similar to: Unbound question: forward-zone and stub-zone

Sorry Stephen. I have enabled another dnscrypt process in port 6355 to test ... But no luck. On the other side, I am not sure if dnscrypt the problem. I have replaced unbound by dnsmasq and voila! ... All it is working very fast (and dnsmasq only spends 75 MiB of RAM, when unbound spends 400 MiB). And no more SERVFAIL errors ... But I don't understand where is the problem with

Not sure if this is a factor yet, but your forwardzone is looking for 3 ports but only 2 ports are configured in the systemd startup.. so are 1/3 of all lookups going to fail? Or is the 6355 a 'given' (aka it will be set up whether 6353 and 6354 are setup?) On 9 December 2017 at 16:45, C. L. Martinez <carlopmart at gmail.com> wrote: > On Sat, Dec 09, 2017 at 10:25:41PM +0100, C.

Just to clarify some things ... the Bind9 and Samba4 are both current Debian Jessie on amd64. So the applicable changelog would be http://metadata.ftp-master.debian.org/changelogs//main/b/bind9/testing_changelog Using 1:9.9.5.dfsg-6 the system worked nicely. Fixing a CVE pertaining to recursion does not easily link to DLZ issues. The system definitely has DLZ included. Otherwise it could not

On Sat, Dec 09, 2017 at 03:03:52PM -0500, Stephen John Smoogen wrote: > On 9 December 2017 at 14:04, C. L. Martinez <carlopmart at gmail.com> wrote: > > Hi all, > > > > I have installed dnscrypt's rpm package from EPEL repo under a CentOS 7.4 and using unbound as a resolver. But, I see constant timeouts and responses are very slow ... Using same config in a Debian 9

Last month I struggled with a severe DLZ issue and today I could solve it. Credits for the important idea go to Peter Serbe, thanks! I checked the DNS contents using RSAT. There was nothing wrong with SOA nor NS entries, but the reverse zones were actually forward zones with proper names in the in-addr.arpa. domain. I built proper reverse zones and deleted the forward-reverse zones and Bind

On Mon, 30 Mar 2020 at 08:42, Carlos Lopez <clopmz at outlook.com> wrote: > Hi Stephen, > > Many thanks for your answer. Unbound under OpenBSD is compiled with few > options: > > Version 1.9.4 > > That may also be the difference. RHEL-8 is 1.7.3 so I don't know if that added features or config options which the 1.9.4 has in it. > Configure line:

On Sat, Dec 09, 2017 at 10:25:41PM +0100, C. L. Martinez wrote: > On Sat, Dec 09, 2017 at 03:03:52PM -0500, Stephen John Smoogen wrote: > > On 9 December 2017 at 14:04, C. L. Martinez <carlopmart at gmail.com> wrote: > > > Hi all, > > > > > > I have installed dnscrypt's rpm package from EPEL repo under a CentOS 7.4 and using unbound as a resolver.

On 29/12/14 09:40, Lars Hanke wrote: > And some more information about this strange effect apparently no-one > has seen before. > > I now added the missing zone: > > samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U > Administrator > > and it claims that the zone is okay, but the next one is missing: > > Dec 29 10:31:12 verdandi named[2601]: Loading

On Mon, 30 Mar 2020 at 03:47, Carlos Lopez <clopmz at outlook.com> wrote: > Good morning, > > I have detected two strange problems with unbound under CentOS8 (fully > patched). I have tried same configuration in an OpenBSD host, and these > problems do not appear. > > a/ Error mesage ?connection refused?. I am using this unbound server to > resolv DNS records for our

Hi Stephen, Many thanks for your answer. Unbound under OpenBSD is compiled with few options: Version 1.9.4 Configure line: --enable-allsymbols --with-ssl=/usr --with-libevent=/usr --with-libexpat=/usr --without-pythonmodule --with-chroot-dir=/var/unbound --with-pidfile= --with-rootkey-file=/var/unbound/db/root.key --with-conf-file=/var/unbound/etc/unbound.conf --with-username=_unbound

I dug somewhat deeper into what is going on below and it seems even stranger. The reverse zone without SOA or NS does not even exist: root at verdandi:~# samba-tool dns query localhost 10.16.172.in-addr.arpa @ ALL -U Administrator Password for [AD\Administrator]: ERROR(runtime): uncaught exception - (9714, 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST') File

And some more information about this strange effect apparently no-one has seen before. I now added the missing zone: samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U Administrator and it claims that the zone is okay, but the next one is missing: Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using driver dlopen Dec 29 10:31:12 verdandi named[2601]:

UNCLASSIFIED Hi, I can successfully setup an IPv6 Reverse Lookup Zone (Samba 4.8.0 Internal DNS) and add valid PTR entries using samba-tool and/or RSAT DNS. However I cannot view the PTR records with samba-tool or RSAT. [root at bilbo user]# samba-tool dns add localhost 4.e.7.c.9.3.0.b.4.7.6.0.7.8.d.f.ip6.arpa 5.5.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR brutus.dev.local Password for [administrator at

Good morning, I have detected two strange problems with unbound under CentOS8 (fully patched). I have tried same configuration in an OpenBSD host, and these problems do not appear. a/ Error mesage ?connection refused?. I am using this unbound server to resolv DNS records for our internal domain (Bind9 is configured to listen in localhost interface, port 5353 udp and in the same host where

Hi Paully I can help with showing the "subgroup" 0: instead of @ use 0 samba-tool dns query dc3 130.130.in-addr.arpa 0 ALL the additional 0 might be a bug in 4.7, which is end of life; I would suggest to upgrade first......but Rowland will know more about it probably. br Mani On 03.11.2020 11:24, Paul Littlefield via samba wrote: > Hello Samba List, > > I have 2 problems

Hi all, I have installed dnscrypt's rpm package from EPEL repo under a CentOS 7.4 and using unbound as a resolver. But, I see constant timeouts and responses are very slow ... Using same config in a Debian 9 virtual machine, all works ok. I think the problem is with dnscrypt's rpm package provided by EPEL. Anyone have seen similar problems? Thanks. -- Greetings, C. L. Martinez

Hello Samba List, I have 2 problems with dns - seeing the child entries and a zone with an extra octet. First... I have created a /16 reverse zone as per the wiki page (https://wiki.samba.org/index.php/DNS_Administration#To_create_a_.2F24_reverse_zone)... $ samba-tool dns zonecreate dc3 130.130.in-addr.arpa $ samba-tool dns zonelist --reverse dc3 pszZoneName :

I just upgraded bind9 on my backup DC to 9.9.5-7-Debian and restarting the service failed: Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u bind -4 Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var'

Sorry about the HTML in the last email - I'm attempting to resend (with fingers crossed that my mailer doesn't throw in a bunch of HTML this time...) ----> I've taken the good suggestions and made some progress getting a bind-dhcp-samba server running on the Pi with Raspbian Buster. Rowland wrote: > The best way would be to find whatever is rewriting /etc/resolv.conf >

See inline comments: On Thu, 30 Nov 2017 16:25:25 +0000 Kristján Valur Jónsson via samba <samba at lists.samba.org> wrote: > Hi there, thanks for your reply. Probably I should add that: > a) I'm running Centos7 on the RPi3. Where did you get that from ? > b) Compiled and installed samba 4.7.2 from source (packaged AD samba > not available for CentOS) Not yet, but it is