RE: dnssec-delegation seems to be broken from .gov to bls.gov

2023-12-07 Thread Bhangui, Sandeep - BLS CTR via bind-users
3 10:19 PM To: Bhangui, Sandeep - BLS CTR Cc: Nick Tait ; bind-users@lists.isc.org Subject: Re: dnssec-delegation seems to be broken from .gov to bls.gov CAUTION: This email originated from outside of BLS. DO NOT click (select) links or open attachments unless you recognize the sender and know t

RE: dnssec-delegation seems to be broken from .gov to bls.gov

2023-12-06 Thread Bhangui, Sandeep - BLS CTR via bind-users
The problem has been resolved. The automatic KSK rollover on the dotgov.gov did not happen properly and once we manually updated the DS record with the correct KSK keytags and keys things were fixed. All is good now. Now to see if we can find out as to why the automatic KSK failover on the

dnssec-delegation seems to be broken from .gov to bls.gov

2023-12-06 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hi It seems the DNSSEC delegation is broken from ".gov" to bls.gov domain and due to which the records for bls.gov are considered as bogus and we are having issues at our site. It looks like we were in the process of KSK rollover and that may have caused the issue as things were fine till

RE: Facing issues while resolving only one record

2023-08-30 Thread Bhangui, Sandeep - BLS CTR via bind-users
This seems to be an issue with the domain incometax.gov.in. DNSSEC looks like is broken for that domain. NS servers at our location also cannot resolve that directly but if I forward that query to any ISP provider NS which are more lax it resolves just fine. Thanks Sandeep From: bind-users

Intermittent issues resolving "labor.upload.akamai.com"

2023-02-02 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hi We are running ISC DNS Bind Version 9.18.10 ( will soon be moving to 9.18.11) on our Linux Servers. DNS resolution in general seems to work just fine as expected. It seems we have intermittent issues resolving "labor.upload.akamai.com" and then some scripts fail. It is clear that the

RE: Issue with dns resolution for www.ssa.gov

2022-09-01 Thread Bhangui, Sandeep - BLS CTR via bind-users
If I go to my personal computer or my personal phone ( not on VPN connected to BLS network or using BLS resources) I can get to the site www.ssa.gov which I would mean to believe that it is able to resolve www.ssa.gov. Does that mean the dns resolution for www.ssa.gov is not broken globally as

RE: Issue with dns resolution for www.ssa.gov

2022-09-01 Thread Bhangui, Sandeep - BLS CTR via bind-users
Thanks Bjorn. This indeed looks like a mess up from SSA side. Sandeep -Original Message- From: bind-users On Behalf Of Bjørn Mork Sent: Thursday, September 1, 2022 5:26 PM To: BIND users Subject: Re: Issue with dns resolution for www.ssa.gov CAUTION: This email originated from

RE: Issue with dns resolution for www.ssa.gov

2022-09-01 Thread Bhangui, Sandeep - BLS CTR via bind-users
ve DNS? If so, there might be a ruleset that is causing problems. If not, and I have not checked, but is DNSSEC for SSA working correctly? John Sent from Nine<http://www.9folders.com/> From: "Bhangui, Sandeep - BLS CTR via bind-users" mailto:bi

Issue with dns resolution for www.ssa.gov

2022-09-01 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hi We are running Bind Version 9.16.31 on RHEL 7.X Server and things are working fine in general. Having issue with DNS resolution for www.ssa.gov no other DNS issues reported at this time. Our DNS server cannot seem to resolve www.ssa.gov using

Question about linking jemalloc with Bind 9.18.x when doing the compile.

2022-08-02 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hello all We are getting ready to test Bind 9.18.x. Currently we are running the latest version of 9.16.x branch. We have downloaded and successfully installed the jemalloc module on the Server ( RHEL 7.9 OS) and getting ready to compile the latest version of Bind 9.18.x. Can someone please

RE: Errors loading Named ( 9.16.26) on RHEL 7.9

2022-02-24 Thread Bhangui, Sandeep - BLS CTR via bind-users
Thanks Ondrej….will check on that. From: Ondřej Surý Sent: Thursday, February 24, 2022 1:29 PM To: Bhangui, Sandeep - BLS CTR Cc: bind-users@lists.isc.org Subject: Re: Errors loading Named ( 9.16.26) on RHEL 7.9 CAUTION: This email originated from outside of BLS. DO NOT click links or open

Errors loading Named ( 9.16.26) on RHEL 7.9

2022-02-24 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hello Successfully compiled 9.16.26 on RHEL 7.9 server. The compile server is a different one but running the exact same OS and kernel as the DNS server on which, the created RPM packaged was installed. Installed the rpm package and tried to start named on a DNS server it does not load and

RE: Compile errors for Bind 9.16.1 on RHEL7.x and RHEL 6.X [ Issue resolved on RHEL 7.X ]

2020-05-19 Thread Bhangui, Sandeep - BLS CTR via bind-users
for me. Now moving to address the issue on RHEL 6.X. Thanks Sandeep -Original Message- From: Anand Buddhdev [mailto:ana...@ripe.net] Sent: Tuesday, March 24, 2020 4:04 PM To: Bhangui, Sandeep - BLS CTR ; bind-users@lists.isc.org Subject: Re: Compile errors for Bind 9.16.1 on RHEL7

RE: Compile errors for Bind 9.16.1 on RHEL7.x and RHEL 6.X

2020-03-24 Thread Bhangui, Sandeep - BLS CTR via bind-users
Buddhdev [mailto:ana...@ripe.net] Sent: Tuesday, March 24, 2020 4:04 PM To: Bhangui, Sandeep - BLS CTR ; bind-users@lists.isc.org Subject: Re: Compile errors for Bind 9.16.1 on RHEL7.x and RHEL 6.X On 24/03/2020 20:44, Bhangui, Sandeep - BLS CTR via bind-users wrote: Hi Sandeep, [snip] > As

Compile errors for Bind 9.16.1 on RHEL7.x and RHEL 6.X

2020-03-24 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hello Trying to compile Bind 9.16.1 on RHEL 7.X and RHEL 6.X and getting compile errors hopefully someone can point me in the right direction. The download for the source code from the ISC site was done sometimes late last week. Configuration. RHEL 7.X and RHEL 6.X running on HP-BLADE

Checking whether some configure options to compile are not longer available for Bind 9.14.1

2019-04-29 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hi Is IPV6 by default enabled in DNS bind Ver 9.14.1 ? I am trying to compile the 9.14.1 source code on Sparc Solaris 10 and I see that following options are not recognizes any more when used with configure. " -enable-ipv6" and "-enable-threads" Both these options worked with source

RE: BIND 9.12.4-P1 build fails on Solaris 10

2019-04-26 Thread Bhangui, Sandeep - BLS CTR via bind-users
Solaris 10, Sparc based. Forgot to addthat -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Bhangui, Sandeep - BLS CTR via bind-users Sent: Friday, April 26, 2019 1:31 PM To: bind-us...@isc.org Subject: BIND 9.12.4-P1 build fails

BIND 9.12.4-P1 build fails on Solaris 10

2019-04-26 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hi Seen exact similar thread from last few days for Bind 9.11.6-P1 on Solaris. I get a make error when I try to compile Bind 9.12.4-P1 on Solaris 10. Using same configure file I can compile Bind 9.12.4 successfully on Solaris 10. This is the make error that I get ndefined

RE: Make install error compiling Bind 9.12.4 on RHEL 6.X [ Resolved ]

2019-04-03 Thread Bhangui, Sandeep - BLS CTR via bind-users
My badI had an typo when I tried."--without-python" option did the trick. Was able to compile it successfully. Thanks a lot Sandeep -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Bhangui, Sandeep - BLS CTR via bind-

RE: Make install error compiling Bind 9.12.4 on RHEL 6.X

2019-04-03 Thread Bhangui, Sandeep - BLS CTR via bind-users
Thanks Tried what was suggested and got the same exact error. Sandeep -Original Message- From: Anand Buddhdev [mailto:ana...@ripe.net] Sent: Wednesday, April 3, 2019 8:29 AM To: Bhangui, Sandeep - BLS CTR ; bind-users@lists.isc.org Subject: Re: Make install error compiling Bind 9.12.4

Make install error compiling Bind 9.12.4 on RHEL 6.X

2019-04-03 Thread Bhangui, Sandeep - BLS CTR via bind-users
Hello Trying to compile Bind 9.12.4 on RHEL 6.X running on physical HP blade server. Looks like I am missing something trivial but have looked at things couple of times but cannot figure it out. Did a fresh download of the source code but got the same error. Here are the detailsabout the

Question regarding different responses that I am getting for a lookup.

2018-08-06 Thread Bhangui, Sandeep - BLS CTR
Hello Not sure why I am getting different responses when I perform a dig on sso.dol.gov. Dig is performed from a server which is capable of querying the root servers….what could be the issue. Both dig commands below are run from the same server which acts as DNS server capable of performing

dnssec-validation [ ddig_sigchase option ]

2016-10-12 Thread Bhangui, Sandeep - BLS CTR
Hi Running ISC Bind 9.10.4-P2 will be soon moving to 9.10.4-P3. Was trying to run dig commands to do some dnssec validation and got the following message " "Invalid option: +sigchase" When checked found that the dig utility has to be compiled with "-DDIG_SIGCHASE" option for that apparently

RE: Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Bhangui, Sandeep - BLS CTR
From: bind-users <bind-users-boun...@lists.isc.org<mailto:bind-users-boun...@lists.isc.org>> on behalf of Bhangui, Sandeep - BLS CTR <bhangui.sand...@bls.gov<mailto:bhangui.sand...@bls.gov>> Sent: Saturday, September 17, 2016 6:43 PM To: Lyle;

RE: Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Bhangui, Sandeep - BLS CTR
for that IP in our DNS for bls.gov zone. Sandeep -Original Message- From: John Miller [mailto:johnm...@brandeis.edu] Sent: Saturday, September 17, 2016 12:14 PM To: Bhangui, Sandeep - BLS CTR <bhangui.sand...@bls.gov<mailto:bhangui.sand...@bls.gov>> Cc: bind-users@lists.isc.org<mai

RE: Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Bhangui, Sandeep - BLS CTR
redirected to a website which does not belong to the organization. On 09/17/16 10:51, Bhangui, Sandeep - BLS CTR wrote: > Hi > > Not exactly sure whether this is a DNS issue but hoping someone here on this > forum can provide some advice/suggestion as I am trying to figure out what

RE: Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Bhangui, Sandeep - BLS CTR
-Original Message- From: Mukund Sivaraman [mailto:m...@isc.org] Sent: Saturday, September 17, 2016 12:01 PM To: Bhangui, Sandeep - BLS CTR <bhangui.sand...@bls.gov> Cc: 'bind-users@lists.isc.org' <bind-us...@isc.org> Subject: Re: Organization IP address is getting redirected

RE: Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Bhangui, Sandeep - BLS CTR
Message- From: John Miller [mailto:johnm...@brandeis.edu] Sent: Saturday, September 17, 2016 12:14 PM To: Bhangui, Sandeep - BLS CTR <bhangui.sand...@bls.gov> Cc: bind-users@lists.isc.org <bind-us...@isc.org> Subject: Re: Organization IP address is getting redirected to a website

Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Bhangui, Sandeep - BLS CTR
Hi Not exactly sure whether this is a DNS issue but hoping someone here on this forum can provide some advice/suggestion as I am trying to figure out what is going on. Our organization BLS owns ( registered with the registrar ) the network address 146.142.xxx.xxx. But if someone from the

RE: Question about managed-keys-zone

2016-04-08 Thread Bhangui, Sandeep - BLS CTR
g"; }; */ }; And yes the directory "/usr/local/named-jail9.10.3P4/var/adm/" exists and the files are there....owned by named:named. I know it using rndc is a good practice but is there an option to specify in named.conf to disable it? -Original Message- From: Jeremy C. Re

Question about managed-keys-zone

2016-04-08 Thread Bhangui, Sandeep - BLS CTR
Hi I am trying to do a simple proof of concept test for DNSSEC signing for our organization. We are an agency under DOL and the plan is to use a DNSSECsigner appliance hosted at DOL to sign the zones so that we do not have to do DNSSEC key management. So basically the configuration is from

RE: Question about name resolution.

2015-10-27 Thread Bhangui, Sandeep - BLS CTR
Thank you. Yes indeed the dns configuration looks like is broken. Some of the servers have correct information looks like. But the ones that I am querying have incorrect information. Thanks Sandeep -Original Message- From: bind-users-boun...@lists.isc.org

Question about name resolution.

2015-10-26 Thread Bhangui, Sandeep - BLS CTR
Hello Had the following question about name resolution of the following two linksone of the link resolves fine from our Internal network but the second one does not resolve at all it comes back stating host not resolvable. At this point I am not clear whether this is an issue with our

Question on --with-libxml2 option while compiling on Sparc Solaris 10 and the Configuration Summary output.

2015-08-06 Thread Bhangui, Sandeep - BLS CTR
Hello This is what I get in the summary after I run configure on BIND 9.10.2P3 source code when I use the -with-libxml2 option for compiling . As we can see the summary says that the option has been enabled. Configuration summary:

Compile Error for Bind 9.9.7P2 on Sparc based Solaris 10

2015-07-29 Thread Bhangui, Sandeep - BLS CTR
Hi Just found that ISC has released Bind 9.9.7P2 so downloaded that since I had issues yesterday compiling P1 on Sparc based Solaris 10 ( M3000) Get the same error when I run the make with 9.9.7P2 on sparc based Solaris 10 (M3000) . Looks like configure runs ok. Have done this successfully

Compile Error for Bind 9.9.7P1 on Sparc based Solaris 10

2015-07-28 Thread Bhangui, Sandeep - BLS CTR
Hi Just downloaded the source code for Bind 9.9.7P1 and was trying to compile on Sparc based Solaris 10but for some reason get the following errors when I run make. Have done this multiple times on Sparc Based Solaris 10 with the previous versions of Bind. Was wondering whether I am