Re: Rear View RPZ: PTR records from local knowledge

2021-12-02 Thread Greg Rivers via bind-users
On Thursday, 2 December 2021 10:59:17 CST Fred Morris wrote: > And I have one small favor to ask: if you know of a Linux distribution > which ships BIND compiled with Dnstap support, please let me know! > The Linux packages that ISC provide[1] all have dnstap enabled. Also, the FreeBSD BIND port

Re: Ask for automated KSK roll with DS checking

2021-04-14 Thread Greg Rivers via bind-users
On Wednesday, 14 April 2021 15:00:38 CDT Bob Harold wrote: > Does anyone have an automated KSK roll process, that checks for the DS > record at the parent, that they can share? > > As far as I can tell, the automated signing in BIND will roll the KSK if I > set the timing in the policy file, but

Re: Dnssec-policy Purge-keys

2021-04-12 Thread Greg Rivers via bind-users
On Monday, 12 April 2021 01:18:11 CDT @lbutlr via bind-users wrote: > Doe anyone know the syntax for using purge-keys in 9.16.13? I've search and > all I can find is notes that it was added. I've tried a couple of things, but > I am shooting in the dark. I cannot redefine the "default" policy as

Re: queries for IPV6 records on IPV4-only machine.

2020-09-07 Thread Greg Rivers via bind-users
On Monday, 7 September 2020 17:46:47 CDT L. A. Walsh wrote: > > I am having some queries that I wouldn't think I'd have: > > I have a split-view ipv4-only named 9.11.2 server that is run with the > "-4" switch, yet I see attempted queries in my queries log. I have it > set as authoritative for