Re: Inline signing fails dnsviz test - STILL [LONG]

2021-05-16 Thread Dan Egli via bind-users
  3600    IN      NS  uz5w6sb91zt99b73bznfkvtd0j1snxby06gg4hr0p8uum27n0hf6cd.free.ns.buddyns.com. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. On 16. 5. 2021, at 8:45, Dan Egli via bind-users wrote: Upgrade to WHAT? You said it

Re: Inline signing fails dnsviz test - STILL [LONG]

2021-05-15 Thread Dan Egli via bind-users
Upgrade to WHAT? You said it was fixed in 9.11.25, but isn't that a lot OLDER than 9.16.15, which is what I'm running? jupiter ~ # named -v BIND 9.16.15 (Stable Release) jupiter ~ # dig -v DiG 9.16.15 On 5/16/2021 12:06 AM, Mark Andrews wrote: On 16 May 2021, at 10:17, Dan Egl

Re: Inline signing fails dnsviz test - STILL [LONG]

2021-05-15 Thread Dan Egli via bind-users
On 5/10/2021 12:38 PM, Tony Finch wrote: Dan Egli wrote: Still not working for me. The dig doesn't report anything, and I don't HAVE a keyfile since i'm using inline signing. Or does inline signing still require a key to be generated? Yes, you need to do your own key managem

Re: Inline signing fails dnsviz test.

2021-05-10 Thread Dan Egli via bind-users
Okay, so I added the policy, and things MOSTLY look okay. But when I retake the verification test, I get errors about no RRSIGs found. What do I do to resolve that issue? On 5/10/2021 12:38 PM, Tony Finch wrote: Dan Egli wrote: Still not working for me. The dig doesn't report anything

Re: Inline signing fails dnsviz test.

2021-05-10 Thread Dan Egli
On 5/10/2021 12:17 PM, Tony Finch wrote: Dan Egli wrote: Where do I get the DS record, since i'm using bind's inline signing? Use the dnssec-dsfromkey tool, e.g. from a key file (make sure it's the KSK file) $ grep This Kcam.ac.uk.+013+32840.key ; This is a

Re: Inline signing fails dnsviz test.

2021-05-10 Thread Dan Egli
that already? John Sent from Nine <http://www.9folders.com/> -------- *From:* Dan Egli *Sent:* Monday, May 10, 2021 12:20 AM *To:* bind-users@lists.isc.org *Subject:* Inline signing fails dnsviz test. I tried to setup inline signing on my DNS server, and after

Bind won't listen

2021-05-07 Thread Dan Egli
interfaces Why not? My config file specifically says listen-on { 0.0.0.0; }; and listen-on-v6 { ::; }; -- Dan Egli From my Test Server OpenPGP_0x11B7451DF2015959.asc Description: OpenPGP public key OpenPGP_signature Description: OpenPGP digital signature

Re: Bind refusing my DKIM key

2021-05-06 Thread Dan Egli
the tool that created this record that it is INVALID as the field length is TOO BIG. On 7 May 2021, at 14:35, Dan Egli wrote: I don't know what's up, but when I tried to put my DKIM into the test server, named-checkzone keeps giving a syntax error on the key line. Here's w

Bind refusing my DKIM key

2021-05-06 Thread Dan Egli
qbWxlZWRsdz09IA==" But when I run checkzone: dns_rdata_fromtext: myzone.zone:26: syntax error zone eglifamily.name/IN: loading from master file myzone.zone failed: syntax error What's wrong? Why is it failing? -- Dan Egli From my Test Server OpenPGP_0x11B7451DF2015959.

Re: bind refusing update [never mind]

2020-12-18 Thread Dan Egli
on using that interface. On 12/18/2020 11:59 PM, Dan Egli wrote: I'm really stumped as to what's going on. I'm trying to get dhcpd to automatically update name records for my internal network. This is NOT going to the public internet by any means. It's just an internal network. B

bind refusing update

2020-12-18 Thread Dan Egli
ost.zone";     notify no; }; zone "eglifamily.name" {     type master;     file "pri/eglifamily.zone";     notify yes; }; zone "10.168.192.in-addr.arpa" {     type master;     file "pri/10.168.192.arpa.zone";     notify yes;