search for: unbound

Good morning, I have detected two strange problems with unbound under CentOS8 (fully patched). I have tried same configuration in an OpenBSD host, and these problems do not appear. a/ Error mesage ?connection refused?. I am using this unbound server to resolv DNS records for our internal domain (Bind9 is configured to listen in localhost interface, port 5353 u...

Hi Stephen, Many thanks for your answer. Unbound under OpenBSD is compiled with few options: Version 1.9.4 Configure line: --enable-allsymbols --with-ssl=/usr --with-libevent=/usr --with-libexpat=/usr --without-pythonmodule --with-chroot-dir=/var/unbound --with-pidfile= --with-rootkey-file=/var/unbound/db/root.key --with-conf-file=/var/unbound/...

Greetings, Unbound 1.4.20 OS X 10.8.4 - Server NSD 3.2.15 I have installed 'unbound' and it works nicely on my client (test purpose) - Client is MacBook Air. I have installed NSD (will be in replacement of BIND) on said client. All is good but when i try to start NSD Error --> nsd can't bind udp soc...

On Mon, 30 Mar 2020 at 08:42, Carlos Lopez <clopmz at outlook.com> wrote: > Hi Stephen, > > Many thanks for your answer. Unbound under OpenBSD is compiled with few > options: > > Version 1.9.4 > > That may also be the difference. RHEL-8 is 1.7.3 so I don't know if that added features or config options which the 1.9.4 has in it. > Configure line: --enable-allsymbols --with-ssl=/usr --with-libevent=/us...

On Mon, 30 Mar 2020 at 03:47, Carlos Lopez <clopmz at outlook.com> wrote: > Good morning, > > I have detected two strange problems with unbound under CentOS8 (fully > patched). I have tried same configuration in an OpenBSD host, and these > problems do not appear. > > a/ Error mesage ?connection refused?. I am using this unbound server to > resolv DNS records for our internal domain (Bind9 is configured to listen > in loc...

...rata and Enhancement Advisory 2017:2500 Upstream details at : https://access.redhat.com/errata/RHEA-2017:2500 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 2fac524811e1dbf01a6cd6bd931d4628a5adba2d20d0cd97f0cb342ea064b8b3 unbound-1.4.20-23.el6_9.4.i686.rpm ed1ce6f7b787138dd29af1064ce5046fa6fa49c0849f6facf1cc683ec1c61cdb unbound-devel-1.4.20-23.el6_9.4.i686.rpm 929982cc3197d5bfa6b770bace24e395a14ec98ff4e4db3377da3a2c29db32cf unbound-libs-1.4.20-23.el6_9.4.i686.rpm 46e553a20ee09820c08415a89ad3a5be5c978c1794ca2419caf91373718...

...OS Errata and Bugfix Advisory 2019:0412 Upstream details at : https://access.redhat.com/errata/RHBA-2019:0412 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 25abb1bca48f050f3b83404860f6f104f6b5385ce36bcd543af505178429a754 unbound-1.4.20-26.el6_10.1.i686.rpm e29e6025d9e17e771fcbbfe57503eed1fb57a63a6592edced0a56d8f7e73d99f unbound-devel-1.4.20-26.el6_10.1.i686.rpm 1b74dbd489e6264f2370aa165937d1c7efd030eed777ebd1b1c141f139170a76 unbound-libs-1.4.20-26.el6_10.1.i686.rpm 54e595a60edc0a827e2f3296a99f3c5dee304d3ef68d8656d2a6baef...

...Security Advisory 2020:2414 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2414 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d7c7de939c7a3dbec81adf688ae2557ca2fc3f18498eb9c09b8896d3b73dd071 unbound-1.6.6-4.el7_8.x86_64.rpm d253cd8566f10e05e7bbaba91b8985b224760bd9bc95d7be1236a61a2a300846 unbound-devel-1.6.6-4.el7_8.i686.rpm e08699d98dc4bdc6e3b0420111f4c7a54fd21233dfe55c8b0a966c770023e54f unbound-devel-1.6.6-4.el7_8.x86_64.rpm 75c67d364ea5de70c161e35d62955896b31edafb1314e1338b5ff4d265ec23e4...

...Security Advisory 2020:2642 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:2642 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 1664066f33b5ffb6a1fd8099211332a04ca7a4e431db14135e8e98690fc582ef unbound-1.6.6-5.el7_8.x86_64.rpm e30d6d4bc2ab1f6e252a2224542df587a6ab89d1002a2208a97f9b20709a5987 unbound-devel-1.6.6-5.el7_8.i686.rpm ee540a63c08cb4f3f1f9cbb31ed6aafb384759e068538775b84cd90e81a5cd6f unbound-devel-1.6.6-5.el7_8.x86_64.rpm e968be754e361bfe672d5ae44b63eecdf12bb80c9fda568b616607a04ad38f0e...

...ce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2020:2414 Important CentOS 7 unbound Security Update (Johnny Hughes) 2. CESA-2020:2414 Important CentOS 7 unbound Security Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Tue, 9 Jun 2020 15:58:30 +0000 From: Johnny Hughes <johnny at centos.org> To:...

Hi community, we have tow DCs there works under domain babis.local We are using unbound on our firewall for the interfaces as default DNS-Server. Unbound is activated and has an overwrite from our AD-Domain babis.local to the DCs. When DNSSEC is disabled on unbound, DNS-Queries to dc works perfect. When DNSSEC is activated on unbound, DNS-Queries will be send to root DNS-Servers and...

...at 03:03:52PM -0500, Stephen John Smoogen wrote: >> > On 9 December 2017 at 14:04, C. L. Martinez <carlopmart at gmail.com> wrote: >> > > Hi all, >> > > >> > > I have installed dnscrypt's rpm package from EPEL repo under a CentOS 7.4 and using unbound as a resolver. But, I see constant timeouts and responses are very slow ... Using same config in a Debian 9 virtual machine, all works ok. >> > > >> > > I think the problem is with dnscrypt's rpm package provided by EPEL. Anyone have seen similar problems? >> >...

...g technology! Nux! www.nux.ro ----- Original Message ----- > From: "Jon LaBadie" <jcu at labadie.us> > To: "CentOS mailing list" <centos at centos.org> > Sent: Wednesday, 12 April, 2017 07:16:22 > Subject: Re: [CentOS] Network Manager / CentOS 7 / local unbound > On Tue, Apr 11, 2017 at 01:40:21AM -0700, Alice Wonder wrote: >> Hello list - >> >> http://unix.stackexchange.com/questions/90035/how-to-set-dns-resolver-in-fedora-using-network-manager >> >> That says it works for CentOS 5 and I *suspect* the methods there (3...

Would prefer to continue to use my NSD/Unbound installs for most DNS (if not all) services. NSD is the authoritative server for the domain, and Unbound is the cache/resolver that the clients connect to. I'd like to not disturb this setup but I'll need the SRV records so that AD works. If the SRV records are fixed I suppose I could host...

Default install with local_unbound and ntpd can't be functional with incorrect date/time in BIOS: Unbound requred correct time for DNSSEC check and refuseing queries ("Jul 1 20:17:29 yellowrat unbound: [3444:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN") ntpd don't have any num...

Default install with local_unbound and ntpd can't be functional with incorrect date/time in BIOS: Unbound requred correct time for DNSSEC check and refuseing queries ("Jul 1 20:17:29 yellowrat unbound: [3444:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN") ntpd don't have any num...

...ello, NSD 4.7.0 running on FreeBSD 13.X and serving DNSSEC signed zone (say mydomain.org) to the world. I've been approached by a customer with the request to include certain records into mydomain.org zone which will be resolvable only from their premises. I'm thinking to setup a pair of unbound instances, ask the customer to configure conditional forwarding for mydomain.org to those unbound instances, and serve requested records by unbound, while the rest of the zone will be handled by NSD. I think this will break DNSSEC for them -- do you think this is the right approach? Any ideas wou...

From: Rafael J. Wysocki <rjw at rjwysocki.net> We leave PCI devices not bound to a driver in D0 during runtime suspend. But they may have a parent which is bound and can be transitioned to D3cold at runtime. Once the parent goes to D3cold, the unbound child may go to D3cold as well. When the child comes out of D3cold, its BARs are uninitialized and thus inaccessible when a driver tries to probe. Moreover configuration done during enumeration, e.g. ASPM and MPS, will be lost. One example are recent hybrid graphics laptops which cut power to the...

...=========================================================== > --- linux-pm.orig/drivers/pci/pci-driver.c > +++ linux-pm/drivers/pci/pci-driver.c > @@ -1224,11 +1224,14 @@ static int pci_pm_runtime_suspend(struct > int error; > > /* > - * If pci_dev->driver is not set (unbound), the device should > - * always remain in D0 regardless of the runtime PM status > + * If pci_dev->driver is not set (unbound), the device may go to D3cold, > + * but only if the bridge above it is suspended. In case that happens, > + * save its config space. > */ > -...

Hi all, Is anyone using unbound to do dns64 on CentOS 7? A quick 'unbound -h' shows both 'validator' and 'iterator' modules, but no dns64. Was it just not included or is there a supplementary or alternative package I need to install? I had it working on CentOS 6 and don't recall any special setup,...