Re: Bind9 "split zones"

2024-03-04 Thread Taavi Ansper via bind-users
Hi Thanks for the quick response! Answering the last question. There are two different systems where DNS names are generated from. One is actually phpipam where we generate entries from and the second one is a virtualization platform, where we also dig in the DB to generate entries for VM-s

Re: Bind9 "split zones"

2024-03-04 Thread Greg Choules via bind-users
Hi. If I understand you correctly, you are trying to get your resolver to go to two different places (main_hidden_dns_server and other_dns_server) for answers to the same question, and then want it combine those answers into a single response to the client, which contains PTR records for both

Re: Problem upgrading to 9.18 - important feature being removed

2024-03-04 Thread Al Whaley
Matthij, Petr, Thanks for responding. I am trying to make the case that one can NOT do the same things with 'lifetime unlimited'.  One can do some of the same positive things, but only if conditions are just right, and one cannot block the negative overriding key replacement.  If I have it

Bind9 "split zones"

2024-03-04 Thread Taavi Ansper via bind-users
Hi I am trying to understand bind9 more thorughly. Backstory: We have been using bind9 for a long time and overhauling it for more "usage". We have been using a "hidden master dns" logic with views for different usages. E.g. Client -> Slave DNS Server <- (Transfer zones from hidden

Re: XFR killed by security

2024-03-04 Thread Peter
On Mon, Mar 04, 2024 at 03:43:48PM +0100, Ondřej Surý wrote: ! > On 4. 3. 2024, at 14:55, Peter wrote: ! > ! > I don't find it really surprizing that XFR would contain "multiple ! > RRSIG entries". ! ! Unfortunately, this is obviously surprising to the vendor of the security device. This needs

Re: XFR killed by security

2024-03-04 Thread Ondřej Surý
> On 4. 3. 2024, at 14:55, Peter wrote: > > I don't find it really surprizing that XFR would contain "multiple > RRSIG entries". Unfortunately, this is obviously surprising to the vendor of the security device. This needs to be fixed there, not here. As for the CVE, you have the number that

Re: Problem upgrading to 9.18 - important feature being removed

2024-03-04 Thread Matthijs Mekking
On 3/1/24 12:23, G.W. Haywood wrote: Hi there, On Fri, 1 Mar 2024, Ond?ej Sur? wrote: On 26. 2. 2024, at 22:41, Al Whaley wrote: > A lot of pain and suffering in this world comes from people being > sure they have a 'better idea' and everybody needs to do whatever. > This feels a bit like

XFR killed by security

2024-03-04 Thread Peter
Hi folks, a few days ago I apparently lost the beneficence of my zone feeds, and XFR started to get into timeout. Looking at the usual culprits I then found this: DNS Response containing multiple DNSSEC RRSIG Entries (Algorithm 14) - Possible CVE-2023-50387 Activity [Classification:

Re: Update to 9.18 failed due to libuv

2024-03-04 Thread Anand Buddhdev
On 04/03/2024 14:06, Jiaming Zhang wrote: Then I should download the source, there's no devel package for this one in the repo. That's not necessary. Oracle Linux keeps many of the -devel packages in its "codeready_builder" repository, which is not enabled by default. As root, you need to

Re: Update to 9.18 failed due to libuv

2024-03-04 Thread Petr Špaček
On 04. 03. 24 14:06, Jiaming Zhang wrote: Then I should download the source, there's no devel package for this one in the repo. First question is if you need to compile yourself. Most people don't and can use precompiled packages. Have a look here:

Re: Update to 9.18 failed due to libuv

2024-03-04 Thread Jiaming Zhang
Then I should download the source, there's no devel package for this one in the repo. Met vriendelijke groet / Best regards, Jiaming Zhang Yixi Meta Tel: +31 (0)85 800 99 88 / +31 (0)6 12 98 08 07 Email: j.zh...@yiximeta.com Website: yiximeta.com De informatie in dit bericht is uitsluitend

Re: Update to 9.18 failed due to libuv

2024-03-04 Thread Anand Buddhdev
On 04/03/2024 13:56, Jiaming Zhang wrote: Hi Jiaming, Recently I was trying to upgrade bind from 9.16 to 9.18. However, running `./configure` return an error stating the `libuv` was not found. I have this library installed (version 1.41.1) via dnf, and can can find it using `rpm -ql` which

Update to 9.18 failed due to libuv

2024-03-04 Thread Jiaming Zhang
Dear community, Recently I was trying to upgrade bind from 9.16 to 9.18. However, running `./configure` return an error stating the `libuv` was not found. I have this library installed (version 1.41.1) via dnf, and can can find it using `rpm -ql` which shows the library is under `/usr/lib64`.