From owner-freebsd-questions@freebsd.org Mon Jan 21 08:02:29 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 45085149B82A for ; Mon, 21 Jan 2019 08:02:29 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (net-2-44-121-52.cust.vodafonedsl.it [2.44.121.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mailserver.netfence.it", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 808907443A for ; Mon, 21 Jan 2019 08:02:24 +0000 (UTC) (envelope-from ml@netfence.it) Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.15.2/8.15.2) with ESMTPSA id x0L82ESw064013 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Mon, 21 Jan 2019 09:02:21 +0100 (CET) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu Subject: Re: DNS Flag Day To: freebsd-questions@freebsd.org References: <5522b94d-4529-e10e-db65-20a1c172d46a@radel.com> From: Andrea Venturoli Message-ID: <157de54f-bf15-06ba-d47f-923dce0a716c@netfence.it> Date: Mon, 21 Jan 2019 09:02:14 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: <5522b94d-4529-e10e-db65-20a1c172d46a@radel.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 808907443A X-Spamd-Bar: +++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [3.63 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(0.25)[ip: (0.73), ipnet: 2.44.0.0/16(0.36), asn: 30722(0.09), country: IT(0.06)]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; HAS_XAW(0.00)[]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_MEDIUM(0.96)[0.958,0]; TO_DN_NONE(0.00)[]; NEURAL_SPAM_SHORT(0.79)[0.789,0]; MX_GOOD(-0.01)[mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it,mx.netfence.it]; NEURAL_SPAM_LONG(0.74)[0.744,0]; DMARC_NA(0.00)[netfence.it]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:30722, ipnet:2.44.0.0/16, country:IT]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2019 08:02:29 -0000 On 1/21/19 12:40 AM, Jon Radel wrote: > Not enough details are provided by you in the above to have a clear > answer.  Are you using the FreeBSD 11.2 server as an authoritative > server for one or more DNS zones? Sorry to step in. What about authoritative servers for private zones? I.e. Are those who are serving local.xxxxx.xx to their LAN affected? > If you're running a reasonably recent version of NSD or BIND, like the ones in > the packages, you should be fine. I've read an article that reports BIND 9.13.3 and 9.14.0 are ok, but we start from dns/bind911. Is that fine? bye & Thanks av.