Re: expired SSL certificate

2018-04-10 Thread Frank Pikelner
Cert looks fixed now. Nice to see you're using Letsencrypt certs... just have to fix the cron job for the renew ;-) Frank >Forwarded to our operations people >> On 11 Apr 2018, at 10:12 am, /dev/rob0 wrote: >> >> The certificate for lists.isc.org expired today, and

Re: expired SSL certificate

2018-04-10 Thread Mark Andrews
Forwarded to our operations people > On 11 Apr 2018, at 10:12 am, /dev/rob0 wrote: > > The certificate for lists.isc.org expired today, and because of STS > my browser does not allow a security exception. > -- > http://rob0.nodns4.us/ > Offlist GMX mail is seen only if

expired SSL certificate

2018-04-10 Thread /dev/rob0
The certificate for lists.isc.org expired today, and because of STS my browser does not allow a security exception. -- http://rob0.nodns4.us/ Offlist GMX mail is seen only if "/dev/rob0" is in the Subject: ___ Please visit

Re: RRSIG query

2018-04-10 Thread Matthew Pounsett
On 10 April 2018 at 12:05, rams wrote: > Hi > Greetings!! > We have 1Million signed zone records in bind. My zone is going to > auto-resign after 3 days. If we change RRSIG expire date to greater than > two months from now then if restart bind, Can we avoid auto-resign

RRSIG query

2018-04-10 Thread rams
Hi Greetings!! We have 1Million signed zone records in bind. My zone is going to auto-resign after 3 days. If we change RRSIG expire date to greater than two months from now then if restart bind, Can we avoid auto-resign in this week? is there any impact on resolution or is my zone is valid?

Re: DNS Capacity issue help -- Recursive Query -- it seems some packets are dropped by DNS

2018-04-10 Thread Tony Finch
PENG, JUNAN wrote: > I need to start by saying that my load testing is very unscientific, so I can only give you a few handwaving hints... > I did recursive query capacity test. I used traffic generator to place > 15K QPS traffic to DNS 1 with FQDN1 (Note, FQDN1 can't be

Re: DNS Capacity issue help -- Recursive Query -- it seems some packets are dropped by DNS

2018-04-10 Thread Martin Wismer
Hello Michael, take care to increase the tcpdump buffers. Else it's tcpdump which loose trafic, not the dns server Have Fun. Greetings   Martin.Wismer. tcpdump option   -B 131072   helped in my case PS) this time with my other E-Mail Address On 10.04.18 02:37, PENG, JUNAN wrote: Hi, All I