<div dir="ltr"><div><div><div>What system and what release of BIND?<br></div>I met this similiar issue months ago and I just recompiled from the source then the problem got fixed.<br><br></div>regards,<br></div>Wah.<br></div><div class="gmail_extra"><br><div class="gmail_quote">2015-10-12 18:30 GMT+08:00 Neil <span dir="ltr"><<a href="mailto:neil20@iprimus.com.au" target="_blank">neil20@iprimus.com.au</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Bind Community,<br>
<br>
Had a BIND Crash on 9.9.8.<br>
Any ideas?<br>
<br>
12-Oct-2015 02:09:06.457 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 02:09:06.458 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 02:59:08.850 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 02:59:08.850 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 04:55:34.944 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 04:55:34.944 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 06:15:35.638 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 06:15:35.638 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 07:55:37.894 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 07:55:37.894 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 08:29:12.235 security: error: client 12.168.40.21#32469: view<br>
host_resolver_trusted: request has invalid signature: TSIG<br>
<a href="http://alexlembke.members.mac.com" rel="noreferrer" target="_blank">alexlembke.members.mac.com</a>: tsig verify failure (BADKEY)<br>
12-Oct-2015 08:35:39.175 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 08:35:39.176 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 08:49:17.268 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 08:49:17.268 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 08:50:37.524 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 08:50:37.524 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 09:39:10.215 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 09:39:10.215 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 10:15:40.924 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 10:15:40.924 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 10:29:08.849 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 10:29:08.850 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 11:15:41.259 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 11:15:41.260 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 12:49:38.443 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 12:49:38.443 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 19:39:08.302 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 19:39:08.302 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 20:15:49.022 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 20:15:49.023 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 20:35:49.056 general: error: socket.c:5407: unexpected error:<br>
12-Oct-2015 20:35:49.056 general: error: connect(0.0.0.1#53) 22/Invalid<br>
argument<br>
12-Oct-2015 21:01:47.916 general: critical: resolver.c:1784:<br>
INSIST(fctx->references > 1) failed<br>
12-Oct-2015 21:01:47.916 general: critical: exiting (due to assertion<br>
failure)<br>
<br>
Neil<br>
-----Original Message-----<br>
From: <a href="mailto:bind-users-bounces@lists.isc.org">bind-users-bounces@lists.isc.org</a><br>
[mailto:<a href="mailto:bind-users-bounces@lists.isc.org">bind-users-bounces@lists.isc.org</a>] On Behalf Of Mukund Sivaraman<br>
Sent: Monday, 12 October 2015 7:59 PM<br>
To: Wolfgang Riedel [CISCO] <<a href="mailto:wolfgang@cisco.com">wolfgang@cisco.com</a>><br>
Cc: <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
Subject: Re: RPZ - override TXT records {REP=5.6}<br>
<br>
Hi Wolfgang<br>
<br>
On Thu, Oct 08, 2015 at 11:25:14PM +0200, Wolfgang Riedel [CISCO] wrote:<br>
> Hi Folks,<br>
><br>
> I am currently struggling with using RPZ for inserting or overriding<br>
> TXT resource records.<br>
><br>
> This is my goal:<br>
><br>
> ; do not rewrite <a href="http://www.cisco.com" rel="noreferrer" target="_blank">www.cisco.com</a> (so, PASSTHRU) and add or override<br>
> missing metadata<br>
> <a href="http://www.cisco.com" rel="noreferrer" target="_blank">www.cisco.com</a> CNAME rpz-passthru.<br>
> <a href="http://www.cisco.com" rel="noreferrer" target="_blank">www.cisco.com</a> TXT "CISCO-CLS=app-name:HTTP|app-class:TD"<br>
><br>
> What work's is that I can do one or the other but not both at the same<br>
> time if I need to use a CNAME.<br>
><br>
> This works:<br>
><br>
> <a href="http://wolfgang.dns-as.org" rel="noreferrer" target="_blank">wolfgang.dns-as.org</a> A 193.34.28.108<br>
> <a href="http://wolfgang.dns-as.org" rel="noreferrer" target="_blank">wolfgang.dns-as.org</a> TXT "CISCO-CLS=app-name:RPZ|app-class:TD"<br>
><br>
> but in reality this will not work for CDN or load-balanced sites which<br>
> don't have fixed IP address.<br>
><br>
> Any hint's what I am doing wrong?<br>
<br>
You aren't doing anything wrong. Yours is a corner case.<br>
<br>
I hope I understood what you're trying to do correctly: From the zone<br>
comment, perhaps you want the TXT query type to return the TXT RDATA you've<br>
supplied and everything else passthru to regular processing. It can't be<br>
done as triggers don't use the question's TYPE field.<br>
<br>
An alternative is to include all the RRs for that QNAME in the answer (your<br>
second example). Yours is a weird case, because you can't use the following<br>
in the policy zone which named wouldn't allow loading (it won't allow CNAME<br>
to coexist):<br>
<br>
<a href="http://www.cisco.com" rel="noreferrer" target="_blank">www.cisco.com</a> CNAME <a href="http://www.cisco.com.akadns.net" rel="noreferrer" target="_blank">www.cisco.com.akadns.net</a>.<br>
<a href="http://www.cisco.com" rel="noreferrer" target="_blank">www.cisco.com</a> TXT "CISCO-CLS=app-name:HTTP|app-class:TD"<br>
<br>
So using the A record (your second example) or adding triggers for the<br>
target of the CNAME record chain are your best bet. As the latter varies,<br>
perhaps the former for your region would be best.<br>
<br>
Mukund<br>
<br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div><br></div>