlLtOH6OKbxmhCUZxrp9n8zD&typo=1 We would be happy to collect more feedback and don’t get me started on how I just love to receive patches, preferably as merge requests (ping me if you need up the projects limit in our GitLab) ;). Ondrej -- Ondřej Surý ond...@isc.org &g Harriscomputer Leroy Tennison Network Information/Cyber Security Specialist E: le...@datavoiceint.com [cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG] 2220 Bush Dr McKinney, Texas 75070 www.datavoiceint.com<http://www..com> This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc. These companies are listed here<http://subscribe.harriscomputer.com/>. If you prefer not to be contacted by Harris Operating Group please notify us<http://subscribe.harriscomputer.com/>. This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message. t; On 13 Jun 2019, at 15:55, G.W. Haywood via bind-users <bind-users@lists.isc.org> wrote: > > Hello again, > > On Thu, 13 Jun 2019, Matthijs Mekking wrote: >> On 6/13/19 2:40 PM, G.W. Haywood via bind-users wrote: >> > On Thu, 13 Jun 2019, Matthijs Mekking? wrote: >> > >> > > | managed-keys?????? | 9.15/9.16 | replaced with dnssec-keys | >> > >> > According to my changelogs for 'named.conf I removed 'managed-keys' and >> > 'trusted-keys' three years ago, but still use 'managed-keys-directory'. >> ... it is likely that you are using managed trust anchors that >> are configured with 'managed-keys' in a bind.keys file. ... > > Correct. It says in that file that I'm not expected to do anything to > it - so I expect you'll take care of that when the time comes, yes? > > To tell you about the use of configuration options, could you not set > up an ISC zone which BIND on startup will ping with a few packets? > You'd get a lot more (and more accurate) feedback than sending out a > plea on a mailing list. You could make it a compile time option, ask > for permission at build time, etc.. > > -- > > 73, > Ged. > _______________________________________________ > Please visit > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,CqxGXQ1aiGLDV9LxLwljfYJRolmwJV3RlfcYaNABVsMlBnR5RJRsa2BaKR3xs-G5eFTxIA841AhYXTegjj-ggT2H9TJqOoJb18sEG8eenJz3jV80sk-eIJ1K&typo=1 > to unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,lrTADuMZK7-3YQwQVI98M2QtIe3X6vetMWM-r7d7aOkIyI4r9ebviUn3Zt3DP7266hKmVaHsi7YHuqRMl2Qa34whLALYOPPIkAmRLthBNJxi5A,,&typo=1 _______________________________________________ Please visit https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,__bZRbafpXn77YybXrIT8vrp5HPPCi47lEsNtl-XZNPm4xWpJaPv9WPRyYhW3ZVQvnsQgeCu5aVZu0wCqwBWSSWRNUEyvXYAcg-qkT-ZxuxC4DuEJSd0BmCGog,,&typo=1 to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,ISqAFF76QaPqnU4mChTvAsOO3ML7KgbBDfwn3SbpXS-IEHJzUjsTCizHF7IZrVYRstLhmfu0DKXlGExNXKlgM_d16WvubXeUUOJqNO6T6Q,,&typo=1
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
