From owner-freebsd-ports@freebsd.org Sun Apr 16 02:02:32 2017 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 93E34D35A8C for ; Sun, 16 Apr 2017 02:02:32 +0000 (UTC) (envelope-from george+freebsd@m5p.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 766FD312 for ; Sun, 16 Apr 2017 02:02:32 +0000 (UTC) (envelope-from george+freebsd@m5p.com) Received: by mailman.ysv.freebsd.org (Postfix) id 75C60D35A8B; Sun, 16 Apr 2017 02:02:32 +0000 (UTC) Delivered-To: ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 756ADD35A88 for ; Sun, 16 Apr 2017 02:02:32 +0000 (UTC) (envelope-from george+freebsd@m5p.com) Received: from mailhost.m5p.com (mailhost.m5p.com [IPv6:2001:418:3fd::f7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "m5p.com", Issuer "Let's Encrypt Authority X3" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 295E1311; Sun, 16 Apr 2017 02:02:32 +0000 (UTC) (envelope-from george+freebsd@m5p.com) Received: from [IPv6:2001:418:3fd::1f] (haymarket.m5p.com [IPv6:2001:418:3fd::1f]) by mailhost.m5p.com (8.15.2/8.15.2) with ESMTP id v3G22Nhq024618; Sat, 15 Apr 2017 22:02:28 -0400 (EDT) (envelope-from george+freebsd@m5p.com) Subject: Re: default named.conf in bind ports and slaving from f-root To: Thomas Steen Rasmussen , ports@freebsd.org References: <85573e9f-c0e7-1e30-6f95-2fec13e0ac26@gibfest.dk> Cc: mat@freebsd.org From: George Mitchell Message-ID: Date: Sat, 15 Apr 2017 22:02:17 -0400 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <85573e9f-c0e7-1e30-6f95-2fec13e0ac26@gibfest.dk> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="OsTajhNUSVlxCX8oCgkRuVhXF1wsf6ktC" X-Spam-Status: No, score=-1.0 required=10.0 tests=ALL_TRUSTED, RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mattapan.m5p.com X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.1 (mailhost.m5p.com [IPv6:2001:418:3fd::f7]); Sat, 15 Apr 2017 22:02:30 -0400 (EDT) X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Apr 2017 02:02:32 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --OsTajhNUSVlxCX8oCgkRuVhXF1wsf6ktC Content-Type: multipart/mixed; boundary="mNUNbfhFUV6gvAMOijr8HEqtmqHXeFxT2"; protected-headers="v1" From: George Mitchell To: Thomas Steen Rasmussen , ports@freebsd.org Cc: mat@freebsd.org Message-ID: Subject: Re: default named.conf in bind ports and slaving from f-root References: <85573e9f-c0e7-1e30-6f95-2fec13e0ac26@gibfest.dk> In-Reply-To: <85573e9f-c0e7-1e30-6f95-2fec13e0ac26@gibfest.dk> --mNUNbfhFUV6gvAMOijr8HEqtmqHXeFxT2 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 04/14/17 08:37, Thomas Steen Rasmussen wrote: > Hello, >=20 > Cloudflare deployed a bunch (74 apparently) of new f-root dns > servers, which do not permit AXFR like the other f-root instances > do. > [...] > A good alternative could be to change named.conf to use > lax.xfr.dns.icann.org and iad.xfr.dns.icann.org as > described in [2]. My named.conf now looks like this: > [...] Does this issue affect me if I use type "hint" for zone "." like this: zone "." { type hint; file "/usr/local/etc/namedb/named.root"; }; -- George --mNUNbfhFUV6gvAMOijr8HEqtmqHXeFxT2-- --OsTajhNUSVlxCX8oCgkRuVhXF1wsf6ktC Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENdM4ZHktsJW5kKZXwRES3m+p4fkFAljy0KkACgkQwRES3m+p 4fnzcw//cz3DXlSgBRD/LeNzzkpEY5E4dvoTokmXmPsHC6pe2YwI5AGtR3Mtnj/Y 164Ik3le9ZyopVXqB/Y3B8kU0UEedMUfm6yUclM44mKE+CJhrPot1+MTw2coHzru eFFZLDY8pQuZc3pBg+wos9i4mM5e8qHoBCFNINwzY7sotjlEqGv+HZLZKaCj4PEg Vux3vZwYcpQzxFECVAfVksNm/4eE3LWwX784J7zd/SYb4GLQhxjIUFpyfBTkj+96 YLiJdJ9E8yTSWtt+6slPBq41uqlAf4qQN3LlFNfbCu+HcvBFcdex+tkYTe13AI3n NoUk6NcsWRv7EtqY091aXYhg3HsnwLvK998jQSNEFXMPmtvzQE224WNgUw54OYVr 5w0x5akdrFyBga/LL4bn2EhUTXxVWuPAnyUhr6RWZk5mGsSrUPLk/wVnrGIEKBLX oRdHrQTTWDt36YDDGRzIjyGAMDSFG5g6gN9B0gEbDBukwjFNi/+cTKPK52cLZPQ6 lsAMxmLLE0VSEeRxL0hgBUNEb9ns9s8FmkGiczaw8QYQ+596HQUwPirdoW/HzBbG LLvlH/VmEROrdVt7IXlaqTua3LX+4a8LDFcYFsnijEDly2YHexdQwvcX9MZWSwJe /7e1DX9Qz93/QtsSWcxmUkoH6xfoTXTTZSh3RQHmNwLsKcNtBpQ= =7Agq -----END PGP SIGNATURE----- --OsTajhNUSVlxCX8oCgkRuVhXF1wsf6ktC--