Path: csiph.com!weretis.net!feeder8.news.weretis.net!paganini.bofh.team!news.killfile.org!usenet.stanford.edu!not-for-mail From: "Duncan" Newsgroups: comp.protocols.dns.bind Subject: RE: Upgrading from 9.14.12 to 9.16.4 - with existing DNSSEC zones Date: Thu, 3 Sep 2020 12:36:07 +0200 Organization: TE Corp. Lines: 203 Approved: bind-users@lists.isc.org Message-ID: References: <6AB3E1D2-2192-4E34-A1E9-F9157EC222CF@isc.org> Reply-To: NNTP-Posting-Host: lists.isc.org Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=2.16.840.1.101.3.4.2.1; boundary="----=_NextPart_000_0063_01D681EE.CBD26090" X-Trace: usenet.stanford.edu 1599129359 8911 149.20.1.60 (3 Sep 2020 10:35:59 GMT) X-Complaints-To: action@cs.stanford.edu To: Return-Path: X-Original-To: bind-users@lists.isc.org Delivered-To: bind-users@lists.isc.org X-Virus-Scanned-fMail-Outgoing: A.N.J.A.-VirusScan at atlantia.fmail-server.com In-Reply-To: <6AB3E1D2-2192-4E34-A1E9-F9157EC222CF@isc.org> X-Mailer: Microsoft Outlook 16.0 Content-Language: de Thread-Index: AQFalJNeTAQn0Qx0yDbktTFGNakoAAEYjKVBqkXKHkA= X-Originating-IP-fMail-Outgoing: 79.205.197.215 X-Envelope-From-fMail-Outgoing: X-OriginalArrivalTime-fMail-Outgoing: Thu, 3 Sep 2020 12:35:43 +0200 X-Message-ID-fMail-Outgoing: e0e48212ca46444e9dc115ef72f028a5 X-Spam-Status: No, score=-2.0 required=5.0 tests=GPG_SIGNED,KAM_SHORT, SPF_HELO_NONE,SPF_PASS autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org X-BeenThere: bind-users@lists.isc.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: BIND Users Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: X-Mailman-Original-References: <6AB3E1D2-2192-4E34-A1E9-F9157EC222CF@isc.org> Xref: csiph.com comp.protocols.dns.bind:16094 This is a multipart message in MIME format. ------=_NextPart_000_0063_01D681EE.CBD26090 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I think, I 've found the problem... Read in the documentation: "UDP network ports used for listening can no = longer simultaneously be used for sending traffic." I had listen-on, notify-source and transfer-source all set to the same = IP and Port (53). Setting notify-source and transfer-source to different = ports seems to solve my problems. Under 9.14.12 there were no problems - that's the difference to 9.16.4, = which caused my problems. -----Original Message----- From: Mark Andrews =20 Sent: Wednesday, September 2, 2020 12:38 AM To: duncan@isn-portal.de Cc: bind-users@lists.isc.org Subject: Re: Upgrading from 9.14.12 to 9.16.4 - with existing DNSSEC = zones Do you go to your mechanic and not take the car when you have a problem = you don=E2=80=99t understand with the car? BIND 9.16.4 should be a drop in replacement for 9.14.12. As you are = seeing issues you will need to supply more details like the name of the = zone so people can actually try and figure out what the issue is. Mark=20 > On 2 Sep 2020, at 01:06, Duncan wrote: >=20 > I am using DNSSEC for more than 5 years now (never had a problem so = far), but after upgrading to the latest bind-9.16.4 the verification = fails using Verisign's DNSSEC Validator. > =20 > I reverted back to 9.14.12 and everything works as expected. > =20 > First I started upgrading my secondary DNS-Server (primary left = untouched !!!) to 9.16.4 - restarted named and everything seems to be = OK. > =20 > So I tested with Verisign's DNSSEC Validator = https://dnssec-analyzer.verisignlabs.com/ before upgrading my primary = DNS. > =20 > And Verisign reported an error -> All Queries to = secondary.my-dnsserver-domain.com for my-domain.com/Atimed out or failed > =20 > Test Results: https://ibb.co/7QLVJsC > =20 > Any ideas? =E2=80=A6or should I upgrade both servers before I do my = first test (not only the secondary server)? As I said, I only updated my = secondary server and left my primary server untouched! > =20 > Are there any related upgrade issues from from 9.14.12 to 9.16.4, = which I should take care first (do I have to update something in my = configs)? Is it possible to keep my already signed zones of my 9.14.12 = installation? Or do I have to re-sign anything? > =20 > =20 > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to = unsubscribe from this list >=20 > ISC funds the development of this software with paid support = subscriptions. Contact us at https://www.isc.org/contact/ for more = information. >=20 >=20 > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users --=20 Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@isc.org ------=_NextPart_000_0063_01D681EE.CBD26090 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCExYw ggW7MIIDo6ADAgECAghXChGXQsTjzDANBgkqhkiG9w0BAQsFADBrMQswCQYDVQQGEwJJVDEOMAwG A1UEBwwFTWlsYW4xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3MScwJQYDVQQD DB5BY3RhbGlzIEF1dGhlbnRpY2F0aW9uIFJvb3QgQ0EwHhcNMTEwOTIyMTEyMjAyWhcNMzAwOTIy MTEyMjAyWjBrMQswCQYDVQQGEwJJVDEOMAwGA1UEBwwFTWlsYW4xIzAhBgNVBAoMGkFjdGFsaXMg Uy5wLkEuLzAzMzU4NTIwOTY3MScwJQYDVQQDDB5BY3RhbGlzIEF1dGhlbnRpY2F0aW9uIFJvb3Qg Q0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCnxsSlKaQs7+UYxbBQo29RO58KWsnC SDgKwhygGH+RtYe5QD/dHWgfCIPVLR6IoPiPVo9tmQKSkBbVXwhsidfhrLwgwrHgg1GKaU0Allpv L8BEfqMO5JHNWO7c+8ceRUfdJ7kIAZ+mIR31QS0vTP0oreCKrSK0VmWOhlSPk0Mp3jlGeKMwI7rN 8H0TV8Bd0oNrSEzEq5+AWls6vcmnIj+AJzNbDreKDF0HNwjLbNJ6RyJENcXMzC6O3Srtt31mDV9h USJVG+NG4+M90DVimtuvFMhbocyJG+EwJvygmx+Bp0cfBOujOZIGn5nTv9PqT1CcGf6Whx48Zfaj GCSDhhDnVD6oOnYkT4EhxeMPAviTlEcgu/7UDtNoud3EeoSC41NUed3bnNLyB5sutrw+7YVt7yUR 8pcaQmH3Spfoi7EQB/plgbKiOc/3PP8Y+8bxWotZ4gKse5LQThRPWUX2DF4oX7DoP0XPz6+bb/uE 03dalW+slISe7rzASo9Kk/hEIeIxRWFQThDY4zV8TBm03gW/owafyLXN5B/XFwYNepV0VQ1oGvwQ G2JknW3glaDDlAdXDRTmvQX7uJ/m34vixud+lvZTxYA0UChY8BJQcRcwuuZ4Y7z0sq2bK7L+4TmM XroLIJTee4O4/+NWjbcR6TuM8rHBXZ2kC0wr2bIY9bWfSwIDAQABo2MwYTAdBgNVHQ4EFgQUUtiI OsifeGbtifN7OHCUyQICNtAwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRS2Ig6yJ94Zu2J 83s4cJTJAgI20DAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAAt7cofAYKZJTIhY 5h2I9xRkSKbYWAoOTxM13zUd1O0GMciBPmrV3TsaMu6QPRHSLvSOw2MuI2awZ75vtsATOWCqojQl k3VS3qedrQ6HiVJxahY8GR2D+JopZb70P5rZ8PNahyFxgE3L4DibP7v64DBNz4bTZRAZGNGXArEr ckJorKC9TlraGL9rmIHQ/Zq+XhVIzREVucApXLToiPc+Nq63Yv0eYt5weBAcSFvavKQ4umftVT5e V9/UA0BMgaTST2OnCUIJFPwAqcKAc08uwEDZEXtI6noCwNPrKAEmWHTBwHMibZOV/Tl9uyrj9oLj LJdfTh+RlPr+LKPYdhq4TbI4T5v6HUhgeSbi8/2p0JrocI9JetblvQoO2y3zjb/r46R9y8eVceja o3zFwvh0kgQbhqykIlNAtqz+THbP+5QywDWfdj9u5ZBuoKYmorgsvtErhf2naMi6ASuxbHQduHOV 5+63xyXwAEwAsn62C4sc88BQniW54AjeNmb/N6XRu1RkLMkntUuSfmX/0y3huU68f6RBIZBBd6Y5 H+qe45/QZm8F7Kp2fr9rFqDrtcf8klQvKxEnJTd4TFFqsPPMWF0U8WpIFf/CB7axjQ+OXFBGsz2/ AZhPsllURz40e3htVpMuc+pmKHjNHRS/oI8vLrgujvIUiszptXz7bJ0MpeGWMIIF4jCCA8qgAwIB AgIQJJIhcLa7X/VLvBC/0JdUBDANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCSVQxEDAOBgNV BAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMg Uy5wLkEuMSwwKgYDVQQDDCNBY3RhbGlzIENsaWVudCBBdXRoZW50aWNhdGlvbiBDQSBHMzAeFw0y MDA4MDYyMDE5MzdaFw0yMTA4MDYyMDE5MzdaMB8xHTAbBgNVBAMMFGR1bmNhbkBpc24tcG9ydGFs LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXfOBYTplEN6vNm5UdvMdK9hMcTj 0nk+7QdCy1KXKj3x9AxR+il2D93ee1hdPApv9vKqntkVLuwSP9jZ97KafC5XVCUKNfoAaHS8hZq+ 6Ddu8VMfs3vQ+6S+78BO6F5QQcDsWFQ4XOZb6Ox+YVgCFlhCgA4ssECs2NdwkwiQyk5faQz97SPM X52SjiO338NPPIwAdoqe5oj+7kFIab35aJf90qC6TD8XDdMW578abYEEGqeCpABjsbdDjLuutC2b hPjM8Dfl4p7TfVyhHExqCTpI1C2EG8TzBhlbIvT1UeYrDdGC+uVWq9dv/szNhXv+1hfD3g4IVqYv nV6HVNhcIQIDAQABo4IBtTCCAbEwDAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBS+l6mqhL+AvxBT fQky+eEuMhvPdzB+BggrBgEFBQcBAQRyMHAwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jYWNlcnQuYWN0 YWxpcy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGNsaWczMDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA5 LmFjdGFsaXMuaXQvVkEvQVVUSENMLUczMB8GA1UdEQQYMBaBFGR1bmNhbkBpc24tcG9ydGFsLmRl MEcGA1UdIARAMD4wPAYGK4EfARgBMDIwMAYIKwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMu aXQvYXJlYS1kb3dubG9hZDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwSAYDVR0fBEEw PzA9oDugOYY3aHR0cDovL2NybDA5LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9BVVRIQ0wtRzMvZ2V0 TGFzdENSTDAdBgNVHQ4EFgQUwlLuoNVE6ybGh+Qblz4NvwtUvYMwDgYDVR0PAQH/BAQDAgWgMA0G CSqGSIb3DQEBCwUAA4ICAQAhKPKmX1XwMMWfQsg70fVMIBNeeYLdLbJGexjUxer08YwrSBYmBEUW OAB0S8JfEZ2r3CVof2bMy9Nfsu+aI9bMBey6dqreyy/ta1/BmNQ/24EK1FnshHNvDlnO1+RuD0I5 FT2hF/LBsoacNq16jApOP6buHtx9IhjP3lcIgHWNHK0VgboHak9NkRbz/fc5uSQ2oYNH/j3YmaHl kHfrR//drd9dDFnriJEtd6TcEz2nyuYdTkoN5o/XADuH66AxEBAfiAuy9gKM6fDkG5hysIvs4VOx F2wfFqRxDXQMF5crAdlqoy4A98Kjia1dbcoGKA7zUDhU9ZtEmG3K53kNR8Rq4WaYxj36a6m8pErp gZyPgpLOT90GTAsAe5Mgk4jYLiqDDPY2kormeuIle3lnEkoafDPH2kLs/UPo3wjA5VSBL16+pntg YJLRLNXXAkR5U5rgcuQFthmBcsDkhmKIm1Qt/kSeuNirf7ktdT2MIsBltlRFtVKSGKMtX3EV0ZtW q8lw7QMmHZIg2u2rhiNse5ddDUvGqJSdR49SdgUpnw5U/upYZoS7k2OSuaC7gpJPCJ7/9m543qaJ /MATXZfVT6f8PpB3huQ+UJhJJYa9gQWEK0NBG6J3tGBnkG5dy8hmOAzzkRC41Om97mZ8wDsdMiN5 AlwxwvpMsGURVi1WIHlKnDCCB20wggVVoAMCAQICEBcQPt49ihy1ygZRk+fKQ2swDQYJKoZIhvcN AQELBQAwazELMAkGA1UEBhMCSVQxDjAMBgNVBAcMBU1pbGFuMSMwIQYDVQQKDBpBY3RhbGlzIFMu cC5BLi8wMzM1ODUyMDk2NzEnMCUGA1UEAwweQWN0YWxpcyBBdXRoZW50aWNhdGlvbiBSb290IENB MB4XDTIwMDcwNjA4NDU0N1oXDTMwMDkyMjExMjIwMlowgYExCzAJBgNVBAYTAklUMRAwDgYDVQQI DAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGlldHJvMRcwFQYDVQQKDA5BY3RhbGlzIFMu cC5BLjEsMCoGA1UEAwwjQWN0YWxpcyBDbGllbnQgQXV0aGVudGljYXRpb24gQ0EgRzMwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDt5oeWocGktu3CQlX3Pw8PImBfE+CmQ4iGSZF5HBsv GlAP3EYB7va6OobMUWHvxA+ACHEpWq0YfNh6rRUlULOGcIpEFtVf4nAiEvdQtiFQBmtWJSn3naoM HqpMvmwZ4lL0Xr1U9JHmTqkU3DuYcNNO3S+hYWDZpWQbeSGibNVeiJ4kY6JDh0fvqloK1BsuS3n2 OgArPYGfAYtDjCvT2d+6Ym3kArHZjEcrZeBI+yVVnjPwbTSCKax8DtS2NP/CJ6RjpnRvuSwusRy8 4OdwdB71VKs1EDXj1ITcCWRZpkz+OhV6L8Zh+P0rmOSJF6KdHiaozfncURx4s54GFJNRGkx1DnCx cuL0NJMYG42/hrDYOjNv+oGWSEZO/CT3aaLSMB5wTbZKfcD1R+tTanXD+5Gz5Mi15DTE7QH8naZj ZxqqhyxL1KyuIgaVDxvQtPSjo5vTsoa09rn+Ui8ybHnvYO/a/68OIQIHLGbUd2COnwm0TiZ3Jg/o YGxwnJPvU1nDXNcecWTIJvFF5qD2ppJH3HgJVVePUEOY1E4Kp3k0B8hdRdhMV5n+O6RCKCTFcZaE SF8sELgdrqnCLPP1+rX7DA8pxZoX0/9Jk64EOsbfQyLIJlrrob2YS0Xlku6HisZ8qrHLhnkzF5y7 O34xmatIp8oZ5c54QP+K5flnTYzWjuIxLwIDAQABo4IB9DCCAfAwDwYDVR0TAQH/BAUwAwEB/zAf BgNVHSMEGDAWgBRS2Ig6yJ94Zu2J83s4cJTJAgI20DBBBggrBgEFBQcBAQQ1MDMwMQYIKwYBBQUH MAGGJWh0dHA6Ly9vY3NwMDUuYWN0YWxpcy5pdC9WQS9BVVRILVJPT1QwRQYDVR0gBD4wPDA6BgRV HSAAMDIwMAYIKwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1kb3dubG9hZDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwgeMGA1UdHwSB2zCB2DCBlqCBk6CBkIaBjWxk YXA6Ly9sZGFwMDUuYWN0YWxpcy5pdC9jbiUzZEFjdGFsaXMlMjBBdXRoZW50aWNhdGlvbiUyMFJv b3QlMjBDQSxvJTNkQWN0YWxpcyUyMFMucC5BLiUyZjAzMzU4NTIwOTY3LGMlM2RJVD9jZXJ0aWZp Y2F0ZVJldm9jYXRpb25MaXN0O2JpbmFyeTA9oDugOYY3aHR0cDovL2NybDA1LmFjdGFsaXMuaXQv UmVwb3NpdG9yeS9BVVRILVJPT1QvZ2V0TGFzdENSTDAdBgNVHQ4EFgQUvpepqoS/gL8QU30JMvnh LjIbz3cwDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4ICAQAmm+cbWQ10sxID6edV94SA hc1CwzthHFfHpuYS30gisWUfWpgp43Dg1XzG2in3VGV7XrzCCGZh4JM/XQWp+4oxmyV42Qjz9vc8 GRksgo6X2nYObPYZzQjda9wxsCB38i4G3H33w8lf9sFvl0xm4ZXZ2s2bF/PdqvrK0ZgvF51+MoIP nli/wJBw3p72xbk5Sb1MneSO3tZ293WFzDmz7tuGU0PfytYUkG7O6annGqbU1I6CA6QVKUqeFLPo dSODAFqJ3pimKD0vX9MuuSa0QinH7CkiPtZMD0mpwwzIsnSs3qOOl60tIZQOTc0I6lCe1LLhrz7Q 75J6nNL9N5zVwZ1I3o2Lb8Dt7BA13VFuZvZIzapUGV83R7pmSVaj1Bik1nJ/R393e6mwppsT140K DVLh4Oenywmp2VpBDuEj9RgICAO0sibv8n379LbO7ARa0kw9y9pggFzN2PAX25b7w0n9m78kpv3z 3vW65rs6wl7E8VEHNfv8+cnb81dxN3C51KElz+l31zchFTurD5HFEpyEhzO/fMS5AkweRJIzwozx Ns7OL/S/SVTpJLJL1ukZ1lnHHX0d3xCzRy/5HqfK3uiG22LPB5+RjNDobPAjAz2BKMfkF/+v0pzn 8mqqkopQaJzEAbLbMpgQYHRCjvrUxxwjJyUFb2Z+40UNtMF4MTK7zTGCBBswggQXAgEBMIGWMIGB MQswCQYDVQQGEwJJVDEQMA4GA1UECAwHQmVyZ2FtbzEZMBcGA1UEBwwQUG9udGUgU2FuIFBpZXRy bzEXMBUGA1UECgwOQWN0YWxpcyBTLnAuQS4xLDAqBgNVBAMMI0FjdGFsaXMgQ2xpZW50IEF1dGhl bnRpY2F0aW9uIENBIEczAhAkkiFwtrtf9Uu8EL/Ql1QEMA0GCWCGSAFlAwQCAQUAoIICVTAYBgkq hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMDA5MDMxMDM2MDdaMC8GCSqG SIb3DQEJBDEiBCD5mgM3cERlj26Z3DMvFnZ28xZ6scdKxEGAjR83G/qrWDCBkwYJKoZIhvcNAQkP MYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAEC MA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDALBglghkgBZQMEAgEwCwYJYIZIAWUDBAID MAsGCWCGSAFlAwQCAjAHBgUrDgMCGjCBpwYJKwYBBAGCNxAEMYGZMIGWMIGBMQswCQYDVQQGEwJJ VDEQMA4GA1UECAwHQmVyZ2FtbzEZMBcGA1UEBwwQUG9udGUgU2FuIFBpZXRybzEXMBUGA1UECgwO QWN0YWxpcyBTLnAuQS4xLDAqBgNVBAMMI0FjdGFsaXMgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIENB IEczAhAkkiFwtrtf9Uu8EL/Ql1QEMIGpBgsqhkiG9w0BCRACCzGBmaCBljCBgTELMAkGA1UEBhMC SVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNhbiBQaWV0cm8xFzAVBgNVBAoM DkFjdGFsaXMgUy5wLkEuMSwwKgYDVQQDDCNBY3RhbGlzIENsaWVudCBBdXRoZW50aWNhdGlvbiBD QSBHMwIQJJIhcLa7X/VLvBC/0JdUBDANBgkqhkiG9w0BAQEFAASCAQBYOgE0bhQuGIhiUOD/u2yH 5sp4vHpzLCEnaFVM9fKcSy5gvDGgounYaE7tpMLT1JAm+T2UlycESVJeg3klyv+ctnVPxNzTIS9N 7vWDqNMN5mnJ7xQxFXoN9CWz6zheYk6L7UopbZvhe1DyV8VEHb/aVLZD51GPtOuqkFB2f9xx8trF aZXUfRog/u5ObR6S2K3lvjHcwce3x7hyiooVQ92xrYwY4qQq4nJfFJ6PLZ0a5bnRmdoqyjTvysn7 zobEDMXdn2DVdFqSnIFRxpIVVqRVTrS0W2igRCgeiNWfmV4cw18aeyT9E3C3rbIEf7G2S8At/GdH QE5LXd2CxxeRB5U1AAAAAAAA ------=_NextPart_000_0063_01D681EE.CBD26090--