Re: I need to find statistics on a running server.

2023-01-12 Thread Howard, Christopher
You can use "rndc stats" to have bind dump a file with stats in it. This is how I get stats from our servers. I store the values every 2 minutes and create a dashboard from that. Stuff like total queries, total queries from ipv4 clients, total queries from ipv6 clients, total

Re: Openssl issue

2018-11-08 Thread Howard, Christopher
I had that exact same issue. I had to drop down to 9.11 to get it to work. -Christopher On Thu, 2018-11-08 at 18:12 +, Stewart, Larry C Sr CTR DISA JT (USA) wrote: I am running Solaris 10 and I downloaded bind 9.12.3 today and compiled it using the enable threads option, the prefix=/

Re: PRNG not seeded, service won't start

2018-09-20 Thread Howard, Christopher
ithout dnssec at all https://bugzilla.redhat.com/show_bug.cgi?id=1631515 Am 20.09.18 um 20:27 schrieb Howard, Christopher: I'm not the only one! Whew, I thought I was losing my mind. I have rngd and haveged running and there is large pool of entropy and I still can't get newer versions of bind to

Re: PRNG not seeded, service won't start

2018-09-20 Thread Howard, Christopher
18.09.18 um 15:44 schrieb Howard, Christopher: I found that link previously and tried it. It didn't complain about that not being a valid setting, but it didn't change the outcome. I'm beginning to believe I may just have to upgrade to CentOS 7. It needs to be done at some point anyway, I just

Re: PRNG not seeded, service won't start

2018-09-18 Thread Howard, Christopher
On Tue, 2018-09-18 at 09:33 +0100, Tony Finch wrote: Howard, Christopher mailto:christopher-how...@utc.edu>> wrote: Does any one have any ideas of what I'm missing or what I can do to resolve this (besides upgrading this box to CentOS 7)? Try setting `random-device "/dev/urandom";

Re: PRNG not seeded, service won't start

2018-09-18 Thread Howard, Christopher
IS LIKE TO BE LINKED TO RANDOM SEED GENERATION check # ls -l /dev/random /dev/urandom crw-r--r-- 1 root system 39, 0 Jan 22 10:48 /dev/random crw-r--r-- 1 root system 39, 1 Jan 22 10:48 /dev/urandom From: bind-users on behalf of Howard, Christopher Sent

Re: PRNG not seeded, service won't start

2018-09-18 Thread Howard, Christopher
I've tried this one. It doesn't work. There is plenty of entropy on the box, but it still won't start with the same error. -Christopher On Tue, 2018-09-18 at 01:22 +0200, Reindl Harald wrote: https://wiki.archlinux.org/index.php/Haveged Am 18.09.18 um 01:11 schrieb Howard, Christopher: I'm

PRNG not seeded, service won't start

2018-09-17 Thread Howard, Christopher
I'm attempting to upgrade from bind 9.10.4-P8 to 9.12.2-P1 and the service refuses to start. This is on a CentOS 6.10 machine. I ran into the same issue on CentOS 7 and was able to fix it by making sure that rngd is running before the named service starts. That same fix is not working for

Re: Share RPZ Zones between views

2015-02-20 Thread Howard, Christopher
There are three ways that I know of to do it. The first would be to load the same RPZ data in each view from the same source files. The second would be to zone transfer the RPZ data from one view to the others. The third would be to have completely separate RPZ files for each view that you

Re: Automatic flushing of the jnl files

2015-01-21 Thread Howard, Christopher
The journal files get flushed to the zone file periodically, but old transactions don't get removed so the journal file will continue to grow forever. If you're like me and on virtual machines with limited hard disk capacity, you can limit the journal file size with the max-journal-size

Re: Automatic flushing of the jnl files

2015-01-21 Thread Howard, Christopher
Oh, well that's good to know. :) -Christopher On 1/21/15, 12:18 PM, Chris Thompson c...@cam.ac.uk wrote: On Jan 21 2015, Howard, Christopher wrote: The journal files get flushed to the zone file periodically, but old transactions don't get removed so the journal file will continue to grow

RPZ seems to be hit and miss

2014-01-10 Thread Howard, Christopher Bryan
For reference: BIND 9.9.4-P1 CentOS 6.4 64bit arch We use RPZ to CNAME all of the “bad” domains over to a catch-all type server that can display a message to the user. Until recently it has been working perfectly (or we thought it was :-P ). The problem: RPZ appears to have stopped working

Re: RPZ seems to be hit and miss

2014-01-10 Thread Howard, Christopher Bryan
I¹ve just been using the RPZ built into BIND. I don¹t think I was aware of RPZ 2. -Christopher On 1/10/14, 3:23 PM, Alan Clegg a...@clegg.com wrote: On Jan 10, 2014, at 1:32 PM, Howard, Christopher Bryan christopher-how...@utc.edu wrote: For reference: BIND 9.9.4-P1 CentOS 6.4 64bit

Getting RPZ statistics

2012-12-07 Thread Howard, Christopher Bryan
I recently (as of 2 days ago) enabled RPZ on all of my name servers. I currently use rndc stats, perl, and SNMP to make certain global stats available to our network monitoring system to make charts (number of queries across all views and such). I'd like to do the same for just the RPZ zone