Bind 9.11 question (ACL ecs )

2016-10-24 Thread HsuLiPing
From 9.1 ARM chapter 7 that mention The EDNS Client Subnet (ECS) option is used by a recursive resolver to inform an authoritative name server of the network address block from which the original query was received, enabling authoritative servers to give different answers to the same resolver fo

Re: authority

2016-10-24 Thread Nick Edwards
On Tue, Oct 25, 2016 at 7:14 AM, Reindl Harald wrote: > > > > this is a public mailing list - so what! > > when someone don't yet get the connection between nameservers, webserver > and ip-addresses he is not ready to connect public servers and that's > completly independent of the fact you ra el

Re: authority

2016-10-24 Thread Nick Edwards
On Tue, Oct 25, 2016 at 7:11 AM, Reindl Harald wrote: > > i don't understand your question >> >> >> Since you have NOTHING to do with ISC or even remotely with bind, if you >> dont understand , LEAVE IT TO SOMEONE WHO DOES >> > > and YOU have something to do with ISC? > i doubt! > > since i m

Re: authority

2016-10-24 Thread Reindl Harald
Am 24.10.2016 um 22:45 schrieb Nick Edwards: On Tue, Oct 25, 2016 at 12:42 AM, Reindl Harald mailto:h.rei...@thelounge.net>> wrote: don't get me wrong but that question shows that you are not ready to run a public dns server - there is no "local" or when you make statements like th

Re: authority

2016-10-24 Thread Reindl Harald
Am 24.10.2016 um 22:42 schrieb Nick Edwards: On Tue, Oct 25, 2016 at 12:11 AM, Reindl Harald mailto:h.rei...@thelounge.net>> wrote: identical like the first one Which IP should be use? i don't understand your question Since you have NOTHING to do with ISC or even remotely

Re: authority

2016-10-24 Thread Nick Edwards
On Tue, Oct 25, 2016 at 12:42 AM, Reindl Harald wrote: > > > >> > don't get me wrong but that question shows that you are not ready to run a > public dns server - there is no "local" or > when you make statements like that to be sure you include the fact you have NOTHING to do with ISC or bind.

Re: authority

2016-10-24 Thread Nick Edwards
On Tue, Oct 25, 2016 at 12:11 AM, Reindl Harald wrote: > identical like the first one > > Which IP should be use? >> > > i don't understand your question > > Since you have NOTHING to do with ISC or even remotely with bind, if you dont understand , LEAVE IT TO SOMEONE WHO DOES but you just cant

RE: merging reverse zone data obtained from two different masters

2016-10-24 Thread Darcy Kevin (FCA)
Ideally, whatever frontend you use to maintain the "forward" records for these zones, should be smart enough to, in parallel, populate the corresponding entries in the common reverse zone. But, failing that, it shouldn't be that hard to write a script that periodically pulls zone transfers of t

Re: bind-users Digest, Vol 2527, Issue 1

2016-10-24 Thread Fabian Cohen
Hi Tony the master res a your Zone and de reverse generate the consult for ip. 2016-10-24 9:00 GMT-03:00 : > Send bind-users mailing list submissions to > bind-users@lists.isc.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.isc.org/mailman/listin

Re: Compiling on AIX-7.1

2016-10-24 Thread Witold Kręcicki
W dniu 24.10.2016 o 19:24, Davis, Donald W pisze: > Has anyone compiled bind-9.11 on AIX version 7.1? I have gcc > installed. The first make failed with “nslookup.c:39:31: fatal error: > readline/readline.h: No such file or directory” > > I installed the readline library and now is failing with

Compiling on AIX-7.1

2016-10-24 Thread Davis, Donald W
Has anyone compiled bind-9.11 on AIX version 7.1? I have gcc installed. The first make failed with "nslookup.c:39:31: fatal error: readline/readline.h: No such file or directory" I installed the readline library and now is failing with the following errors: ld: 0711-317 ERROR: Undefined symbol:

Re: authority

2016-10-24 Thread Pol Hallen
named virtual hosts anybody - you can run thousands of domains on a single IP understood Harld :) cheers Pol ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.i

Re: authority

2016-10-24 Thread Reindl Harald
Am 24.10.2016 um 16:35 schrieb Pol Hallen: so what are your real questions? P.S.: you need more than one DNS server for a public domain which must not run on the same network I have to register some domains: example.com, example.ue, example.net, exampe.org, etc. on my server I've also apach

Re: authority

2016-10-24 Thread Pol Hallen
so what are your real questions? P.S.: you need more than one DNS server for a public domain which must not run on the same network I have to register some domains: example.com, example.ue, example.net, exampe.org, etc. on my server I've also apache web and I'd like have internet site based

Re: authority

2016-10-24 Thread Reindl Harald
Am 24.10.2016 um 14:40 schrieb Pol Hallen: Hello all, after weeks studying bind I'm here with a question: I'd like have my own bind authority server for some domains. I just configured my first zone (ie: www.example.org) with static IP of my DSL. Everything works :-) If I register another FQD

authority

2016-10-24 Thread Pol Hallen
Hello all, after weeks studying bind I'm here with a question: I'd like have my own bind authority server for some domains. I just configured my first zone (ie: www.example.org) with static IP of my DSL. Everything works :-) If I register another FQDN (ie: www.example.com) how can I set my se

Re: merging reverse zone data obtained from two different masters

2016-10-24 Thread Tony Finch
blrmaani wrote: > On Sunday, October 23, 2016 at 2:56:37 PM UTC-7, blrmaani wrote: > > > > We have hosts in two different zones but use same subnet. Zone1 is > > generated by Master1 and Zone2 is generated by Master2. > > > > Slave1 runs BIND and would like to merge the reverses generated on > > M

Re: Running current version of bind in a jail?

2016-10-24 Thread Tony Finch
Tom wrote: > > What's the reason, that it isn't necessary to run modern version of bind in a > jail? chroot is a defence against privilege escalation following a remote code execution vulnerability. It isn't a very solid defence. And BIND 9 tends to die of a self-check failure before remote code

Re: Running current version of bind in a jail?

2016-10-24 Thread Reindl Harald
Am 24.10.2016 um 07:27 schrieb Tom: From https://kb.isc.org/article/AA-00768/0/Getting-started-with-BIND-how-to-build-and-run-named-with-a-basic-recursive-configuration.html: "Running named in a chroot jail (many still do, but this shouldn't be necessary with modern versions of BIND)".: