Re: 9.16.13 overwrote master files
Carl,
can you add a “#” in front of "dnssec-policy” in bin/named/config.c
and see how that goes for you. That will comment out the default
‘dnssec-policy “none”;’.
Please let us know how that goes for you.
Mark
> On 29 Mar 2021, at 15:02, Carl Byington wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> On Mon, 2021-03-29 at 12:54 +1100, Mark Andrews wrote:
>> What do you have in options?
>
> options {
>directory "/var/named";
>allow-recursion { "friends"; };
>dnssec-enable yes;
>dnssec-validation auto;
>bindkeys-file "/etc/named.bind.keys";
>managed-keys-directory "/var/named/dynamic";
>listen-on-v6 {any;};
>ixfr-from-differences yes;
>max-journal-size 2m;
>notify yes;
>response-policy { zone "rpz.five-ten-sg.com";}
>qname-wait-recurse no;
>rate-limit {
>responses-per-second 500;
>errors-per-second50;
>nxdomains-per-second 500;
>qps-scale4000;
>exempt-clients { "friends"; };
>};
>max-recursion-queries 200; qname-minimization disabled;
>fetches-per-server 50;
>fetches-per-zone 50;
>server-id hostname;
> };
>
> This is on Centos 8. I will setup a VM tomorrow for more testing on
> this. For now, reverted back to 9.16.12.
>
>
>
>
> -BEGIN PGP SIGNATURE-
>
> iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGFRRxUcY2FybEBmaXZl
> LXRlbi1zZy5jb20ACgkQL6j7milTFsFm/wCbBpzr/W/QdtUMG0hhstYcI1wpsBcA
> nRdv220ju0R0IIEgbLzfbXs8CjHX
> =+zDb
> -END PGP SIGNATURE-
>
>
>
>
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
Please lets not react to one aggression with yet another aggression. I think all has been said on this topic, so if everyone could refrain from piling more emails on this topic I would be very much delighted. Thanks, Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 29. 3. 2021, at 23:17, @lbutlr wrote: > > On 26 Mar 2021, at 14:32, alcol alcol wrote: >> seriously? is like linux/unix FAQ > > Oh, I would say learning how to post to mailing lists in linux/unix 101. > Perhaps you could review that yourself and not send bloated messages full of > HTML garbage? > > -- > "Are you pondering what I'm pondering?" > "Well, I think so, Brain, but snort no, no, it's too stupid!" > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
On 26 Mar 2021, at 14:32, alcol alcol wrote: > seriously? is like linux/unix FAQ Oh, I would say learning how to post to mailing lists in linux/unix 101. Perhaps you could review that yourself and not send bloated messages full of HTML garbage? -- "Are you pondering what I'm pondering?" "Well, I think so, Brain, but snort no, no, it's too stupid!" ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
9.16.12 tries to read keys that it does not need?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 dns_dnssec_findmatchingkeys: error reading key file Kfive-ten- sg.com.+008+39376.private: permission denied Those key files are 0600 root:root. Bind should never need to read them since we are not doing in-line signing or key rotation within bind. That is just a log message - it does not seem to have any operational impact. -BEGIN PGP SIGNATURE- iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYGIZYBUcY2FybEBmaXZl LXRlbi1zZy5jb20ACgkQL6j7milTFsEBoQCcD5Ohlvnf9NnLKLX7VRZKelM62akA n03DV9O+59R6CBUMlQz/0qdeyj8p =yFia -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
Well said! On Mon, 29 Mar 2021 16:11:54 +0100 Tony Finch wrote: > alcol alcol wrote: > > > seriously? is like linux/unix FAQ > > Please, if you can't be helpful, don't reply at all. We all have to learn > somehow, and the best way to show your knowledge is to share it generously. > > Tony. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.16.13 and Mac OS X 10.13.6 - problems with ./configure
alcol alcol wrote: > seriously? is like linux/unix FAQ Please, if you can't be helpful, don't reply at all. We all have to learn somehow, and the best way to show your knowledge is to share it generously. Tony. -- f.anthony.n.finchhttps://dotat.at/ Trafalgar: Easterly 6 to gale 8 in southeast, otherwise mainly northeasterly 4 to 6. Moderate or rough. Thundery showers. Good, occasionally moderate. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
