Re: AppArmor, DHCP, Bind9 issue

2020-09-22 Thread Scott Nicholas
I think that's a good solution. I edited the config as you did but ended up moving zones into /etc/bind/zones. I guess because Debian already had some littered in /etc/bind but I did not want to give write access to that directory. I think that is your current issue. Classic permissions. "bind" g

Re: It is too hard for me to read from this mailing list

2020-09-21 Thread Scott Nicholas
You need to visit https://lists.isc.org/mailman/listinfo/bind-users and turn off digest. Regards, Scott On Mon, Sep 21, 2020, 4:15 PM Allen Chen wrote: > Hi there, > > It is so hard to follow up a thread if you put several subjects in one > email. How do I find the previous/next emails related

Re: RRSIG and TTL

2020-09-17 Thread Scott Nicholas
bug. It's not mine to open a case against but I plan to eventually provide my own test results. I'll add your method to the list. Thank you. Scott On Thu, Sep 17, 2020, 6:26 PM Tony Finch wrote: > Scott Nicholas wrote: > > > > Primary nameserver is behind a cache/prox

RRSIG and TTL

2020-09-11 Thread Scott Nicholas
I was hoping someone's experience could save me as I've spent too much time down this rabbit hole. Primary nameserver is behind a cache/proxy on enterprise network such that all external traffic hits this. Zone went bogus. I blame policy but on further inspection 2/3 proxys had differing TTL betwe