Re: Sanity Check

2023-02-17 Thread Ed Daniel via bind-users
On 17/02/2023 16:06, Bob McDonald wrote: I'm implementing a caching resolver under FreeBSD 13.1 running on a RaspberryPI. Bind 9.18.11 My named.conf is below. My question is do these look like workable options? I include logging and a statistics channel in my preliminary implementations for

Re: I need to find statistics on a running server.

2023-01-13 Thread Ed Daniel via bind-users
On 12/01/2023 18:20, King, Harold Clyde (Hal) via bind-users wrote: I need to find some answers like queries per second.  Any fast ideas folks? -- Hal King  - h...@utk.edu Systems Administrator Office of Information Technology Shared Services The University of Tennessee 103c5 Kingston Pike

Re: Seeing lots of DNS issues on OpenWRT

2022-09-23 Thread Ed Daniel
As per your previous email 17:54 where you share Sparklight response, Quad9 uses strict DNS checking iirc, you should add another couple of cloud DNS resolvers like 1.1.1.1 and 8.8.8.8 that fall back to resolve when DNSSEC is broken at destination. forwarders { // Sparklight

Re: Stopping ddos

2022-08-04 Thread Ed Daniel
On 02/08/2022 22:04, Saleck wrote: Dne úterý 2. srpna 2022 22:02:58 CEST, Robert Moskowitz napsal(a): Recently I have been having problems with my server not responding to my requests. I thought it was all sorts of issues, but I finally looked at the logs and: Aug 2 15:47:19 onlo

Re: Fuzzing Bind

2021-08-05 Thread Ed Daniel
On 05/08/2021 17:57, Siva Kakarla wrote: > Thanks, Daniel, that is also a great idea. I am trying to see if I can > get the standard fuzzers like AFL to work for my use case, but if I > can't then I will try the idea you suggested.  This also rather cool:

Re: Fuzzing Bind

2021-08-05 Thread Ed Daniel
On 05/08/2021 13:37, Siva Kakarla wrote: > Hello Everyone, > > I am trying to understand and set up a fuzzer for the Bind DNS > implementation. My current goal is to fuzz the authoritative server with > queries.  > > I have looked around and came across different fuzzing engines, but I > have

Re: DoH Support in bind 9.17?

2021-02-23 Thread Ed Daniel
Hi Carlos, While you are waiting for 'dig' you might like to try 'dog': https://github.com/ogham/dog HTH, Ed On 24/02/2021 06:14, Carlos Kamtha wrote: > Hello Evan > > Looks like it’s ready with version 9.17.10.  I’ll give that a shot. > > Thanks for the reply  > > > > -C > >

Re: Bind9 Container Error

2021-01-14 Thread Ed Daniel
On 08/01/2021 19:13, Juarez Souza Junior wrote: > 08-Jan-2021 19:08:54.225 loading configuration from '/etc/bind/named.conf' > 08-Jan-2021 19:08:54.225 directory '/var/cache/bind' is not writable > 08-Jan-2021 19:08:54.225 /etc/bind/named.conf.options:7: parsing failed: > permission denied >

Re: How to generate ZSK key with one year valid

2020-11-13 Thread Ed Daniel
On 13/11/2020 13:08, rams wrote: > Hi, > Can anyone help me how to generate ZSK key with one year validity? > When I am trying , it is default 30 days validity but i want to make ZSK > key validity 1 year. Is it possible in bind? > > Regards, > Ramesh Hi Ramesh, Are you using the CLI-based tool

Re: VS: DNS Misconfiguration on- http://cyberia.net.sa/

2020-06-08 Thread Ed Daniel
I'm not so sure, the written English is poor and can be misinterpreted. The sec focus link is crafted peculiarly but it's not a hustle in and of itself, it's sharing the problem description after all. I think given the misconfiguration *has* gone unnoticed and potentially could be of trouble 'in

Re: Unable to completely transfer root zone

2020-02-16 Thread Ed Daniel
Thank you for replying and sharing, Warren. I apologise for my misunderstanding of the intent of your words. On 16/02/2020 03:08, Warren Kumari wrote: > > > On Fri, Feb 14, 2020 at 10:49 PM Ed Daniel <mailto:esdan...@esdaniel.com>> wrote: > > On 11/02/2020 15

Re: Unable to completely transfer root zone

2020-02-14 Thread Ed Daniel
On 11/02/2020 15:28, Warren Kumari wrote: > On Tue, Feb 11, 2020 at 3:12 AM Stephane Bortzmeyer wrote: >> >> On Mon, Feb 10, 2020 at 02:32:55PM -0500, >> Warren Kumari wrote >> a message of 70 lines which said: >> >>> Also, can you try: >>> dig +tcp . axfr @192.0.32.132 >>> dig +tcp . axfr

Re: Building Geo Map using Queries

2018-06-09 Thread Ed Daniel
On 09/06/18 15:33, Blason R wrote: > Hi There, > > I have DNS RPZ server runnnig and have configured logstatsh on the same > to parse the DNS RPZ logs.  > > My requirement is I need to build Geo Map basis on the DNS responses; > Any idea how can that be achieved? Or need to know the requests