[Pdns-users] Pdns-users Digest, Vol 111, Issue 21

Mon Apr 16 11:25:53 UTC 2012

Ok Peter

Thanks a Lot for your valuable inputs and thanks too for bearing up with
my silly question if any as i am new to dnssec.:)

Thanks & Best Regards
Parth Monga

On Mon, Apr 16, 2012 at 3:30 PM, <pdns-users-request at mailman.powerdns.com>wrote:

> Send Pdns-users mailing list submissions to
>        pdns-users at mailman.powerdns.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://mailman.powerdns.com/mailman/listinfo/pdns-users
> or, via email, send a message with subject or body 'help' to
>        pdns-users-request at mailman.powerdns.com
>
> You can reach the person managing the list at
>        pdns-users-owner at mailman.powerdns.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Pdns-users digest..."
>
>
> Today's Topics:
>
>   1. Re: Huge PDNS+DNSSEC setup-Need help (Peter van Dijk)
>      (Peter van Dijk)
>   2. Re: epollmplexer.cc (Juraj Lutter)
>   3. Re: epollmplexer.cc (Peter van Dijk)
>   4. Re: some Solaris issues (Peter van Dijk)
>   5. NSEC RR - pdns 2.9.22 (Sven Broeske)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 16 Apr 2012 07:41:53 +0200
> From: Peter van Dijk <peter.van.dijk at netherlabs.nl>
> Subject: Re: [Pdns-users] Huge PDNS+DNSSEC setup-Need help (Peter van
>        Dijk)
> To: pdns-users Users <pdns-users at mailman.powerdns.com>
> Message-ID: <D88E8196-1D13-4AE6-B026-86D8E27D07F6 at netherlabs.nl>
> Content-Type: text/plain; charset=iso-8859-1
>
> Hi,
>
> On Apr 15, 2012, at 15:00 , PARTH MONGA wrote:
>
> > So as you said key rollovers are not mandate,so that means if i created
> ksk and zsk for a domain so that will last long during a zone lifecycle
> till its live and secured
> > So i am new to dnssec can you please give me the best practice in
> handling keys like when should i intentionally go for a key rollover and
> which key is to be rollovered ksk or zsk or both and how frequent.
> > Please show some light on this.
>
> You asked the same two days earlier. There's no need to repeat. I cannot
> provide you with best practices for your organization.
>
> Kind regards,
> --
> Peter van Dijk
> Netherlabs Computer Consulting BV - http://www.netherlabs.nl/
>
>
>
> ------------------------------
>
> Message: 2
> Date: Mon, 16 Apr 2012 08:04:12 +0200
> From: Juraj Lutter <juraj at lutter.sk>
> Subject: Re: [Pdns-users] epollmplexer.cc
> To: Peter van Dijk <peter.van.dijk at netherlabs.nl>
> Cc: pdns-users Users <pdns-users at mailman.powerdns.com>
> Message-ID: <C86D1DDD-43D6-41E8-B5DB-AD51B593D626 at lutter.sk>
> Content-Type: text/plain;       charset=us-ascii
>
> No. epollmplexer is still being built on Solaris for some reason.
>
>
>
> On 16 Apr 2012, at 07:40, Peter van Dijk <peter.van.dijk at netherlabs.nl>
> wrote:
>
> > Hi Juraj,
> >
> > On Apr 15, 2012, at 1:41 , Juraj Lutter wrote:
> >
> >> is epollmplexer.cc referenced from somewhere? If not, is there any
> >> reason to build it? It can't be built on Solaris.
> >
> >
> > epollmplexer is used when building the recursor on Linux. On Solaris,
> > it will build with either portsmplexer or devpollmplexer. See
> pdns/Makefile-recursor
> > and pdns/sysdeps-recursor/ for more information.
> >
> > Kind regards,
> > --
> > Peter van Dijk
> > Netherlabs Computer Consulting BV - http://www.netherlabs.nl/
> >
> > _______________________________________________
> > Pdns-users mailing list
> > Pdns-users at mailman.powerdns.com
> > http://mailman.powerdns.com/mailman/listinfo/pdns-users
>
>
> ------------------------------
>
> Message: 3
> Date: Mon, 16 Apr 2012 08:10:48 +0200
> From: Peter van Dijk <peter.van.dijk at netherlabs.nl>
> Subject: Re: [Pdns-users] epollmplexer.cc
> To: pdns-users Users <pdns-users at mailman.powerdns.com>
> Message-ID: <B3ED93DA-3568-4908-A29C-CC9D79B4EC26 at netherlabs.nl>
> Content-Type: text/plain; charset=us-ascii
>
> Hi Juraj,
>
> On Apr 16, 2012, at 8:04 , Juraj Lutter wrote:
>
> > No. epollmplexer is still being built on Solaris for some reason.
>
>
> If you are doing 'make pdns_recursor' inside a pdns checkout: don't do
> that (we should probably document this or even make it impossible). The
> only recommended and supported way to build the recursor is from a recursor
> distribution, either acquired as a tarball called pdns-recursor-* or from
> typing ./dist-recursor inside a pdns checkout.
>
> If you are seeing epollmplexer trying to build in a different scenario,
> please let me know!
>
> Apologies for the confusion.
>
> Kind regards,
> --
> Peter van Dijk
> Netherlabs Computer Consulting BV - http://www.netherlabs.nl/
>
>
>
> ------------------------------
>
> Message: 4
> Date: Mon, 16 Apr 2012 11:17:30 +0200
> From: Peter van Dijk <peter.van.dijk at netherlabs.nl>
> Subject: Re: [Pdns-users] some Solaris issues
> To: pdns-users Users <pdns-users at mailman.powerdns.com>
> Message-ID: <8DA4A01F-E738-44A6-86CD-F796218B4EBA at netherlabs.nl>
> Content-Type: text/plain; charset=us-ascii
>
> Hello Juraj,
>
> On Apr 15, 2012, at 10:26 , Juraj Lutter wrote:
>
> > On http://buildfarm.opencsw.org/~wilbury/pdns-3.1-rc2-patches/ you can
> > find a patch against 3.1-rc2 which replaces call to ``rdtsc''
> > instruction by a call to gethrtime() function which does the same thing
> > and is Solaris API compliant. The patch is only for SPARC platform, on
> > x86 you still can use ``rdtsc''
>
>
> I'd be happy to apply it. I do have a question. Both historically and as a
> result of some of your patches, we now have checks for '__sun' and
> '__sun+__SVR4', and your patch uses __SPARC__. I have to ask: which check
> is right in which situation?
>
> Kind regards,
> --
> Peter van Dijk
> Netherlabs Computer Consulting BV - http://www.netherlabs.nl/
>
>
>
> ------------------------------
>
> Message: 5
> Date: Mon, 16 Apr 2012 11:40:35 +0200
> From: Sven Broeske <mail at svenbroeske.de>
> Subject: [Pdns-users] NSEC RR - pdns 2.9.22
> To: pdns-users at mailman.powerdns.com
> Message-ID: <4F8BE913.1030302 at svenbroeske.de>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Hi folks,
>
> Regarding the pdns documentation it should be possible to use the NSEC
> RR since version 2.9.21. Therefore, I tried to create a NSEC RR with the
> value "sub.test.de. A NS SOA". Unfortunately, I get always a SERVFAIL if
> I try to 'dig' the domain test.de on my nameserver.
>
> The log file of the pdns server shows the following problem:
> "Exception building answer packet (Unknown record was stored
> incorrectly, need 3 fields, got 4: sub.test.de. A NS SOA) sending out
> servfail"
>
> As far as I know "sub.test.de." should be interpreted as first field
> (next domain name) and "A NS SOA" as second field (list of types).
>
> The questions which are resulting:
> What would be the third field?
> Why is every RR in the "list of types" interpreted as separate field?
> What would be the correct configuration?
>
> Versions:
> pdns-backend-mysql              2.9.22-8+squeeze2
> pdns-server                     2.9.22-8+squeeze2
>
> Linux foobar 2.6.26-2-amd64 #1 SMP Tue Jan 25 05:59:43 UTC 2011 x86_64
> GNU/Linux
>
> If you need further information, don't hesitate to ask.
>
> Thanks in advance.
>
> Best regards,
> Sven
>
>
> ------------------------------
>
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>
>
> End of Pdns-users Digest, Vol 111, Issue 21
> *******************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20120416/3b3dc262/attachment.html>