nsupdate reject

2019-05-19 Thread @lbutlr
Trying to update some DNS under a relatively newly installed bin 9.14 with nsupdate. I have a file admin.key that looks basically like this: key "rndc-key" { algorithm hmac-sha256; secret "SECRETSTUFF="; }; This is the same key block that is in named.conf. I am launching NSLOOKUP

High load on BIND DNS and query timeouts after RPZ XFR retrieve

2019-05-19 Thread Peter V
Hi all, I would like to get opinion on issue I was involved over weekend. Customer utilizes RPZ feed from spamhaus and worked pretty OK for some months after initial deployment. They reported issue with wrong performance of BIND DNS; BIND version: 9.10.8-P1 I observed BIND CPU usage went from