Re: about the effect of installing with "--without-openssl"

2018-08-28 Thread takahiro
Hello,Doug. Our(My) goal is to build a secure server and to eliminate useless work for BIND and OPENSSL vulnerability. = Improved reliability and cost down. so we have a policy that we shuoud not use functions that we don't use as much as possible.  (ex. DNSSEC,TSIG etc. and we have other reason

Re: about the effect of installing with "--without-openssl"

2018-08-26 Thread takahiro
Hi,there. >In all versions of BIND up to 9.12, it is possible to compile BIND without >openssl by using "configure --without-openssl". last week,I could install BIND9.11.4-P1 by using "configure --without-openssl" in my test machine. It seems that there is no problem with ldd `which named` ,rnd

Re: about the effect of installing with "--without-openssl"

2018-08-25 Thread takahiro
Thank you for many replies. But I can't still understand. "If I don't use DNSSEC,TSIG,DNS COOKIE, It' no problem that compile without openssl." Is my understanding correct? -- Sent from: http://bind-users-forum.2342410.n4.nabble.com/ ___ Please vis

Re: about the effect of installing with "--without-openssl"

2018-08-25 Thread takahiro
Hi Annand I appreciate your quick reply. >There are other features in BIND, such as TSIG keys, that require >cryptographic functions, so you still need openssl. Now I don't use TSIG keys. Maybe rndc ,too? (When I found out the word "cryptographic", rndc was displayed.) >Compiling without openss

about the effect of installing with "--without-openssl"

2018-08-25 Thread takahiro
ried finding out the answers , but I didn't found them. best regards, Takahiro -- Sent from: http://bind-users-forum.2342410.n4.nabble.com/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bin

Re: BIND do not listen on udp port 53

2009-05-29 Thread Takahiro Masuda
Also try dig ip +trace - Original Message - From: bind-users-boun...@lists.isc.org To: comp-protocols-dns-b...@isc.org Sent: Fri May 29 18:32:09 2009 Subject: Re: BIND do not listen on udp port 53 In article , Thomas Manson wrote: > Is there a mean to query the DNS Server on UDP po

RE: $generate lhs problem. Manual needs to be updated.

2009-03-04 Thread Takahiro Masuda
ules. class and ttl can be entered in either > order. > class > Specifies the class of the generated records. This must > match the zone class if it is specified. class and ttl can > be entered in either order. > type > At present the only supporte

$generate lhs problem. Manual needs to be updated.

2009-03-04 Thread Takahiro Masuda
Hi I was trying to get the $generate directive to work like so 11 IN PTR 14.cool.com. 30 IN PTR 33.cool.com. $GENERATE 11-30 ${3,0,d} PTR $.COOL.COM. I've read the manual here http://www.bind9.net/manual/bind/9.3.2/Bv9ARM.ch06.html#id2566761--- Syntax: $GENERATE range lhs [ttl] [clas