RE: SERVFAIL error during the evening

2024-06-25 Thread sami . rahal
Hello Thank you for your response. I have configured qname to disabled for now. Once the issue is resolved, I will set it to relaxed. I have provided a download link for the log files and a dig +trace test for more details on this issue, which I do not think is related to BIND or its configurat

Re: qname minimization: me too :(

2024-06-25 Thread tale via bind-users
On Tue, Jun 25, 2024 at 10:42 AM Stephane Bortzmeyer wrote: > > Jun 25 16:18:31 conr named[4725]: lame-servers: > >info: success resolving 'bar.foo.isc.org/A' after disabling > >qname minimization due to 'ncache nxdomain' > > I do not see how this is possible ("success resolvi

Re: qname minimization: me too :(

2024-06-25 Thread Peter
On Tue, Jun 25, 2024 at 04:41:54PM +0200, Stephane Bortzmeyer wrote: ! On Tue, Jun 25, 2024 at 04:22:40PM +0200, ! Peter wrote ! a message of 16 lines which said: ! ! > Jun 25 16:18:31 conr named[4725]: lame-servers: ! >info: success resolving 'bar.foo.isc.org/A' after disabling !

tryisc.com is not an isc.org domain

2024-06-25 Thread Victoria Risk
BIND-users, Someone is sending emails from tryisc.com, pretending to be from Internet Systems Corporation, and offering information about undisclosed BIND software vulnerabilities. These emails are NOT from ISC, the authors of BIND, and they are not authorized by ISC. If you feel you have rece

Re: qname minimization: me too :(

2024-06-25 Thread Stephane Bortzmeyer
On Tue, Jun 25, 2024 at 04:22:40PM +0200, Peter wrote a message of 16 lines which said: > Jun 25 16:18:31 conr named[4725]: lame-servers: >info: success resolving 'bar.foo.isc.org/A' after disabling >qname minimization due to 'ncache nxdomain' I do not see how this is pos

Re: qname minimization: me too :(

2024-06-25 Thread Peter
On Tue, Jun 25, 2024 at 07:00:51AM +1000, Mark Andrews wrote: ! It’s just a false positive when the result is NXDOMAIN. Because > people forget to put delegating NS records in parent zones when both > are served by the same server the lookups continue on NXDOMAIN. There > is an issue to address thi

Re: can I provide invalid HTTPS values for testing?

2024-06-25 Thread Stephane Bortzmeyer
On Thu, Jun 20, 2024 at 02:29:13PM +0100, Stephen Farrell wrote a message of 100 lines which said: > Actually, it may well be that bind allows me sufficient leeway to do > most of the tests I want, so this is just to check that there's no > imminent plan to have bind disallow the kind of rubbi

Re: qname minimization: me too :(

2024-06-25 Thread Stephane Bortzmeyer
On Mon, Jun 24, 2024 at 10:32:37PM +0200, Peter wrote a message of 40 lines which said: > In other words: why do You guys no longer talk to each other? We do but talking is one thing, convincing is another one, and making people act is a third :-( -- Visit https://lists.isc.org/mailman/listi