Confused about query_source(-v6) address statement

queries always use a random unprivileged port." Which one is true? I only neet the source address to be set (both udp and tcp, for source based routing of dns queries), not the port. Thanks for clarification, Robert -- Robert Senger _

Re: DNSSEC ZSK key rollover, why is my zone double signed?

week ;) Thanks again, Robert Am Montag, den 07.09.2015, 12:48 +0200 schrieb Holger Zuleger: > On 05.09.2015 11:53, Robert Senger wrote: > > Hi all, > > > > I am having trouble with the DNSSEC ZSK rollover for one of my zones. > > Key rollover for all zones was sched

DNSSEC ZSK key rollover, why is my zone double signed?

any zone. Any hints what might have happened here? If you need more information, let me know (the logs only show not very helpful information). Cheers, Robert -- Robert Senger ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to un

Re: DNSSEC ZSK rollover

Thanks, that's what I wanted to know. I'll leave it like it is now. Robert Am Freitag, den 28.08.2015, 21:24 + schrieb Evan Hunt: > On Fri, Aug 28, 2015 at 07:24:23PM +0200, Robert Senger wrote: > > Is that the intended behaviour, or do I miss a point to get the zones

DNSSEC ZSK rollover

IXFR zone transfer to the secondary nameservers every time a RR is resigned. Is that the intended behaviour, or do I miss a point to get the zones resigned in one single action (and transfered with one single IXFR) rather than getting each RR resigned separately? C

Re: Identify source of "rndc reconfig" command?

, Robert Am Montag, den 24.08.2015, 23:01 +0200 schrieb Robert Senger: > Hi all, > > after upgrading from Debian Wheezy to Jessie, bind9 receives "rndc > reconfig" commands every 30 minutes. I've never seen this before. Some > of my own scripts run "rndc restart/

Identify source of "rndc reconfig" command?

nop,TS val 196636465 ecr 196636465], length 0 Is there a way to identify the source of these reconfig commands? It's really annoying as it messes up the log with 350 useless lines every 30 minutes. Thanks! Robert -- Robert Senger ___ Please

Re: Can I run two name servers on one host with two IP addresses?

gt; > Best regards, > > -Tom > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://

Re: dynamic update of split view acl

you want to move a client's ip from one view to the other? Cheers, Robert Am Samstag, den 28.02.2015, 04:27 -0800 schrieb Matt Calder: > .57.0.0/24 is still matched > by view1. Is there any way to accomplish this? -- Robert Senger PGP/GPG Public Key ID: 24E78B5E signature.asc D

DNSSEC: validation with "dnssec-must-be-secure" AND "dnssec-lookaside" fails

sec-must-be-secure" statements? I am running bind 9.8.4 on Debian. Cheers, Robert -- Robert Senger PGP/GPG Public Key ID: 24E78B5E signature.asc Description: This is a digitally signed message part ___ Please visit https://lists.isc.org/mai