Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-11 Thread Jorge Fábregas
On 06/08/2014 01:59 PM, Evan Hunt wrote: The answer is still no. We do have negative trust anchors on the roadmap for 9.11, but that's not scheduled for release until 2015. Thank you Evan. I'm glad to know this is coming. Regards, Jorge ___ Please

Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-11 Thread Jorge Fábregas
Thanks Tony for the feedback. -- Jorge ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Simple max-journal-size question

2014-06-11 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
I just can't seem to find the answer to such a simple question (BIND9.9). I have a very active dynamic zone that now has an incredibly large journal file. I would like to use the max-journal-size parameter in the zone declaration to keep this from happening again. I understand that I can

A Note About Today's New BIND Releases

2014-06-11 Thread Michael McNally
Today ISC publicly releases three new versions of BIND: BIND 9.10.0-P2 BIND 9.9.5-P1 BIND 9.8.7-P1 Version 9.10.0-P2 is a security release of BIND and addresses a critical vulnerability, CVE-2014-3859, that can be used as a denial of service vector against all authoritative and

Re: A Note About Today's New BIND Releases

2014-06-11 Thread Michael McNally
On 6/11/14 2:04 PM, Michael McNally wrote: In summary: BIND 9.10.0-P2: - fixes security issue CVE-2014-3859 - fixes issue from ISC Operational Notification of 4 June 2014 - includes other minor fixes BIND 9.9.5-P1: - security issue CVE-2014-3859 is not applicable - fixes issue from ISC

Re: A Note About Today's New BIND Releases

2014-06-11 Thread Noel Butler
On 12/06/2014 08:04, mcna...@isc.org wrote: In summary: BIND 9.10.0-P2: - fixes security issue CVE-2014-3859 - fixes issue from ISC Operational Notification of 4 June 2014 - includes other minor fixes Michael, Does this also address the crazy amount of logging (as previously discussed

RE: Simple max-journal-size question

2014-06-11 Thread Stuart Browne
.. and somehow didn't answer your question, sorry. first thing in the morning. Just a 'rndc reconfig' should be sufficient to get the configuration change to act. Stuart -Original Message- From: Stuart Browne Sent: Thursday, 12 June 2014 9:17 AM To: Bind Users Mailing List

RE: Simple max-journal-size question

2014-06-11 Thread Stuart Browne
This one is a bit of a fun one to understand. Whilst setting this seems to suggest This will be the biggest size the journal will ever get to, it isn't. This suggests to bind to flush the journal when it reaches this size. If the journal is busy however, the flush will be delayed until such a

RHEL, Centos, Fedora rpm 9.10.0-P2

2014-06-11 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://www.five-ten-sg.com/mapper/bind contains links to the source rpms, and build instructions. -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEARECAAYFAlOZGZgACgkQL6j7milTFsFaaQCfTqZPzM8UYKWNUW8PLJM0juW3