Re: Bind9 local DNS not forwarding query to public DNS

2024-03-12 Thread Dan Ritter
Muhammad Yousuf Khan wrote: > Need your experience advice, We have a BIND9 DNS server that operates both > privately and publicly for the domain example xyz.com. I use the private > DNS for certain secure nodes on our local network. I want all VPN users to > be able to resolve these

Re: Bind9 local DNS not forwarding query to public DNS

2024-03-12 Thread Eduardo M KALINOWSKI
On 12/03/2024 12:48, Muhammad Yousuf Khan wrote:   Dear All, Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain example xyz.com <http://xyz.com/>. I use the private DNS for certain secure nodes on our local network. I want a

Bind9 local DNS not forwarding query to public DNS

2024-03-12 Thread Muhammad Yousuf Khan
Dear All, Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain example xyz.com. I use the private DNS for certain secure nodes on our local network. I want all VPN users to be able to resolve these secure nodes using our local DNS

Re: bind9 and dns forward

2023-06-01 Thread Michel Verdier
Le 1 juin 2023 Bonno Bloksma a écrit : >> If you get an answer it's a dnssec problem with the error message in your >> logs. If there is no answer it's another problem. > Well, it seems I get an answer with the +cd option, and none without. Yes. If I do : # dig tio.nl A +dnssec +multiline ; <<

RE: bind9 and dns forward

2023-06-01 Thread Bonno Bloksma
Hi, @Tim, If I use the dnssec-validation no; option then indeed it all works. Just tested it again to make sure. And as a final solution to this problem I might accept it, but I would rather not. @Michel, > I reread all our mails and I miss to ask you this one (as answers via > external dns

Re: bind9 and dns forward

2023-06-01 Thread Michel Verdier
Le 1 juin 2023 Bonno Bloksma a écrit : > I can do that, but ... that is only for inbound traffic TO my dns server on > this network. > That part is working without any problem. Changing that will not change > anything for the clients on this network. You are right. I simply used to fix explicit

RE: bind9 and dns forward

2023-06-01 Thread Tim Woodall
On Thu, 1 Jun 2023, Bonno Bloksma wrote: My bind instance can reach the company dns server buy claims the response is false/insecure Does that maybe mean that my bind gets a "normal" response from the company dns whereas the external dns at toplevel .nl. (being the parent zone) tells that an

RE: bind9 and dns forward

2023-06-01 Thread Bonno Bloksma
Hi, >> linbobo:~# ss -nap | grep named >> tcp LISTEN 0 10 [2a02:a45f:96c2:1:1e69:7aff:fe0c:65e3]:53 [::]:* >> users:(("named",pid=554,fd=78)) >> tcp LISTEN 0 10 [fe80::1e69:7aff:fe0c:65e3]%eno1:53 [::]:* >> users:(("named",pid=554,fd=71)) >> tcp LISTEN 0 10 [fe80::33bc:2b:d928:991d]%tun0:53 [::]:*

Re: bind9 and dns forward

2023-06-01 Thread Michel Verdier
Le 1 juin 2023 Bonno Bloksma a écrit : > linbobo:~# ss -nap | grep named > tcp LISTEN 0 10 [2a02:a45f:96c2:1:1e69:7aff:fe0c:65e3]:53 [::]:* > users:(("named",pid=554,fd=78)) > tcp LISTEN 0 10 [fe80::1e69:7aff:fe0c:65e3]%eno1:53 [::]:* > users:(("named",pid=554,fd=71)) > tcp LISTEN 0 10 [fe80::33bc

RE: bind9 and dns forward

2023-06-01 Thread Bonno Bloksma
Hi, > resolv.conf must have only one search entry. And you don't want to resolv > with google directly. So you should have : Ok, I have the google dns commented. Alhough Now I remember why I had the google dns in there. ;-) For my machine to create the VPN it needs to know the ip number of

Re: bind9 and dns forward

2023-05-23 Thread Michel Verdier
Le 19 mai 2023 Bonno Bloksma a écrit : > Been a few busy week, that is why I only respond now, sory. Same for me :/ > beheerdertio@linbobo:~$ cat /etc/resolv.conf > domain bobo.xs4all.nl > search bobo.xs4all.nl > search tio.nl > search staf.tio.nl > search student.tio.nl > nameserver 127.0.0.1 >

RE: bind9 and dns forward

2023-05-19 Thread Bonno Bloksma
Hi, Been a few busy week, that is why I only respond now, sory. Also as there is a lot of sensitive info in this mail, like a complete lost to domain controllers to be hacked, ;-) I am sending it direct. I will send a redacted version to the list >> What does +cd do? I was unable to find it

Re: bind9 and dns forward

2023-05-08 Thread Michel Verdier
Le 8 mai 2023 Bonno Bloksma a écrit : > I also do not understand this difference when querying the internal dns > server directly. > Why does the +trace +cd not show an answer but when I leave them out I get a > correct answer. Is that because +trace forces it to start at the root which is > irre

RE: bind9 and dns forward

2023-05-08 Thread Bonno Bloksma
s://www.isc.org/bind-keys // dnssec-enable no; // dnssec-validation auto; listen-on-v6 { any; }; }; linbobo:/etc/bind# cat named.conf // This is the primary configuration file for the BIND DNS s

Re: bind9 and dns forward

2023-05-05 Thread Michel Verdier
Le 5 mai 2023 Bonno Bloksma a écrit : > linbobo:/etc/bind# cat named.conf.local You have only zone blocks in this file, right ? And you don't use views ? > Why does it first go to the public dns and then run into the dnssec problem? > There is a direct definition for the tio.nl zone in my confi

RE: bind9 and dns forward

2023-05-05 Thread Bonno Bloksma
Hi, > In fact you don't resolv at all. Can you provide: > dig einsccmdp-01.tio.nl +trace +cd - linbobo:~# dig einsccmdp-01.tio.nl +trace +cd ; <<>> DiG 9.16.37-Debian <<>> einsccmdp-01.tio.nl +trace +cd ;; global options: +cmd . 430791 IN

Re: bind9 and dns forward

2023-05-02 Thread Michel Verdier
Le 2 mai 2023 Bonno Bloksma a écrit : > linbobo:/etc/bind# cat named.conf.local > --- > [] > zone "tio.nl" IN { > type forward; > forward only; > forwarders {172.16.128.40; 172.16.208.10;}; > }; > > zone "staf.tio.nl" IN { > type forward;

RE: bind9 and dns forward

2023-05-02 Thread Bonno Bloksma
Hi, Lots of info and log quotes. I hope you can find the "normal" text. >> We use a different dns server(s) and zonefile for the external dns >> environment from what we use internally. Company dns is Windows server 2016 >> incase that is relevant. > > It&

Re: bind9 and dns forward

2023-04-29 Thread Michel Verdier
Le 28 avril 2023 Bonno Bloksma a écrit : > We use a different dns server(s) and zonefile for the external dns > environment from what we use internally. Company dns is Windows server 2016 > incase that is relevant. It's better to use dig (package bind9-dnsutils) to first elimina

bind9 and dns forward

2023-04-28 Thread Bonno Bloksma
Hello, I have a Debian machine at my home network performing several functions. Two of those are dns server for my network at home and a VPN server to the company network. To facilitate my use of the VPN to the company network I am also forwarding all dns requests tot the company domain to the

Re: named.service or bind9.service or both?

2023-01-18 Thread Jesper Dybdal
On 2023-01-18 13:39, Jeffrey Walton wrote: On Wed, Jan 18, 2023 at 6:25 AM Jesper Dybdal wrote: That leaves one file in the system with the name "bind9.service": /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/bind9.service Can I safely delete that one (I suspect

Re: named.service or bind9.service or both?

2023-01-18 Thread Jesper Dybdal
On 2023-01-18 13:55, Greg Wooledge wrote: On Wed, Jan 18, 2023 at 12:25:03PM +0100, Jesper Dybdal wrote: That leaves one file in the system with the name "bind9.service": /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/bind9.service Can I safely delete that one (I

Re: named.service or bind9.service or both?

2023-01-18 Thread Greg Wooledge
On Wed, Jan 18, 2023 at 12:25:03PM +0100, Jesper Dybdal wrote: > I have now, in order: > * Disabled bind9.service > * Corrected /etc/default/named so the named service can start (it was > missing the chroot) > * Stopped bind9.service > * Started named.service and checked tha

Re: named.service or bind9.service or both?

2023-01-18 Thread Jeffrey Walton
On Wed, Jan 18, 2023 at 6:25 AM Jesper Dybdal wrote: > > > On 2023-01-16 13:36, Greg Wooledge wrote: > > On Mon, Jan 16, 2023 at 10:42:35AM +0100, Jesper Dybdal wrote: > >> 28969163 4 -rw-r--r-- 1 root root 255 Jun 2 2016 > >> /etc/systemd

Re: named.service or bind9.service or both?

2023-01-18 Thread Jesper Dybdal
On 2023-01-16 13:36, Greg Wooledge wrote: On Mon, Jan 16, 2023 at 10:42:35AM +0100, Jesper Dybdal wrote:  28969163  4 -rw-r--r--   1 root root  255 Jun  2 2016 /etc/systemd/system/bind9.service I suspect that the bind9 service ought to be removed.  Is that correct? ... In

Re: named.service or bind9.service or both?

2023-01-16 Thread Greg Wooledge
On Mon, Jan 16, 2023 at 03:51:52PM +0100, Jesper Dybdal wrote: > I'll do that.  Should I then also remove the "Alias=bind9.service" line from > named.service? If Debian put it there, then no. Leave it alone. It's probably just a backward compatibility shim, from when t

Re: named.service or bind9.service or both?

2023-01-16 Thread Jesper Dybdal
On 2023-01-16 13:36, Greg Wooledge wrote: On Mon, Jan 16, 2023 at 10:42:35AM +0100, Jesper Dybdal wrote:  28969163  4 -rw-r--r--   1 root root  255 Jun  2 2016 /etc/systemd/system/bind9.service I suspect that the bind9 service ought to be removed.  Is that correct? It looks

Re: named.service or bind9.service or both?

2023-01-16 Thread Greg Wooledge
On Mon, Jan 16, 2023 at 10:42:35AM +0100, Jesper Dybdal wrote: >  28969163  4 -rw-r--r--   1 root root  255 Jun  2 2016 > /etc/systemd/system/bind9.service > > I suspect that the bind9 service ought to be removed.  Is that correct? It looks like you (or someone ac

named.service or bind9.service or both?

2023-01-16 Thread Jesper Dybdal
I'm running Buster.  I then had a problem with BIND and DNSSEC, so I upgraded my bind9 package to the one in buster-backports. But it seems that this has involved a partial rename of the systemd unit from bind9 to named.  So I now have two almost equal systemd units.  And named.se

Re: bind9 slave sending notifies

2022-03-23 Thread Tim Woodall
On Thu, 24 Mar 2022, Jeremy Ardley wrote: I'm using BIND 9.16.22-Debian (Extended Support Version) The problem is when I restart I see "sending notifies" in the log. I have checked the configuration named.conf.local and named.conf.options and there is no 'allow-transfer' in the configuration

bind9 slave sending notifies

2022-03-23 Thread Jeremy Ardley
I'm using BIND 9.16.22-Debian (Extended Support Version) The problem is when I restart I see "sending notifies" in the log. I have checked the configuration named.conf.local and named.conf.options and there is no 'allow-transfer' in the configuration. example named.conf.local entry: zone "l

samba-ad install bug using bind9

2021-05-12 Thread Александр .
t; /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_11.so"; }; but bind9 not started:    named[3866]: samba_dlz: Failed to connect to Failed to connect to /var/lib/samba/private/dns/sam.ldb: Unable to open tdb '/var/lib/samba/private/dns/sam.ldb': No such file or directory: Operatio

Re: Setting up bind9/DNS

2019-07-02 Thread Alessandro Vesely
On Fri 28/Jun/2019 22:02:52 +0200 Joe wrote: > On Fri, 28 Jun 2019 11:44:54 -0500 Dennis Wicks wrote: > >> I was thinking that I could setup a nameserver on my machine >> with enries in it for the virtual hosts and have my local >> network address in the list of nameservers in my >> modem/rout

Re: Setting up bind9/DNS

2019-06-28 Thread Joe
al > network address in the list of nameservers in my > modem/router, and that is where I need the help. > > I have installed bind9, running on buster. So how do I set > up the name server and populate it with the info for my > virtual hosts? Pointers to forums, cookbooks,

Re: Setting up bind9/DNS

2019-06-28 Thread Bob Weber
help. I have installed bind9, running on buster. So how do I set up the name server and populate it with the info for my virtual hosts? Pointers to forums, cookbooks, etc. would be appreciated as well as hints and tips! TIA! Dennnis First you will need to read about Apache virtual hosts here

Re: Setting up bind9/DNS

2019-06-28 Thread john doe
list of nameservers in my modem/router, and that is where I need the help. > > I have installed bind9, running on buster. So how do I set up the name > server and populate it with the info for my virtual hosts? Pointers to > forums, cookbooks, etc. would be appreciated as well as hints

Setting up bind9/DNS

2019-06-28 Thread Dennis Wicks
like this happens with the virtual hosts! I was thinking that I could setup a nameserver on my machine with enries in it for the virtual hosts and have my local network address in the list of nameservers in my modem/router, and that is where I need the help. I have installed bind9, running on

Re: bind9 startup problems: /var/cache /bind

2019-05-25 Thread Ross Boylan
I tested my suspicion that bind9-resolvconf was somehow implicated in the bind9 start problems by returning bind9-resolvconf to its original, disabled, state and restarting the system. Unfortunately, it didn't help: May 25 19:05:34 barley named[804]: /etc/bind/named.conf.options:2: c

Re: bind9 startup problems: /var/cache /bind

2019-05-22 Thread Ross Boylan
On Wed, May 22, 2019 at 2:47 PM Richard Hector wrote: > > RequiresMountsFor=/absolute/path/of/mount > > .. to go in the unit file - or IIRC running: > > sudo systemctl edit bind9.service > > ... and putting in: > > ---8< > [Unit]

Re: bind9 startup problems: /var/cache /bind

2019-05-22 Thread Richard Hector
hing services while some of the mounts (and the > required decryption) are still to be done? > > Is there some systemd way to ensure the file system is mounted before > launching bind? But I'd think if /var weren't available, bind > wouldn't be the only one with a

Re: bind9 startup problems: /var/cache /bind

2019-05-22 Thread Ross Boylan
/var is a separate file system, and like / it's encrypted, so it might take a bit of time to activate it. Whether it's available when needed, I don't know, though the error suggests it might not be. Could systemd be launching services while some of the mounts (and the required decryption) are stil

Re: bind9 startup problems: /var/cache /bind

2019-05-22 Thread Richard Hector
On 23/05/19 8:00 AM, Ross Boylan wrote: > At system start, bind9 fails to start on a recently created buster > system. Some of the local bind is based on configuration from an > earlier bind. The logs show > /etc/bind/named.conf.options:2: change directory to '/var/cache/bind&#x

bind9 startup problems: /var/cache /bind

2019-05-22 Thread Ross Boylan
At system start, bind9 fails to start on a recently created buster system. Some of the local bind is based on configuration from an earlier bind. The logs show /etc/bind/named.conf.options:2: change directory to '/var/cache/bind' failed: file not found But if I then start it ma

Re: what are you using instead of bind9?

2019-02-13 Thread Lee
On 2/12/19, Andy Smith wrote: > Hi, > > On Tue, Feb 12, 2019 at 06:40:01PM -0500, Lee wrote: >> What are people using these days to >> 1. have dnssec enabled lookups >> 2. filter external dns answers > > I use Unbound for resolvers. > > I understand that Unbound can do some RPZ-like things with it

Re: what are you using instead of bind9?

2019-02-12 Thread Andy Smith
Hi, On Tue, Feb 12, 2019 at 06:40:01PM -0500, Lee wrote: > What are people using these days to > 1. have dnssec enabled lookups > 2. filter external dns answers I use Unbound for resolvers. I understand that Unbound can do some RPZ-like things with its local-data and local-zone directives, but I

what are you using instead of bind9?

2019-02-12 Thread Lee
bind9 version 9.10.3-P4-Debian doesn't like my rpz configuration (that works on 9.11.5-P1) Before I get into figuring out how to install a backport, it looks like bind9 isn't the preferred answer anymore - see https://qa.debian.org/popcon-graph.php?packages=bind9&show_installed=on&

Re: Bind 9: consequences of completely removind all bind9 packages on jessie and stretch)?

2017-07-24 Thread Tom Browder
s resource >> records. Also, I don't like to rush into debian version updates, so I >> fear the package bind9 might slip behind current standards. > > It is trivially easy to backport the bind9-package from Stretch to > Jessie (just change the dependency on libssl1.0-dev

Re: Bind 9: consequences of completely removind all bind9 packages on jessie and stretch)?

2017-07-24 Thread Sven Hartge
Tom Browder wrote: > On Mon, Jul 24, 2017 at 8:23 AM, Greg Wooledge wrote: >> On Sun, Jul 23, 2017 at 06:55:09AM -0500, Tom Browder wrote: >>> I would like to remove all bind9 packages from servers running bind9 >>> and install the latest bind9 from source. >

Re: Bind 9: consequences of completely removind all bind9 packages on jessie and stretch)?

2017-07-24 Thread Tom Browder
On Mon, Jul 24, 2017 at 8:23 AM, Greg Wooledge wrote: > On Sun, Jul 23, 2017 at 06:55:09AM -0500, Tom Browder wrote: >> I would like to remove all bind9 packages from servers running bind9 >> and install the latest bind9 from source. > > Because you want to satisfy inter

Re: Bind 9: consequences of completely removind all bind9 packages on jessie and stretch)?

2017-07-24 Thread Greg Wooledge
On Sun, Jul 23, 2017 at 06:55:09AM -0500, Tom Browder wrote: > I would like to remove all bind9 packages from servers running bind9 > and install the latest bind9 from source. Because you want to satisfy internal audits that don't understand how Debian security patching works, ri

Re: Bind 9: consequences of completely removind all bind9 packages on jessie and stretch)?

2017-07-23 Thread Tom Browder
On Sun, Jul 23, 2017 at 07:13 Lck Ras wrote: > On 07/23/2017 08:55 PM, Tom Browder wrote: > > I would like to remove all bind9 packages from servers running bind9 > > and install the latest bind9 from source. > > > > Two questions, please: > > > > 1. Will

Bind 9: consequences of completely removind all bind9 packages on jessie and stretch)?

2017-07-23 Thread Tom Browder
I would like to remove all bind9 packages from servers running bind9 and install the latest bind9 from source. Two questions, please: 1. Will there be any adverse consequences from the substitution if I install with --prefix=/usr/local? 2. Same question as 1 but for installation into --prefix

Samba_dlz, bind9, dhcp with the reverse zone error TSIG

2016-04-06 Thread cosme
I having compiled Samba-4.4.0 with with Bind9 everything works ok Although the case of the reverse zone bind_dlz the module does not add automatically, you can make the tools for entrono windows or samba-tool. I added my reverse zone dns samba-tool zonecreate 0.99.10.in-addr.arpa According to

bind9 log to an other file (not syslog)

2016-03-10 Thread basti
Hello, I try to use an other file for bind9 logs to keep syslog small. Based on this https://wiki.debian.org/Bind9#File_.2Fetc.2Fbind.2Fnamed.conf.log and http://www.zytrax.com/books/dns/ch7/logging.html I add the following to the config: /etc/bind/named.conf ... include "/etc

Samba with bind9

2016-01-27 Thread David Rotger
I have a debian with samba and bind9 server. Into samba server I've public and secured folders. From windows xp I can connect to public and secured folders with password, but from windows 10 it's impossible authenticate the user for private folders. I see that if I stop the bind server

Re: Enable SPF in postfix and Bind9??

2015-10-30 Thread Jochen Spieker
Håkon Alstadheim: > Den 29. okt. 2015 22:27, skrev Jochen Spieker: >> >> I have trouble comprehending what exactly you are saying and I am not >> sure whether you are actually knowing what you are doing, but in order >> to enable SPF for a domain, all you need to do is add a TXT record for >> this

Re: Enable SPF in postfix and Bind9??

2015-10-30 Thread Håkon Alstadheim
have a postfix mail sever face as internet gateway both cases >> Debian. >> and Bind9 the internet facing server and enable SPF to prevent >> from outside can send emails to my local domain as if they were >> internal users ?? >> spamassasin use and amavisd-new als

Re: Enable SPF in postfix and Bind9??

2015-10-29 Thread Jochen Spieker
co...@crearq.co.cu: > > To apply SPF to control mails as well as spoofing > users and more. > - I have a server with postfix mail for local users which is > assigned to use SASL to prevent spoofing mails. > - I have a postfix mail sever face as internet gateway both cases >

Enable SPF in postfix and Bind9??

2015-10-29 Thread cosme
Hi To apply SPF to control mails as well as spoofing users and more. - I have a server with postfix mail for local users which is assigned to use SASL to prevent spoofing mails. - I have a postfix mail sever face as internet gateway both cases Debian. and Bind9 the internet facing server and

bind9 keytable.c problem

2015-08-14 Thread Wojciech Gintowt
Hi all i have a problem with bind in 1:9.8.4.dfsg.P1-6+nmu2 in syslog Aug 14 11:42:23 core-gw named[14159]: keytable.c:533: REQUIREkeytable) != ((void *)0)) && (((const isc__magic_t *)(keytable))->magic == ((('K') << 24 | ('T') << 16 | ('b') << 8 | ('l')) failed Aug 14 11:42:23 core-gw na

bind9 (or alsa) hangs at shutdown

2015-04-01 Thread Racla Grillyz
Hello. I am running Wheezy and during the shutdown, when all the services are getting stopped, the service 'bind9' takes around one minute to stop (showing the message "waiting for pid XYIJ to die..."). I tried to issue a 'kill -9' in its rc-script and, although b

Re: bind9 needs sometimes a restart after resume from suspend

2014-12-02 Thread Bob Proulx
Karl E. Jorgensen wrote: > I wonder... What exactly does "bind not responding" mean? any command > that reproduces that would be handy. > > As this is happening in relation to suspend/resume, this would imply > that network interfaces go down and up too. So perhaps bind is failing > to detect the r

Re: bind9 needs sometimes a restart after resume from suspend

2014-12-02 Thread Karl E. Jorgensen
30 November 2014 11:15:41 Pascal Hambourg wrote: > > > > Hello, > > > > > > > > Rainer Dorsch a écrit : > > > > > I run bind9 locally and noticed that bind9 sometimes needs a restart > > > > > after > > > > > suspend.

Re: bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Rainer Dorsch
On Sunday 30 November 2014 11:59:16 Karl E. Jorgensen wrote: > Hi > > On Sun, Nov 30, 2014 at 12:26:36PM +0100, Rainer Dorsch wrote: > > Hi Pascal, > > > > On Sunday 30 November 2014 11:15:41 Pascal Hambourg wrote: > > > Hello, > > > > > > R

Re: bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Martin Read
On 30/11/14 12:02, Andrew McGlashan wrote: On 30/11/2014 8:42 PM, Rainer Dorsch wrote: blackbox:/etc/bind# cat /etc/systemd/system/bind9-resume.service So ... buggy systemd bites yet again; This is *BIND* we're talking about; even if I was opposed to systemd, I probably wouldn't

Re: bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Andrew McGlashan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 30/11/2014 8:42 PM, Rainer Dorsch wrote: > blackbox:/etc/bind# cat /etc/systemd/system/bind9-resume.service So ... buggy systemd bites yet again; and *some* [too many] people still don't understand why we don't want this on our Deb

Re: bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Karl E. Jorgensen
Hi On Sun, Nov 30, 2014 at 12:26:36PM +0100, Rainer Dorsch wrote: > Hi Pascal, > > On Sunday 30 November 2014 11:15:41 Pascal Hambourg wrote: > > Hello, > > > > Rainer Dorsch a écrit : > > > I run bind9 locally and noticed that bind9 sometimes needs a resta

Re: bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Rainer Dorsch
Hi Pascal, On Sunday 30 November 2014 11:15:41 Pascal Hambourg wrote: > Hello, > > Rainer Dorsch a écrit : > > I run bind9 locally and noticed that bind9 sometimes needs a restart after > > suspend. > > Why ? Not running, not resolving, errors... ? bind9 does not

Re: bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Pascal Hambourg
Hello, Rainer Dorsch a écrit : > > I run bind9 locally and noticed that bind9 sometimes needs a restart after > suspend. Why ? Not running, not resolving, errors... ? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Troub

bind9 needs sometimes a restart after resume from suspend

2014-11-30 Thread Rainer Dorsch
Hello, I run bind9 locally and noticed that bind9 sometimes needs a restart after suspend. This happens in rare case only though (maybe 1 out of 10 to 20 resume operations). bind9 status looks ok for me: blackbox:~# /etc/init.d/bind9 status ● bind9.service - BIND Domain Name Server Loaded

Re: BIND9 Dynamic Update Zones

2014-11-19 Thread Pascal Hambourg
Roman Gelfand a écrit : > When I try run "nsupdate -d -L 9 nsu.tmp", where nsu.tmp is > > update add cmm3.workdom.com 3600 A 192.168.10.8 > show > send > > Dynamic zone file > > include "/etc/bind/zones.rfc1918"; > > zone "workdom.com" IN { > type master; > f

BIND9 Dynamic Update Zones

2014-11-19 Thread Roman Gelfand
When I try run "nsupdate -d -L 9 nsu.tmp", where nsu.tmp is update add cmm3.workdom.com 3600 A 192.168.10.8 show send Dynamic zone file include "/etc/bind/zones.rfc1918"; zone "workdom.com" IN { type master; file "dyn.workdom.com.zone"; allow-transfer {

Re: bind9

2013-11-01 Thread Karl E. Jorgensen
Hi On Fri, Nov 01, 2013 at 01:10:33AM -0400, Roman Gelfand wrote: > My workstations' ips are assigned by dhcp server on firewall. The > bind9 is running on debian 7 box. Is there a way to automatically > update forward and reverse zones? In this configuration: probably not. H

Re: bind9

2013-11-01 Thread Joe
On Fri, 1 Nov 2013 10:58:50 +0530 Arun Khan wrote: > On Fri, Nov 1, 2013 at 10:40 AM, Roman Gelfand > wrote: > > My workstations' ips are assigned by dhcp server on firewall. The > > bind9 is running on debian 7 box. Is there a way to automatically > > upd

Re: bind9

2013-10-31 Thread Arun Khan
On Fri, Nov 1, 2013 at 10:40 AM, Roman Gelfand wrote: > My workstations' ips are assigned by dhcp server on firewall. The > bind9 is running on debian 7 box. Is there a way to automatically > update forward and reverse zones? > For known MAC addresses I usually assign &#x

bind9

2013-10-31 Thread Roman Gelfand
My workstations' ips are assigned by dhcp server on firewall. The bind9 is running on debian 7 box. Is there a way to automatically update forward and reverse zones? Thanks in advance -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe

Re: bind9

2013-10-04 Thread pch0317
I found in /var/log/daemon.log that not all zone are in view brackets. I solve the problem. Thanks On 10/03/2013 08:41 PM, Karl E. Jorgensen wrote: Hi On Thu, Oct 03, 2013 at 07:28:46PM +0200, Pawe?? Ch. wrote: Hi list I install bind9 server on debian (https://wiki.debian.org/Bind9). When I

Re: bind9

2013-10-03 Thread Karl E. Jorgensen
Hi On Thu, Oct 03, 2013 at 07:28:46PM +0200, Pawe?? Ch. wrote: > Hi list > > I install bind9 server on debian (https://wiki.debian.org/Bind9). When I add > named.conf.log entries bind9 can't start. Before adding log entries bind work > correctly. Without more informa

bind9

2013-10-03 Thread Paweł Ch .
Hi list I install bind9 server on debian (https://wiki.debian.org/Bind9). When I add named.conf.log entries bind9 can't start. Before adding log entries bind work correctly. Best Regards

Re: bind9, openswan crashes wheezy VPS

2013-08-21 Thread Gregory Nowak
y VPS provider changed the network interface from virtio_net to e1000. Once we made that change, the VPS stopped crashing, but querying local bind9 for www.debian.org. for example, and running openswan as responder now produces a kernel panic. The VPS itself stays up, but I'm forced to do a hard sh

Re: bind9, openswan crashes wheezy VPS

2013-08-13 Thread Bob Proulx
Gregory Nowak wrote: > Bob Proulx wrote: > without problems. So, it could very well be something with the > virtio_net module. Will be interesting to see what solves this. Good luck! > > BTW... What do you have in /etc/nsswitch.conf? Hope it just says > > "files dns" there. > > > > $ grep ho

Re: bind9, openswan crashes wheezy VPS

2013-08-13 Thread Gregory Nowak
teresting you mention that. I've transferred stuff over ftp/http/ssh up/down with no problem. On the other hand, as you point out, bind9 uses udp for queries initially, and openswan uses udp as well. I went ahead and contacted my VPS provider's support, since there doesn't seem to be

Re: bind9, openswan crashes wheezy VPS

2013-08-12 Thread Bob Proulx
Gregory Nowak wrote: > On the other hand, if it's something in the network stack, why am I > for example able to query my VPS provider's servers for the same > domains without crashes? If it's in the network stack, then I think > it's reasonable to conclude I'd be seeing crashes regardless of what

Re: bind9, openswan crashes wheezy VPS

2013-08-12 Thread Gregory Nowak
On Mon, Aug 12, 2013 at 02:44:35PM -0600, Bob Proulx wrote: > I don't know anything about why you are having system crashes. But no > one else responded and so I decided to jump in. Thank you for doing so. I actually went ahead and opened bugs against openswan and bind9 after

Re: bind9, openswan crashes wheezy VPS

2013-08-12 Thread Bob Proulx
Gregory Nowak wrote: > I have a VPS running a fresh install of wheezy, installed by me from > scratch (including kernel). Everything seems to be running fine, > except for bind9 and openswan which literally crash the vps as > explained below. I don't know anything about why you

bind9, openswan crashes wheezy VPS

2013-08-10 Thread Gregory Nowak
Hello everyone. I have a VPS running a fresh install of wheezy, installed by me from scratch (including kernel). Everything seems to be running fine, except for bind9 and openswan which literally crash the vps as explained below. I'll start with bind9, since I have more info there. It'

Re: bind9 squeeze/oldstable

2013-05-18 Thread george cox
ticed the logs were empty then too. Thanks. - Original Message - From: Joe Sent: 05/18/13 08:31 AM To: debian-user@lists.debian.org Subject: Re: bind9 squeeze/oldstable On Sat, 18 May 2013 07:57:08 -0400 "george cox" wrote: > I found named-checkconf search-engining, and this

Re: bind9 squeeze/oldstable

2013-05-18 Thread Joe
On Sat, 18 May 2013 07:57:08 -0400 "george cox" wrote: > I found named-checkconf search-engining, and this found my bind > syntax error, yeah! > > Is there anything I can do about the logging issue? I was thinking of > doing a dist-upgrade to wheezy on my server, but could the logging > issue re

Re: bind9 squeeze/oldstable

2013-05-18 Thread george cox
wheezy instead? Any advice? Far as I know that messages and syslog not containing info (filesystem not full BTW) is the only problem. - Original Message - From: george cox Sent: 05/18/13 07:25 AM To: debian-user@lists.debian.org Subject: bind9 squeeze/oldstable I haven't had a chan

bind9 squeeze/oldstable

2013-05-18 Thread george cox
I haven't had a chance to upgrade this system yet. I needed to update my bind configuration and now it will not start. In the past bind would write errors to the syslog (or messages file, i forget which), but it isn't doing so. Is there another way to get the error messages? All the info I get

Re: Bind9 - help - wildcard priority fail.

2012-08-28 Thread Camaleón
On Mon, 27 Aug 2012 20:47:08 +0200, Ja wrote: > Hi, Hi, but please, no html posts, thanks :-) >   > I'm having problem with newest Bind9 (9.7.3). In version 9.6-ESV-R1 it > works fine. The problem is that wildcard records are taking priority to > more specific ones. (...) &

Bind9 - help - wildcard priority fail.

2012-08-27 Thread Ja
Hi,   I'm having problem with newest Bind9 (9.7.3). In version 9.6-ESV-R1 it works fine. The problem is that wildcard records are taking priority to more specific ones.   For example (adresses are fake, dont bother to checking i

Re: Problem in bind9 9.8.1 package on SID

2011-11-26 Thread Bob Sully
Re: "initializing DST: openssl failure" Nope. Not a problem with the includes under named.conf. It's looking for this file: /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgost.so If you're running a chrooted bind9, it can't find this library, obviously. The kluge

Re: Problem in bind9 9.8.1 package on SID

2011-11-12 Thread Bob Proulx
Jorge Bastos - Decimal wrote: > After updating to the last SID package of bind9, I have: > Setting up bind9 (1:9.8.1.dfsg-1) ... > NOT updating named.conf.options to include DNSSEC enablement > Starting domain name service...: bind9 failed! > invoke-rc.d: initscript bind9, action

Problem in bind9 9.8.1 package on SID

2011-11-12 Thread Jorge Bastos - Decimal
Howdy people, After updating to the last SID package of bind9, I have: --- Setting up bind9 (1:9.8.1.dfsg-1) ... NOT updating named.conf.options to include DNSSEC enablement Starting domain name service...: bind9 failed! invoke-rc.d: initscript bind9, action "start" failed. d

Re: Bind9 (9.7.4)

2011-11-08 Thread Pascal Hambourg
Hello, Chris Brennan a écrit : > > I was discussing a bind issue that I am experiencing w/ an acquaintance on > IRC this afternoon and he informed me that bind was updated to cover a > latent bug in the DNS message processing code that could allow certain > UPDATE requests to crash named. > >

Re: Bind9 (9.7.4)

2011-11-08 Thread Chris Brennan
On Tue, Nov 8, 2011 at 3:01 PM, Pascal Hambourg wrote: Hello, > > Chris Brennan a écrit : > > > > I was discussing a bind issue that I am experiencing w/ an acquaintance > on > > IRC this afternoon and he informed me that bind was updated to cover a > > latent bug in the DNS message processing co

Bind9 (9.7.4)

2011-11-08 Thread Chris Brennan
Greetings! I was discussing a bind issue that I am experiencing w/ an acquaintance on IRC this afternoon and he informed me that bind was updated to cover a latent bug in the DNS message processing code that could allow certain UPDATE requests to crash named. I'm currently running Bind 9.7.3, whi

bind9: DNSSEC SERVFAIL when zone has no DS record

2011-10-03 Thread Sergio Charpinel Jr.
Hi, Dig returns SERVFAIL while trying to resolve a dnssec enabled zone without DS record in parent zone. For example, I have these two DNSSEC enabled zones: domain.com subdomain.domain.com domain.com zone has NO DS record for subdomain.domain.com zone, and subdomain.domain.com has an A record fo

Re: Dig +bind9 debian squeeze

2011-09-04 Thread Camaleón
On Sat, 03 Sep 2011 19:03:56 -0430, john vera wrote: > F1 F1 F1 F1 F1: es simple, pero no puedo. (...) John, this is the English mailing list, should you want to ask something here it should be done in English :-) There is also a Spanish mailing list you can try: http://lists.debian.org/debia

  1   2   3   4   >