Re: Freezing a Zone vs. Stopping the DNS Server

2021-09-29 Thread FUSTE Emmanuel via bind-users
Le 29/09/2021 à 13:41, Frank Kyosho Fallon a écrit : > Hi, > > Occasionally I need to add hosts manually to forward/reverse lookup > zones in BIND 9.16. We also have ISC DHCP. Both are on a Mac Mini > using MacPorts to install. > > Since dynamic updates are continually in progress, I understand I

Re: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread FUSTE Emmanuel via bind-users
Le 10/08/2021 à 12:34, Matthijs Mekking a écrit : > Hi Emannuel, > > Thanks for your response. > > On 10-08-2021 11:28, FUSTE Emmanuel via bind-users wrote: >> Le 10/08/2021 à 10:02, Matthijs Mekking a écrit : >>> Hi users, >>> >>> We are pla

Re: Deprecating auto-dnssec and inline-signing in 9.18+

2021-08-10 Thread FUSTE Emmanuel via bind-users
Le 10/08/2021 à 10:02, Matthijs Mekking a écrit : > Hi users, > > We are planning to deprecate the options 'auto-dnssec' and > 'inline-signing' in BIND 9.18. The reason for this is because > 'dnssec-policy' is the preferred way of maintaining your DNSSEC zone. > > Deprecating means that you can s

Re: Timeout setting

2021-03-26 Thread FUSTE Emmanuel
Le 25/03/2021 à 22:15, Mark Andrews a écrit : > This is a bug in postfix. Temporary failures in the DNS are not supposed to > result in permanent failure at the SMTP level. SERVFAIL is not NXDOMAIN. > This is not a postfix bug. Temporary failure are perfectly handled by postfix with a 450 SMTP

Re: New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0

2020-03-23 Thread FUSTE Emmanuel
Hello again, The two setups are stable. Thank you. Emmanuel. Le 23/03/2020 à 14:39, FUSTE Emmanuel a écrit : > No lock. Still under close monitoring for the rest of the day. (isc+2: > glibc read-write lock / Andrea Glibc packages) > A second one get isc+3.1 (--disable-pthread-rwlock)

Re: New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0

2020-03-23 Thread FUSTE Emmanuel
No lock. Still under close monitoring for the rest of the day. (isc+2: glibc read-write lock / Andrea Glibc packages) A second one get isc+3.1 (--disable-pthread-rwlock) is under test/stress too. Will report any problem if some arise. Emmanuel. Le 23/03/2020 à 14:21, FUSTE Emmanuel a écrit

Re: New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0

2020-03-23 Thread FUSTE Emmanuel
The Andrea's packages where not properly/fully installed, my bad. So now one of my resolver is under stress with properly installed Andrea's packages and isc+2 We will see. Emmanuel. Le 23/03/2020 à 13:40, FUSTE Emmanuel a écrit : > Ok, will wait the publication of isc+3 versio

Re: New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0

2020-03-23 Thread FUSTE Emmanuel
. > > If you experience any reproducible locks and crashes, we would be interested > in having tcpdump that causes the lockup. > > Thanks, > Ondrej > -- > Ondřej Surý > ond...@isc.org > >> On 23 Mar 2020, at 13:26, FUSTE Emmanuel >> wrote: >> >> Hi,

Re: New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0

2020-03-23 Thread FUSTE Emmanuel
er control. Emmanuel. Le 23/03/2020 à 11:54, Ondřej Surý a écrit : > Oh, right. I was hoping Bionic would have a fix by the time we release new > BIND 9. > > The fixed package should be building right now. > > Ondrej > -- > Ondřej Surý > ond...@isc.org > >

Re: New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0

2020-03-23 Thread FUSTE Emmanuel
Le 20/03/2020 à 15:05, Andreas Hasenack a écrit : > Hello, > > On Wed, Mar 18, 2020 at 8:25 PM Michael McNally wrote: >> New releases of BIND are available which contain bug fixes and feature >> improvements. >> You can download them from the ISC website: >> >> https://www.isc.org/downloads >

Re: BIND - in loop rewrite zone serial no.

2020-01-28 Thread FUSTE Emmanuel
Le 28/01/2020 à 16:49, Milan Jeskynka Kazatel a écrit : > Hello Tony, > > thank you for the response, > > If I correctly understand, Bind should have an option to specify how > many records could be signed at the same time. Then in the zone with > 250 records it should be 3 times in the row - as

Re: BIND - in loop rewrite zone serial no.

2020-01-28 Thread FUSTE Emmanuel
Le 28/01/2020 à 10:14, Milan Jeskynka Kazatel a écrit : > > Hello, > > my previous email with the same subject still waiting for moderator > approval, because email is too big. > Then I have to ask with a shorter part of the log. > > I´m facing with a suspicious behavior of my authoritative DNS BI

Re: BIND 9.11.9-1+ubuntu18.04.1+deb.sury.org+2 crash

2019-07-25 Thread FUSTE Emmanuel
Le 25/07/2019 à 12:56, Ondřej Surý a écrit : > Hi Emmanuel, > > the crash should not happen because the discrepancy between the GeoIP and > GeoIP2 configurations > should have been caught earlier, so I would appreciate if you can submit an > issue here: > https://gitlab.isc.org/isc-projects/bind9

Re: BIND 9.11.9-1+ubuntu18.04.1+deb.sury.org+2 crash

2019-07-25 Thread FUSTE Emmanuel
'm no longer able to help you to debug the 9.11.9 version. All my servers are now on 9.12 or 9.14. Emmanuel. Le 25/07/2019 à 11:51, FUSTE Emmanuel a écrit : > The new version crash and the BIND 9.11.8-1+ubuntu18.04.1+deb.sury.org+1 > was pulled from the repo. > I'm trying the 9.14

BIND 9.11.9-1+ubuntu18.04.1+deb.sury.org+2 crash

2019-07-25 Thread FUSTE Emmanuel
The new version crash and the BIND 9.11.8-1+ubuntu18.04.1+deb.sury.org+1 was pulled from the repo. I'm trying the 9.14.4-1 as I need to resume the service but I have GeoIP2 migration problems. Please re-push the previous version in the repo. Emmanuel. Jul 25 10:54:08 ns1 systemd[1]: Reloadi

Re: native-pkcs11 and smartcard-hsm

2016-05-26 Thread FUSTE Emmanuel
Le 26/05/2016 12:20, FUSTE Emmanuel a écrit : > Le 25/05/2016 16:27, FUSTE Emmanuel a écrit : >> Le 25/05/2016 14:29, FUSTE Emmanuel a écrit : >>> Le 24/05/2016 16:36, FUSTE Emmanuel a écrit : >>>> Le 23/05/2016 16:40, FUSTE Emmanuel a écrit : >>>>> Hel

Re: native-pkcs11 and smartcard-hsm

2016-05-26 Thread FUSTE Emmanuel
Le 25/05/2016 16:27, FUSTE Emmanuel a écrit : > Le 25/05/2016 14:29, FUSTE Emmanuel a écrit : >> Le 24/05/2016 16:36, FUSTE Emmanuel a écrit : >>> Le 23/05/2016 16:40, FUSTE Emmanuel a écrit : >>>> Hello, >>>> >>>> I'm trying to use a sm

Re: native-pkcs11 and smartcard-hsm

2016-05-25 Thread FUSTE Emmanuel
Le 25/05/2016 14:29, FUSTE Emmanuel a écrit : > Le 24/05/2016 16:36, FUSTE Emmanuel a écrit : >> Le 23/05/2016 16:40, FUSTE Emmanuel a écrit : >>> Hello, >>> >>> I'm trying to use a smartcard-hsm usb stick (v1.2) with BIND 9.10.3-P4. >>> This sti

Re: native-pkcs11 and smartcard-hsm

2016-05-25 Thread FUSTE Emmanuel
Le 24/05/2016 16:36, FUSTE Emmanuel a écrit : > Le 23/05/2016 16:40, FUSTE Emmanuel a écrit : >> Hello, >> >> I'm trying to use a smartcard-hsm usb stick (v1.2) with BIND 9.10.3-P4. >> This stick is working with powerdns and support all crypto operations >

Re: native-pkcs11 and smartcard-hsm

2016-05-24 Thread FUSTE Emmanuel
Le 23/05/2016 16:40, FUSTE Emmanuel a écrit : > Hello, > > I'm trying to use a smartcard-hsm usb stick (v1.2) with BIND 9.10.3-P4. > This stick is working with powerdns and support all crypto operations > required for basic DNSSEC support. > > But I get this warning/erro

native-pkcs11 and smartcard-hsm

2016-05-23 Thread FUSTE Emmanuel
Hello, I'm trying to use a smartcard-hsm usb stick (v1.2) with BIND 9.10.3-P4. This stick is working with powerdns and support all crypto operations required for basic DNSSEC support. But I get this warning/error: "PKCS#11 provider has no digest service". "This HSM will not work with BIND 9 usin