Re: Allowable reverse mapping zone file names

2016-08-31 Thread Tony Finch
/dev/rob0 wrote: > > (See also RFC 2317 for "classless" reverse DNS delegation, but no, > DO NOT read that: I only mention it for completeness, as we have > pedantic posters on this list ... myself included. ;) ) Yeah, try https://tools.ietf.org/html/draft-ietf-dnsop-rfc2317bis instead :-) Tony.

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-08-31 Thread Tony Finch
Tom wrote: > > I have a bind-setup with activated response-policy-zones. For *each* > client-forward-query, which has a valid dns-response, I got an error in the > client-log (for NXDOMAIN-Reponses, I didn't have such errors... ex. "dig > @nameserver aasledkfjasdlkfjsadlf.asdlfkjsadlfkjasdjflk"):

Re: DNSKEY and RRSIG DNSKEY TTL values aren't changed after changing of zone's TTL

2016-08-31 Thread Tony Finch
Aleks Ostapenko wrote: > > Unfortunately, after > > 1. rndc freeze myzone > 2. named-comilezone -f raw -F text -o myzone.text myzone myzone.signed > change TTL on DNSKEY and RRSIG DNSKEY in myzone.text > named-comilezone -f text -F raw -o myzone.signed myzone myzone.text > 3. rndc thaw myz