Re: rolling my own hints file

2024-07-01 Thread Greg Choules via bind-users
via bind-users > *Sent:* Wednesday, June 26, 2024 12:56 PM > *To:* Greg Choules ; David Farje < > davidabelfa...@gmail.com> > *Cc:* bind-users ; Hefner, Joseph (HEALTH) < > joseph.hef...@health.ny.gov> > *Subject:* RE: rolling my own hints file > > > > *ATTE

RE: rolling my own hints file

2024-07-01 Thread Cuttler, Brian R (HEALTH) via bind-users
A xx.yy.zz..8 . 518400IN NS @ Thank you. Brian From: bind-users On Behalf Of Cuttler, Brian R (HEALTH) via bind-users Sent: Wednesday, June 26, 2024 12:56 PM To: Greg Choules ; David Farje Cc: bind-users ; Hefner, Joseph (HEALTH) Subject: RE: rolling my own hints file ATTENTION

Re: rolling my own hints file

2024-06-26 Thread Greg Choules via bind-users
t; Thank you – I think you’ve given me exactly what was needed. > > > > Brian > > > > *From:* Greg Choules > *Sent:* Wednesday, June 26, 2024 12:29 PM > *To:* Cuttler, Brian R (HEALTH) > *Cc:* bind-users > *Subject:* Re: rolling my own hints file > >

RE: rolling my own hints file

2024-06-26 Thread Cuttler, Brian R (HEALTH) via bind-users
ven me exactly what was needed. Brian From: Greg Choules Sent: Wednesday, June 26, 2024 12:29 PM To: Cuttler, Brian R (HEALTH) Cc: bind-users Subject: Re: rolling my own hints file You don't often get email from gregchoules+bindus...@googlemail.com<mailto:gregchoules+bindus...@googlem

Re: rolling my own hints file

2024-06-26 Thread David Farje
Hi Brian R, I built a lab to investigate DNS cache poisoning with custom root servers, no DNSSEC. What you're trying to do is possible in production I'm just not sure it's recommended. You will need to update your root.hints (or whatever file name you're using for the root hint zone) file to poin

Re: rolling my own hints file

2024-06-26 Thread Greg Choules via bind-users
Hi Brian. Yes, you can define your own hint zone and tell BIND to use it. The contents (I called the file "db.root" but the name is your choice) could be as simple as: @ 300 IN A 127.0.0.3 @ 300 IN NS @ which says for this zone (which will be called ".", coming next) the NS is the same name and i