Re: Preferred log location with ISC copr package

2019-05-21 Thread Michał Kępień
> I did a fresh installation from isc/bind-esv onto CentOS 7. It doesn't look > to me like the permissions on the log directory were set correctly. > > > drwxr-xr-x. 2 root root 6 May 15 23:29 /var/opt/isc/isc-bind/log > > drwxr-x---. 3 root named 18 May 20 15:01 /var/opt/isc/isc-bind/named >

Re: Bind max socket/query per IP

2019-05-21 Thread Mark Andrews
You really need to read up on queuing theory. The fairest way to queue is to have a single queue and to process off the end of that. Unfortunately interfaces don’t form a single queue, they form multiple queues. This sort of behaviour is expected with multiple queues. The main address is the l

Bind max socket/query per IP

2019-05-21 Thread Ict Security
Hi guys, I am experiencing a very strange problem. Under heavy load, Bind becomes extremely load above a certain number of Qps but, if i query an alias IP address (where normally queries don't arrive), Bind answers immediately. I was wondering if there is a kind of limitation on a single IP addr

Re: Preferred log location with ISC copr package

2019-05-21 Thread John Thurston
On 5/21/2019 5:08 AM, Michał Kępień wrote: A directory was created as part of the package installation: /var/opt/isc/isc-bind/log/ Correct, this directory is a part of the standard Software Collection runtime which is created at package build time according to macros provided by Red Hat. S

Re: Should we remove the DLV code?

2019-05-21 Thread Hugo Salgado-Hernández
Last year I was involved in a project to allow the signing of domains in the second level of a country, when the TLD has signed yet. It's a reality in certain regions. I get it that the idea is to put pressure on the TLD, but this institution was the largest ISP in the country and considered that i

Re: Should we remove the DLV code?

2019-05-21 Thread Warren Kumari
At this point I think DLV is actively dangerous -- I'm not sure if it "easy" to remove the code without too much risk, but an initial start would be to make it impossible^whard to enable it (and initially log an error message for people who already have it configured...). W On Tue, May 21, 2019 a

Re: Should we remove the DLV code?

2019-05-21 Thread Matthijs Mekking
Hi Grant, On 5/20/19 11:44 PM, Grant Taylor via bind-users wrote: On 5/20/19 4:34 AM, Matthijs Mekking wrote: * It will make the code much easier to maintain, which is beneficial for users too since that will mean in general less bugs, easier to find bugs, and easier to extend it with new feat

Re: Preferred log location with ISC copr package

2019-05-21 Thread Michał Kępień
Hi John, > I'm considering changing one of my BIND installations to use the > experimental ISC-provided packages: > https://www.isc.org/blogs/bind-9-packages/ > > With these packages, what it the recommended location for log files? By default, ISC packages try to mimic what stock RHEL/CentOS B