Re: 'managed-keys' is deprecated ??
On 6/14/21 9:30 PM, Jim Popovitch via bind-users wrote: On Tue, 2021-06-15 at 14:27 +1000, Mark Andrews wrote: https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/Bv9ARM.pdf The modern-day RTFM :-) -Jim P. "Just Google it." The new RTFM. Chuckle! And ' 'managed-keys' is deprecated" is a bug. I just reported: named-checkconf gives confusing depreciated 'managed-keys' message https://bugzilla.redhat.com/show_bug.cgi?id=1972022 :'( -T ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
My FC33->FC34 bind-chroot upgrade notes
Hi All,
Thank you all for the enormous help in me getting bind-chroot
working after upgrading to Fedora 34. Here are my notes.
Hope this helps someone else.
-T
Broken bind-chroot repair after upgrading to Fedora 34:
# means root
$ means user
1) temporary workaround so you can surf the Internet for help:
Change /etc/resolv.conf to
# search your_domain
# nameserver your_IP
nameserver 208.67.222.123
2) in their "ultimate wisdom", the rpm maintainers disabled
the service after upgrading it. See the following bug I posted
on 2021-06-14:
Bind-chroot upgrade from FC3 to FC34 disables the service
breaking a server
https://bugzilla.redhat.com/show_bug.cgi?id=1972000
To repair:
# systemctl enable named-chroot.service
# systemctl start named-chroot.service
Other useful command(s):
# systemctl stopnamed-chroot.service
# systemctl status named-chroot.service
# systemctl restart named-chroot.service
3) the new version of bind-chroot enables "dns security validation" by
default.
To repair, place the following in your named.conf:
by itself at the bottom:
include "/etc/named.root.key";
add the following to your "options" block:
dnssec-validation yes;
Other useful command(s):
Validation check:
$ delv @$IP com ds
$ delv @208.67.222.123 com ds
; fully validated
...
4) check (and repair) your configurations:
named.conf:
# named-checkconf -l -t /var/named/chroot /etc/named.conf
Note: if you get the following error message,
`/etc/named.root.key:1: option 'managed-keys' is
deprecated`
it is a bug in named-checkconf.
See the following I posted on 2021-06-14. Just ignore
the message.
named-checkconf gives confusing depreciated
'managed-keys' message
https://bugzilla.redhat.com/show_bug.cgi?id=1972022
Zones:
# named-checkzone -t directory domain filename
Note: the "domain name" in the following comes from named.conf
zone, not `domainname`. For example:
zone "abc.local" {
type master;
file "slaves/rent-a-nerd.hosts";
allow-update { key DHCP_UPDATER; };
};
The "domain" is the name of the "zone". "abc.local" in the above
# named-checkzone -t /var/named/chroot/var/named/slaves
abc.local abc.hosts
zone abc.local/IN: loaded serial 265
OK
# named-checkzone -t /var/named/chroot/var/named/slaves
255.168.192.in-addr.arpa abc.hosts.rev
zone 255.168.192.in-addr.arpa/IN: loaded serial 213
OK
5) restart the bind-chroot service:
Change /etc/resolv.conf back to
search your_domain
nameserver your_IP
# nameserver 208.67.222.123
# systemctl restart named-chroot.service
check for and repair errors with:
$ systemctl status named-chroot.service
# tail -f /var/log/messages
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: 'managed-keys' is deprecated ??
On Tue, 2021-06-15 at 14:27 +1000, Mark Andrews wrote: > https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/Bv9ARM.pdf The modern-day RTFM :-) -Jim P. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: 'managed-keys' is deprecated ??
https://downloads.isc.org/isc/bind9/9.16.16/doc/arm/Bv9ARM.pdf > On 15 Jun 2021, at 13:51, ToddAndMargo via bind-users > wrote: > > Hi All, > > Fedora 34 > bind 9.16 > > The Duck is failing me. > > Placing > include "/etc/named.root.key"; > in my bind.conf, give me the following error: > > # named-checkconf -l -t /var/named/chroot /etc/named.conf > /etc/named.root.key:1: option 'managed-keys' is deprecated > > What do I use in its place? > > Many thanks, > -T > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
'managed-keys' is deprecated ??
Hi All, Fedora 34 bind 9.16 The Duck is failing me. Placing include "/etc/named.root.key"; in my bind.conf, give me the following error: # named-checkconf -l -t /var/named/chroot /etc/named.conf /etc/named.root.key:1: option 'managed-keys' is deprecated What do I use in its place? Many thanks, -T ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Need Help with BIND9
On 2021-06-12 05:30, Matus UHLAR - fantomas wrote: On 11.06.21 18:19, Sten Carlsen wrote: From my place I resolve both to: 98.191.108.149 keiththewebguy.com. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) BIND seems to work ok but your local settings probably don't point your hosts to the right NS. I do have the same IP in both "glue" records. GoDaddy calls them host records. looks like you have registered domain on two servers, but failed to provided the servers' IPs. "glue records" is what your domain needs KEITHTHEWEBGUY.COM. 172800 IN NS NS1.KEITHTHEWEBGUY.COM. KEITHTHEWEBGUY.COM. 172800 IN NS ns2.KEITHTHEWEBGUY.COM. CK0POJMG874LJREF7EFN8430QVIT8BSM.COM. 86400 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.COM. 86400 IN RRSIG NSEC3 8 2 86400 20210617042404 20210610031404 54714 com. X4G7euDX4ox5altSUvf+DfLyijD3A+97OxtkehYEGpUotSvAXXYdriAO rWhfqctrjb7pjNyMApY2lbkuHeqXHACUq26uunHKCoFbLkQ1l56mK2sW mX8qmzImJOaTysXQlH9pJggtlsjvT5+dA+wojtVxlQc7+uq2245G0q0i Nf8JseTw9JzSK66G4IOzl8Z9iQ6KXCKhIKFT4kQXeZP1rA== AG1GER7HG6VFFKTUSO2FO8IDL76AC4B7.COM. 86400 IN NSEC3 1 1 0 - AG1HFAOR0D4AHNGRNHE5M02CMA12RRD4 NS DS RRSIG AG1GER7HG6VFFKTUSO2FO8IDL76AC4B7.COM. 86400 IN RRSIG NSEC3 8 2 86400 20210618044614 20210611033614 54714 com. Z0rbk8cLOj6ZOZRiW74uGgP5rPtdtr0gtKXhxgyVBcmBUjZ2WZcskJ5H YYK6D9KZJYhEvIdvIF+AVBDbyY/7BaRegq44a3Z0pSNlD+nk2fJMqlbA sj+9FkyADAp20dojAXPP+RxoCo2e9hz9XW/S0OKrVxv5NtXqvBOUnahr 7hQOtJCD7uJeb2XLNAHGdOeleIJQhn3E/1CGApoSTxJTaw== couldn't get address for 'NS1.KEITHTHEWEBGUY.COM': failure couldn't get address for 'ns2.KEITHTHEWEBGUY.COM': failure dig: couldn't get address for 'NS1.KEITHTHEWEBGUY.COM': no more Server was probably off. Thank you for your help!! -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95 ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Need Help with BIND9
Thank You Mr. Haywood!! On 2021-06-12 05:11, G.W. Haywood via bind-users wrote: Hi there, On Sat, 12 Jun 2021, techli...@phpcoderusa.com wrote: Re: Need Help with BIND9 ... The two domains I am working with on my SOHO home server are 1) keiththewebguy.com and 2) phpcodetest.com. I setup keiththewebguy.com first and configured BIND9 for it on the same server. To try to troubleshoot I configured phpcodetest.com on the same box, however it uses Zoneedit for DNS. phpcodetest.com works as expected. keiththewebguy.com does not work which uses my local BIND9. I've tried everything I can think of. I've tested the config files, run dig, and verified port 53 is open. I took the zone file for keiththewebguy.com from my VPS that runs Plesk and previously hosted keiththewebguy.com. I forgot to change the IP addresses in the zone to my SOHO box and the website on my VPS was accessible. When I changed the IP addresses in the zone file to my SOHO box the website quit working. I assumed this meant I had an Apache issue and that is when I added phpcodetest.com to test Apache. I've checked apache several times... And I just checked it again. Your problem statement is extremely vague and it seems to be telling me that you do not understand how the parts you're working with all fit together into a functioning whole. You need to remedy that, or you'll be flailing around quite unnecessarily in a fog of technical terms and untested and/or broken configurations. You might also need to work on your fault-finding skills, but they might not be the, er, root of the issue. I appreciate your observations. Do you have the book "DNS and BIND"? Old, but still very relevant. No, however I did find part of that book and I am about 3/4 though chapter 4. I'm learning a lot. https://www.oreilly.com/library/view/dns-and-bind/0596100574/ch04.html I started with the Ubuntu 20.04lts manual and I thought that would be enough. ... If you need any additional information let me know. There might be loads of it, but for now I think probably your best bet is to do some reading. Agree. The Web client (browser) needs to request its configured resolver (*may* be BIND) to supply an IP address which is associated with a domain name so it can send HTTP requests (packets) to the Web server (*may* be Apache) at that IP address. To answer the queries from the Web client, the resolver needs to make queries of its own from a name server which *may* also be BIND - not necessarily the same instance. In its turn, the resolver has to find IP addresses for name servers which will answer its queries. The routes all need to be set up so *both* that the clients can talk to all the servers at the IP addresses involved in the conversations *and* that the DNS and Web servers can reply to the requesting clients. You can see this happen, in nauseating detail if required, with a tool like Wireshark. It's a good way to watch the traffic flowing (or not flowing, as the case may be) and I recommend that you spend some quality time doing just that. Note that the terms 'server' and 'client' can be misleading. A server can become a client of another server when it needs information which it intends to return to a client of its own. In my little description above for example, the resolver acts as a server when it serves an IP address to the browser, but as a client when it asks a name server for the IP address to serve to the client. So it's sometimes best to look at the level of the individual request to decide what is acting as a server, and what is acting as a client. I see a nameserver response only for phpcodetest.com: $ dig keiththewebguy.com | grep ANSWER ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 $ dig +short phpcodetest.com 98.191.108.149 I wouldn't run a port scan without your permission, but at the moment there seems to be no response from 98.191.108.149 to ping and HTTP(S) (which might mean that you've switched off the box for the night...:) Run a scan if you like. I'd like to hear your feedback. Currently I am using an old laptop as a server so I can learn. I turn it off at night. It is on right now. $ ping 98.191.108.149 PING 98.191.108.149 (98.191.108.149) 56(84) bytes of data. ^C --- 98.191.108.149 ping statistics --- 8 packets transmitted, 0 received, 100% packet loss, time 159ms $ telnet 98.191.108.149 80 Trying 98.191.108.149... telnet: Unable to connect to remote host: Connection timed out $ telnet 98.191.108.149 443 Trying 98.191.108.149... telnet: Unable to connect to remote host: Connection timed out The server was probably turned off. Thank you for your help!! HTH -- 73, Ged. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more
Re: Need Help with BIND9
I recently ran into mxtoolbox.com Thanks Paul!! On 2021-06-11 15:53, Paul Kosinski via bind-users wrote: The site mxtoolbox.com has a suite of tools to check your DNS, email and Web servers from the outside. They're easy to use and might turn up something. On Fri, 11 Jun 2021 09:10:32 -0700 techli...@phpcoderusa.com wrote: Hi, The two domains I am working with on my SOHO home server are 1) keiththewebguy.com and 2) phpcodetest.com. I setup keiththewebguy.com first and configured BIND9 for it on the same server. To try to troubleshoot I configured phpcodetest.com on the same box, however it uses Zoneedit for DNS. phpcodetest.com works as expected. keiththewebguy.com does not work which uses my local BIND9. I've tried everything I can think of. I've tested the config files, run dig, and verified port 53 is open. I took the zone file for keiththewebguy.com from my VPS that runs Plesk and previously hosted keiththewebguy.com. I forgot to change the IP addresses in the zone to my SOHO box and the website on my VPS was accessible. When I changed the IP addresses in the zone file to my SOHO box the website quit working. I assumed this meant I had an Apache issue and that is when I added phpcodetest.com to test Apache. I've checked apache several times... And I just checked it again. The server I am using is an old i3 laptop that I upgraded with a SSD. It has 4GB RAM. I am using Ubuntu 20.04lts and BIND9. My connection is a commercial/business Internet connection provided by my cable company for home office usage. This connection does not block ports. I followed the Ubuntu 20.04 server manual to configure BIND9 and I have searched the Internet for more information. If you need any additional information let me know. Thank you for your help!! ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Need Help with BIND9
Thank you for your response. On 2021-06-11 09:19, Sten Carlsen wrote: From my place I resolve both to: 98.191.108.149 keiththewebguy.com [1]. does not actually have the two nameservers required though that is not the problem. (ns1 and ns2 have same IP) I have a VPS that runs Plesk and there is only one name server so for every domain I have hosted on that VPS the domains have the same name server for both host names (at the register) I think some call these glue records. BIND seems to work ok but your local settings probably don't point your hosts to the right NS. I found a really good reference and am going though it and am learning a lot. After I read it I'm going to start over with a fresh install of everything. Or maybe I'll try to troubleshoot. -- Best regards Sten Carlsen -- Aoccdrnig to rseerach at Cmabrigde Uinervtisy, it deosn't mttaer in waht oredr the ltteers in a wrod are, the olny iprmoatnt tihng is taht the frist and lsat lteter be at the rghit pclae. The rset can be a ttoal mses and you can slitl raed it wotihut porbelm. Tihs is bcuseae the hmuan mnid deos not raed ervey lteter by istlef, but the wrod as a wlohe. Amzanig, huh? -- On 11 Jun 2021, at 18.15, Marki wrote: A thing you probably missed is checking the log files. What do they contain when it "isn't working"? What is the actual problem anyway?___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users Links: -- [1] http://keiththewebguy.com ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Expert view of core dump related to catalog zone
Hi Scott, the latest upstream release is 9.16.16 where we fixed deadlock in addzone/modzone/delzone interaction. If you can I would recommend waiting until Wednesday where 9.16.17 will be published. If you still encounter the assertion failure, feel free to fill an issue with us at gitlab.isc.org with a reproducer, full backtrace and coredump (you can use pandora.isc.org for large uploads). It might be problematic to debug this as we don’t have any ppc64el hardware available at our disposal. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 14. 6. 2021, at 15:57, Scott Strattner wrote: > > 1. I looked at the release notes for 9.16.8 and didn't think it is related to > any of the bug fixes mentioned, but could it be? ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Expert view of core dump related to catalog zone
Hello, Last week I moved one of our primary DNS servers to 9.16.7 (and also changed the underlying OS to RedHat 8.3). The platform it is running on is Power (ppc64le). This morning I discovered that named had failed. It was triggered from a request to delete a subdomain (managed through catalog zone). That's all I can gather from reading the system logs (see below). I am hoping someone more knowledgeable about this can provide guidance. Specifically: 1. I looked at the release notes for 9.16.8 and didn't think it is related to any of the bug fixes mentioned, but could it be? 2. Has anyone seen anything similar to this, is there anything specific I should look at to debug further? Jun 13 03:50:35 ns1 named[3500]: received control channel command 'delzone p1305.cecc.ihost.com'Jun 13 03:50:35 ns1 named[3500]: zone p1305.cecc.ihost.com scheduled for removal via delzoneJun 13 03:50:35 ns1 named[3500]: deleting zone p1305.cecc.ihost.com in view public via delzoneJun 13 03:50:35 ns1 named[3500]: client @0x7fff245997a0 127.0.0.1#56939/key rndc-key: view public: signer "rndc-key" approvedJun 13 03:50:35 ns1 named[3500]: client @0x7fff245997a0 127.0.0.1#56939/key rndc-key: view public: updating zone 'catalog.cecc/IN': deleting an RR at efa050aa1c661b474801a5dad3555943c4f59897.zones.catalog.cecc PTRJun 13 03:50:35 ns1 named[3500]: catz: updating catalog zone 'catalog.cecc' with serial 10803Jun 13 03:50:35 ns1 named[3500]: view.c:611: INSIST(__v > 0 && __v < (4294967295U)) failed, back traceJun 13 03:50:35 ns1 named[3500]: #0 0x1003a43c in assertion_failed()+0x7cJun 13 03:50:35 ns1 named[3500]: #1 0x102af6e8 in isc_assertion_failed()+0x28Jun 13 03:50:35 ns1 named[3500]: #2 0x1020db64 in dns_view_attach()+0xf4Jun 13 03:50:35 ns1 named[3500]: #3 0x1003d8a8 in catz_create_chg_task()+0xe8Jun 13 03:50:35 ns1 named[3500]: #4 0x100cdd04 in dns_catz_zones_merge()+0x6b4Jun 13 03:50:35 ns1 named[3500]: #5 0x100d200c in dns_catz_update_from_db()+0x3ecJun 13 03:50:35 ns1 named[3500]: #6 0x100d24d8 in dns_catz_update_taskaction()+0x68Jun 13 03:50:35 ns1 named[3500]: #7 0x102e692c in run()+0x78cJun 13 03:50:35 ns1 named[3500]: #8 0x7fff8b738878 in __do_global_dtors_aux_fini_array_entry()+0x7fff7b32d9a0Jun 13 03:50:35 ns1 named[3500]: #9 0x7fff8b5e32c8 in __do_global_dtors_aux_fini_array_entry()+0x7fff7b1d83f0Jun 13 03:50:35 ns1 named[3500]: exiting (due to assertion failure)Jun 13 03:50:36 ns1 systemd[1]: named.service: Main process exited, code=killed, status=6/ABRTJun 13 03:50:36 ns1 systemd[1]: named.service: Failed with result 'signal'.Jun 13 03:50:37 ns1 systemd-coredump[229571]: Process 3500 (named) of user 25 dumped core.#012#012Stack trace of thread 3540:#012#0 0x7fff8b4f43d8 raise (libc.so.6)#012#1 0x7fff8b4d448c abort (libc.so.6)#012#2 0x1003a66c assertion_failed (named)#012#3 0x102af6e8 isc_assertion_failed (named)#012#40x1020db64 dns_view_attach (named)#012#5 0x1003d8a8 catz_create_chg_task (named)#012#6 0x100cdd04 dns_catz_zones_merge (named)#012#7 0x100d200c dns_catz_update_from_db (named)#012#80x100d24d8 dns_catz_update_taskaction (named)#012#9 0x102e692c dispatch (named)#012#10 0x7fff8b738878 start_thread (libpthread.so.0)#012#11 0x7fff8b5e32c8 __clone (libc.so.6) Scott Strattner Garage for Systems | Systems Technology Architect IBM Technology Sales 845-433-4505 Office (Jabber) sstra...@us.ibm.com ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Disable limitation
On 14.06.21 05:37, Roee Mayerowicz wrote: I'm trying to use BIND9 as a recursive DNS server for my internal crawler. After a few hundred queries, my queries have started to get dropped. What configuration or requirements is needed for "unleash the beast"? none, it should work by default. Is there anything in logs? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 42.7 percent of all statistics are made up on the spot. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
