Re: minimum cache times?

2010-10-05 Thread Nicholas Wheeler
I think Brian's OP was about a max-ttl override ... Which is the opposite. The only disadvantages I see is a potential waste of bandwidth (and it violates the protocol). - Original Message - From: bind-users-bounces+nwheeler=devis@lists.isc.org To: bind-users@lists.isc.org Sent: T

Re: DNSSEC: Configuring auto-signed dynamic zone HOWTO

2010-02-23 Thread Nicholas Wheeler
On Tue, 2010-02-23 at 23:40 +0300, Eugene Crosser wrote: > (Well, for now the plan is to do it once a year by hand. Then, we'll see...) For the record, NIST recommends to roll the ZSK every three months, and the KSK every two years. Thanks, -- Nicholas signature.asc Description: This is a

Re: Bind, dnssec, udp fragmentation woes.

2009-10-02 Thread Nicholas Wheeler
c > > Mark Thanks for the help, but I don't know what this implies, other than nothing dnssec-related with udp works ;) Thanks, -- Nicholas Wheeler Systems Administrator Development Infostructure signature.asc Description: This is a digitally signed message part ___

Bind, dnssec, udp fragmentation woes.

2009-10-01 Thread Nicholas Wheeler
ot 512 bytes. Any help at all would be greatly appreciatedsuch as category logging statements that might be of relevance, tools to diagnose udp fragmentation problems, documentation of linux kernel parameters that might affect bind's generation of UDP packets (fragmentation?), etc. Thank