<div dir="auto">Please sir in future no mail send on me sir. </div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 28 Nov, 2022, 4:03 am , <<a href="mailto:bind-users-request@lists.isc.org">bind-users-request@lists.isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send bind-users mailing list submissions to<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:bind-users-request@lists.isc.org" target="_blank" rel="noreferrer">bind-users-request@lists.isc.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:bind-users-owner@lists.isc.org" target="_blank" rel="noreferrer">bind-users-owner@lists.isc.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of bind-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: bind-users Digest, Vol 4123, Issue 1 (GAJENDRA CHOUBISA)<br>
2. Re: bind-users Digest, Vol 4123, Issue 1 (Benny Pedersen)<br>
3. Re: lame-servers: SERVFAIL unexpected RCODE resolving (Alex)<br>
4. Struggling with dnssec-policy timers (vom513)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 27 Nov 2022 20:02:34 +0530<br>
From: GAJENDRA CHOUBISA <<a href="mailto:gajendrachoubisa754@gmail.com" target="_blank" rel="noreferrer">gajendrachoubisa754@gmail.com</a>><br>
To: <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
Subject: Re: bind-users Digest, Vol 4123, Issue 1<br>
Message-ID:<br>
<CAG-cxMQSHLZGeJuTP9NjgF3s5SEHADbW8C=_<a href="mailto:LEWQ-k_TdR-zUA@mail.gmail.com" target="_blank" rel="noreferrer">LEWQ-k_TdR-zUA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Please no more emails on future sir.<br>
<br>
On Sun, 27 Nov, 2022, 5:30 pm , <<a href="mailto:bind-users-request@lists.isc.org" target="_blank" rel="noreferrer">bind-users-request@lists.isc.org</a>> wrote:<br>
<br>
> Send bind-users mailing list submissions to<br>
> <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
><br>
> To subscribe or unsubscribe via the World Wide Web, visit<br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
> or, via email, send a message with subject or body 'help' to<br>
> <a href="mailto:bind-users-request@lists.isc.org" target="_blank" rel="noreferrer">bind-users-request@lists.isc.org</a><br>
><br>
> You can reach the person managing the list at<br>
> <a href="mailto:bind-users-owner@lists.isc.org" target="_blank" rel="noreferrer">bind-users-owner@lists.isc.org</a><br>
><br>
> When replying, please edit your Subject line so it is more specific<br>
> than "Re: Contents of bind-users digest..."<br>
><br>
><br>
> Today's Topics:<br>
><br>
> 1. Re: lame-servers: SERVFAIL unexpected RCODE resolving<br>
> (Anders L?winger)<br>
><br>
><br>
> ----------------------------------------------------------------------<br>
><br>
> Message: 1<br>
> Date: Sun, 27 Nov 2022 04:04:09 +0000<br>
> From: Anders L?winger <<a href="mailto:anders@abundo.se" target="_blank" rel="noreferrer">anders@abundo.se</a>><br>
> To: <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
> Subject: Re: lame-servers: SERVFAIL unexpected RCODE resolving<br>
> Message-ID: <<a href="mailto:1669521774156.1242792614.949363040@abundo.se" target="_blank" rel="noreferrer">1669521774156.1242792614.949363040@abundo.se</a>><br>
> Content-Type: text/plain; charset="utf-8"<br>
><br>
> 26-Nov-2022 09:19:13.969 lame-servers: SERVFAIL unexpected RCODE resolving<br>
> '<a href="http://lists.opensuse.org/NS/IN" rel="noreferrer noreferrer" target="_blank">lists.opensuse.org/NS/IN</a>': 195.135.221.195#53<br>
> Lots of errors in the zone:<br>
><br>
><br>
> <a href="https://zonemaster.net/result/ff3dacdfc1e41199" rel="noreferrer noreferrer" target="_blank">https://zonemaster.net/result/ff3dacdfc1e41199</a><br>
><br>
><br>
><br>
><br>
> --<br>
> MVH/Regards<br>
> Anders L?winger, Abundo AB, +46 72 206 0322<br>
> -------------- next part --------------<br>
> An HTML attachment was scrubbed...<br>
> URL: <<br>
> <a href="https://lists.isc.org/pipermail/bind-users/attachments/20221127/d10d299d/attachment-0001.htm" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/pipermail/bind-users/attachments/20221127/d10d299d/attachment-0001.htm</a><br>
> ><br>
><br>
> ------------------------------<br>
><br>
> Subject: Digest Footer<br>
><br>
> _______________________________________________<br>
> ISC funds the development of this software with paid support<br>
> subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer noreferrer" target="_blank">https://www.isc.org/contact/</a> for more<br>
> information.<br>
><br>
> bind-users mailing list<br>
> <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
><br>
><br>
> ------------------------------<br>
><br>
> End of bind-users Digest, Vol 4123, Issue 1<br>
> *******************************************<br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.isc.org/pipermail/bind-users/attachments/20221127/fdf188a4/attachment-0001.htm" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/pipermail/bind-users/attachments/20221127/fdf188a4/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sun, 27 Nov 2022 16:04:21 +0100<br>
From: Benny Pedersen <<a href="mailto:me@junc.eu" target="_blank" rel="noreferrer">me@junc.eu</a>><br>
To: <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
Subject: Re: bind-users Digest, Vol 4123, Issue 1<br>
Message-ID: <<a href="mailto:3bd213e33a7f5e50e9834d89b8233888@junc.eu" target="_blank" rel="noreferrer">3bd213e33a7f5e50e9834d89b8233888@junc.eu</a>><br>
Content-Type: text/plain; charset=US-ASCII; format=flowed<br>
<br>
GAJENDRA CHOUBISA skrev den 2022-11-27 15:32:<br>
> Please no more emails on future sir.<br>
<br>
its a self service, no one can help you get more or less mails here<br>
<br>
List-Id: BIND Users Mailing List <<a href="http://bind-users.lists.isc.org" rel="noreferrer noreferrer" target="_blank">bind-users.lists.isc.org</a>><br>
List-Unsubscribe: <<a href="https://lists.isc.org/mailman/options/bind-users" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/mailman/options/bind-users</a>>, <br>
<mailto:<a href="mailto:bind-users-request@lists.isc.org" target="_blank" rel="noreferrer">bind-users-request@lists.isc.org</a>?subject=unsubscribe><br>
List-Archive: <<a href="https://lists.isc.org/pipermail/bind-users/" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/pipermail/bind-users/</a>><br>
List-Post: <mailto:<a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a>><br>
List-Help: <mailto:<a href="mailto:bind-users-request@lists.isc.org" target="_blank" rel="noreferrer">bind-users-request@lists.isc.org</a>?subject=help><br>
List-Subscribe: <<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a>>, <br>
<mailto:<a href="mailto:bind-users-request@lists.isc.org" target="_blank" rel="noreferrer">bind-users-request@lists.isc.org</a>?subject=subscribe><br>
<br>
try using above<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Sun, 27 Nov 2022 15:54:45 -0500<br>
From: Alex <<a href="mailto:mysqlstudent@gmail.com" target="_blank" rel="noreferrer">mysqlstudent@gmail.com</a>><br>
To: Anders L?winger <<a href="mailto:anders@abundo.se" target="_blank" rel="noreferrer">anders@abundo.se</a>>, <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
Subject: Re: lame-servers: SERVFAIL unexpected RCODE resolving<br>
Message-ID:<br>
<CAB1R3sjkCKEKeyeMGku+HRGtXswiBU2+U+dv=<a href="mailto:1x2YwdmM6uthw@mail.gmail.com" target="_blank" rel="noreferrer">1x2YwdmM6uthw@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
On Sat, Nov 26, 2022 at 11:05 PM Anders L?winger <<a href="mailto:anders@abundo.se" target="_blank" rel="noreferrer">anders@abundo.se</a>> wrote:<br>
<br>
> 26-Nov-2022 09:19:13.969 lame-servers: SERVFAIL unexpected RCODE resolving<br>
> '<a href="http://lists.opensuse.org/NS/IN" rel="noreferrer noreferrer" target="_blank">lists.opensuse.org/NS/IN</a>': 195.135.221.195#53<br>
><br>
> Lots of errors in the zone:<br>
><br>
> <a href="https://zonemaster.net/result/ff3dacdfc1e41199" rel="noreferrer noreferrer" target="_blank">https://zonemaster.net/result/ff3dacdfc1e41199</a><br>
><br>
<br>
That's very helpful information. Is there any way to configure bind to<br>
avoid using those nameservers? It doesn't appear as if it's currently doing<br>
that on its own. I'm also very surprised that such an organization would<br>
have such a poorly configured DNS. Is that common?<br>
<br>
Here's McAfee's blocklist service that also has numerous problems,<br>
including name servers that don't even respond.<br>
<a href="https://zonemaster.net/result/c2e9affcb3b39d00" rel="noreferrer noreferrer" target="_blank">https://zonemaster.net/result/c2e9affcb3b39d00</a><br>
<br>
I'm also seeing similar issues with other name servers as query-errors:<br>
<br>
27-Nov-2022 15:09:51.471 query-errors: client @0x7fd19e38cb68<br>
127.0.0.1#53460 (<a href="http://us-smtp-delivery-100.mimecast.com.sa.fmb.la" rel="noreferrer noreferrer" target="_blank">us-smtp-delivery-100.mimecast.com.sa.fmb.la</a>): query failed<br>
(timed out) for <a href="http://us-smtp-delivery-100.mimecast.com.sa.fmb.la/IN/A" rel="noreferrer noreferrer" target="_blank">us-smtp-delivery-100.mimecast.com.sa.fmb.la/IN/A</a> at<br>
../../../lib/ns/query.c:7729<br>
<br>
Is there any way to display the name server that failed with these queries<br>
so I can research further?<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.isc.org/pipermail/bind-users/attachments/20221127/d6b54e20/attachment-0001.htm" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/pipermail/bind-users/attachments/20221127/d6b54e20/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Sun, 27 Nov 2022 17:32:59 -0500<br>
From: vom513 <<a href="mailto:vom513@gmail.com" target="_blank" rel="noreferrer">vom513@gmail.com</a>><br>
To: <a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
Subject: Struggling with dnssec-policy timers<br>
Message-ID: <<a href="mailto:ADE62D46-708F-4FA2-BDC3-D9C61276D3AB@gmail.com" target="_blank" rel="noreferrer">ADE62D46-708F-4FA2-BDC3-D9C61276D3AB@gmail.com</a>><br>
Content-Type: text/plain; charset=utf-8<br>
<br>
Hello all,<br>
<br>
I?m still having a really hard time understanding and getting my timings right. At least I think I am (from the way I?m reading the status/logs/state files).<br>
<br>
I let my current CSK get completely ?omnipresent? for all it?s timers (I?m not even sure if this is really necessary?) I did a rollover, and I?m very confused by the various timers I?m seeing.<br>
<br>
FYI - I added:<br>
<br>
publish-safety 1d;<br>
retire-safety 1d;<br>
<br>
To the policy ?default?. Other than that and NSEC3, everything is using values from the ?default? policy. With this, it seems that my successor key will go active but CDS won?t be published until the same exact time. This seems to defeat the purpose of doing an overlapping rollover. I would think I would want CDS published before the new key goes active. Is the old key going to keep being used for signing as well ? I don?t think so because it?s retirement is also at this exact moment.<br>
<br>
So simultaneously, it seems that I have:<br>
<br>
- New key start to be used for signing<br>
- CDS is published<br>
- Old key is retired <br>
<br>
If I?m reading this right - did my timers screw this up ? I would have hoped/assumed that the ?default? policy would have timers arranged as such as there there *should* not be any gaps in coverage (assuming everything else goes swimmingly?) I?ll be honest - I?m kind of feeling like an idiot because of how difficult this seems.<br>
<br>
Can someone please set me straight ? I can ?nuke? this zone?s keys and state and start over (which I?ve done several times already). It?s just getting a bit tiresome because of course when I do this all the various timers start over.<br>
<br>
Here are my state files, 2 keys. Current and a successor. Thanks in advance.<br>
<br>
?<br>
; This is the state of key 3697, for acuity.tech.<br>
Algorithm: 13<br>
Length: 256<br>
Lifetime: 0<br>
Predecessor: 35731<br>
KSK: yes<br>
ZSK: yes<br>
Generated: 20221127221000 (Sun Nov 27 17:10:00 2022)<br>
Published: 20221127221000 (Sun Nov 27 17:10:00 2022)<br>
Active: 20221128231500 (Mon Nov 28 18:15:00 2022)<br>
PublishCDS: 20221128231500 (Mon Nov 28 18:15:00 2022)<br>
DNSKEYChange: 20221127221000 (Sun Nov 27 17:10:00 2022)<br>
ZRRSIGChange: 20221127221000 (Sun Nov 27 17:10:00 2022)<br>
KRRSIGChange: 20221127221000 (Sun Nov 27 17:10:00 2022)<br>
DSChange: 20221127221000 (Sun Nov 27 17:10:00 2022)<br>
DNSKEYState: rumoured<br>
ZRRSIGState: hidden<br>
KRRSIGState: rumoured<br>
DSState: hidden<br>
GoalState: omnipresent<br>
<br>
; This is the state of key 35731, for acuity.tech.<br>
Algorithm: 13<br>
Length: 256<br>
Lifetime: 546573<br>
Successor: 3697<br>
KSK: yes<br>
ZSK: yes<br>
Generated: 20221122152527 (Tue Nov 22 10:25:27 2022)<br>
Published: 20221122152527 (Tue Nov 22 10:25:27 2022)<br>
Active: 20221122152527 (Tue Nov 22 10:25:27 2022)<br>
Retired: 20221128231500 (Mon Nov 28 18:15:00 2022)<br>
Removed: 20221209232000 (Fri Dec 9 18:20:00 2022)<br>
DSPublish: 20221123043555 (Tue Nov 22 23:35:55 2022)<br>
PublishCDS: 20221124153027 (Thu Nov 24 10:30:27 2022)<br>
DNSKEYChange: 20221123163027 (Wed Nov 23 11:30:27 2022)<br>
ZRRSIGChange: 20221124153027 (Thu Nov 24 10:30:27 2022)<br>
KRRSIGChange: 20221123163027 (Wed Nov 23 11:30:27 2022)<br>
DSChange: 20221125053555 (Fri Nov 25 00:35:55 2022)<br>
DNSKEYState: omnipresent<br>
ZRRSIGState: omnipresent<br>
KRRSIGState: omnipresent<br>
DSState: omnipresent<br>
GoalState: hidden<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank" rel="noreferrer">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of bind-users Digest, Vol 4123, Issue 2<br>
*******************************************<br>
</blockquote></div>