Re: suggetsed distro for Bind

Docker/Podman is just a container, not *-virtualization platform, so there’s full access to the underlying hardware. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 23. 7. 2

Re: suggetsed distro for Bind

just any distro with Podman/Docker. FreeBSD packages are also well maintained in ports. I guess rolling distros like Arch Linux should also work well. But definitely not something that reached end-of-life last year (CentOS Linux 7 reached end of life (EOL) on June 30, 2024). Ondrej -- Ondřej

Development version of BIND 9 - 9.21.10 with meson build system

naming of the libraries where upstream version is part of the library name. There might be more tweaks coming related to SONAME and SOVERSION. Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: Bind 9.18: assert in dns_cache_create() cleanup branch

ge this patch in the BIND 9.18 release branch. Thank you, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 7. 2025, at 10:13, Andreas Kempe wrote: > >

Re: BIND doesn't listen to other loopback addresses

regard that 127.0.0.1/8 is assigned by everything in 127/8 automagically works without explicit address assigned to the interface. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal w

Re: question about resolving of AAAA amazoses.com

with **us-east-1.amazonses.com.** as the owner of the SOA record. As the previous delegation also included "feedback.", this is matches the log message you've been seeing as > us-east-1.amazonses.com. can't really be subdomain of something deeper in the tree: > feedback-s

Using Redis (Was: Significant memory usage)

Redis (nor any other nosql database) doesn’t really have the properties we need for finding closest enclosers, doing partial matches nor really the performance.Ondrej --Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside

Re: Significant memory usage

. BIND 9.22 will contain an optimization that gradually increases the memory chunk size and that allows “auto tuning” for both small zones, large zones and the cache. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to r

Re: Significant memory usage

ak, by default any recursion needed for a request is done > before any policy triggers are considered. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 7

Re: Significant memory usage

home/ondrej/Projects/bind90 451684 452652 461872 $ dig +short -p 12345 @::1 ad-assets.futurecdn.net. 127.0.0.1 $ dig +short -p 12345 @::1 foo.ad-assets.futurecdn.net. 127.0.0.1 1. https://bind9.readthedocs.io/en/v9.20.10/reference.html#response-policy-zone-rpz-rewriting -- Ondřej Surý (He/Him)

Re: Significant memory usage

hough that you think that we should prioritize **your** setup over all the others and using very aggressive language to get your way. We are not going to do that. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligat

Re: Problem with latest Docker image

forces named to log to default stderr). Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 20. 6. 2025, at 16:24, Randy Scott via bind-users > wrote: > > 

Re: Significant memory usage

Ok. And what are your observations? Or do you expect us to debug your issue and interpret the outputs you send here for you? As a side note, the rndc outputs you are pasting into your emails are mostly useless to debug memory issues. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and

Re: Significant memory usage

What If you actually read the manual that I sent you - syntax of sizeval is explained there. -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 9. 6. 2025, at 6:34, Phi

Re: Significant memory usage

It does have the effect. Also there’s BIND 9 ARM at https://bind9.readthedocs.io/en/v9.20.9/ -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be differentw . Please do not feel obligated to reply outside your normal working hours. > On 9. 6. 2025, at 6:20, Phi

Re: Significant memory usage

Yes, there's no math involved, it just honors the limit. FTR you can also say: max-cache-size 2GB; You don't have to specify it to the last byte. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligate

Re: Significant memory usage

atistics/memory/contexts/context/name=ADB /statistics/memory/contexts/context/inuse=664 /statistics/memory/contexts/context/name=ADB_dynamic /statistics/memory/contexts/context/inuse=196784 /statistics/memory/summary/InUse=13080208 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and you

Re: Significant memory usage

- 1.6GB-2GB should be more than enough for your purposes. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 9. 6. 2025, at 5:45, Philip Prindeville > wrote: > >

Re: Significant memory usage

Does the named report proper max-cache-size into the log when starting? Something like: 'max-cache- size 90%' - setting to 86522MB (out of 96136MB) Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply ou

Re: Significant memory usage

-explained/ for more details (search for jeprof for tldr). Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 18. 5. 2025, at 23:21, Philip Prindeville via bind-us

Re: Strange named failures

You are running an unsupported BIND 9.18 release. I would start with upgrading to the latest 9.18 or even 9.20 release. There’s no point in debugging software that’s missing one year of accumulated bug fixes. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be

Re: Query: suppressing autogenerated empty zones (e.g. 10.in-addr.arpa) that should be configured via DNS catalog?

ch and stragglers. You should do this anyway as an ISP if you have resources for this. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/

Re: My Introduction and current issues -

distribution does it use.As I said - too many moving parts and it’s not even clear where to start the debugging.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.On 10. 5. 2025, at 9:03, Greg

Re: Massive increase of SERVFAIL after April 28th 2025.

> dig +short +nsid version.bind. txt ch @dns4.p08.nsone.net This needs to be this: ^^^ You missed @ and thus you asked your local resolver. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your nor

Re: DNSVIZ errors

w my advice :shrug:. The bits of information you have provided are not sufficient to meaningfully help you. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. signature

Re: DNSVIZ errors

ll the details about the domain name configuration and the related logs. You can’t expect help without sharing the full information about your problem. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside

Re: Grief after upgrade to macOS Sequioa 15.4

It’s been tracked as https://gitlab.isc.org/isc-projects/bind9/-/issues/5268 and https://github.com/Homebrew/homebrew-core/issues/217127Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: isc-bind service shutdown after update at 9.20.7-1.2.el8

This looks like named is not sending the systemd notifications to the supervisor. Is there anything unusual on your system? Are those stock ISC packages? Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply

Re: Custom DNS Filtering Plugin in BIND 9

It might, except it has been removed (now I admit I don’t remember in which version), because it was proprietary and never had any real users. It should work while it is still available, but I am not really keen on resurrecting the API for yet another proprietary thing. Ondrej -- Ondřej Surý

Re: Custom DNS Filtering Plugin in BIND 9

only if you need to - starting with blazingly fast classification would be a better option. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 21. 3. 2025,

Re: ISC, GitHub, and CVE-2025-30066

this was the first time I've ever heard about tj-actions in my life. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. signature.asc Description: Message signed

Re: Custom DNS Filtering Plugin in BIND 9

Hi again,if this is something that is going to be open-source and the whole BIND 9 users community would benefit from this, I would love to hear and see more.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside

Re: Custom DNS Filtering Plugin in BIND 9

Michael, you can hardly create a static list from all of the domains that can possibly exists. I do understand the usefulness of dynamic classification. There’s just not a straightforward interface for it now. Somebody will have to invest into writing this :shrug: Ondrej -- Ondřej Surý — ISC

Re: Custom DNS Filtering Plugin in BIND 9

plugin: https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/968/diffsIt is outdated, but it does synthesize DNS messages on the fly, so it might be a good starting point.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to

Re: Custom DNS Filtering Plugin in BIND 9

/filter_ plugins. We would be happy to accept any work that extends the plugins API if you need one. For constructing the modified message, I am afraid there’s nothing like “developer’s documentation”, you are the first one who asked about the plugins API in years. Ondrej -- Ondřej Surý — ISC (He

Re: Upgrading the Bind Server issue

then there's always the third option that's listed in the mailing list footer: > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working h

Re: Authoritative and caching

It does, and it follows the FHS, so not in /etc. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 16. 3. 2025, at 17:08, Timothe Litt via bind-users > wrote: &

Re: Using a PCIe HSM card with BIND

Providers (5.5.6 and onwards): https://bind9.readthedocs.io/en/v9.20.6/chapter5.html#pkcs-11-cryptoki-support Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On

Re: bind crashes with assertion, maybe due to many ephemeral network devices?

anent marked this not a spam account. Feel free to fill the issue, but I can't promise this will be looked at quite soon as this is in the "doctor it hurts when I do this" territory. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be diffe

Re: XoT Testing: TLS peer certificate verification failed

Sounds like this: https://gitlab.isc.org/isc-projects/bind9/-/issues/3896--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.On 4. 3. 2025, at 10:01, Klaus Darilion via bind-users wrote

Re: [bind-9.18.26] named crash with assertion failure

Sure, here is 9.18.26 with all the required patches: https://ftp.isc.org/isc/bind9/9.18.34/bind-9.18.34.tar.xz Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 28

Re: [bind-9.18.26] named crash with assertion failure

Start with upgrading to the latest 9.18. You are 8 versions behind, and yes, bugs get fixed. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 27. 2. 2025, at 23

Re: Policy-dnssec timeline step by step

Have you read: https://kb.isc.org/docs/dnssec-key-and-signing-policy and https://bind9.readthedocs.io/en/latest/dnssec-guide.html This RFC should give you some background too: https://datatracker.ietf.org/doc/html/rfc6781 Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and

Re: debsuryorg-archive-keyring

It's absolutely ok to drop the dependency for your custom packages. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 13. 2. 2025, at 17:17, Malcolm Scot

Re: debsuryorg-archive-keyring

ethod as the distributions supporting that will get deprecated. As of now, the change you mentioned will be included in Debian Trixie that hasn't been released yet, and there's too many installations that still use the old method -- Ondřej Surý (He/Him) ond...@isc.org My working hours a

Re: Just a suspicion for now: Memory leak in 9.20.4?

quickly detected at the shutdown as there are safeguards in place.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.On 13. 2. 2025, at 13:47, Robert Wagner wrote: Not sure if we

Re: Just a suspicion for now: Memory leak in 9.20.4?

is possible to have smaller and faster, sometimes the smaller even means faster, but there are times where faster means larger. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours

Re: BIND DNS Server on Windows

/month VPS. Alternatively get (used) RPi and host it on a local network. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 2. 2025, at 15:07, Turritop

Re: Debug Level Logs in BIND 9.18.16 Despite Debug Level Set to 0

0-Feb-2025 08:31:39.626 lame-servers: info: REFUSED unexpected RCODE resolving 'kriss.re.kr/MX/IN': 134.75.30.1#53 but there are no debug lines: $ grep debug named.log Whatever you are doing, it looks like your local configuration / operations problem. Ondrej -- Ondřej Surý (He/Him)

Re: Primary/Secondary

t the word “groper” had the connotations when dig was acronym “domain internet groper”. However in the current discourse, using word “groper” is just *ew*, and it is possible to take an action and just stop using that term, because exactly — the context matters. Ondrej -- Ondřej Surý — ISC (He/Him)

Re: Primary/Secondary

n is same as if you would have asked whether we will keep changing the tools we use to build the technology? The answer to both are yes. We will adapt to the living word and be considerate people not only to ourselves but also to others that we share the society with. Ondrej -- Ondřej Surý — I

Re: BIND 9.20.5 EDE 22

You need to check the linked MRs, the original was indeed introduced in 9.20.5, but there's a fix: https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/9985 And that hasn't been released yet. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working ho

Re: error - exiting (due to assertion failure)

packages installed, see here: https://documentation.ubuntu.com/server/reference/debugging/debug-symbol-packages/ Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 2. 2025,

Primary/Secondary (Was: Master/Slave)

peaking of the best practice, I would recommend using the current naming of the server roles and current naming of the configuration options. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org 1. https://datatracker.ietf.org/doc/html/rfc8499 My working hours and your working hours may be different. Please do

Re: Upcoming changes in Debian/Ubuntu BIND 9 package

e line you just quoted: https://bind9.readthedocs.io/en/latest/reference.html#built-in-empty-zones The file in debian was incomplete while the default built-in empty zones are much longer list. There's no point in maintaining both lists at the same time when the built-in works just fine.

Re: update Bind9 ES version

Hi Support Info, that’s quite unusual name! The BIND 9 packages in Debian have been properly updated: https://tracker.debian.org/pkg/bind9 Whatever you are seeing is your local problem. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do

BIND 9.21+ build system change

will be released sometime in 2026. Here is the upstream guide: https://mesonbuild.com/SimpleStart.html You can follow the progress in the following merge request: https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/8989 Thanks, Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and

Snapshot versions of BIND 9.18 and 9.20 for testing

s/raw/bind-9.18.34-dev.tar.xz * [9.20.6-dev]: https://gitlab.isc.org/isc-projects/bind9/-/jobs/5204024/artifacts/raw/bind-9.20.6-dev.tar.xz Thanks for anyone who will test this, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not

Snapshot versions of BIND 9.18 and 9.20 for testing

s/raw/bind-9.18.34-dev.tar.xz * [9.20.6-dev]: https://gitlab.isc.org/isc-projects/bind9/-/jobs/5204024/artifacts/raw/bind-9.20.6-dev.tar.xz Thanks for anyone who will test this, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not

Re: Debug Level Logs in BIND 9.18.16 Despite Debug Level Set to 0

half of bug fixes and security issues remedies. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 28. 1. 2025, at 6:32, Nagesh Thati wrote: > > severity dynamic;

Upcoming changes in Debian/Ubuntu BIND 9 package

options Please be aware of these changes to configuration files when upgrading the packages as this could result in named not starting. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: localhost name lookup

other people by keeping this thread alive and asking other people to do this work for you. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 24. 1. 2025, at 22:32, Lee w

Re: Estimating Resource Requirements for BIND to Handle Specific Query Volumes

You need to do the measurements that match your environment. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 23. 1. 2025, at 17:16, sami.ra...@sofre

Re: localhost name lookup

bmit a solid correct patch with a good reasoning, there's probably nobody that is going to work on this. The itch to scratch here isn't particularly bothering. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obli

Re: Sporadic Timeouts after upgrading to bind9.20

Hi Klaus, thanks for reporting back. The patch from the Debian package will be included in the next release, so thank you for the prompt testing. Much appreciated. Also glad to hear that the XFR speeds improved due to this change. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours

Re: Docker Compose Setup with ISC/Bind9 Image

during the fall semester and the images work just fine both for authoritative and recursive workload. And I’ve tested them using both docker and podman.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal

Re: BIND 9.20.4 exiting

Hi Guillaume,thanks for reading the instructions. I’m afraid you’ve hit a bug and filling an issue would be appropriate in this case.I also think that Klaus (in Cc) seen similar crash.We would appreciate if you can provide coredump and binaries with debug symbols.Ondrej--Ondřej Surý — ISC (He/Him

Re: shut down hung fetch while resolving 'aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A'

-- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 17. 12. 2024, at 21:16, Ondřej Surý wrote: > > disa.mil servers are timing out on me over IPv6: > &

Re: shut down hung fetch while resolving 'aro.army.mil.edgekey.dmz.akamai.csd.disa.mil/A'

s.gdcs.disa.mil IN NS cds.disa.mil IN NS e1008.d.akamaiedge.akamai.csd.disa.mil. IN A Ondřej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 17. 12. 2024, at 20:5

Re: Problem resolving a domainkey TXT record

.gbp5b5fe5-Debian <<>> +tries=1 -4 IN NS @nstll.eulisa.europa.eu. _domainkey.eulisa.europa.eu ; (1 server found) ;; global options: +cmd ;; no servers could be reached Cheers, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel

Re: Online changelogs (Was: CHANGES in 9.18.32)

he generated entry and the final release notes should be close to zero). Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/li

Online changelogs (Was: CHANGES in 9.18.32)

Alternatively these links also work: 9.18: https://bind9.readthedocs.io/en/bind-9.18/changelog.html 9.20: https://bind9.readthedocs.io/en/bind-9.20/changelog.html or https://bind9.readthedocs.io/en/stable/changelog.html Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your

Re: CHANGES in 9.18.32

You'll find the "changelogs" in doc/changelogs now, the file is now autogenerated from merge requests. If you want to see development changelog, it is more useful to do git log --merges or just git log Ondřej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your wo

Re: Undelegating a Signed Subdomain

<http://example.com/> if the subdomain is correctly signed. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 12. 2024, at 20:07, Nick Tait via bind-user

Re: Undelegating a Signed Subdomain

on SOA and DNSKEY records just to be sure nothing stays in the cache for too long.Then before the change I would change those TTLs to 0, wait out the previous TTL, and then again just fold the data, and the resolvers should immediately switch to new chain.Ondrej--Ondřej Surý — ISC (He/Him)My working

Re: Sporadic Timeouts after upgrading to bind9.20

Hi Klaus, the bind-dev repository is now at 9.21.2-302-gebe0db5daad-1 as I remember you are using Debian on the servers, right? Could you test that version if you can see the same timeouts you've been encountering before? Thanks, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working

Re: Sporadic Timeouts after upgrading to bind9.20

Hi Klaus, we've identified an issue in the glue cache that have been causing drops in the performance. Can you test a development branch or do you need fix on top of 9.20? Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please d

Re: How to print details of dns_name_t* when hitting a gdb breakpoint in dns_name_equal

version number, but it has a pile of patches all in the name of “stability”. Unfortunately, the Linux distro customer like this “make believe” game which doesn’t really work for anything slightly more complex than a simple utility. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your

Re: notify IPv6

> On 24. 11. 2024, at 13:10, James wrote: > > Is this my mistake or bind's? Hard to tell since you have provided virtually no information in your email. You need to share the configuration and the logs for the start if you want the community help. Ondrej -- Ondřej Surý — IS

Re: secondary dns server question :)

ility, but for small setups this could even be just a manual intervention - you can configure the IP address on the second server in the case of the outage. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outs

Re: secondary dns server question :)

I think the good starting point is exactly the question that Marco asked - we have no idea what Jean-François is trying to achieve. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working

Re: strange problem with named.conf

You haven’t pasted the contents of the include files, but most likely it’s the contents of /etc/bind/named.conf.options that are missing the semicolon at the end, but the parser only complains at the next directive which is located in the main config file. -- Ondřej Surý — ISC (He/Him) My

Re: bind-9.18.31 compile errors RHEL 7.9

> On 5. 11. 2024, at 15:32, N M wrote: > > What changed between bind-9.18.30 and bind-9.18.31 that would cause it to not > compile? Centos 7 went end-of-life, so we no longer care about it. That’s what has happened. You should not be using system past the EOL date. Ondrej --

Re: Server crash on receiving query

> On 6. 11. 2024, at 16:22, Mike Hodson wrote: > > Why is the bind project using such a library that seems to be perennially > unstable? You are absolutely and utterly wrong in your assessment. Ondřej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working

Re: Server crash on receiving query

Since the libuv bug is in the open, I’ll link it here as well: https://github.com/libuv/libuv/issues/4594 I’m in contact with Apple folks, and they have all the information they need now. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do

Re: SIG(0) "request has invalid signature: not verified yet (NOERROR)"

-exempt { 10.0.0.0/8; 2001:db8::100; }; If that doesn't help, I would suggest to fill an issue in our GitLab, it seems like a genuine bug. Ondřej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not

Re: Server crash on receiving query

I spent last two hours crashing my computer while bisecting the issue, and you would not have guessed the commit that causes this: commit f063ee276e4a7f6cfccbefa969e8db8df952348b Author: Ondřej Surý Date: 2022-05-18 14:10:58 +0200 Use libuv CFLAGS and LIBS when checking for features

Re: Server crash on receiving query

Please stop framing this as this is BIND 9 fault. I’ll report this to Apple as I can reproduce this on my machine too on unprivileged account. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your

Re: Server crash on receiving query

> maybe named is using some special system call Named is not using anything special. All the stuff is just libraries and standard API. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your nor

Re: Server crash on receiving query

As Mark said - you need to take this to Apple. It could be kernel bug, it could be a compiler bug. Userspace program crashing the hardware is pretty bad, but there’s nothing we can do on our side. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different

Re: BIND contribution

your semestral project ends? Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 1. 11. 2024, at 15:22, Leonie Seelisch > wrote: > >  > Dear users a

Re: Question about DNSSEC

DO flag is indication to “do DNSSEC”, it has no other meaning. You should be looking for AD flag.As for delv output - it prints out which names are validated and those that are not. I don’t see anything wrong here.--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different

Re: DNSSEC with views and shared zone files

You can’t do this. The signatures are unique per zone and thus the files need to be unique as well. Just write a small provisioning on your side that duplicates the files. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel

Re: Referencing by cname from one authoritative zone to another authoritative zone

there's no reason to add those extra records. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 3. 10. 2024, at 11:21, 大浦 義 wrote: > > ;; WARN

Re: Multi Master/Primary Authoritative DNSSEC DNS Nameserver With Synced/Replicated COMMON Dir/Vol For BIND

agile, not resilient. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the deve

Re: Multi Master/Primary Authoritative DNSSEC DNS Nameserver With Synced/Replicated COMMON Dir/Vol For BIND

secondary site, or use anycast for each primary, but since you are hosting “example.com” I don’t think it matters much. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 27

Re: About dnstap feature

/~sgtatham/bugs.html We don’t plan to drop dnstap any time soon, if that’s what you are asking. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 19. 9. 2024, at 8

Re: configure error for bind-9.20.1

/configure invocation is wrong, LIBURCU_CFLAGS and LIBURCU_LIBS need to be correct CFLAGS and LIBS, but you should be setting PKG_CONFIG_PATH instead. However, my recommendation would be to use the prepackaged RPMs for RHEL 9 provided by ISC. Ondrej -- Ondřej Surý (He/Him) ond...@isc.org My wo

Re: configure error for bind-9.20.1

you sent is: well, it's broken for you. Cheers, -- Ondřej Surý (He/Him) ond...@isc.org My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 16. 9. 2024, at 13:35, Sakuma, Koshiro wrote: > > He

Re: ISC-BON 9.20.1 - Almalinux 9

Then I guess you have to look why the selinux policy hasn’t been installed.My first instinct would be to purge isc-bind package and re-install it again.Ondrej--Ondřej Surý — ISC (He/Him)My working hours and your working hours may be different. Please do not feel obligated to reply outside your

  1   2   3   4   5   6   7   >