Re: A record of domain name must be name server ?

2014-09-12 Thread Matus UHLAR - fantomas

On 11.09.14 13:14, Bob Harold wrote:

In reference to the question of using a CNAME or A record for 
www.example.com, it seems to me that the best solution, if we could ever
get there, would be to create a new record type that means redirect an A
or  lookup to this other name.  Like this:

example.com.  IN  SOA  
example.com.  IN  ANAME  my.webhosting.com.
www.example.com.  IN  CNAME  my.webhosting.com.

I use ANAME to mean like a CNAME, but only for A and  lookups, with
no restrictions on other names with the same left side (except perhaps
other A and  records if that is necessary for technical reasons).

Several DNS and hosting providers provide similar functionality, but is
there any chance of widespread DNS support for something like this?


It's a server-side thing. The current protocol does not support redirecting
only for A and/or , nor any particular types, only everything (CNAME).


Is there already and RFC for this?


I'm not sure whether this kind of RR should be introduced.
Maybe redirect that defines types to be redirected...

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux - It's now safe to turn on your computer.
Linux - Teraz mozete pocitac bez obav zapnut.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread John Marshall
On Thu, 11 Sep 2014, 23:38 +, Evan Hunt wrote:
 On Fri, Sep 12, 2014 at 09:11:08AM +1000, John Marshall wrote:
  I can't build BIND 9.10.1rc2 on recent FreeBSD 10-STABLE.
  I have tried on both i386 and amd64 variants of the operating system.
  BIND 9.10.1rc1 builds fine, as did the beta releases.
 
 Based on the failure being in bin/python, I suppose it was this:
 
 3946.   [cleanup]   Improved configure search for a python interpreter.
 [RT #36992]
 
 I'm guessing your system doesn't have a python interpreter, but configure
 got confused into thinking it does.  If I'm right, then installing python
 ought to make the build work, for the time being.  We'll address the
 problem before final release.

Sorry for the brief report earlier.  I had to run out the door to an
appointment and didn't have time to provide more information but wanted
at least to send a heads-up.

I did some more digging.  Ironically, it seems that the improved
configure search is finding python in rc2 whereas the rc1 and earlier
configure did not find python.  I hadn't tested these new utilities at
all so I was unaware that they were not being built in the earlier rc or
betas.  It still looks to me like a make(1) problem but it only kicks in
when python is detected and an attempt is made to build in bin/python.
A FreeBSD 9.3-RELEASE system is building rc2 happily: it uses pmake: but
bmake on the 10-STABLE systems falls over with:

  making all in /build/bind/bind-9.10.1rc2/bin/python
  make[3]: don't know how to make dnssec-checkds. Stop

make(1) on the 10-STABLE systems cannot find the source for the
dnssec-checkds target.  Comparing the make(1) debug output between the
two systems, it appears that pmake on the FreeBSD 9.3 system picks up
the .py transform as a clue for a source for a null-suffix target, but
bmake on the FreeBSD 10-STABLE systems does not include .py in the list
of candidate source suffixes for null-suffix targets.

Sorry, I'm not a make(1) guru and can't suggest a solution apart from
putting explicit dependencies in the Makefile.  I'm sure there must be a
more elegant solution which coaxes bmake to behave as expected.

 Do you still have your config.log?  May I see it?

Sure.  I've included copies of the complete build directories
(post-make) from both rc1 and rc2 and made them browsable.

  http://www.riverwillow.net.au/~john/bind/9.10.1rc1/config.log
  http://www.riverwillow.net.au/~john/bind/9.10.1rc2/config.log

-- 
John Marshall


pgpcT_nEIbN78.pgp
Description: PGP signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread John Marshall
On Fri, 12 Sep 2014, 19:52 +1000, John Marshall wrote:
 A FreeBSD 9.3-RELEASE system is building rc2 happily: it uses pmake: but
 bmake on the 10-STABLE systems falls over with:
 
   making all in /build/bind/bind-9.10.1rc2/bin/python
   make[3]: don't know how to make dnssec-checkds. Stop
 
 make(1) on the 10-STABLE systems cannot find the source for the
 dnssec-checkds target.  Comparing the make(1) debug output between the
 two systems, it appears that pmake on the FreeBSD 9.3 system picks up
 the .py transform as a clue for a source for a null-suffix target, but
 bmake on the FreeBSD 10-STABLE systems does not include .py in the list
 of candidate source suffixes for null-suffix targets.

Commenting out the .c .o SUFFIXES line in the generated Makefile OR
trimming down the docbook SUFFIXES line in a more tedious manner allows
bmake to pick up the single-suffix .py transform and everything works.
I have no idea why.

--- bin/python/Makefile.orig2014-09-12 22:17:40.0 +1000
+++ bin/python/Makefile 2014-09-12 22:18:02.0 +1000
@@ -201,7 +201,7 @@
 BUILD_LIBS = 
 
 .SUFFIXES:
-.SUFFIXES: .c .o
+#.SUFFIXES: .c .o
 
 ALWAYS_INCLUDES = -I${top_builddir} -I${top_srcdir}
 ALWAYS_DEFINES = -D_REENTRANT

-- 
John Marshall


pgp4aF0yXS73A.pgp
Description: PGP signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Mathieu Arnold
+--On 12 septembre 2014 09:11:08 +1000 John Marshall
john.marsh...@riverwillow.com.au wrote:
| I can't build BIND 9.10.1rc2 on recent FreeBSD 10-STABLE.
| I have tried on both i386 and amd64 variants of the operating system.
| BIND 9.10.1rc1 builds fine, as did the beta releases.
| 
| Failure looks like this:
| 
|   making all in /build/bind/bind-9.10.1rc2/bin/python
|   make[3]: don't know how to make dnssec-checkds. Stop
| 
|   make[3]: stopped in /build/bind/bind-9.10.1rc2/bin/python
|   *** Error code 1
| 
|   Stop.
|   make[2]: stopped in /build/bind/bind-9.10.1rc2/bin
|   *** Error code 1
| 
|   Stop.
|   make[1]: stopped in /build/bind/bind-9.10.1rc2
|   *** Error code 1
| 
| Tested on:
| 
|   FreeBSD 10.1-PRERELEASE #0 r271181: Sat Sep  6 14:12:21 AEST 2014 i386
|   FreeBSD 10.1-PRERELEASE #0 r271289: Tue Sep  9 15:20:15 AEST 2014 amd64
| 
|   Note: BIND 9.10.1rc1 builds happily on the above.
|   Note: BIND 9.10.1rc2 builds happily on FreeBSD 9.3-RELEASE amd64
| 
| Perhaps rc2 introduced something that upsets bmake (the make(1) used in
| FreeBSD 10)?

Yes, you can't use bmake if you try to build the python bits, I had to
force gmake in the port:

https://svnweb.freebsd.org/ports/head/dns/bind910/Makefile?annotate=367505#l119

-- 
Mathieu Arnold
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Mark Andrews

Try collapsing the multiple .SUFFIXES into a single entry.

diff --git a/make/rules.in b/make/rules.in
index e96507e..fdc5235 100644
--- a/make/rules.in
+++ b/make/rules.in
@@ -123,7 +123,7 @@ BUILD_LDFLAGS = @BUILD_LDFLAGS@
 BUILD_LIBS = @BUILD_LIBS@
 
 .SUFFIXES:
-.SUFFIXES: .c .@O@
+.SUFFIXES: .c .@O@ .docbook .html .1 .2 .3 .4 .5 .6 .7 .8 .py
 
 ALWAYS_INCLUDES = -I${top_builddir}
 ALWAYS_DEFINES = @ALWAYS_DEFINES@
@@ -331,7 +331,6 @@ ALWAYS_MAKE_SYMTABLE =  @ALWAYS_MAKE_SYMTABLE@
 ### DocBook - man page
 ###
 
-.SUFFIXES: .docbook .html .1 .2 .3 .4 .5 .6 .7 .8
 
 .docbook.html:
${XSLTPROC} -o $@ ${top_srcdir}/doc/xsl/isc-docbook-html.xsl $
@@ -363,7 +362,6 @@ ALWAYS_MAKE_SYMTABLE =  @ALWAYS_MAKE_SYMTABLE@
 ###
 ### Python executable
 ###
-.SUFFIXES: .py
 .py:
cp -f $ $@
chmod +x $@

In message 98d6b1c9bc4d206768c99...@ogg.in.absolight.net, Mathieu Arnold writ
es:
 +--On 12 septembre 2014 09:11:08 +1000 John Marshall
 john.marsh...@riverwillow.com.au wrote:
 | I can't build BIND 9.10.1rc2 on recent FreeBSD 10-STABLE.
 | I have tried on both i386 and amd64 variants of the operating system.
 | BIND 9.10.1rc1 builds fine, as did the beta releases.
 | 
 | Failure looks like this:
 | 
 |   making all in /build/bind/bind-9.10.1rc2/bin/python
 |   make[3]: don't know how to make dnssec-checkds. Stop
 | 
 |   make[3]: stopped in /build/bind/bind-9.10.1rc2/bin/python
 |   *** Error code 1
 | 
 |   Stop.
 |   make[2]: stopped in /build/bind/bind-9.10.1rc2/bin
 |   *** Error code 1
 | 
 |   Stop.
 |   make[1]: stopped in /build/bind/bind-9.10.1rc2
 |   *** Error code 1
 | 
 | Tested on:
 | 
 |   FreeBSD 10.1-PRERELEASE #0 r271181: Sat Sep  6 14:12:21 AEST 2014 i386
 |   FreeBSD 10.1-PRERELEASE #0 r271289: Tue Sep  9 15:20:15 AEST 2014 amd64
 | 
 |   Note: BIND 9.10.1rc1 builds happily on the above.
 |   Note: BIND 9.10.1rc2 builds happily on FreeBSD 9.3-RELEASE amd64
 | 
 | Perhaps rc2 introduced something that upsets bmake (the make(1) used in
 | FreeBSD 10)?
 
 Yes, you can't use bmake if you try to build the python bits, I had to
 force gmake in the port:
 
 https://svnweb.freebsd.org/ports/head/dns/bind910/Makefile?annotate=367505#l
 119
 
 -- 
 Mathieu Arnold
 ___
 Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
  from this list
 
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Jeremy C. Reed
On Fri, 12 Sep 2014, Mathieu Arnold wrote:

 Yes, you can't use bmake if you try to build the python bits, I had to
 force gmake in the port:

It looks to be a bug in the NetBSD bmake used by FreeBSD. I cannot find 
a bug report for it in FreeBSD. I opened one for NetBSD:
http://gnats.netbsd.org/49198x

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Jeremy C. Reed
On Fri, 12 Sep 2014, Jeremy C. Reed wrote:

 It looks to be a bug in the NetBSD bmake used by FreeBSD. I cannot find 
 a bug report for it in FreeBSD. I opened one for NetBSD:
 http://gnats.netbsd.org/49198x

http://gnats.netbsd.org/49198

(My system types a random x on its own often. Imagine the frustration 
with using alpine mail client and vi.)
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Jeremy C. Reed
On Fri, 12 Sep 2014, Mark Andrews wrote:

 Try collapsing the multiple .SUFFIXES into a single entry.

That doesn't work (for me).
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Mathieu Arnold


+--On 12 septembre 2014 08:58:18 -0500 Jeremy C. Reed jr...@isc.org
wrote:
| On Fri, 12 Sep 2014, Mathieu Arnold wrote:
| 
| Yes, you can't use bmake if you try to build the python bits, I had to
| force gmake in the port:
| 
| It looks to be a bug in the NetBSD bmake used by FreeBSD. I cannot find 
| a bug report for it in FreeBSD. I opened one for NetBSD:
| http://gnats.netbsd.org/49198x

Well, to me, it looked like some syntax extension from gmake, so I did not
bother looking at it more closely.

-- 
Mathieu Arnold
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


nsupdate, semicolon, backslash

2014-09-12 Thread Giuseppe

Hello,

I work with nsupdate for update our domains zones. And I have problem with 
semicolonin TXT record type.

A small example:

 nsupdate -v

  update add test1.com 400 TXT hello*;*
  update add test2.com 400 TXT hello*\;*
  show

 Outgoing update query:
 ;; -HEADER- opcode: UPDATE, status: NOERROR, id:  0
 ;; flags: ; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
 ;; UPDATE SECTION:
 test1.com.400INTXThello*\;*
 test2.com.400INTXThello*\;*

In my Zone file it is the same problem.

I would like:

test1.com.400INTXThello*;*

without backslash before semicolon. Is important because service using 
secure._domainKey, _adsp._domainKey, etc.. not work if
backslashis in zone and semicolon is needed.

Other are the same problem?

Thanks,
Zeppi

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Jeremy C. Reed
On Tue, 9 Sep 2014, Thomas Schulz wrote:

 What version did you upgrade from? I am seeing bind 9.9.5 and 9.9.6
 grow without any evidence that it will ever stop. See my mail to this
 list with the subject Re: Process size versus cache size. Mine is
 growing slower than yours, but it is now up to 548 MB.

Can you copy and paste the out of memory error you are seeing?  Is it 
still growing? Does it appear to work?

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Thomas Schulz
 Mike Hoskins wrote:

 Do you guys have max-cache-size set?  I didn't see it in the borderworlds
 named.conf.  I've seen similar growth problems when testing 9.x before
 setting that (experiment at the time just to see what would happen, and
 confirmed this behavior).  Set sensible resource limits based on available
 resources.

I am going to see what happens with max-cache-size set, but I am convinced
that there is a bug in bind. My named has been running for 7.5 weeks now
and has been steadily growing in size except for a 1.5 week pause after I
did an rndc flush. The process size started out at 36 MB and is now up to
584 MB. But when I do an rndc dumpdb -cache I get a file that is only 5 MB
in size. Given the automatic cache cleaning, named should stabilize in
size in less than 7.5 weeks.

 -Original Message-
 From: Vin?cius Ferr?o fer...@if.ufrj.br
 Date: Tuesday, September 9, 2014 at 10:17 AM
 To: Thomas Schulz sch...@adi.com
 Cc: bind-us...@isc.org bind-us...@isc.org
 Subject: Re: bind-9.10.0-P2 memory leak?
 
I'm having the exactly same issue. Take a look at my post @ServerFault:
http://serverfault.com/questions/616752/bind-9-10-constantly-killed-on-fre
ebsd-10-0-with-out-of-swap-space

Sent from my iPhone

On 09/09/2014, at 11:15, Thomas Schulz sch...@adi.com wrote:

 Hello
 
 I recently upgraded my authoritative nameservers to bind-9.10.0-P2 and
 after a while one of them ended up using all its swap and the named
 process got killed. The other servers are seeing similar behaviour,
but 
 I restarted named on all of them to postpone further crashes.
 
 I am using rate-limiting as well DLZ with PostgreSQL. The server has
two 
 views. The operating system is FreeBSD 8.4.
 
 My configuration:
 http://borderworlds.dk/~xi/named-leak/named.conf
 
 Log of the memory usage:
 http://borderworlds.dk/~xi/named-leak/named-mem-usage.log
 
 As you can see, in less than a week, named has grown more than 900MB
in 
 size.
 
 Is anyone else experiencing something similar?
 
 If I need to provide more information, I will be happy to do so.
 
 -- 
 Christian Laursen
 
 What version did you upgrade from? I am seeing bind 9.9.5 and 9.9.6
 grow without any evidence that it will ever stop. See my mail to this
 list with the subject Re: Process size versus cache size. Mine is
 growing slower than yours, but it is now up to 548 MB.
 
 Tom Schulz
 Applied Dynamics Intl.
 sch...@adi.com

Tom Schulz
Applied Dynamics Intl.
sch...@adi.com
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Jeremy C. Reed
 Can you copy and paste the out of memory error you are seeing?  Is it 
 still growing? Does it appear to work?

I see your other thread answers some.
https://lists.isc.org/pipermail/bind-users/2014-July/093618.html
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Mike Hoskins (michoski)
-Original Message-
From: Thomas Schulz sch...@adi.com
Date: Friday, September 12, 2014 at 11:47 AM
To: bind-us...@isc.org bind-us...@isc.org
Subject: Re: bind-9.10.0-P2 memory leak?

 Mike Hoskins wrote:

 Do you guys have max-cache-size set?  I didn't see it in the
borderworlds
 named.conf.  I've seen similar growth problems when testing 9.x before
 setting that (experiment at the time just to see what would happen, and
 confirmed this behavior).  Set sensible resource limits based on
available
 resources.

I am going to see what happens with max-cache-size set, but I am convinced
that there is a bug in bind. My named has been running for 7.5 weeks now
and has been steadily growing in size except for a 1.5 week pause after I
did an rndc flush. The process size started out at 36 MB and is now up to
584 MB. But when I do an rndc dumpdb -cache I get a file that is only 5 MB
in size. Given the automatic cache cleaning, named should stabilize in
size in less than 7.5 weeks.


Just to be clear, I tend to agree with the memory leak hypothesis at this
point...  Based on the described behavior and past experience I related, I
initially just did a search of your config looking for max-cache-size.
Sorry for that, was in training at the time and somewhat distracted.

However, your use case is obviously very different from mine as you are
not doing recursion (my test environment without max-cache-size was, and
getting hit with an almost endless stream of random real-world queries
from my queryfile).

That said, I wonder if it could be dlz related?  That's the only thing I
see special about your config.  Just trying to find possible clues,
since I have ran all 9.9.x versions over time in heavily loaded production
environments (authoritative and recursive) without seeing the unbounded
growth you mentioned below for 9.9.x.

I do have a lot of interest in the community getting to the bottom of
this, as we are just planning a large upgrade in one of our environments
which will move caching clusters serving 6-8k clients over to 9.10.1.



 -Original Message-
 From: Vinícius Ferrão fer...@if.ufrj.br
 Date: Tuesday, September 9, 2014 at 10:17 AM
 To: Thomas Schulz sch...@adi.com
 Cc: bind-us...@isc.org bind-us...@isc.org
 Subject: Re: bind-9.10.0-P2 memory leak?
 
I'm having the exactly same issue. Take a look at my post @ServerFault:
http://serverfault.com/questions/616752/bind-9-10-constantly-killed-on-f
re
ebsd-10-0-with-out-of-swap-space

Sent from my iPhone

On 09/09/2014, at 11:15, Thomas Schulz sch...@adi.com wrote:

 Hello
 
 I recently upgraded my authoritative nameservers to bind-9.10.0-P2
and
 after a while one of them ended up using all its swap and the named
 process got killed. The other servers are seeing similar behaviour,
but 
 I restarted named on all of them to postpone further crashes.
 
 I am using rate-limiting as well DLZ with PostgreSQL. The server has
two 
 views. The operating system is FreeBSD 8.4.
 
 My configuration:
 http://borderworlds.dk/~xi/named-leak/named.conf
 
 Log of the memory usage:
 http://borderworlds.dk/~xi/named-leak/named-mem-usage.log
 
 As you can see, in less than a week, named has grown more than 900MB
in 
 size.
 
 Is anyone else experiencing something similar?
 
 If I need to provide more information, I will be happy to do so.
 
 -- 
 Christian Laursen
 
 What version did you upgrade from? I am seeing bind 9.9.5 and 9.9.6
 grow without any evidence that it will ever stop. See my mail to this
 list with the subject Re: Process size versus cache size. Mine is
 growing slower than yours, but it is now up to 548 MB.
 
 Tom Schulz
 Applied Dynamics Intl.
 sch...@adi.com

Tom Schulz
Applied Dynamics Intl.
sch...@adi.com

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Doug Barton

On 9/12/14 11:07 AM, Mike Hoskins (michoski) wrote:

I do have a lot of interest in the community getting to the bottom of
this, as we are just planning a large upgrade in one of our environments
which will move caching clusters serving 6-8k clients over to 9.10.1.


Given all of the problems that have been reported with 9.10 you may wish 
to reconsider that plan.


Doug

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Thomas Schulz
  Can you copy and paste the out of memory error you are seeing?  Is it 
  still growing? Does it appear to work?
 
 I see your other thread answers some.
 https://lists.isc.org/pipermail/bind-users/2014-July/093618.html

Unfortunately the logs containing the out of memory errors have been
purged. Those errors have not reoccurred with the 64 bit named.

Tom Schulz
Applied Dynamics Intl.
sch...@adi.com
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Mike Hoskins (michoski)
-Original Message-
From: Doug Barton do...@dougbarton.us
Date: Friday, September 12, 2014 at 2:15 PM
To: Mike Hoskins micho...@cisco.com, Thomas Schulz sch...@adi.com,
bind-us...@isc.org bind-us...@isc.org
Subject: Re: bind-9.10.0-P2 memory leak?

On 9/12/14 11:07 AM, Mike Hoskins (michoski) wrote:
 I do have a lot of interest in the community getting to the bottom of
 this, as we are just planning a large upgrade in one of our environments
 which will move caching clusters serving 6-8k clients over to 9.10.1.

Given all of the problems that have been reported with 9.10 you may wish
to reconsider that plan.

Heh thanks, yeah...initially I was erring on the side of caution and using
9.9.x because it's served us well (~20k recursive clients without any
significant problems).  Meanwhile we've been keeping a close eye on
community comments, and to be honest opinions wax and wane.  Just as I
think it's stabilized, someone else complains.  I suppose sticking to
9.9.x a bit longer is wise.

That said, based on the 9.10.1 fixes, we will run it through our own perf
tests for comparison.  Upgrades are automated and easy, but I'd obviously
like to go live with the latest version unless there is a strong technical
reason otherwise.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: nsupdate, semicolon, backslash

2014-09-12 Thread Mark Andrews

In message 54130f2a.9040...@yahoo.fr, Giuseppe writes:
 Hello,
 
 I work with nsupdate for update our domains zones. And I have problem with 
 semicolonin TXT record type.
 
 A small example:
 
   nsupdate -v
 
update add test1.com 400 TXT hello*;*
update add test2.com 400 TXT hello*\;*
show
 
   Outgoing update query:
   ;; -HEADER- opcode: UPDATE, status: NOERROR, id:  0
   ;; flags: ; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
   ;; UPDATE SECTION:
   test1.com.400INTXThello*\;*
   test2.com.400INTXThello*\;*
 
 In my Zone file it is the same problem.
 
 I would like:
 
 test1.com.400INTXThello*;*
 
 without backslash before semicolon. Is important because service using 
 secure._domainKey, _adsp._domainKey, etc.. no
 t work if
 backslashis in zone and semicolon is needed.
 
 Other are the same problem?
 
 Thanks,
 Zeppi

Backslash and semicolons are special characters in master files.
DiG prints records in master file format.  This allows the record
to be cut and pasted into master files, nsupdate etc.  It also means
that the presentation encoding doesn't change between AXFR, IXFR
and other types.  It also escapes some characters that may not
always strictly need escaping in every circumstance.

'@' '$' '.' '\' '' are all special characters in master files.

To enter a backslash one has to enter two backslashes.  A backslash
before a semicolon turns off its special meaning of comment introducer.
A backslash says the next character is a literal except when that
character is a digit in which case it the start of \DDD which is
the decimal value or the character.

THe RHS below is without the master file escaping

\h\e\l\l\o\;\* - hello;*

hello\;* - hello;*

hello;* - hello;*

Now to add a backslash you need to enter two escapes, the RHS is
again without master file escaping.

hello\\;* - hello\;*

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread John Marshall
On Fri, 12 Sep 2014, 23:48 +1000, Mark Andrews wrote:
 
 Try collapsing the multiple .SUFFIXES into a single entry.

Thanks Mark.  That sounded promising!  I applied your patch to a
freshly-unbundled build tree but it made no difference to bmake's
inability to find the python source files.  The rest of the build is
fine.

  making all in /build/bind/bind-9.10.1rc2/bin/python
  make[3]: don't know how to make dnssec-checkds. Stop

I guess we just work around this until the NetBSD folks can pinpoint
what appears to be a bmake problem.

-- 
John Marshall


pgpYh6ASzmWGP.pgp
Description: PGP signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread John Marshall
On Fri, 12 Sep 2014, 08:58 -0500, Jeremy C. Reed wrote:
 On Fri, 12 Sep 2014, Mathieu Arnold wrote:
 
  Yes, you can't use bmake if you try to build the python bits, I had to
  force gmake in the port:
 
 It looks to be a bug in the NetBSD bmake used by FreeBSD. I cannot find 
 a bug report for it in FreeBSD. I opened one for NetBSD:
 http://gnats.netbsd.org/49198x

Thanks Jeremy for opening the NetBSD PR.

-- 
John Marshall


pgpGCgL8q3ROX.pgp
Description: PGP signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Evan Hunt
On Sat, Sep 13, 2014 at 07:50:55AM +1000, John Marshall wrote:
 I guess we just work around this until the NetBSD folks can pinpoint
 what appears to be a bmake problem.

I suspect if we just remove the .py SUFFIXES rule and replace it with
explicit rules for dnssec-checkds and dnssec-coverage, it'll work...

diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in
index 40a4de618..f527aed 100644
--- a/bin/python/Makefile.in
+++ b/bin/python/Makefile.in
@@ -31,6 +31,12 @@ MANOBJS =${MANPAGES} ${HTMLPAGES}
 
 @BIND9_MAKE_RULES@
 
+dnssec-checkds: dnssec-checkds.py
+   cp -f dnssec-checkds.py dnssec-checkds
+
+dnssec-coverage: dnssec-coverage.py
+   cp -f dnssec-coverage.py dnssec-coverage
+
 doc man:: ${MANOBJS}
 
 docclean manclean maintainer-clean::
diff --git a/make/rules.in b/make/rules.in
index 1479fa7..1a8e9ac 100644
--- a/make/rules.in
+++ b/make/rules.in
@@ -357,11 +357,3 @@ ALWAYS_MAKE_SYMTABLE = @ALWAYS_MAKE_SYMTABLE@
 .docbook.8:
${XSLTPROC} -o $@ ${top_srcdir}/doc/xsl/isc-manpage.xsl $
 
-###
-### Python executable
-###
-.SUFFIXES: .py
-.py:
-   cp -f $ $@
-   chmod +x $@
-

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread Mark Andrews

That should be fine workaround for ports for FreeBSD and NetBSD
until bmake is fixed.  Windows needs the .py extension so it isn't
a general fix.

Mark

In message 20140912215722.gb49...@isc.org, Evan Hunt writes:
 On Sat, Sep 13, 2014 at 07:50:55AM +1000, John Marshall wrote:
  I guess we just work around this until the NetBSD folks can pinpoint
  what appears to be a bmake problem.
 
 I suspect if we just remove the .py SUFFIXES rule and replace it with
 explicit rules for dnssec-checkds and dnssec-coverage, it'll work...
 
 diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in
 index 40a4de618..f527aed 100644
 --- a/bin/python/Makefile.in
 +++ b/bin/python/Makefile.in
 @@ -31,6 +31,12 @@ MANOBJS =${MANPAGES} ${HTMLPAGES}
  
  @BIND9_MAKE_RULES@
  
 +dnssec-checkds: dnssec-checkds.py
 +   cp -f dnssec-checkds.py dnssec-checkds
 +
 +dnssec-coverage: dnssec-coverage.py
 +   cp -f dnssec-coverage.py dnssec-coverage
 +
  doc man:: ${MANOBJS}
  
  docclean manclean maintainer-clean::
 diff --git a/make/rules.in b/make/rules.in
 index 1479fa7..1a8e9ac 100644
 --- a/make/rules.in
 +++ b/make/rules.in
 @@ -357,11 +357,3 @@ ALWAYS_MAKE_SYMTABLE = @ALWAYS_MAKE_SYMTABLE@
  .docbook.8:
 ${XSLTPROC} -o $@ ${top_srcdir}/doc/xsl/isc-manpage.xsl $
  
 -###
 -### Python executable
 -###
 -.SUFFIXES: .py
 -.py:
 -   cp -f $ $@
 -   chmod +x $@
 -
 
 -- 
 Evan Hunt -- e...@isc.org
 Internet Systems Consortium, Inc.
 ___
 Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
 from this list
 
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: nsupdate, semicolon, backslash

2014-09-12 Thread Giuseppe

Hello Mark,

If I understood, it's a normal comportement to find backslash in TEXT data.

In my case, i implement DKIM DNS and in master files I have:

;; ANSWER SECTION:
google._domainkey.test.com. 1800 IN TXT v=DKIM1\; k=rsa\; p=MIGfMA

At this time, it not working. And I was thinking that is the backslash 
the problème.


So, I have to do more troubleshooting about this case.

Thanks for your help
Zeppi
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: BIND 9.10.1rc2 won't build on FreeBSD 10-STABLE

2014-09-12 Thread John Marshall
On Fri, 12 Sep 2014, 21:57 +, Evan Hunt wrote:
 I suspect if we just remove the .py SUFFIXES rule and replace it with
 explicit rules for dnssec-checkds and dnssec-coverage, it'll work...

As far as I can see, adding the explicit dependency doesn't mean that
the .py rule _has_ to be removed (although it becomes superfluous).  If
make has an explicit dependency line it doesn't need to go hunting for a
source via suffix rules.  I applied your patch to bin/python/Makefile.in
only, and left make/rules.in untouched, and everything worked (as
expected) both with make and gmake.

BUT then I had another idea...

I had noticed in FreeBSD's sys.mk that the single-suffix rules were all
listed before the double-suffix rules.  I wondered if moving the
(single-suffix) .py rule up above the (double-suffix) C and docbook
rules in make/rules.in might make a difference.  It did.

With the patch below applied to a fresh unbundled rc2 build tree, I can
build rc2 everywhere I need; both with the native system make and gmake.
Perhaps this might be considered as a general workaround?

Tested successfully with:
 make (pmake) and gmake on FreeBSD/amd64 9.3-RELEASE
 make (bmake) and gmake on FreeBSD/i386  10.1-PRERELEASE
 make (bmake) and gmake on FreeBSD/amd64 10.1-PRERELEASE

--- make/rules.in.orig  2014-09-06 07:42:05.0 +1000
+++ make/rules.in   2014-09-13 14:29:01.0 +1000
@@ -93,6 +93,16 @@
done
 
 ###
+### Python executable
+###
+
+.SUFFIXES:
+.SUFFIXES: .py
+.py:
+   cp -f $ $@
+   chmod +x $@
+
+###
 ### C Programs
 ###
 ### Makefile must define
@@ -119,7 +129,6 @@
 BUILD_LDFLAGS = @BUILD_LDFLAGS@
 BUILD_LIBS = @BUILD_LIBS@
 
-.SUFFIXES:
 .SUFFIXES: .c .@O@
 
 ALWAYS_INCLUDES = -I${top_builddir} -I${top_srcdir}
@@ -357,11 +366,3 @@
 .docbook.8:
${XSLTPROC} -o $@ ${top_srcdir}/doc/xsl/isc-manpage.xsl $
 
-###
-### Python executable
-###
-.SUFFIXES: .py
-.py:
-   cp -f $ $@
-   chmod +x $@
-

-- 
John Marshall


pgpeQKu8INIbS.pgp
Description: PGP signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users