DNS: Does Not Service

#BIND9

@jpmens Just guessing here but as the file actually has a Bind DB format, perhaps it’s handler remains open (as long as #Bind9 is running) and is just written to.
What happens when Bind is stopped/restarted?
Certainly @ondrej or anyone at @iscdotorg can most confidently reply.

Ich wünsche mir für #Bind9 eine Option

ksk-manage no-fuckup;

Visited #CSNOG26 conference, it was great event. I had to disable #DNSSEC validation on their wifi network. Asked for a contact to local network admin to ask what is the implementation used. Surprise, they said #bind9. If you operate anything old enough capable of ``dnssec-enabled no;``, please don't use it anyway. Use ``dnssec-validation no;`` only. It will stop servfail caused by validation failures, but won't prevent validation at clients. Fix your forwarders or firewalls if that is not ok
Somebody knows when #bind9 9.18.43 .package for #Debian #Bookwork is available to close https://kb.isc.org/docs/cve-2025-13878 ?
CVE-2025-13878: Malformed BRID/HHIT records can cause named to terminate unexpectedly

Haack's Networking - Authoritative DNS w/ Bind9

- root zone and base server cluster
- name server registration; glue records
- full CLI-driven zones/records
- full Webmin-driven zones/records
- DNSSEC howto for CLI & Webmin

Wiki Tutorial: https://wiki.haacksnetworking.org/doku.php?id=computing:bind9dns

You can add zones/domains & create A, AAAA, SPF, DMARC, DKIM, SRV, CNAME, and/or any DNS record you want; it's self-hosting heaven ;O

#gnulinux #freesoftware #sysadmin #live #debian #peertube #bind9 #dns #opensource #selfhost

Haack's Networking - Informal Hacking Sessions #03

Today's agenda includes:

1) Writing the bind9 authoritative tutorial
2) Monitoring the rebuilt rsnapshot nodes
3) Editing and adding to the hard drive vitals post

https://content.haacksnetworking.org/w/byjvKm4LXLLn7q4ngYaG8f

#gnulinux #freesoftware #sysadmin #live #debian #peertube #bind9 #dns

I have started poking about running Bind9 authoritative DNS on my OPNsense router.

Lord help me.

#OPNsense #DNS #Bind #Bind9 #HomeLab

In November, Debian LTS contributors released 33 Debian LTS Advisories, fixing 219 CVEs across multiple packages. Notable updates included security fixes for bind9, unbound, pdfminer, firefox-esr, thunderbird, and the Linux 6.1 kernel.

In addition, the LTS team also contributed security updates to latest Debian releases and carried out significant work to revamp the LTS team documentation.

Read the full report here:
https://www.freexian.com/blog/debian-lts-report-2025-11/?utm_source=mastodon&utm_medium=social

This work is funded through Freexian’s Debian LTS offering. Consider sponsoring Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) to support this effort and benefit from it: https://www.freexian.com/lts/debian/details/#benefits

#freexian #debianLTS #debian #linux #bind9 #unbound #thunderbird

Monthly report about Debian Long Term Support, November 2025

The Debian LTS Team, funded by [Freexian’s Debian LTS offering] (https://www.freexian.com/lts/debian/), is pleased to report its activities for November. Activity summary During the month of November, 18 contributors have been paid to work on Debian LTS (links to individual contributor reports are located below). The team released 33 DLAs fixing 219 CVEs. The LTS Team kept going with the usual cadence of preparing security updates for Debian 11 “bullseye”, but also for Debian 12 “bookworm”, Debian 13 “trixie” and even Debian unstable.

Freexian