Re: DNSSEC and MS AD

for private address sp ace and obviously-private domain names like corp.dom). Until it gets DANE support or something else that is DNSSEC aware, at which time you also add the internal trust anchors. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: What does addnode: NSEC node already exists mean?

/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: faster fail-over between multiple masters

___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscrib e from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: slow non-cached quries

+dnssec show? dig +dnssec +trace www.google.com Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind

BIND 9.8.1 is now available

Introduction BIND 9.8.1 is the current production release of BIND 9.8. This document summarizes changes from BIND 9.8.0 to BIND 9.8.1. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest versions of BIND 9 software can

Re: about the additional section

. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: about the additional section

In message caa3u4en3nf3lghkct4phcgshn7ddhysgztzqqsxxjh1p9cb...@mail.gmail.com , =?UTF-8?B?6aOO5rKz?= writes: On Fri, Sep 2, 2011 at 11:36 AM, Mark Andrews ma...@isc.org wrote: Named doesn't return records tagged as additional in the additional section.  This stops the propogation of bogus

Re: bind 9.7.4 on centos6

brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+ 1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5 ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt TDN0YUuWrBNh; }; -- Mark Andrews

Re: bind 9.7.4 on centos6

key is just for reference in BIND 9.7.x. If you just include that file into named.conf it will load the root's key and org's answers will validate. e.g. include /etc/named.iscdlv.key; BIND 9.8 has dnssec-validate auto; which pulls the root's key out of that file. Mark -- Mark Andrews

Re: [UNsolved] was: what does dig +trace do?

In message 4e66b5b5.30...@chrysler.com, Kevin Darcy writes: On 9/1/2011 7:57 PM, Mark Andrews wrote: In message4e5fb1ab.4040...@data.pl, Torinthiel writes: On 09/01/11 17:56, Tom Schmitt wrote: =20 I found the cause of my problem (and a solution): =20 dig +trace actually has another

Re: Logging question

/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Weird IPv6 issue?

to start looking. Internally, where this is teted, IPv6 connectivity is working ok, if I put the IPv6 address into the browser, it works fine. Suggestions would be welcome. -- Best regards Sten Carlsen No improvements come from shouting: MALE BOVINE MANURE!!! -- Mark

Re: Want to know if there is any way to add custom RR type.(like ip ipv6)

___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: Proper CNAME interpretation

___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia

Re: Max Cache Objects

or size_t. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users

Re: A few (too) simple questions about DNS records

this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: dnssec question. confused.

-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: auto-dnssec maintain stoped working again...

= K_Ktamay-dogan.net.+005+30945.private If I am right, this looks right. No. It looks completely wrong. Someone/something has re-named the K* files. As the K* files have been renamed named can't find them. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: auto-dnssec maintain stoped working again...

In message 20111003132508.GL11782@michelle1, Michelle Konzack writes: Hello Mark Andrews, Am 2011-10-03 20:16:33, hacktest Du folgendes herunter: No. It looks completely wrong. Someone/something has re-named the K* fil= es. As the K* files have been renamed named can't find them

Re: dnssec config sanity check

https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Bind takes a long time to resolve requests

? -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

Re: nsupdate on a Windows ec2 instance to update dynamic DNS isn't working

-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: bind error

It's a known issue and the fix is part of the next maintence release. 3154. [bug] Attempting to print an empty rdataset could trigger an assert. [RT #25452] -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: SRV record (out of zone) is a CNAME (illegal)

message. Mark ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St

Re: Master and slave on same host

In message CAEKtLiSPXyPOGjtyDApphwfV=4wnfvqzqjsj9njawcve+wk...@mail.gmail.com , Casey Deccio writes: --0016e6408196cd44f804af0ccabe Content-Type: text/plain; charset=ISO-8859-1 On Tue, Oct 11, 2011 at 2:20 PM, Mark Andrews ma...@isc.org wrote: To answer the original poster's question

Re: host versus nslookup

or DNS troubleshooting dig is a much better tool than nslookup or host. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman

Re: Mixing Algorithms for DNSSEC

-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===4468900674781566261==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Fix for CVE-2006-2073

to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Re: Securing zone transfer and DDNS

. Tiger is getting long in the tooth now but named should still compile on it however we don't have version of MacOS that old to do test builds on anymore. As for your zone transfer problem. Specify the key to use in the masters clause. masters { 1.2.3.4 key xferkey; }; Mark -- Mark

Re: CNAME logging

the the zones. Find the common set of names. Next find the target names of those CNAME and extract them from the remaining CNAMES. Repeat until you have no more new CNAME matches. Whatever is left was not looked up during the sample period. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: Re: Securing zone transfer and DDNS

be blocked by default. There is no global way to set update-policy. It is only a zone option. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https

Re: Using IPv6/IPv4 tunnels to send queries to a DNS server

to talk to when you have IPv6 problems. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: Reason for Limited number of Root DNS Servers

. This all comes from a basic analysis of how the data is packed into a DNS packet. Thanks and Regards, Gaurav Kansal 9910118448 -Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Friday, 11 November, 2011 12:14 PM To: Gaurav Kansal Cc: bind-us...@isc.org Subject

Re: DNSSEC external validation issues

/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Port number in A record in zone file

://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET

Re: make bind-9.7.4-P1 fails when --prefix and --exec-prefix switches are used

...@mail.gmail.com, Red Cricket writes: gcc.orig: '--prefix=/users/rcricket/BIND_INSTALL_DIR': No such file or directory gcc.orig: '--exec-prefix=/users/rcricket/BIND_INSTALL_DIR': No such -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset)) failed

. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: avoid-v4-udp-ports ineffective? (BIND 9.8.1-P1)

/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: make bind-9.7.4-P1 fails when --prefix and --exec-prefix switches are used

/usr/bin/gcc323 $@ exec /usr/bin/gcc323 $@ fi ... the make work fine now. But is still broken for all the other calls. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: ADB messages

not become externally noticable and if it does we need to look at doing a more complicated strategy to grow the hash table. However we need the log messages to correlate events. Regards, Binu -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: avoid-v4-udp-ports ineffective? (BIND 9.8.1-P1)

In message 4b588336-2de9-45bd-87ec-98c04b83c...@columbia.edu, David Coulthart writes: On Nov 17, 2011, at 6:28 PM, Mark Andrews wrote: In message 20171600.pahg0ucw011...@scramble.princeton.edu, Irwin = Tillman writes: It appears that named is trying to use ports I've mentioned

Re: Bind and ntp.org server refused issue

to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: socket.c error in bind 9.9.0b2

is a suspicious number. Look to see what your file descriptor limit is. This version may be leaking file descriptors. Danny Known issue. The socket is already bound so the setsockopt call fails on the dup'd file descriptor. You can ignore it. A fix is already on the review queue. Mark -- Mark

Re: Algorithm 'When to use EDNS0'?

it has been requested or is required for other functionality like getting DNSSEC records in responses. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please

Re: Algorithm 'When to use EDNS0'?

J Elkins, Cisco CCIE / |/ |ARK \_/ /__ LKINS Tel: +27 12 807 0590 Cell: +27 82 601 0496 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https

Re: bind 9.2.1 assertion failure

for your help. Run something supported. BIND 9.2.1 was released May 2002 and is no longer supported. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit

Re: bind 9.2.1 assertion failure

In message 87mxb4xm7t@mid.deneb.enyo.de, Florian Weimer writes: * Mark Andrews: BIND 9.2.1 was released May 2002 and is no longer supported. Uhm, there are multiple sources for BIND support. At least one still provides some coverage for BIND 9.2. I wouldn't want to run 9.2.x even

Re: CNAME only zone?

. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: CNAME only zone?

In message barmar-072f49.19202810122...@news.eternal-september.org, Barry Mar golin writes: In article mailman.507.1323556030.68562.bind-us...@lists.isc.org, Mark Andrews ma...@isc.org wrote: In message CAA3U4eO=EbKB2ECSS4F1=ff22rpk2xcbp7qdua3autxxap8...@mail.gmail.com , =?UTF-8?B

Re: information in slave zone file

IN NS ns3.skynet.be. =20 0 IN NS alpha.freehost.com.ua. = -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: About root zones

Named has a compiled in set of root hints. It is used if a root zone is not defined in named.conf. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: load-balancing in DNS using two A records

to a talented fool. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1

Re: load-balancing in DNS using two A records

is not a good solution (parts of web pages didn't load). We selected L3 switches then... On 21.12.11 09:26, Mark Andrews wrote: Which is really the result of badly designed clients. Clients are getting better with address affinity and fast failover on unreachable servers. It's been long time ago

Re: About root zones

then set notify master-only;. If you want named to only use the same nameservers as the system uses then set forward only; forwarders { list from resolv.conf; };. Named does not read resolv.conf though the tools do. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: Warning view message during rndc reload

@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo

Re: Bind to INADDR_ANY

://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-portacl.html -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind

Re: Name resolution issue on one domain

(127.0.0.1) ;; WHEN: Fri Jan 13 08:12:21 2012 ;; MSG SIZE rcvd: 98 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman

Re: getaddrinfo Reading IP Address value from res-ai_addr

Note that the actual data returned may be bigger than what will fit in a struct sockaddr. If you need to save the results use struct sockaddr_storage or family specific structures. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Auth Section Forwarders

for the zone but not always. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: Defense against a client?

. DNS queries don't come directly from clients, they come from caching servers, aka resolvers. Its those caching servers that shouldn't be behind NATs. Which will more and more be behind CGN especially as DNSSEC take up increases. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: Trying to do reverse lookups, but crashing named instead.

==; }; -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: Problem with ed.gov

/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St

Re: Trying to do reverse lookups, but crashing named instead.

. Named found that the name *was* in use so it stopped processing the update request and returned a error to the caller. It also logged this. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IPv6 Nameserver Question with dig +trace

It's a known bug. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: Wildcards and the include directive?

-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: Can we stop emitting an error for managed-keys.bind?

to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Can we stop emitting an error for managed-keys.bind?

3255. [func] No longer require that a empty zones be explicitly enabled or that a empty zone is disabled for RFC 1918 empty zones to be configured. [RT #27139] -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61

Re: Detailed Log Analysis based on rndc stats!!

normal NXDOMAIN responses. It logs answers that are *forced* to NXDOMAIN. Regards Shiva Raman -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit

Re: BIND 9.8.1-P1:'make test' fails

with the output of the system test, then tar up bin/tests/system/ixfr and upload it via: https://pandora.isc.org/ Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: bind9.9.0rc2 inline signing tests

can start with anything. e.g. \000. is how you would enter a TLD of one octet with all the bits set to zero. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: bind-9.8.1-P1: Recursive failed on fresh config

.21photo.cn. 43200 IN A 222.73.254.150 21photo.cn. 43200 IN NS ns1.1stchina.cn. 21photo.cn. 43200 IN NS ns2.1stchina.cn. ;; Received 125 bytes from 60.29.231.62#53(ns3.mrdns.net) in 1766 ms -- Mark Andrews, ISC 1 Seymour St

Re: bind-9.8.1-P1: Recursive failed on fresh config

CNAME as nameservers *cannot* be made reliable. Static-stub can be used as a workaround but it doesn't scale. Misconfiguration like this just need to be fixed. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Recovering from over enthusiastic key cleanup...

Grab 9.8.2rc1, it will address the the require assertion. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo

Re: Same Transaction ID queries

-- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

Re: zone serial (0) unchanged. zone may fail to transfer to slaves.

. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: zone serial (0) unchanged. zone may fail to transfer to slaves.

Administrator Cincinnati Country Day School I suspect that is is benign. Had you just thawed the server/zone? Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Multiple BIND instances

-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman

Re: about the MX and NS values

bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org

Re: State diagram for DNSsec key lifecycle

You don't submitt the initial DS until the KSK is active and any old state about the DNSKEY as clear caches. I recommend activate + publish at the same time. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: State diagram for DNSsec key lifecycle

In message 92dd72be-8330-490d-8bf9-7b023fdab...@ucd.ie, Niall O'Reilly writes : On 10 Feb 2012, at 00:57, Mark Andrews wrote: I recommend activate + publish at the same time. Mark, I'ld appreciate knowing your reasoning for preferring this approach over publication

Re: dig -- only RRSIG present.

2012 ;; MSG SIZE rcvd: 21 % -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: Resource Record propagation maximum time

, ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61

Re: Efficacy of using short timeout values for an A record

so rapidly Regards, -- -Chuck ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark

Re: Efficacy of using short timeout values for an A record

In message 4a96bb45-eacb-4252-89c6-34061849c...@mac.com, Chuck Swiger writes: On Feb 14, 2012, at 2:16 PM, Mark Andrews wrote: ISC's BIND has (or had) a MINTTL value of 5 minutes / 300 seconds. It's probably unreasonable to expect other platforms to refetch DNS records faster than

Re: Logging issue with bind

://freundschaftswerbung.gmx.de ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas

Re: HIP record

long zone evilquery.nl/IN: not loaded due to errors. This is with bind9.7.3. I think records are OK and bind should be able to p= arse them? grtz, -- Miek -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: HIP record

to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===4591130730917447427==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: bind 9.9.0rc3 inline signing server not updating unsigned zone

= zone_from_args(server, args, NULL, zone, NULL, ISC_TRUE); if (result != ISC_R_SUCCESS) return (result); -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: bind 9.9.0rc3 inline signing server not updating unsigned zone

== NULL) return (ISC_R_UNEXPECTEDEND); type = dns_zone_gettype(zone); -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https

Re: Clarification on DNSKEY query

buffer size is 512. This again reduces the probability of TCP fallback being required. Mark Thanks Regards, Ramesh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: lists.isc.org rDNS failed, DNSSEC?

a repeat. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind

Re: rcs run through clang?

bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https

Re: rndc flush /recursive ?

/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind

Re: rndc flush /recursive ?

, Mark Andrews ma...@isc.org wrote a message of 21 lines which said: flushtree Not in any released (much yet packaged) version. It's packaged. FreeBSD: ports/dns/bind99/Makefile PORTNAME= bind99 PORTVERSION=9.9.0.rc2 PKGNAMESUFFIX= -devel

Re: Configuring a domain slave to look up subdomain hosts

know if you need additional config details. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark

Re: ddns 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)

https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Configuring a domain slave to look up subdomain hosts

is to graft on namespace that isn't to be found by following delegations. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman

Re: lists.isc.org rDNS failed, DNSSEC?

. DNSSEC protects the MX records (explict or implict). This lets you securely know which machine you are supposed to be connecting to, by name, and hence which CERTs are valid with STARTTLS given that name. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871

Re: Unusual DNSSEC errors involving g.gtld-servers.net

receive a response that inde= ed has no signatures: $ dig @192.42.93.30 google.com +dnssec +norec Unfortunately none of the servers support the NSID EDNS option. Similar path to Wolfgang. Intermittent failures. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: RFC 6303 and bind 9.9.0

Network Administrator Cincinnati Country Day School -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

<    3   4   5   6   7   8   9   10   11   12   >