Re: Update returns FORMERR: ran out of space

In message 20100224091831.ga3...@nic.fr, Stephane Bortzmeyer writes: On Wed, Feb 24, 2010 at 11:32:35AM +1100, Mark Andrews ma...@isc.org wrote a message of 35 lines which said: Turn the debugging up to 3. With 'severity debug 30', all I get is: 24-Feb-2010 10:17:01.047 update

Re: Zone transfers from slaves to slaves?

is in the case where you have a master server that is not visible to all slaves -- slaves must be able to let their peers know that they themselves have been updated. And notify master-only; in later versions of named. AlanC -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia

Re: check-names vs. acl

the difference. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: COM/NET/EDU nameserver changes

;; Query time: 203 msec ;; SERVER: 192.41.162.30#53(192.41.162.30) ;; WHEN: Tue Mar 2 10:08:41 2010 ;; MSG SIZE rcvd: 164 Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: m...@isc.org

Re: Shortcut the lookup algorithm *other* than via 'forward' ?

-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

BIND 9.6.2 is now available.

BIND 9.6.2 is now available. BIND 9.6.2 is a maintenance release for BIND 9.6. BIND 9.6.2 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.6.2/bind-9.6.2.tar.gz The PGP signature of the distribution is at

Re: SERVFAIL for some domains on some servers

(51) 08:57:01.261648 83.206.67.133.53 211.30.172.21.60883: 36854*- 1/2/3 A[|domain] Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list

Re: Loopback alias

on any of our = machines before. Also, I couldn't find many references on google search = for loopback alias addresses 10.53.0.1 through 10.53.0.5. Thank you for any insight! Julian -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: reverse lookup zone different from /24

DNAME. Note you will want slave the parent zone as well so the mapping information is always available locally. $ORIGIN 10.10.in-addr.arpa. 0 DNAME 0.elsewhere. 1 DNAME 1.elsewhere. 2 DNAME 2.elsewhere. 1.0.elsewhere. PTR name. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: strange behaviour of resolving nameserver

Torsten ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: strange behaviour of resolving nameserver

In message 20100309154017.4801c...@the-damian.de, Torsten writes: Am Wed, 10 Mar 2010 00:44:46 +1100 schrieb Mark Andrews ma...@isc.org: In message 20100309142153.016c7...@the-damian.de, Torsten writes: Hi, I'm a bit clueless about what's happening here exactly. I have

Re: dnsquery for Solaris

@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

Re: dnsquery for Solaris

Mark Andrews writes: In message 8be7886dd93c4870bd2a8a0d00259...@internal.corp.ds, ic.nssip wr it es: What I'm trying to do is to find a way to get the TTL left for a cached record. I usually use dnsquery like this (12m23s and 9m53s is what interest me): # dnsquery -n 8.8.8.8 -t

Re: return address for failed DNSSEC validation

and DNSKEY records. To find the failure you ask the failing server for the records in the trust chain until you find the break point. record - dnskey [ [ - ds/dlv - dnskey ] . ] - trusted-key. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley

Re: return address for failed DNSSEC validation

instead of bloating DNS. Upon return of any error by DNS (or any other subsystem) it can show them a useful, platform-dependent message how to fix it. Mark Andrews wrote: Additionally you can detect a DNSSEC failure by asking queries with and without the CD bit set. Most

Re: return address for failed DNSSEC validation

In message 4b98fd2d.5080...@restena.lu, Gilles Massen writes: Mark Andrews wrote: Obviously there are parallels to NXDOMAIN rewriting. However, the major difference I see is that NXDOMAIN is a clear message, known by the OSs and applications, that has basically one meaning. SERVFAIL

Reminder about DLV, BIND 9.6.0 and BIND 9.6.0-P1

-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Split View DNS

Yes and no. Yes for static masters. No for everything else, i.e. slaves, dynamic masters, stubs. Mark - Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users

Re: rndc

, but using default = configuration file (/etc/rndc.conf) # Is any chance I can figure out why rndc flush is not purging the cache = and eventually fix the WARNING message? Thank you, Julian -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: strange behaviour of resolving nameserver

with a servfail and most of the time not. Ciao Torsten SERVFAIL is how nameservers report general error conditions. Without complete details all we would be doing is guessing. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: What is the correct behavior with A and AAAA records in different domains?

___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind

Re: loading from master file failed: unknown class/type

ipv4:67.52.187.21 ipv4:67.= 52.187.22 ~all mailgate.netsecdesign.com. IN TXT v=3Dspf1 a -all portus.netsecdesign.com.IN TXT v=3Dspf1 a -all any help would be appreciated. Thanks in advance!! -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: DNSSEC and child zones on same authoritative NS. Expert help needed.

this mess (and my confusion about it) go away. The answer to that is depends on *why* you have these child zones. But it would be great to hear from a BIND expert about this. And please correct my probable confusion and incorrect use of DNSSEC jargon. Best regards, Gary -- Mark Andrews, ISC 1

Re: Dealing with unexpected RCODE (SERVFAIL)

so good. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: DNSSEC Validating Resolver and Views

://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: Dealing with unexpected RCODE (SERVFAIL)

: the microsoft's nameservers are providing only A and TXT records for hotmeil.com. They return . IN SOA (NOERROR) for other questions. This is apparently invalid and causes the SERVFAIL. seems it's time to blame microsoft. On 16.03.10 23:43, Mark Andrews wrote: And the lack

Re: Problem resolving domains with valid GLUE records but misconfigured NS records

___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: DNSSEC Validating Resolver and Views

In message 20100316234500.ga99...@rwpc12.mby.riverwillow.net.au, John Marshal l writes: On Wed, 17 Mar 2010, 09:03 +1100, Mark Andrews wrote: In message slrnhpummo.2ter.j...@rwpc12.mby.riverwillow.net.au, John Marsh all writes: I don't understand this. If the client needs an answer

Re: DNSSEC Validating Resolver and Views

Mark Andrews writes: In message 20100316234500.ga99...@rwpc12.mby.riverwillow.net.au, John Marsh al l writes: On Wed, 17 Mar 2010, 09:03 +1100, Mark Andrews wrote: In message slrnhpummo.2ter.j...@rwpc12.mby.riverwillow.net.au, John Mar sh all writes: I don't understand

BIND 9.4-ESV-R1 is now available.

released --- 2172. [bug] query_addsoa() was being called with a non zone db. [RT #16834] --- 9.4.0 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

BIND 9.6-ESV is now available.

/radix.h. [RT #18534] --- 9.6.0 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

BIND 9.7.0-P1 is now available.

/bind9/9.7.0-P1/BIND9.7.0-P1.debug.zip.sha512.asc Changes since 9.7.0: --- 9.7.0-P1 released --- 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] --- 9.7.0 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61

BIND 9.6.2-P1 is now available.

/bind9/9.6.2-P1/BIND9.6.2-P1.debug.zip.sha512.asc Changes since 9.6.2: --- 9.6.2-P1 released --- 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] --- 9.6.2 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61

Re: Confused about 9.6.2-P1 and 9.6-ESV

Improve the effectiveness of your Internet presence with a domain name makeover!http://SupersetSolutions.com/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1

Re: Confused about 9.6.2-P1 and 9.6-ESV

In message 4ba0595b.8090...@dougbarton.us, Doug Barton writes: On 03/16/10 20:57, Mark Andrews wrote: In message 4ba04e63.8090...@dougbarton.us, Doug Barton writes: I noticed that the patchfix releases of BIND came out today, so congratulations on that. :) However I was confused

Re: DNSSEC Validating Resolver and Views

to think about this. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: T_ANY

HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS. MODERATE OR GOOD. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: BIND doesn't run on XP

XP has the relevent functions. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: TSIG fails intermittently but dig works

it) Any help would be appreciated. Greg Kuechle Ensure that you have installed all patches from Sun. This sounds like a bug in cool threads. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Comprehension question to DDNS

request, so i think he will not be asked??? Help!!! :-) Regards Markus ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia

Re: Reasonable setup of a dnssec aware recursive resolver

-Disposition: inline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===2749469770847787432==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61

Re: MX records for new additional domain on existing authoritative name servers

___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind

Re: Same source port queries dropped by ServerIron load balancer

In message 4bb4ed5a.20...@chrysler.com, Kevin Darcy writes: On 4/1/2010 12:37 AM, Mark Andrews wrote: In message4bb1c63b.30...@ies.etisalat.ae, Abdulla Bushlaibi writes: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple

Re: Same source port queries dropped by ServerIron load balancer

-in feature. - Kevin -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Bind Clustering

. -- Gordon A. Lang ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: CNAME Issue - Whether to use CNAME-data or Response-Flag

not be serving aaisp.net.uk. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: CNAME Issue - Whether to use CNAME-data or Response-Flag

In message barmar-a566c3.21402509042...@news.eternal-september.org, Barry Mar golin writes: In article mailman.1106.1270851311.21153.bind-us...@lists.isc.org, Mark Andrews ma...@isc.org wrote: I would be asking operators of primary-dns.co.uk why they are actively cache poisioning

Re: rndc usage question

with such a view name. We tried single/double quotes, backslashes, etc. What the syntax to supply such a view name to rndc? Thanks Sergiu It's not supported. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: rndc usage question

, my_default_view, MyDefaultView. -=D3=CA=BC=FE=D4=AD=BC=FE- =B7=A2=BC=FE=C8=CB: = bind-users-bounces+pengyh=3dnsbeta.i...@lists.isc.org [mailto:bind-users-bounces+pengyh=3dnsbeta.i...@lists.isc.org] = =B4=FA=B1=ED Mark Andrews =B7=A2=CB=CD=CA=B1=BC=E4: 2010=C4=EA4=D4=C213=C8=D5 9:09 =CA

Re: Question about message your system is lacking dev/random (or equivalent)

your system is lacking /dev/random (or equivalent) Is this a problem with dnssec on my DNS server? Linh Khuu Network Security Specialist MicroTech ESS Contract Office: 410-966-0798 Pager: 410-232-2350 Email: linh.k...@ssa.gov =20 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: Intermittent failures resolving .org domains in BIND 9.7.0 with DLV enabled

host with DLV enabled they can try this query on? -roy ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: dig +trace

in the cache for say 5minutes and then vanishes. any idea? ~LA There are lots of broken servers out there. Without knowing the actual query anything would be pure speculation. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Unexpected issues with nslookup command

offer recursion then some of the answers returned may be mis-interpreted by the calling code. The warning is telling you that you have a configuration error. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Unexpected issues with nslookup command

recursion by default. When a piece of software is complaining about something it is usually a pretty good bet that it is right and you are wrong. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET

Re: Unexpected issues with nslookup command

was choosen. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: shut down: operation canceled on zone transfer

-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: shut down: operation canceled on zone transfer

In message 4bcbbd47.70...@argoinf.com, Peter Skipworth writes: Mark Andrews wrote: In message 4bcbb36f.6040...@argoinf.com, Peter Skipworth writes: Hello, I have a primary and secondary nameserver which host a number of domains. Recently, the secondary has started failing to sync

Re: How does load balancing operate on 1 forwarders

(secs). srtt (smoothed round trip time) is use to select the server (usecs). Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users

Re: Question about message your system is lacking dev/random (or equivalent)

. Named only needs /dev/random to generate new signature when DSA or NSEC3DSA is being used to sign dynamic zones. Named does NOT need /dev/random to validate responses. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: Views on differrent interfaces

match-destination. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: CNAME Issue - Whether to use CNAME-data or Response-Flag

is not desired. Then misconfigurations like this will not be visible. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users

Re: error (network unreachable)

and named moves onto the next server. Alternatively you can disable the use of IPv6 with named -4. Mark Thank you, Julian -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: dig +trace to find all the forwarders?

to look at its configuration? You need administrative access to see the overides to the normal resolution process. Mark Thanks in advance. -Josh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: dig +trace to find all the forwarders?

limitation of dig? -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNS format error

error from 204.77.28.20#53 resolving = www25.victoriassecret.com/ for client 216.108.17.179#64803: invalid = response -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Query - No Response

Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: dnssec-keygen dnssec-signzone smart signing vs time zones

.+005+59421.key:; Created: Thu Apr 29 11:10:24 2010 Kl.+005+59421.private:Created: 20100429011024 % -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users

Re: Query - No Response

a clean load of the zone. In either case you should move on to the next server. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind

Re: Query - No Response

bounced trying to report this and I eventually raised in on NANOG where a number of Verison employees have taken on the task of getting this and the other errors found corrected. Mark. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET

Re: INSIST failed in memcluster.c with message memcluster.c:436: INSIST(stats[size].gets != 0U) failed.

is past end-of-life and is no longer supported by ISC. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

Re: DNS + DHCP cooperation

--===4578086693570123285==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Two separate replies for one query to some domains

suspect your extra packet problem is closer to home. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

Re: Side-effects of edns-udp-size 512

-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list

Re: Preparing for upcoming DNSSEC changes on 5/5

In message 4bdf4b79.4050...@ou.edu, Peter Laws writes: On 05/03/10 16:19, Mark Andrews wrote: The test is a rough guide to the maximum packet size supported by the path. So what would be the point of using edns-udp-size to something even smaller? None I can see ... What am I missing

Re: Preparing for upcoming DNSSEC changes on 5/5

If you do a packet dump you will see lots of different respones to the query all coming in at the sames time. The first one to re-assemble wins. This may not be the biggest. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET

Re: our isp not supports EDNS?

just mean that the nameserver itself doesn't support EDNS. Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: Create DS and DLV records

will produce them when you sign your zone. dnssec-dsfromkey will produce produce DS records. You can convert between a DS and DLV record using a ordinary text editor. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: ftp.isc.org is down

There was a fibre cut in the Bay area. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org

Re: Master server offline

stuff at the moment (small company). Is that allowed? Dave Normally you would just turn a slave into a master and have the other slaves transfer from it if there is going to be a extended delay. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871

Re: ftp.isc.org is down

In message alpine.lfd.1.10.1005070956370.6...@newtla.xelerance.com, Paul Wout ers writes: On Fri, 7 May 2010, Mark Andrews wrote: Subject: Re: ftp.isc.org is down There was a fibre cut in the Bay area. Out of curiosity, how did this affect the DLV? (Not that I noticed any outage

Re: Dig 9.7 DNSSEC output

and it is displayed like this: ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 And no it would not be useful to display it with the other additional section records. You need to be able to pull apart the TTL. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: Splitting off a sub-zone atomically

. On master, remove *.sub.example.com RRs from example.com ...but I was just curious. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: Behavior of delegation records for dnssec

and delegated records . Please clarify me on this. Thanks, Ramesh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

Re: Out-of-zone data mistaken for glue?

hidden beneath a zone cut. You can also build up the contents beneath a zone cut then remove the delegation. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: rndc flush(more-than-one)name

. This can be time consuming. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: add a record into signed zone

, Ramesh Named will take care of it. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org

Re: Slave Server Notify

-May-2010 10:41:09.852 general: debug 1: cancel_refresh: zone domain.com/IN : enter What transfer-source{-v6} do you have set? ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC

BIND 9.4-ESV-R2 is now available.

. [RT #16834] --- 9.4.0 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

BIND 9.5.2-P4 is now available.

the additional section or not and only return it if validates as secure. [RT #20438] --- 9.5.2 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

BIND 9.7.0-P2 is now available.

--- 2876. [bug] Named could return SERVFAIL for negative responses from unsigned zones. [RT #21131] --- 9.7.0-P1 released --- 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] --- 9.7.0 released --- -- Mark Andrews, ISC

BIND 9.6-ESV-R1 is now available.

SERVFAIL for negative responses from unsigned zones. [RT #21131] --- 9.6-ESV released --- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

BIND 9.6.2-P2 is now available.

--- 2876. [bug] Named could return SERVFAIL for negative responses from unsigned zones. [RT #21131] --- 9.6.2-P1 released --- 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] --- 9.6.2 released --- -- Mark Andrews, ISC

Re: dnssec dlv

/1lXhbJId6j0Y2QZVXvCzVGuA 58Q= ;; Query time: 1 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Fri May 21 11:45:00 2010 ;; MSG SIZE rcvd: 936 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Dnssec zone signing problem

.) There are lots of ways to use dnssec-signzone to sign a zone such that you can't validate it. You can also disable the checks is you need to take the zone though such a state. It's on by default so it becomes hard to shoot yourself in the foot. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas

Re: Dnssec zone signing problem

a bug report with bind9-b...@isc.org and send the files to see if we can reproduce it. Under options in named.conf named.conf will have no effect on this. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: dnssec dlv

will still need to use DLV for the parts of the tree which are not connected to the root. The root's trust anchors will be added to DLV so there is no need to rush to do this. As far as DLV is concerned the root is just another zone. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

BIND 9.7.1b1 is now available

the docbook source as it produced bad nroff. [RT #21007] 2850. [bug] If isc_heap_insert() failed due to memory shortage the heap would have corrupted entries. [RT #20951] --- 9.7.0 released --- -- Mark Andrews, ISC 1 Seymour St., Dundas

Re: Another Question about SERVFAIL

: bsfin...@anl.gov Argonne, IL 60439-4828 IBMMAIL: I1004994 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia

Re: Automated DNSSEC (command line)

have been adding and deleting hosts for years using UPDATE. Thanks, Greetings and nice Day/Evening Michelle Konzack -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Need help about porting bind-9.7.0 to ARM board (2)

= =A8Cdisable-openssl-version-check 4) make 5) make install 6) In /mnt/bind, i found ../bin, ../etc, ../sbin, ../var, ../include, = ../lib, ../share. But i cannot find named.conf in ../etc.=20 =20 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

<    1   2   3   4   5   6   7   8   9   10   >