Re: forwarder cache

2022-11-30 Thread Hamid Maadani
> If you want the help from other people in this mailing list, withholding and > censoring information isn’t the way forward. Please stop wasting everyone’s > time by providing incomplete information. The fact that you are running DLZ on > the NS2 is important, the other important information is ho

Re: forwarder cache

2022-11-30 Thread Ondřej Surý
If you want the help from other people in this mailing list, withholding and censoring information isn’t the way forward. Please stop wasting everyone’s time by providing incomplete information. The fact that you are running DLZ on the NS2 is important, the other important information is how exa

Re: forwarder cache

2022-11-30 Thread Hamid Maadani
> Weird. Please send complete configs as attachments, along with a minimal > test.com zone file required to start the server and we can have a look. I think I have narrowed this down a bit. Let's see if the new info helps. I will upload the complete config otherwise. For context, I have upgraded

Re: forwarder cache

2022-11-30 Thread Petr Špaček
On 30. 11. 22 4:31, Hamid Maadani wrote: > That looks like, if the stale config options are removed, then NS1 > can't get an answer from NS2 at all? Or you are saying that's what > you get if NS2 isn't running and you query NS1 regarding test.com > without the stale config options? It would

Re: forwarder cache

2022-11-30 Thread Darren Ankney
I just noticed another difference between our configurations. You have: dnssec-validation yes; and I have dnssec-validation auto; The manual says you need additional configuration if you have "yes" set: https://bind9.readthedocs.io/en/v9_18_9/dnssec-guide.html#dnssec-validation-explained Again,

Re: DF-Flag on UDP-based sockets?

2022-11-30 Thread Ondřej Surý
> On 30. 11. 2022, at 11:03, Tom wrote: > > Does someone of ISC agree? If so, I'll file a bug. Please do. A MR or patch would be even better ;-) Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outs

Re: DF-Flag on UDP-based sockets?

2022-11-30 Thread Tom
On 11/30/22 09:27, Borja Marcos wrote: On 30 Nov 2022, at 08:20, Tom wrote: Hi list Regarding ARM 9.18.9 (https://bind9.readthedocs.io/en/v9_18_9/reference.html#namedconf-statement-edns-udp-size): "The named now sets the DON’T FRAGMENT flag on outgoing UDP packets." Tested with BIND-9.18.

Re: DF-Flag on UDP-based sockets?

2022-11-30 Thread Borja Marcos
> On 30 Nov 2022, at 08:20, Tom wrote: > > Hi list > > Regarding ARM 9.18.9 > (https://bind9.readthedocs.io/en/v9_18_9/reference.html#namedconf-statement-edns-udp-size): > "The named now sets the DON’T FRAGMENT flag on outgoing UDP packets." > > Tested with BIND-9.18.9, I didn't saw any UDP