Thank you, Andrews.
De : Mark Andrews
Envoyé : mercredi 29 juillet 2020 02:15:24
À : Youssef Fassi Fihri
Cc : bind-users@lists.isc.org
Objet : Re: broken trust chain
A network link that is dropping packets can trigger EDNS failures in versions of
BIND before
On 9 Jul 2020, at 21:25, Havard Eidnes via bind-users wrote:
> 2e#1) Make sure your UDP socket *receive* buffers are big enough.
> If on BSD, monitor for "dropped due to full socket buffers"
> count in "netstat -s" output, and tune accordingly. Note that
> this may be a symptom
> RPZ wildcard domain whitelist (passthru) doesn't seem to work as it should
> be.
>
> I have noticed that the last workable version is BIND 9.11.6-P1. I have
> tested the same configurations with versions 9.11.8, 9.11.19 and 9.11.21,
> and all produce the same issue.
>
> Has anyone experienced
3 matches
Mail list logo
