Re: queries for "_.domain"
On 18.05.24 07:10, Mark Andrews wrote: Correct. Later versions use NS queries as that allows named to cache the non-existence of the NS RRset. I see this happened since 9.18.17 Luckily Debian 11/backports and Debian 12 have incorporated this version. Using _.domain doesn’t allow that to happen. Which I guess caused my problem. Looking at the docs, I can only turn it off in previous versions. (QNAME minimization was added in 9.13.2) NS queries do however expose broken delegations. Make sure you have working NS records at the zone apex and at the delegation point. This is especially important when the server serves multiple levels in the zone hierarchy as intermediate delegations are often not seen without QNAME minimisation but are with QNAME minimisation. Luckily this is resolving-only server. We have had bug reports due to all delegating NS records referring to non-existing servers. We have had bug reports due to garbage records at the zone apex. I encountered problems like this in the past. And then people wonder they DNS work properly. The "google (8.8.8.8) works" argument is problematic because google violates DNS in cases like this. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Honk if you love peace and quiet. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RFC8482: Implementation through HINFO record
Hello everyone, How is it possible to set up a resource record of type HINFO so that it is returned on every ANY request without all the other records in the zone? I'm looking to implement RFC8482 as Cloudflare can do in the following article: https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any Thanks in advance for your help. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: RFC8482: Implementation through HINFO record
Named does not support this. There is no requirement to support this. -- Mark Andrews > On 21 May 2024, at 00:04, Amaury Van Pevenaeyge > wrote: > > > Hello everyone, > > How is it possible to set up a resource record of type HINFO so that it is > returned on every ANY request without all the other records in the zone? I'm > looking to implement RFC8482 as Cloudflare can do in the following article: > https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any > > Thanks in advance for your help. > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: RFC8482: Implementation through HINFO record
I would suggest you to create a feature request in our GitLab. This way it won't get lost in the tides of time. Personally, I actually quite like the idea, but it would have to be an option to turn off and on, so it's not going to save us from having a code that supports ANY anyway. Ondřej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 20. 5. 2024, at 16:03, Amaury Van Pevenaeyge > wrote: > > Hello everyone, > > How is it possible to set up a resource record of type HINFO so that it is > returned on every ANY request without all the other records in the zone? I'm > looking to implement RFC8482 as Cloudflare can do in the following article: > https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any > > Thanks in advance for your help. > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
named fails to start with bind-9.18.0
Hi All, I compiled bind-9.18.0 successfully but when I try to run named via configuration file, named exits with return code 1. The below code in bin/named/os.c is where it is failing. [image: image.png] When i run named with gdb , i see that it is exiting in the above code. Can someone please help what could be the issue here? Thanks, Avij -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: named fails to start with bind-9.18.0
> Can someone please help what could be the issue here? Not really. First start by using the latest 9.18 version and not something that’s two years old and then you need to provide more information than a screenshot of random code snippet. If you want free help you need to provide information about what you are actually doing. This old essay is still true: https://www.chiark.greenend.org.uk/~sgtatham/bugs.html Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 20. 5. 2024, at 17:55, avijeet gupta wrote: > > > Hi All, > > I compiled bind-9.18.0 successfully but when I try to run named via > configuration file, named exits with return code 1. > > The below code in bin/named/os.c is where it is failing. > > > > > When i run named with gdb , i see that it is exiting in the above code. > > Can someone please help what could be the issue here? > > Thanks, > Avij > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: RFC8482: Implementation through HINFO record
And named already handles ANY being used as an reflection amplifier. This was written for servers using databases where getting the ANY response is actually hard. Cloudflare was using a response model that most thought was not really correct but wasn’t broken enough to say “Don’t do that”. If their customers where happy with this behaviour then ok. This RFC was written to allow them to continue doing what they where doing without having to fight that they where not RFC compliant. It was not written to say this is how you should respond to ANY. It also requires online signing for DNSSEC or adding a HINFO record for every name in your zone when offline signing. Mark -- Mark Andrews > On 21 May 2024, at 00:31, Ondřej Surý wrote: > > I would suggest you to create a feature request in our GitLab. This way it > won't get lost > in the tides of time. > > Personally, I actually quite like the idea, but it would have to be an option > to turn off and on, > so it's not going to save us from having a code that supports ANY anyway. > > Ondřej > -- > Ondřej Surý (He/Him) > ond...@isc.org > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >> On 20. 5. 2024, at 16:03, Amaury Van Pevenaeyge >> wrote: >> >> Hello everyone, >> >> How is it possible to set up a resource record of type HINFO so that it is >> returned on every ANY request without all the other records in the zone? I'm >> looking to implement RFC8482 as Cloudflare can do in the following article: >> https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any >> >> Thanks in advance for your help. >> -- >> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from >> this list >> >> ISC funds the development of this software with paid support subscriptions. >> Contact us at https://www.isc.org/contact/ for more information. >> >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: named fails to start with bind-9.18.0
My Apologies. I was just trying to show the snippet of bind library code where named was failing. I am trying to run named after compiling the bind library. The command I use to run named is as follows: /bin/named -c /etc/named.conf It appears that it is failing when it tries to daemonize named. what could be causing it ? named will eventually run as daemon in my dns server. Please let me know if more information is needed. Thanks, Avi On Mon, May 20, 2024 at 10:47 AM Ondřej Surý wrote: > Can someone please help what could be the issue here? > > > Not really. First start by using the latest 9.18 version and not something > that’s two years old and then you need to provide more information than a > screenshot of random code snippet. If you want free help you need to > provide information about what you are actually doing. > > This old essay is still true: > https://www.chiark.greenend.org.uk/~sgtatham/bugs.html > > Ondrej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not > feel obligated to reply outside your normal working hours. > > On 20. 5. 2024, at 17:55, avijeet gupta wrote: > > > Hi All, > > I compiled bind-9.18.0 successfully but when I try to run named via > configuration file, named exits with return code 1. > > The below code in bin/named/os.c is where it is failing. > > > > > When i run named with gdb , i see that it is exiting in the above code. > > Can someone please help what could be the issue here? > > Thanks, > Avij > > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > ISC funds the development of this software with paid support > subscriptions. Contact us at https://www.isc.org/contact/ for more > information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > > -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: named fails to start with bind-9.18.0
As Ondrej said. Upgrade. You compiled BIND 9.18.0. That is 27 release behind current. Unless you are doing archaeological investigations of old code you shouldn’t be trying to use old code like that. Running newer code means that you can avoid all the bugs that have been fixed in the meantime. Named logs what it finds wrong to syslog by default. Read your logs. You can also run named in the foreground and send the logs to stderr. named -g -c /etc/named.conf’ Due to Linux’s co-operating processes as its threading model, named can’t just daemonize once it has finished its startup phase. It has to daemonize then finish its startup. The parent process waits for the startup to complete and then exits with an appropriate error code. Somewhere in that startup something has failed. Mark > On 21 May 2024, at 14:10, avijeet gupta wrote: > > My Apologies. I was just trying to show the snippet of bind library code > where named was failing. > > I am trying to run named after compiling the bind library. The command I use > to run named is as follows: > > /bin/named -c /etc/named.conf > > It appears that it is failing when it tries to daemonize named. what could be > causing it ? > > named will eventually run as daemon in my dns server. > > Please let me know if more information is needed. > > Thanks, > Avi > > > > On Mon, May 20, 2024 at 10:47 AM Ondřej Surý wrote: >> Can someone please help what could be the issue here? > > > Not really. First start by using the latest 9.18 version and not something > that’s two years old and then you need to provide more information than a > screenshot of random code snippet. If you want free help you need to provide > information about what you are actually doing. > > This old essay is still true: > https://www.chiark.greenend.org.uk/~sgtatham/bugs.html > > Ondrej > -- > Ondřej Surý — ISC (He/Him) > > My working hours and your working hours may be different. Please do not feel > obligated to reply outside your normal working hours. > >> On 20. 5. 2024, at 17:55, avijeet gupta wrote: >> >> Hi All, >> >> I compiled bind-9.18.0 successfully but when I try to run named via >> configuration file, named exits with return code 1. >> >> The below code in bin/named/os.c is where it is failing. >> >> >> >> >> When i run named with gdb , i see that it is exiting in the above code. >> >> Can someone please help what could be the issue here? >> >> Thanks, >> Avij >> >> -- >> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from >> this list >> >> ISC funds the development of this software with paid support subscriptions. >> Contact us at https://www.isc.org/contact/ for more information. >> >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users