Re: RSASHA3 in DNSSEC

2018-11-12 Thread Mukund Sivaraman
On Tue, Nov 13, 2018 at 02:06:24PM +0700, Mukund Sivaraman wrote: > There is a draft and BIND 9 implementation of SHA-3 in DNSSEC: > > https://tools.ietf.org/html/draft-muks-dnsop-dnssec-sha3-01 The draft is currently expired. I'll update it before the next IETF meeting to scale down what it prop

Re: RSASHA3 in DNSSEC

2018-11-12 Thread Mukund Sivaraman
On Tue, Nov 13, 2018 at 12:48:04PM +0600, Hasibuzzaman Gazi wrote: > hello there, > i am a student and currently working on a class project where i am using > DNSSEC to secure the DNS records. i want to use RSASHA3 encryption method. > i have haveged installed and latest bind package, the problem i

Re: Slow zone signing with ECDSA

2018-11-12 Thread hasibuzzaman
sir can you help me by showing the code to implement the RSASHA3 method in the zone? -- Sent from: http://bind-users-forum.2342410.n4.nabble.com/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-us

RSASHA3 in DNSSEC

2018-11-12 Thread Hasibuzzaman Gazi
hello there, i am a student and currently working on a class project where i am using DNSSEC to secure the DNS records. i want to use RSASHA3 encryption method. i have haveged installed and latest bind package, the problem is i dont know what is the code to use to implement the cryptography method.

Re: Method of writing zone files

2018-11-12 Thread Danny Mayer
If you are talking about BIND9 atomic replacement on Windows then it does, at least when I wrote that piece of code. It very carefully makes sure it doesn't lose the file. Danny On 11/12/18 6:21 PM, Mark Andrews wrote: > It really depends on the platform. > > Windows doesn’t support atomic replac

Re: Method of writing zone files

2018-11-12 Thread Mark Andrews
It really depends on the platform. Windows doesn’t support atomic replacement via rename. On platforms where atomic replacement via rename is supported it is used. Mark > On 13 Nov 2018, at 6:39 am, Marcus Frenkel wrote: > > Thank you for the quick reply Tony! > > Follow-up questions just to

Re: Method of writing zone files

2018-11-12 Thread Marcus Frenkel
Thank you for the quick reply Tony! Follow-up questions just to be sure: 1. The new zone file is renamed in the placed of the old one, only after all changes to the new file are written? 2. Is the zone file atomically replaced during the renaming process, in a sense that there is no window in whic

Re: Method of writing zone files

2018-11-12 Thread Tony Finch
Marcus Frenkel wrote: > > I need to know how BIND writes to slave zone files after zone has been > updated. Does it modify the file in place or it replaces the file with > new one at once? Changes are written to a journal append-only style. Every so often the master file is rewritten to incorpora

Method of writing zone files

2018-11-12 Thread Marcus Frenkel
Hello, Question to BIND devs. I need to know how BIND writes to slave zone files after zone has been updated. Does it modify the file in place or it replaces the file with new one at once? We run rsync to backup these files. Normally, if the file is being written to, rsync will copy whatever data

RE: TSIG error with BIND9 Views

2018-11-12 Thread LeBlanc, Daniel James
Hello Roberto. I have built something similar and used a unique TSIG key for each view. This was required in my case as I use the key to select the View. Dan LeBlanc From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Roberto Carna Sent: November-12-18 12:05 PM To: ML BIND

TSIG error with BIND9 Views

2018-11-12 Thread Roberto Carna
Hi people, I've implemented a BIND9 service wit two views, and only one key for TSIG. The primary and secondary server start OK, but the transfer doesn't work because in the bind.log from secondary server I can see "TSIG error". Do I have to use one Key for the first view and a different Key for

Re: Rewrite/Override QTYPE with RPZ

2018-11-12 Thread Lee
On 11/12/18, Tom wrote: > I mean the other way: > > My feeded RPZ blocks othercompany.com and *.othercompany.com. Therefore > any qtype (MX, A, ...) are blocked for this domain. Is there a way > with BIND just to whitelist the MX for othercompany.com and the > consequent A-Record (ex. mail.oth

Re: Common zone file, on multiple views

2018-11-12 Thread Tony Finch
Sabri MJAHED (VINC) wrote: > I want to have the same zone on multiple views, but i didn't find any solution > that ease the use of this. I have scripts that generate in-view configurations. In order to make these scripts easier to write, I contributed the `named-checkconf -l` feature which lists

Common zone file, on multiple views

2018-11-12 Thread Sabri MJAHED (VINC)
Hi all, I've been working with bind for a bit of time, but here is a new problem. I want to have the same zone on multiple views, but i didn't find any solution that ease the use of this. I don't want to make 3 file of zone conf with multiple in-view statements. Here is the server-fault post w