• CNAME restrictions

    From Matus UHLAR - fantomas@21:1/5 to Leroy Tennison on Tue Aug 4 19:34:48 2020
    On 04.08.20 17:29, Leroy Tennison wrote:
    I have a situation where, due to the system's location (IP subnet), its DNS
    name is <webserver>.<internal subdomain>.datavoiceint.com. We have a certificate for *.datavoiceint.com which we prefer to use

    wildcard in certificates only covers one level of subdomains, so *.datavoiceint.com will cover <internal subdomain>.datavoiceint.com but not anything under it.

    you will have to strip the <webserver> part or get other certificate.

    --
    Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
    Warning: I wish NOT to receive e-mail advertising to this address.
    Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
    Microsoft dick is soft to do no harm

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Leroy Tennison@21:1/5 to All on Tue Aug 4 17:29:25 2020
    I have a situation where, due to the system's location (IP subnet), its DNS name is <webserver>.<internal subdomain>.datavoiceint.com. We have a certificate for *.datavoiceint.com which we prefer to use instead of having to acquire a certificate for <
    internal subdomain>.datavoiceint.com since this is a one-off internal-only web server. Our (ISC) DNS servers (version 9.10.3-P4-Ubuntu that comes with Ubuntu 16.04) serve both domains. I thought a solution would be to use a CNAME but, when I attempt
    this (via nsupdate with the update key which works for A and PTR adds and deletes) I get (on "send"):

    TSIG error with server: expected a TSIG or SIG(0)
    update failed: NOTIMP

    What I tried (on both <internal subdomain>.datavoiceint.com. and datavoiceint.com.) was:

    update add <webserver>.datavoiceint.com. 86400 IN CNAME <webserver>.<internal subdomain>.datavoiceint.com.

    Apparently I'm mis-understanding CNAME usage, if I actually can use a CNAME record what should the format be (or do I need to configure bind differently to use it since part of the reply is NOTIMP)? If that's not possible due to CNAME restrictions are
    there any alternatives?

    Thanks for your help.

    Harriscomputer

    Leroy Tennison
    Network Information/Cyber Security Specialist
    E: leroy@datavoiceint.com
    P:


    [cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG]


    2220 Bush Dr
    McKinney, Texas
    75070
    www.datavoiceint.com<http://www..com>


    This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc.

    If you prefer not to be contacted by Harris Operating Group please notify us<http://subscribe.harriscomputer.com/>.



    This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named
    addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message.





    --_bd368098-f4a2-451f-bf70-efb27f67d09c_
    Content-Type: text/html; charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable

    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
    </head>
    <body dir="ltr">
    <div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
    <span style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;">I have a situation where, due to the system's location (IP subnet), its DNS name is &lt;webserver&gt;.&lt;internal subdomain&gt;.datavoiceint.com.&
    nbsp; We have a certificate
    for *.datavoiceint.com which&nbsp;</span><span style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;">we prefer to use instead of having to acquire a certificate for &lt;internal subdomain&gt;.datavoiceint.com
    since this is
    a one-off internal-only web server.&nbsp; Our (ISC) DNS servers (version 9.10.3-P4-Ubuntu that comes with Ubuntu 16.04) serve both domains.&nbsp; I thought a solution would be to use a CNAME but, when I attempt this (via nsupdate with the update key
    which works for
    A and PTR adds and deletes) I get (on &quot;send&quot;):</span><br>
    </div>
    <div>
    <div dir="ltr">
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">&nbsp;TSIG error with server: expected a TSIG or SIG(0)</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">update failed: NOTIMP<br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">What I tried (on both &lt;internal subdomain&gt;.datavoiceint.com. and&nbsp;datavoiceint.com.) was:</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">update add &lt;<span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!
    important">webserver&gt;</span>.datavoiceint.com.
    86400 IN CNAME&nbsp;<span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">&lt;webserver&gt;.&lt;internal subdomain&gt;</span>.datavoiceint.com.<br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">Apparently I'm mis-understanding CNAME usage, if I actually can use a CNAME record what should the format be (or do I need to
    configure
    bind differently to use it since part of the reply is NOTIMP)?&nbsp; If that's not possible due to CNAME restrictions are there any alternatives?</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">Thanks for your help.</span></div>
    </div>
    </div>

    <P id=c1-id-7
    style="FONT-SIZE: 0px; FONT-FAMILY: Arial; COLOR: #fff">Harriscomputer</P> <TABLE id=c1-id-8
    style="BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">
    <COLGROUP id=c1-id-9>
    <COL id=c1-id-10></COL></COLGROUP>
    <TBODY id=c1-id-11>
    <TR id=c1-id-12>
    <TD id=c1-id-13>
    <TABLE id=c1-id-14 style="HEIGHT: 0px; WIDTH: 100%" cellSpacing=0
    cellPadding=0 border=0>
    <COLGROUP id=c1-id-15>
    <COL id=c1-id-16>
    <COL id=c1-id-17>
    <COL id=c1-id-18></COL></COL></COL></COLGROUP>
    <TBODY id=c1-id-19>
    <TR id=c1-id-27>
    <TD id=c1-id-28 style="WIDTH: 33%">
    <P style="FONT-SIZE: 10pt; FONT-FAMILY: Arial" align=left><B
    id=c1-id-30><FONT id=c1-id-31 face=Arial>Leroy Tennison<BR
    id=c1-id-32></FONT></B><FONT id=c1-id-33 size=2
    face=Arial>Network Information/Cyber Security Specialist<BR id=c1-id-38><SPAN id=c1-id-39
    style="FONT-SIZE: 8pt">E: leroy@datavoiceint.com<BR>P:</SPAN></FONT></P></TD>
    <TD id=c1-id-40 style="WIDTH: 33%">
    <P style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; TEXT-ALIGN: center"
    align=center><BR id=c1-id-43><IMG border=0
    src="cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG"></P></TD>
    <TD id=c1-id-45 style="WIDTH: 33%">
    <P id=c1-id-46
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; TEXT-ALIGN: right"
    align=right><FONT id=c1-id-47 style="FONT-SIZE: 8pt"
    face=Arial>2220 Bush Dr<BR id=c1-id-48>McKinney, Texas<BR
    id=c1-id-49>75070<BR><FONT id=c1-id-51
    style="FONT-SIZE: 8pt" face=Arial><A
    href="http://www..com">www.datavoiceint.com</A></FONT></FONT><FONT
    id=c1-id-56 size=3>&nbsp;</FONT></P></TD></TR></TBODY></TABLE>
    <TABLE id=c1-id-57 style="WIDTH: 100%" cellSpacing=2 border=0>
    <COLGROUP id=c1-id-58>
    <COL id=c1-id-59>
    <COL id=c1-id-60>
    <COL id=c1-id-61></COL></COL></COL></COLGROUP>
    <TBODY id=c1-id-62>
    <TR id=c1-id-63>
    <TD id=c1-id-64 colSpan=3>
    <P id=c1-id-65
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    id=c1-id-66 size=1 face=Arial>This message has been sent on behalf
    of a company that is part of the Harris Operating Group of
    Constellation Software Inc.</FONT></P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    size=1 face=Arial>If you prefer not to be contacted by Harris
    Operating Group <A
    href="http://subscribe.harriscomputer.com/">please notify us</A>.
    </FONT></P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px">&nbsp;</P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    size=1 face=Arial></FONT></P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    size=1 face=Arial>This message is intended exclusively for the
    individual or entity to which it is addressed. This communication
    may contain information that is proprietary, privileged or
    confidential or otherwise legally exempt from disclosure. If you are
    not the named addressee, you are not authorized to read, print,
    retain, copy or disseminate this message or any part of it. If you
    have received this message in error, please notify the sender
    immediately by e-mail and delete all copies of the
    message.</FONT></P></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
    <P id=c1-id-74
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">&nbsp;</P></body>
    </html>

    --_bd368098-f4a2-451f-bf70-efb27f67d09c_
    Content-Description: Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG
    Content-Type: image/png
    Content-Disposition: inline
    Content-Transfer-Encoding: base64
    Content-ID: <Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG>

    iVBORw0KGgoAAAANSUhEUgAAAK8AAABDCAYAAADqFFWMAAAAAXNSR0IArs4c6QAAAARnQU1BAACx jwv8YQUAAAAJcEhZcwAAEnQAABJ0Ad5mH3gAAAAZdEVYdFNvZnR3YXJlAEFkb2JlIEltYWdlUmVh ZHlxyWU8AAAD9GlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSLvu78i IGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9i ZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42LWMxMzggNzkuMTU5ODI0LCAy MDE2LzA5LzE0LTAxOjA5OjAxICAgICAgICAiPiA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93 d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8cmRmOkRlc2NyaXB0aW9uIHJk ZjphYm91dD0iIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIg eG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJl ZiMiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6ZGM9Imh0 dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InV1aWQ6NUQyMDg5MjQ5M0JGREIxMTkxNEE4NTkwRDMxNTA4QzgiIHhtcE1NOkRvY3VtZW50SUQ9 InhtcC5kaWQ6NERDMzVBNEFFQTZFMTFFN0E2QTNDODdCMENGMzRGN0EiIHhtcE1NOkluc3RhbmNl SUQ9InhtcC5paWQ6NERDMzVBNDlFQTZFMTFFN0E2QTNDODdCMENGMzRGN0EiIHhtcDpDcmVhdG9y VG9vbD0iQWRvYmUgSWxsdXN0cmF0b3IgQ0MgMjAxNyAoTWFjaW50b3NoKSI+IDx4bXBNTTpEZXJp dmVkRnJvbSBzdFJlZjppbnN0YW5jZUlEPSJ1dWlkOjY1ODFiNWQyLWQxMWItODQ0Zi04Yzk1LTE0 ZGE3OTJiNGU1ZiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpjNDgxZDkxYS0yMGQyLTRhODUt ODBjNy00MGNiYTNmM2Q1ZGMiLz4gPGRjOnRpdGxlPiA8cmRmOkFsdD4gPHJkZjpsaSB4bWw6bGFu Zz0ieC1kZWZhdWx0Ij5QcmludDwvcmRmOmxpPiA8L3JkZjpBbHQ+IDwvZGM6dGl0bGU+IDwvcmRm OkRlc2NyaXB0aW9uPiA8L3JkZjpSREY+IDwveDp4bXBtZXRhPiA8P3hwYWNrZXQgZW5kPSJyIj8+ tu59AgAAG8RJREFUeF7tnQd8VNW2xleAkBBIIRCqEEMJVTqEXlS6iFwBwQKiCBdRvHZ9Pi+2e+UJ KiLCBRWpF8ECNkAQRDpJ6C0QQktIQkgC6T3nrW+dfZLDMJNJkGiC5+9vnJx9ypyZWXvtb6299uCi MWRhUYZoMfVF8vbwoD0z31Qt9rGM16LM4dLpTv6fC2khm1WLfSqoZwuLskPlyvxwpYysbNVgH8t4 LcoUaZlZ4nWpYkU6cylOtdrHMl6LMkVyeoZuvBUq0JlYy3gtyhFJ6elsvPwHjNfyvBbliQLPW7EC nbWM16I8oXteSzZYlAE2Hz5GLncOp9Mxl1RL0RRqXgRsl1WrfSzjtShVlmzZRpSWTp9u3KJaiibJ JBssz2vxp5KQkkpUxZ0ORJxTLUVjlg0Zlua1+DOJSbwiEw57wyNUS9EUyAaQm6s/O8AyXotSJTrx KlElV0o+F6laiiaJJYYYr0iHihQVn6j2XI9lvBalyiV4XpYA0LBRCY4N0aDA8+bny3lF5Xot47Uo Xa4msZWxMVaqRMGnnEsH0byMV7WqYsRFBW2W8Vr8LgZOn0Hr9x1SW3bIzdOf2XhDiqF7xfOy1+3Y OIBI0yzPa1E6bDsWRhu/X08T536qWq7lalqayAUYIVWqSMHhZ9Qex0iqLD+P2jXyl/OKmmWzjNfi htl27ASRjzdFOxjaJVhju61Tw1ckwN5Tp9UexyRDNuTlU/sA3Xgt2WBRKmw9wsbrVpldLBupHSRN xl50SMe27IErUdqFKLXHMbrnzWfPe7slGyxKj82HjoqWhWHayyQYnrc2e+c2IgOILlyOV3vtIwEb G+8d/g34WaNYy/NalAowRJUGO27Hq0bD8zI1vTypY5NGLB3IacYhTTyvWplWxV3PVjjAMl6LGwLB mizXQTBWsSIdi7yo9hQSc8VsvAHyt9OgTaaH9T99avvx/10oJYMN2g6W8VrcEFuPHBePW50NE3nc Y3Y9r66FxXgbs4Zlgp2ly+B54c2ZgNq15NlR0HZLGW9Wbi5dSkmjOH6kZ+eo1tIBr3E5NY0uJady cJyvWokSUtMpnh9oz8wpem7eICUzizadKN7cf1lh61EO1vLy6emhA4hy8lg2XO95Ddng5+VFnSAb 2EsHO8s4QDF4eMifjcTzsvE6CNpuKePdfvoC9ftwMd310VL6b8gR1Vo6vLXuNxowZzndya/109Fw 1UrU84MvaOi8/1K3WYso00lhiUEvPufV7zbT1C/XqZayz68I1rhzPjNsEFFuTpGe18/bkyqxtIDM yIiMlrYi8agiTwF1DM9rv673ljLeyhz5+latIg+Pyq6q1Tn//PFXeuDzr+njrXtVi3MGt2pCnu6V qZZnVToTr3uYq+mZ5OXuRtU93Kl57Rrkg4DDCfC6Wbl5VMXVlWKSU1RrOQCF4t5e5OtZTQKs5Cg7 mld53nrVq8tzg6aN5fmsgyLz1IxMefZWxttIyQZHExVFGu/Ji9EUHh1Lp2Ni5Tksqhi95k9E6fwS cyz6MkVdSaZE6K1i0i2ggRhdJdZnp+ISpC3sUjy5sg7MzsujXk38pc0Znmzsix4ZTgNaNqZl40eo 1rLNnpM89PP77NGmlWy71q0t5YvZNiNNZiLSZxpVdq0k211gvMg4ONC9Rl0Dfi0HNCrwvCU03kmf fEbN732IAkeOp6YjHpHnFsMfoglzFqgjbozIywnSI40HdFHsFcfpkOLwS9gZ2nchmryquPFnY9+E Q3n/j0dOUfC5Qg+Rzx7jChtsUmYmufMHDGOEljUDg1zHsmDrqWuLqeHdq/A5FThYOXmp0HhhzNl8 ne6NbpM2g9/Cz8vrR1y+Ph96u683PdWnM2XY0chbTp6lDcdPy33aspn34d7s7StNxs+eLxmGHi0D Zbu1P96rCx09byMd0vi+quheFHRuyrqXCXGQLpO6BsaLP1tgeF5HmlfvEna4wkEHpv4aBjSkGp6e lJiaSufPnKcrNl9uSWjw+NMUBaHvgj6jcnmILNPSafY7r+n6qYQMnruCrvJwgyo6DNPVeCg3B2sx SSl095xlIiPgFZFC9GCj2/KP8ZSYkUFd3/uMmtaqwQGzixh2EG+fffsZObfz/33Kx2tyXkW+5/Sc HPpq4ihq4ucr+7s1akAhfE4yfiiDCY9LFONNzcqmno0bStuxmDgav2QtSxrWfEw2BznN+PVWTPib bGexwfZmnQ65cUe92rR43HBpD2dvPnbRN+TGUiiP76Gud1VaM2mM7Nsafo7+8dUG6ah5mh4sTusb RBN7dJC/S4t9EWep00T+bHhkQQ721ZH3SnvLBrfRgd2hdDwyijqorIJ4Yf5M3WrokgF0CdRlg2PP qxuvdxWz571+injD/kPU/LZ6jj0vPAqMatG0SbT/w3/R8uem8nYatxepNIrkKgqNfXyoUdtW1Lht a2ravg35BvCb9a1O0Qn2pxiL4oPNuyktO5t8WGMaRmPrd1Mysyk3P596sKHBSKu5uUq3efHbjVSd vcLtNXw4CNbkAUNpVLPww77MHbh9gzrUxb++GB/07WPLvlN7iYJury8SAcadyF7mNLwq30B9Hy8e VdFRNHp48RqqWc1DNG3jmr7cwdwo6moyPb16vVwDn7Mvazw8oKENxrDh4jx0uhx+DXQugAzHND4X xv6/g3vT2slj5O+PtwaLwZcWTy9cTJ3GTmQtkEVBQR1J27SGfKpWlX2tGuqjjDlos9W7IAjGy5/J XoeeV5cNhufFZwjnlhNXqJHRKQY/NJm6PP+684BNKtsZqRD6ncjNJCVTxIIP6TQ/Ts1/n955eDQR e86KbAAl5ZuDJ+TLRdCz7bkJ9PqQPmLAZhA8nZz+FM0eNYiWjLuP6nHkC2Pbyx6zIhvOL9PG8bCb KQbuX92bNj8zTp3J2u7Fx+mzh+6lOaMH00DWpEiJYWg3huluAbeJ1HDlIfRIdJx4eUiRXk10r7t4 90ExLIwErwzoQcseHcGdp7LIjR0RF6TDGEZpZtGuA1SV31ceXwteft8rk+idYXfJvk9+C6GaVT3Y oPPp/vYtpLO1rOPH3spNPo+bDd6z38OTae7SVTJi/ueNl2nPzLfUXp1WDerL8zFTuszINNRlx2Tg 4eZG5O5O2RxL2aPA8yrNK/jVuGY50Ptrf+Iv1YdG9+zq2HjlhezggUKMG0TSJYz8HpUi2cHsiTOQ Q4W2xBfcvkFdaYN3g7cz48fecv72UOo68zMKfGMuXWB9DS9tHJeFIVABAzZz+OIlGvjxMjlv7aEw 8cww+Fw2HFDbq5p45Mr8vr49eFx0Mzxxd/byQAI4eA4+vlU9Xb+1rV9HtmHA2C8d2oajLDVwXYwq 04f2kbYWdWrK81EOLtFZ0ClbvzOPWrz1iXQcdKKz8SUfvZzR9cXpFM+BeqVaNenKlrU0eeCdak8h LZXnhWwwMHK89Xx95NnAX3Svi92l8AWF6CrbABrV5mCQjz+nMhTvr10ntQ9TBt99rfF+uvFXcuXg rCb3tBVbd0jFkPFFyXPlyvTl9l3kzcOHCwdvzy9aIfscEfDEP8h95KNU7YHHyGfsE5TAXhc6KN/G SG4EGJrhtIxfaYXSseWpVevEA9b2rEahrzxBg1o2kS/azqHcVti6Ivgwvbz2FzagXPp20mh6656+ BV7dxeQtIR1YdFBYbIJ0Cnhmw3jRsYxLGmfYcbTXAe9tYP4b5CuNC28+c8QAmvvAELm390b0pym9 O8m+m0no6TMyMuZ8u6xAJtjSBNkG/g4iTAFb9BW9I9UzeV5gZBzsFaYbAZvZ8xoZh8iEBJEMCZAc 3l4iVa4x3gUbNlNuSiolnI+knFjuGQmJFFhP92rN6/Mz96a82MuUDG2TlUULfnb8+6nwqOcOHqEs 1mhpfL2ksxyto5CDPZOnqWfdKBh+YbOVWAIciIyVtkNRseKVgGEjmLiAtBjRrnnBEG7G7KjhNQ1W 7z8uOrRl3ZrUmr1mTl7hgWb768rSITs3XzwyjDXAFKAEsJ5Gp8c9nuJgDsBzYhtG3oKHe/PsnEHT Wr5yXlV2Fm+u+03ajsfongcyAh0XWvkoe9y7mgVQ/xaNuUPmyqzeTQd2wCOMU5DvVQYLDM1b18bz ivEy9oI2Q6IaeV4QoGbZLnGcMPv7DVLFNnHYQGm7xnhFErDr3jJvFuXv3EDa0V16RTuD6A7b2u6f KXYd65/kFIfSAshwyIZUkzWLtmcT5e76mbJ3rCct+Bd1xO8HXxyideg9yIIVIUdkOAaGqcFQ3HgI XhlylBbvOSgpL2wj6gfu/LeRr428mkQ93l8k7UiFQY8iDbaAZcd/+IFrwzubU1rQvdl5ueKNJb/b WPe64OGgNpTIehod7V8bttHfV/4oehmGZmQjbGUOeLRbe9Hh0OaYAOnw7kJ6/Uf9Rzsm9+okgaQ7 f4nrjoXLbGL/OUvp+W822tXPv4f9EWclYGrTsrlqccxtSJfx6yMVCgplw7WetzBddn2BTkGqzCwb lOe9kppKH/3AxpufR88OHyJt1wsu9h4wYvPQaIsbDMRmOLOPVvDlwJgNr3izeHtYP0rhoRwPvE4P Ngh8sUk8zBl1Ba8O7EnRHEghzTV7yx5q6OstkxFIb11I1PPLHRrUoYS0DNGiRp53Ogd/l3gUgiSZ ty1UOghm0KBDd58tXMaNzEIGSwsYJTIBSJ8ZIHU3Y/hddJG9Bo45cjGO0vhePbnTf8xBIIAsQKoP D+wDCNY+Gj1IshIwdHfXigWfY2MO0PC+L15NEQ+MTERqVo500no+nnLMzWLniVPy3L25ns8tilYN VMZB6d4YFbDV4+DKTNdmTWS422OnxsFewCa5Xu6on23aStGYxatZg1qqABFfTgG9X31To6D+2q4T p1SLfeJTUuS4Wo/8XbVcT3pWFh9zt+b74BOqxT4zvvlBrvU/S1erlpLBw662dO8hbcfpC7IdfO6i tu9CtMZDqGyDsNh47fNd+zU2TI2NQdt3PloL5Yf5mI3HI7Qlew5qG09EqBZNYwPXWC/L8SDk/EVt /4UYLTwuQbYNcP0DkTFaCL+2PdKzs7VvDhyX+9x7Nkq1FoJ7xvknL8WrFh3W2NrK0CPa6v3H+Bo5 qlWH9Z/GQaRcc2eE/t5vNg+8N0ejrv21Zb9uVy2Oee7z5fI9zlrzk2y3fuol2T56PlK2zVDfYWIb ttz/7odyzpo9IaqFP/PwCI16DdFo8GiN7r5Pm7Zwidqjadd43koVSuYZ7UXKBjIlKJMRxYCdPIbI GwFD5SNd2rDX1T1eZ/967EnrSk7WoFntGvQYD8V+1TwkM9ChYV3qyA/zMf1bNKJxQW2pf3N9WAOe PAKN79pWjgedGtaTvK8xSWGA67e7rQ514te2B7Igf2vXQu6zCwd4tuCecX5grRqqRQceeEzH1jSq fcsCOWSAUWx4m2ZyTSNAvNmI52WH36NFcTyv/r6MjIMj2QAaie51oVMXY/QGhT3PK2WRiAvw/lkT P6ckA3DxGTtRu4oIjrUfeXnJRMTWhR9Sn1Yt1CHXE5eURLUHjGRhyEOCSaRfAzqCtydVqVaN0r/6 QjVez1ur1tD0+awzYbxKsFv8wUCRsDzJ2L2R3LnDGLj0ZGnDUgpxjjNQ79Bt/JMU1Kur5IFdBo8S 20C8Y8vYWXPpy2++p2Xv/pMe7ttTtXIw98LrFLJjL+1bsYA6YOm7wqUbB2jcCVzZmWR/u1S1cnvf 197WtoYeZMvmm4aFs7fM4APMb8IeXmMepxRUQRWlY1lXThg2SGbpHLE/4hx1nPwsR04c/N3kgMOi mLDhUnYOPTikP614fqo0od6kLhugLxtRAhuTM1AR5tlvGHn6N6TkVZ+TS49B8n1qHKTb8sF36+j5 GbNp2mMP00dPFE4KNX/yBTq5/zCFr1mmp98ULnfdJ88vjxtDM8brU+SCkg8Wf3Goy92sbweoLU37 eude0bv3vjNLtTiHug3QqOdg/W/WrjT0Afnblu3HwuTaXV/8p2rRqTN+ipwXdzVJtei43z9eoxZB WlxSsmrRuTGhWUog4kaF2K+nzkoO81YGKbiZm3ZJ7cUfzb4LMZIy5OC0IItxzz08NLN0e2nxStne FVb8TIOBO+YE8jWKjE+Qa9Wyo3dBUGATOW4vSitNFKbKTNPDzJGPZ9CqhbPJD0uOTJQp4424fIWe /fpnemnNL7Q85LBqvTUZseBL+u5wGN3/6SrV8scxd1uIzB5O+2oD5eTqEzMi7TBrt/i/sr07TF8d 0r1FU3kuDq2Q62Wj3XTwiMhJ2wkKA1fEV1U9SLOpFktXMY+kYk00qVtHahlsKVPGi1wlZsHwqOJE c9sy5vOvqfU78+m1H4r3C9x/FFiOhPtCHYIZfEGYRcN7/aNBFgOv680PqR5k/Ly9qF33LkQ5ObRm dwgdOHtevGOvYkxQGEiut0IF+uXgUTFec0WZLU3hffm1T5hXHSvPW1zKlPH+HjDrVaNqlT/FGIoC Ew+4r+o2S4JQsfbaoF709ROjVcufzxfPTJbswiOz51Mm6rmre6s9xaNVw/oSpG04wKMmjNeBbACd A9VMm3kpfDZLqBI4rTJvvJEc9f5w5JQMseDL0KM0Y+MOOq/qfzPZU2C1QUpWluRwo6+myMoDMxHx V2ju1mDRmNDTZvacjZIVDnv5GYUfb/y0VQpwMAP3/eGT8gA/8zX/vWG7rNgwA834HR/z/i+7aM6v eykstvAXYbafPk+HWbvjvjBUQmeibBJsOnGGPKu40TY+xgx0/8Id++i9jTtp1b5jqrUQVLfh80AZ KOIC3BPu3xasssCMImqeUd9RHNoF+JNfYGNKk7V0GnVs2UzfUUxQlI7ZsyvqfNuKMjN2axxQW+Lu fN2fQZn6h7MPXbxET678SUoLewf60/TBfeTLgkF5VK5MDap7iTGjNBFTsZunjaOK3NOxUhfFLJjS xnQqtLOxGgJ1CSiJxGQGplNxbqeGdWn+2Htk/xR+vX2R0eKx63p70sHIWPphyljuFHk06rPVssas Ib/uucSrMtmAZe3zxw4tqE3o8O4CubZeQ1FJppBf7N+dHu7Shvp88AWPohWkMAgf81nucB+OHCiV bc3fnEvVPapQfR/PAu8LY5+6ap1MK+fwvVZyqSDv54cpD1JtL31CBSWQOM/f14vOxF+Va6OjPd69 PT3Zu7Mc8+jStXQgKlbqH1DHgVGpdxN/ev/+AbL/qdXr6SR3Mpy34/kJ10zb/xhygIY995qkLp8a dR99PGm82uMcLJRsNPJRyclSSirNe/FpKV20BzR19wlTqUuPINo7621pc+k6gCrUqUV5a5fLtjPK vOdFXSsMCysQYpNTya9aVflS8Lws+LAU0Axp3USKYlAngGNRpA1OcUQPw0VhzNLxI+jwa1PEGEM5 2v5VrUmDtsY5+ALhzbFcHYZWqaKLrGzA68bw66KkEoZQx6saLdtbGEzCcMd0ai2GA2lQ17uaeHgw tHWgvDa8M+7vnjsCqT53EID7wPXRKQGOweoKFMtX5XPGdmwtaW+sEnnwi2/kGIBzUMsbl5IuM4Tw 6nheySOSAWo0hrZqSs/0C5KVIviMsHTIWGtXFPd0bs/hPt8je8+u0KUlQGbDkDOGP+TOV5TnDWrG npe/r2CVcSgoh+RArriUG82LwprJPTvS6sdHyoJJeFkU38CzfTRqcMFyHxSnzPqb7mG+2HOQ9ab+ YcCbwWs38asu3gopOTOoTsMUbvgbT5O/KmUEKHjv2/R2+u7vY6SgBwaFYhiD0Fcm0Qt3d5cpWhTl 4B5w/ZOX4umlAT1E76JUMjkji2aO6E931C9MvptZzRIBnQglm1O5I0xjw8NUMowaMkaWGClQRolC IYwQuB90tlzTPWF93L+H30W9m/rTwBaN5T0gSMN6uuKwZcZ0ataxHT3Ut4dqKQGebPjKeM2rKGyp gNIBlFHG6TIrlb9TYK4oc0a5MV4YQP3qnlJBhc8G4IsD5hrdXD7O4AzLB5Q6wiiGzFtBAz5eLrW/ MIYoNmQz6BwTurHXYeBNjcvk8ov5+6rApeB11QszWJbT8d2FdM/8lbT+eLh4Quw28qf26nXtAVmC e8X7NF4PS3ywjVEhMrHwfvVjdK+Gc4D5ntYfC6duMz+nAXOW0SfbQgrrIgoPKZJ+d7SksHmz1FbJ 8Ee6DB2J77GogA00w5q2CvqqigxVUXfNEiAnlBvjBZAF+O96CttU5kfA0I/jUTK5/NERtP25CfQ9 e9Atz4yjd++7XovBa9rDkQF+tmu/1AhXdXOl/eyBFz10b8FK4qJKSu2BIid5F3yacR8wUh1N5JMZ o3PYEnzuIr2ydrN0wCXj76NdLzwui0N1SnZPN4KkyzBqaTwK2pRD2mIEbVitkY5MA2MuRHdGuTJe RxjfMb6wpPTC9XFt1HoxBICf/BYqq3ERlH26cz/tjCjeP61UFNvCz4tXxwNS4Rx7R9wDMMxEtzFN jBPSxHZZj0GrOn6ii+G5d57R723nmQuyncYjCyrligO0PDQuAr7O/vXFcF1Uj/4jvmxJl8Hz8ufu bKV5Z7UUHsZreF7b2bWiuCWMF0ER9C+W4iAbEPD6R9L+7J1dJfpHRuJMwhX5TQY8lnOgZ1tieCNg WIeXRJA3cfn39M76bRJswYCN9W4e7JXhJWFQHWYspE1h1y9/AUNaN5UBBKWhXx84LiskYHgZLGf6 sHYt7qRNY9b0+Cx8OajDxM24JWv0yQi+J2NUKE0kXYagDf+ajxO6qFUVoeFsvOXd8yKwiE/Tf2XR mPNHmgfbeOBLgbHgGPwao7kuABkGrJiA0RjeD0Ptt5NHiyZGwKRrynzRi21U4JSckcnXzpDrm2UD gjK043Xg+YBxb1ipAd4Y2leMDfcRfD6a+gUGSB43iV/r5+O6kU7p1Zlik1JlWQ9uy/C7+nvKkLyu AYJCjBRYdQGjxTFYNTx7pP5jLPDi+nl8D8oQEURiO0FNrY5s35ICa/nKvZ7goLEzB3345Uwcj1/X Abg/470USpObg6xyYEN083E+wVFQ4xAewaOS/hmXxPMiUi0z5POYmpGdo2XyAysFAEfR0oYHVk0A rCowH2PAQZisVGADUi2FnLqUoAWfi9IS09JViw4P5VpmTo6sdjBj3AsebMjSlp6VLcfiYSb0/EWN jVz+xnWwPzUzS7YBzscqixMxl1WL42sBrNSwd6/AuD7uG8jnxdu2938sOk47fTlR/jZehzuqbDt6 zzcLatXtuooxR9DdI2Rlxbx1m6Qq7eUlK9Ue55SpSQqLvx6tnnqJjoeF0/B+vei7DZvpX9Mm0f+M 0n/yyhm3hOa1KL8Yv+Ow6dARWc1zS05SWNyayFJ41vnprMPBXy5VZlF+6QzPi+wE0nmsYP9yqTKL 8ot4XmQaEHrxw/K8FuULrFpXxntL1jZY3Lq0Rr4Xy5HE81qywaIc0QWrKlQppeV5LcoVErShHgKe 10qVWZQnJNerPG9JfozRMl6LPx35R1hQ42Gqyy4OlvFalAkCO7WjRh3aqq3iQPT/b44mgz0VcVcA AAAASUVORK5CYII=

    --_bd368098-f4a2-451f-bf70-efb27f67d09c_--

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Kevin Darcy@21:1/5 to All on Tue Aug 4 16:28:16 2020
    --0000000000000e51f205ac1319b3
    Content-Type: text/plain; charset="UTF-8"

    [ Classification Level: GENERAL BUSINESS ]

    Offhand, it looks like the server side is configured to only allow authenticated updates, but you're sending an unauthenticated one.

    A more nuanced issue might be if the ID you're running the nsupdate as,
    can't read the key files, so even though you may have intended the update
    to be signed, it actually wasn't.

    Did you try adding a -d to the nsupdate command? If so, does the debug
    output give any clues?

    - Kevin

    On Tue, Aug 4, 2020 at 1:30 PM Leroy Tennison <leroy@datavoiceint.com>
    wrote:

    I have a situation where, due to the system's location (IP subnet), its
    DNS name is <webserver>.<internal subdomain>.datavoiceint.com. We have a certificate for *.datavoiceint.com which we prefer to use instead of
    having to acquire a certificate for <internal subdomain>.datavoiceint.com since this is a one-off internal-only web server. Our (ISC) DNS servers (version 9.10.3-P4-Ubuntu that comes with Ubuntu 16.04) serve both
    domains. I thought a solution would be to use a CNAME but, when I attempt this (via nsupdate with the update key which works for A and PTR adds and deletes) I get (on "send"):

    TSIG error with server: expected a TSIG or SIG(0)
    update failed: NOTIMP

    What I tried (on both <internal subdomain>.datavoiceint.com. and datavoiceint.com.) was:

    update add <webserver>.datavoiceint.com. 86400 IN CNAME <webserver>.<internal subdomain>.datavoiceint.com.

    Apparently I'm mis-understanding CNAME usage, if I actually can use a
    CNAME record what should the format be (or do I need to configure bind differently to use it since part of the reply is NOTIMP)? If that's not possible due to CNAME restrictions are there any alternatives?

    Thanks for your help.

    Harriscomputer


    *Leroy Tennison*Network Information/Cyber Security Specialist
    E: leroy@datavoiceint.com
    P:


    2220 Bush Dr
    McKinney, Texas
    75070
    www.datavoiceint.com <http://www..com>

    This message has been sent on behalf of a company that is part of the
    Harris Operating Group of Constellation Software Inc.

    If you prefer not to be contacted by Harris Operating Group please notify
    us <http://subscribe.harriscomputer.com/>.



    This message is intended exclusively for the individual or entity to which
    it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender
    immediately by e-mail and delete all copies of the message.


    _______________________________________________
    Please visit https://lists.isc.org/mailman/listinfo/bind-users to
    unsubscribe from this list

    ISC funds the development of this software with paid support
    subscriptions. Contact us at https://www.isc.org/contact/ for more information.


    bind-users mailing list
    bind-users@lists.isc.org
    https://lists.isc.org/mailman/listinfo/bind-users


    --0000000000000e51f205ac1319b3
    Content-Type: text/html; charset="UTF-8"
    Content-Transfer-Encoding: quoted-printable

    <div dir="ltr"><div>[ Classification Level: <font color="blue">GENERAL BUSINESS</font> ]</div><br class="cursAfter">Offhand, it looks like the server side is configured to only allow authenticated updates, but you&#39;re sending an unauthenticated one.<
    <br></div><div>A more nuanced issue might be if the ID you&#39;re running the nsupdate as, can&#39;t read the key files, so even though you may have intended the update to be signed, it actually wasn&#39;t.</div><div><br></div><div>Did you try adding
    a -d to the nsupdate command? If so, does the debug output give any clues?</div><div><br></div><div>                                                                         - Kevin</div><div><br><div class="gmail_
    quote"><div dir="ltr" class="gmail_attr">On Tue, Aug 4, 2020 at 1:30 PM Leroy Tennison &lt;<a href="mailto:leroy@datavoiceint.com">leroy@datavoiceint.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #
    ccc solid;padding-left:1ex">




    <div dir="ltr">
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt">I have a situation where, due to the system&#39;s location (IP subnet), its DNS name is &lt;webserver&gt;.&lt;internal subdomain&gt;.<a href="http://datavoiceint.
    com" target="_blank">datavoiceint.com</a>.  We have a certificate
    for *.<a href="http://datavoiceint.com" target="_blank">datavoiceint.com</a> which </span><span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt">we prefer to use instead of having to acquire a certificate for &lt;
    internal subdomain&gt;.<a href="http://datavoiceint.com" target="_blank">datavoiceint.com</a> since this is
    a one-off internal-only web server.  Our (ISC) DNS servers (version 9.10.3-P4-Ubuntu that comes with Ubuntu 16.04) serve both domains.  I thought a solution would be to use a CNAME but, when I attempt this (via nsupdate with the update key which works
    for
    A and PTR adds and deletes) I get (on &quot;send&quot;):</span><br>
    </div>
    <div>
    <div dir="ltr">
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important"> TSIG error with server: expected a TSIG or SIG(0)</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">update failed: NOTIMP<br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">What I tried (on both &lt;internal subdomain&gt;.<a href="http://datavoiceint.com" target="_blank">datavoiceint.com</a>. and <a href="
    http://datavoiceint.com" target="_blank">datavoiceint.com</a>.) was:</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">update add &lt;<span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">
    webserver&gt;</span>.<a href="http://datavoiceint.com" target="_blank">datavoiceint.com</a>.
    86400 IN CNAME <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">&lt;webserver&gt;.&lt;internal subdomain&gt;</span>.<a href="http://datavoiceint.com" target="_blank">datavoiceint.
    com</a>.<br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">Apparently I&#39;m mis-understanding CNAME usage, if I actually can use a CNAME record what should the format be (or do I need to
    configure
    bind differently to use it since part of the reply is NOTIMP)?  If that&#39;s not possible due to CNAME restrictions are there any alternatives?</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif;background-color:rgb(255,255,255);display:inline!important">Thanks for your help.</span></div>
    </div>
    </div>

    <p id="m_-6032679741644376038c1-id-7" style="FONT-SIZE:0px;FONT-FAMILY:Arial;COLOR:#fff">Harriscomputer</p>
    <table id="m_-6032679741644376038c1-id-8" style="BORDER-LEFT-WIDTH:0px;BORDER-RIGHT-WIDTH:0px;BORDER-BOTTOM-WIDTH:0px;PADDING-BOTTOM:0px;PADDING-TOP:0px;PADDING-LEFT:0px;MARGIN:0px;PADDING-RIGHT:0px;BORDER-TOP-WIDTH:0px">
    <colgroup id="m_-6032679741644376038c1-id-9">
    <col id="m_-6032679741644376038c1-id-10"></colgroup>
    <tbody id="m_-6032679741644376038c1-id-11">
    <tr id="m_-6032679741644376038c1-id-12">
    <td id="m_-6032679741644376038c1-id-13">
    <table id="m_-6032679741644376038c1-id-14" style="HEIGHT:0px;WIDTH:100%" cellspacing="0" cellpadding="0" border="0">
    <colgroup id="m_-6032679741644376038c1-id-15">
    <col id="m_-6032679741644376038c1-id-16">
    <col id="m_-6032679741644376038c1-id-17">
    <col id="m_-6032679741644376038c1-id-18"></colgroup>
    <tbody id="m_-6032679741644376038c1-id-19">
    <tr id="m_-6032679741644376038c1-id-27">
    <td id="m_-6032679741644376038c1-id-28" style="WIDTH:33%">
    <p style="FONT-SIZE:10pt;FONT-FAMILY:Arial" align="left"><b id="m_-6032679741644376038c1-id-30"><font id="m_-6032679741644376038c1-id-31" face="Arial">Leroy Tennison<br id="m_-6032679741644376038c1-id-32"></font></b><font id="m_-
    6032679741644376038c1-id-33" size="2" face="Arial">Network Information/Cyber Security Specialist<br id="m_-6032679741644376038c1-id-38"><span id="m_-6032679741644376038c1-id-39" style="FONT-SIZE:8pt">E: <a href="mailto:leroy@datavoiceint.com" target="_
    blank">leroy@datavoiceint.com</a><br>P:</span></font></p></td>
    <td id="m_-6032679741644376038c1-id-40" style="WIDTH:33%">
    <p style="FONT-SIZE:10pt;FONT-FAMILY:Arial;TEXT-ALIGN:center" align="center"><br id="m_-6032679741644376038c1-id-43"><img border="0" src="cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG"></p></td>
    <td id="m_-6032679741644376038c1-id-45" style="WIDTH:33%">
    <p id="m_-6032679741644376038c1-id-46" style="FONT-SIZE:10pt;FONT-FAMILY:Arial;TEXT-ALIGN:right" align="right"><font id="m_-6032679741644376038c1-id-47" style="FONT-SIZE:8pt" face="Arial">2220 Bush Dr<br id="m_-6032679741644376038c1-id-48">
    McKinney, Texas<br id="m_-6032679741644376038c1-id-49">75070<br><font id="m_-6032679741644376038c1-id-51" style="FONT-SIZE:8pt" face="Arial"><a href="http://www..com" target="_blank">www.datavoiceint.com</a></font></font><font id="m_-
    6032679741644376038c1-id-56" size="3"> </font></p></td></tr></tbody></table>
    <table id="m_-6032679741644376038c1-id-57" style="WIDTH:100%" cellspacing="2" border="0">
    <colgroup id="m_-6032679741644376038c1-id-58">
    <col id="m_-6032679741644376038c1-id-59">
    <col id="m_-6032679741644376038c1-id-60">
    <col id="m_-6032679741644376038c1-id-61"></colgroup>
    <tbody id="m_-6032679741644376038c1-id-62">
    <tr id="m_-6032679741644376038c1-id-63">
    <td id="m_-6032679741644376038c1-id-64" colspan="3">
    <p id="m_-6032679741644376038c1-id-65" style="MARGIN-BOTTOM:0px;FONT-SIZE:10pt;FONT-FAMILY:Arial;MARGIN-TOP:0px"><font id="m_-6032679741644376038c1-id-66" size="1" face="Arial">This message has been sent on behalf
    of a company that is part of the Harris Operating Group of
    Constellation Software Inc.</font></p>
    <p style="MARGIN-BOTTOM:0px;FONT-SIZE:10pt;FONT-FAMILY:Arial;MARGIN-TOP:0px"><font size="1" face="Arial">If you prefer not to be contacted by Harris
    Operating Group <a href="http://subscribe.harriscomputer.com/" target="_blank">please notify us</a>.
    </font></p>
    <p style="MARGIN-BOTTOM:0px;FONT-SIZE:10pt;FONT-FAMILY:Arial;MARGIN-TOP:0px"> </p>
    <p style="MARGIN-BOTTOM:0px;FONT-SIZE:10pt;FONT-FAMILY:Arial;MARGIN-TOP:0px"><font size="1" face="Arial"></font></p>
    <p style="MARGIN-BOTTOM:0px;FONT-SIZE:10pt;FONT-FAMILY:Arial;MARGIN-TOP:0px"><font size="1" face="Arial">This message is intended exclusively for the
    individual or entity to which it is addressed. This communication
    may contain information that is proprietary, privileged or
    confidential or otherwise legally exempt from disclosure. If you are
    not the named addressee, you are not authorized to read, print,
    retain, copy or disseminate this message or any part of it. If you
    have received this message in error, please notify the sender
    immediately by e-mail and delete all copies of the
    message.</font></p></td></tr></tbody></table></td></tr></tbody></table>
    <p id="m_-6032679741644376038c1-id-74" style="FONT-SIZE:10pt;FONT-FAMILY:Arial"> </p></div>

    _______________________________________________<br>
    Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>

    ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>


    bind-users mailing list<br>
    <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
    <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
    </blockquote></div></div></div>

    --0000000000000e51f205ac1319b3--

    iVBORw0KGgoAAAANSUhEUgAAAK8AAABDCAYAAADqFFWMAAAAAXNSR0IArs4c6QAAAARnQU1BAACx jwv8YQUAAAAJcEhZcwAAEnQAABJ0Ad5mH3gAAAAZdEVYdFNvZnR3YXJlAEFkb2JlIEltYWdlUmVh ZHlxyWU8AAAD9GlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSLvu78i IGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9i ZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42LWMxMzggNzkuMTU5ODI0LCAy MDE2LzA5LzE0LTAxOjA5OjAxICAgICAgICAiPiA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93 d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8cmRmOkRlc2NyaXB0aW9uIHJk ZjphYm91dD0iIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIg eG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJl ZiMiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6ZGM9Imh0 dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InV1aWQ6NUQyMDg5MjQ5M0JGREIxMTkxNEE4NTkwRDMxNTA4QzgiIHhtcE1NOkRvY3VtZW50SUQ9 InhtcC5kaWQ6NERDMzVBNEFFQTZFMTFFN0E2QTNDODdCMENGMzRGN0EiIHhtcE1NOkluc3RhbmNl SUQ9InhtcC5paWQ6NERDMzVBNDlFQTZFMTFFN0E2QTNDODdCMENGMzRGN0EiIHhtcDpDcmVhdG9y VG9vbD0iQWRvYmUgSWxsdXN0cmF0b3IgQ0MgMjAxNyAoTWFjaW50b3NoKSI+IDx4bXBNTTpEZXJp dmVkRnJvbSBzdFJlZjppbnN0YW5jZUlEPSJ1dWlkOjY1ODFiNWQyLWQxMWItODQ0Zi04Yzk1LTE0 ZGE3OTJiNGU1ZiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpjNDgxZDkxYS0yMGQyLTRhODUt ODBjNy00MGNiYTNmM2Q1ZGMiLz4gPGRjOnRpdGxlPiA8cmRmOkFsdD4gPHJkZjpsaSB4bWw6bGFu Zz0ieC1kZWZhdWx0Ij5QcmludDwvcmRmOmxpPiA8L3JkZjpBbHQ+IDwvZGM6dGl0bGU+IDwvcmRm OkRlc2NyaXB0aW9uPiA8L3JkZjpSREY+IDwveDp4bXBtZXRhPiA8P3hwYWNrZXQgZW5kPSJyIj8+ tu59AgAAG8RJREFUeF7tnQd8VNW2xleAkBBIIRCqEEMJVTqEXlS6iFwBwQKiCBdRvHZ9Pi+2e+UJ KiLCBRWpF8ECNkAQRDpJ6C0QQktIQkgC6T3nrW+dfZLDMJNJkGiC5+9vnJx9ypyZWXvtb6299uCi MWRhUYZoMfVF8vbwoD0z31Qt9rGM16LM4dLpTv6fC2khm1WLfSqoZwuLskPlyvxwpYysbNVgH8t4 LcoUaZlZ4nWpYkU6cylOtdrHMl6LMkVyeoZuvBUq0JlYy3gtyhFJ6elsvPwHjNfyvBbliQLPW7EC nbWM16I8oXteSzZYlAE2Hz5GLncOp9Mxl1RL0RRqXgRsl1WrfSzjtShVlmzZRpSWTp9u3KJaiibJ JBssz2vxp5KQkkpUxZ0ORJxTLUVjlg0Zlua1+DOJSbwiEw57wyNUS9EUyAaQm6s/O8AyXotSJTrx KlElV0o+F6laiiaJJYYYr0iHihQVn6j2XI9lvBalyiV4XpYA0LBRCY4N0aDA8+bny3lF5Xot47Uo Xa4msZWxMVaqRMGnnEsH0byMV7WqYsRFBW2W8Vr8LgZOn0Hr9x1SW3bIzdOf2XhDiqF7xfOy1+3Y OIBI0yzPa1E6bDsWRhu/X08T536qWq7lalqayAUYIVWqSMHhZ9Qex0iqLD+P2jXyl/OKmmWzjNfi htl27ASRjzdFOxjaJVhju61Tw1ckwN5Tp9UexyRDNuTlU/sA3Xgt2WBRKmw9wsbrVpldLBupHSRN xl50SMe27IErUdqFKLXHMbrnzWfPe7slGyxKj82HjoqWhWHayyQYnrc2e+c2IgOILlyOV3vtIwEb G+8d/g34WaNYy/NalAowRJUGO27Hq0bD8zI1vTypY5NGLB3IacYhTTyvWplWxV3PVjjAMl6LGwLB mizXQTBWsSIdi7yo9hQSc8VsvAHyt9OgTaaH9T99avvx/10oJYMN2g6W8VrcEFuPHBePW50NE3nc Y3Y9r66FxXgbs4Zlgp2ly+B54c2ZgNq15NlR0HZLGW9Wbi5dSkmjOH6kZ+eo1tIBr3E5NY0uJady cJyvWokSUtMpnh9oz8wpem7eICUzizadKN7cf1lh61EO1vLy6emhA4hy8lg2XO95Ddng5+VFnSAb 2EsHO8s4QDF4eMifjcTzsvE6CNpuKePdfvoC9ftwMd310VL6b8gR1Vo6vLXuNxowZzndya/109Fw 1UrU84MvaOi8/1K3WYso00lhiUEvPufV7zbT1C/XqZayz68I1rhzPjNsEFFuTpGe18/bkyqxtIDM yIiMlrYi8agiTwF1DM9rv673ljLeyhz5+latIg+Pyq6q1Tn//PFXeuDzr+njrXtVi3MGt2pCnu6V qZZnVToTr3uYq+mZ5OXuRtU93Kl57Rrkg4DDCfC6Wbl5VMXVlWKSU1RrOQCF4t5e5OtZTQKs5Cg7 mld53nrVq8tzg6aN5fmsgyLz1IxMefZWxttIyQZHExVFGu/Ji9EUHh1Lp2Ni5Tksqhi95k9E6fwS cyz6MkVdSaZE6K1i0i2ggRhdJdZnp+ISpC3sUjy5sg7MzsujXk38pc0Znmzsix4ZTgNaNqZl40eo 1rLNnpM89PP77NGmlWy71q0t5YvZNiNNZiLSZxpVdq0k211gvMg4ONC9Rl0Dfi0HNCrwvCU03kmf fEbN732IAkeOp6YjHpHnFsMfoglzFqgjbozIywnSI40HdFHsFcfpkOLwS9gZ2nchmryquPFnY9+E Q3n/j0dOUfC5Qg+Rzx7jChtsUmYmufMHDGOEljUDg1zHsmDrqWuLqeHdq/A5FThYOXmp0HhhzNl8 ne6NbpM2g9/Cz8vrR1y+Ph96u683PdWnM2XY0chbTp6lDcdPy33aspn34d7s7StNxs+eLxmGHi0D Zbu1P96rCx09byMd0vi+quheFHRuyrqXCXGQLpO6BsaLP1tgeF5HmlfvEna4wkEHpv4aBjSkGp6e lJiaSufPnKcrNl9uSWjw+NMUBaHvgj6jcnmILNPSafY7r+n6qYQMnruCrvJwgyo6DNPVeCg3B2sx SSl095xlIiPgFZFC9GCj2/KP8ZSYkUFd3/uMmtaqwQGzixh2EG+fffsZObfz/33Kx2tyXkW+5/Sc HPpq4ihq4ucr+7s1akAhfE4yfiiDCY9LFONNzcqmno0bStuxmDgav2QtSxrWfEw2BznN+PVWTPib bGexwfZmnQ65cUe92rR43HBpD2dvPnbRN+TGUiiP76Gud1VaM2mM7Nsafo7+8dUG6ah5mh4sTusb RBN7dJC/S4t9EWep00T+bHhkQQ721ZH3SnvLBrfRgd2hdDwyijqorIJ4Yf5M3WrokgF0CdRlg2PP qxuvdxWz571+injD/kPU/LZ6jj0vPAqMatG0SbT/w3/R8uem8nYatxepNIrkKgqNfXyoUdtW1Lht a2ravg35BvCb9a1O0Qn2pxiL4oPNuyktO5t8WGMaRmPrd1Mysyk3P596sKHBSKu5uUq3efHbjVSd vcLtNXw4CNbkAUNpVLPww77MHbh9gzrUxb++GB/07WPLvlN7iYJury8SAcadyF7mNLwq30B9Hy8e VdFRNHp48RqqWc1DNG3jmr7cwdwo6moyPb16vVwDn7Mvazw8oKENxrDh4jx0uhx+DXQugAzHND4X xv6/g3vT2slj5O+PtwaLwZcWTy9cTJ3GTmQtkEVBQR1J27SGfKpWlX2tGuqjjDlos9W7IAjGy5/J XoeeV5cNhufFZwjnlhNXqJHRKQY/NJm6PP+684BNKtsZqRD6ncjNJCVTxIIP6TQ/Ts1/n955eDQR e86KbAAl5ZuDJ+TLRdCz7bkJ9PqQPmLAZhA8nZz+FM0eNYiWjLuP6nHkC2Pbyx6zIhvOL9PG8bCb KQbuX92bNj8zTp3J2u7Fx+mzh+6lOaMH00DWpEiJYWg3huluAbeJ1HDlIfRIdJx4eUiRXk10r7t4 90ExLIwErwzoQcseHcGdp7LIjR0RF6TDGEZpZtGuA1SV31ceXwteft8rk+idYXfJvk9+C6GaVT3Y oPPp/vYtpLO1rOPH3spNPo+bDd6z38OTae7SVTJi/ueNl2nPzLfUXp1WDerL8zFTuszINNRlx2Tg 4eZG5O5O2RxL2aPA8yrNK/jVuGY50Ptrf+Iv1YdG9+zq2HjlhezggUKMG0TSJYz8HpUi2cHsiTOQ Q4W2xBfcvkFdaYN3g7cz48fecv72UOo68zMKfGMuXWB9DS9tHJeFIVABAzZz+OIlGvjxMjlv7aEw 8cww+Fw2HFDbq5p45Mr8vr49eFx0Mzxxd/byQAI4eA4+vlU9Xb+1rV9HtmHA2C8d2oajLDVwXYwq 04f2kbYWdWrK81EOLtFZ0ClbvzOPWrz1iXQcdKKz8SUfvZzR9cXpFM+BeqVaNenKlrU0eeCdak8h LZXnhWwwMHK89Xx95NnAX3Svi92l8AWF6CrbABrV5mCQjz+nMhTvr10ntQ9TBt99rfF+uvFXcuXg rCb3tBVbd0jFkPFFyXPlyvTl9l3kzcOHCwdvzy9aIfscEfDEP8h95KNU7YHHyGfsE5TAXhc6KN/G SG4EGJrhtIxfaYXSseWpVevEA9b2rEahrzxBg1o2kS/azqHcVti6Ivgwvbz2FzagXPp20mh6656+ BV7dxeQtIR1YdFBYbIJ0Cnhmw3jRsYxLGmfYcbTXAe9tYP4b5CuNC28+c8QAmvvAELm390b0pym9 O8m+m0no6TMyMuZ8u6xAJtjSBNkG/g4iTAFb9BW9I9UzeV5gZBzsFaYbAZvZ8xoZh8iEBJEMCZAc 3l4iVa4x3gUbNlNuSiolnI+knFjuGQmJFFhP92rN6/Mz96a82MuUDG2TlUULfnb8+6nwqOcOHqEs 1mhpfL2ksxyto5CDPZOnqWfdKBh+YbOVWAIciIyVtkNRseKVgGEjmLiAtBjRrnnBEG7G7KjhNQ1W 7z8uOrRl3ZrUmr1mTl7hgWb768rSITs3XzwyjDXAFKAEsJ5Gp8c9nuJgDsBzYhtG3oKHe/PsnEHT Wr5yXlV2Fm+u+03ajsfongcyAh0XWvkoe9y7mgVQ/xaNuUPmyqzeTQd2wCOMU5DvVQYLDM1b18bz ivEy9oI2Q6IaeV4QoGbZLnGcMPv7DVLFNnHYQGm7xnhFErDr3jJvFuXv3EDa0V16RTuD6A7b2u6f KXYd65/kFIfSAshwyIZUkzWLtmcT5e76mbJ3rCct+Bd1xO8HXxyideg9yIIVIUdkOAaGqcFQ3HgI XhlylBbvOSgpL2wj6gfu/LeRr428mkQ93l8k7UiFQY8iDbaAZcd/+IFrwzubU1rQvdl5ueKNJb/b WPe64OGgNpTIehod7V8bttHfV/4oehmGZmQjbGUOeLRbe9Hh0OaYAOnw7kJ6/Uf9Rzsm9+okgaQ7 f4nrjoXLbGL/OUvp+W822tXPv4f9EWclYGrTsrlqccxtSJfx6yMVCgplw7WetzBddn2BTkGqzCwb lOe9kppKH/3AxpufR88OHyJt1wsu9h4wYvPQaIsbDMRmOLOPVvDlwJgNr3izeHtYP0rhoRwPvE4P Ngh8sUk8zBl1Ba8O7EnRHEghzTV7yx5q6OstkxFIb11I1PPLHRrUoYS0DNGiRp53Ogd/l3gUgiSZ ty1UOghm0KBDd58tXMaNzEIGSwsYJTIBSJ8ZIHU3Y/hddJG9Bo45cjGO0vhePbnTf8xBIIAsQKoP D+wDCNY+Gj1IshIwdHfXigWfY2MO0PC+L15NEQ+MTERqVo500no+nnLMzWLniVPy3L25ns8tilYN VMZB6d4YFbDV4+DKTNdmTWS422OnxsFewCa5Xu6on23aStGYxatZg1qqABFfTgG9X31To6D+2q4T p1SLfeJTUuS4Wo/8XbVcT3pWFh9zt+b74BOqxT4zvvlBrvU/S1erlpLBw662dO8hbcfpC7IdfO6i tu9CtMZDqGyDsNh47fNd+zU2TI2NQdt3PloL5Yf5mI3HI7Qlew5qG09EqBZNYwPXWC/L8SDk/EVt /4UYLTwuQbYNcP0DkTFaCL+2PdKzs7VvDhyX+9x7Nkq1FoJ7xvknL8WrFh3W2NrK0CPa6v3H+Bo5 qlWH9Z/GQaRcc2eE/t5vNg+8N0ejrv21Zb9uVy2Oee7z5fI9zlrzk2y3fuol2T56PlK2zVDfYWIb ttz/7odyzpo9IaqFP/PwCI16DdFo8GiN7r5Pm7Zwidqjadd43koVSuYZ7UXKBjIlKJMRxYCdPIbI GwFD5SNd2rDX1T1eZ/967EnrSk7WoFntGvQYD8V+1TwkM9ChYV3qyA/zMf1bNKJxQW2pf3N9WAOe PAKN79pWjgedGtaTvK8xSWGA67e7rQ514te2B7Igf2vXQu6zCwd4tuCecX5grRqqRQceeEzH1jSq fcsCOWSAUWx4m2ZyTSNAvNmI52WH36NFcTyv/r6MjIMj2QAaie51oVMXY/QGhT3PK2WRiAvw/lkT P6ckA3DxGTtRu4oIjrUfeXnJRMTWhR9Sn1Yt1CHXE5eURLUHjGRhyEOCSaRfAzqCtydVqVaN0r/6 QjVez1ur1tD0+awzYbxKsFv8wUCRsDzJ2L2R3LnDGLj0ZGnDUgpxjjNQ79Bt/JMU1Kur5IFdBo8S 20C8Y8vYWXPpy2++p2Xv/pMe7ttTtXIw98LrFLJjL+1bsYA6YOm7wqUbB2jcCVzZmWR/u1S1cnvf 197WtoYeZMvmm4aFs7fM4APMb8IeXmMepxRUQRWlY1lXThg2SGbpHLE/4hx1nPwsR04c/N3kgMOi mLDhUnYOPTikP614fqo0od6kLhugLxtRAhuTM1AR5tlvGHn6N6TkVZ+TS49B8n1qHKTb8sF36+j5 GbNp2mMP00dPFE4KNX/yBTq5/zCFr1mmp98ULnfdJ88vjxtDM8brU+SCkg8Wf3Goy92sbweoLU37 eude0bv3vjNLtTiHug3QqOdg/W/WrjT0Afnblu3HwuTaXV/8p2rRqTN+ipwXdzVJtei43z9eoxZB WlxSsmrRuTGhWUog4kaF2K+nzkoO81YGKbiZm3ZJ7cUfzb4LMZIy5OC0IItxzz08NLN0e2nxStne FVb8TIOBO+YE8jWKjE+Qa9Wyo3dBUGATOW4vSitNFKbKTNPDzJGPZ9CqhbPJD0uOTJQp4424fIWe /fpnemnNL7Q85LBqvTUZseBL+u5wGN3/6SrV8scxd1uIzB5O+2oD5eTqEzMi7TBrt/i/sr07TF8d 0r1FU3kuDq2Q62Wj3XTwiMhJ2wkKA1fEV1U9SLOpFktXMY+kYk00qVtHahlsKVPGi1wlZsHwqOJE c9sy5vOvqfU78+m1H4r3C9x/FFiOhPtCHYIZfEGYRcN7/aNBFgOv680PqR5k/Ly9qF33LkQ5ObRm dwgdOHtevGOvYkxQGEiut0IF+uXgUTFec0WZLU3hffm1T5hXHSvPW1zKlPH+HjDrVaNqlT/FGIoC Ew+4r+o2S4JQsfbaoF709ROjVcufzxfPTJbswiOz51Mm6rmre6s9xaNVw/oSpG04wKMmjNeBbACd A9VMm3kpfDZLqBI4rTJvvJEc9f5w5JQMseDL0KM0Y+MOOq/qfzPZU2C1QUpWluRwo6+myMoDMxHx V2ju1mDRmNDTZvacjZIVDnv5GYUfb/y0VQpwMAP3/eGT8gA/8zX/vWG7rNgwA834HR/z/i+7aM6v eykstvAXYbafPk+HWbvjvjBUQmeibBJsOnGGPKu40TY+xgx0/8Id++i9jTtp1b5jqrUQVLfh80AZ KOIC3BPu3xasssCMImqeUd9RHNoF+JNfYGNKk7V0GnVs2UzfUUxQlI7ZsyvqfNuKMjN2axxQW+Lu fN2fQZn6h7MPXbxET678SUoLewf60/TBfeTLgkF5VK5MDap7iTGjNBFTsZunjaOK3NOxUhfFLJjS xnQqtLOxGgJ1CSiJxGQGplNxbqeGdWn+2Htk/xR+vX2R0eKx63p70sHIWPphyljuFHk06rPVssas Ib/uucSrMtmAZe3zxw4tqE3o8O4CubZeQ1FJppBf7N+dHu7Shvp88AWPohWkMAgf81nucB+OHCiV bc3fnEvVPapQfR/PAu8LY5+6ap1MK+fwvVZyqSDv54cpD1JtL31CBSWQOM/f14vOxF+Va6OjPd69 PT3Zu7Mc8+jStXQgKlbqH1DHgVGpdxN/ev/+AbL/qdXr6SR3Mpy34/kJ10zb/xhygIY995qkLp8a dR99PGm82uMcLJRsNPJRyclSSirNe/FpKV20BzR19wlTqUuPINo7621pc+k6gCrUqUV5a5fLtjPK vOdFXSsMCysQYpNTya9aVflS8Lws+LAU0Axp3USKYlAngGNRpA1OcUQPw0VhzNLxI+jwa1PEGEM5 2v5VrUmDtsY5+ALhzbFcHYZWqaKLrGzA68bw66KkEoZQx6saLdtbGEzCcMd0ai2GA2lQ17uaeHgw tHWgvDa8M+7vnjsCqT53EID7wPXRKQGOweoKFMtX5XPGdmwtaW+sEnnwi2/kGIBzUMsbl5IuM4Tw 6nheySOSAWo0hrZqSs/0C5KVIviMsHTIWGtXFPd0bs/hPt8je8+u0KUlQGbDkDOGP+TOV5TnDWrG npe/r2CVcSgoh+RArriUG82LwprJPTvS6sdHyoJJeFkU38CzfTRqcMFyHxSnzPqb7mG+2HOQ9ab+ YcCbwWs38asu3gopOTOoTsMUbvgbT5O/KmUEKHjv2/R2+u7vY6SgBwaFYhiD0Fcm0Qt3d5cpWhTl 4B5w/ZOX4umlAT1E76JUMjkji2aO6E931C9MvptZzRIBnQglm1O5I0xjw8NUMowaMkaWGClQRolC IYwQuB90tlzTPWF93L+H30W9m/rTwBaN5T0gSMN6uuKwZcZ0ataxHT3Ut4dqKQGebPjKeM2rKGyp gNIBlFHG6TIrlb9TYK4oc0a5MV4YQP3qnlJBhc8G4IsD5hrdXD7O4AzLB5Q6wiiGzFtBAz5eLrW/ MIYoNmQz6BwTurHXYeBNjcvk8ov5+6rApeB11QszWJbT8d2FdM/8lbT+eLh4Quw28qf26nXtAVmC e8X7NF4PS3ywjVEhMrHwfvVjdK+Gc4D5ntYfC6duMz+nAXOW0SfbQgrrIgoPKZJ+d7SksHmz1FbJ 8Ee6DB2J77GogA00w5q2CvqqigxVUXfNEiAnlBvjBZAF+O96CttU5kfA0I/jUTK5/NERtP25CfQ9 e9Atz4yjd++7XovBa9rDkQF+tmu/1AhXdXOl/eyBFz10b8FK4qJKSu2BIid5F3yacR8wUh1N5JMZ o3PYEnzuIr2ydrN0wCXj76NdLzwui0N1SnZPN4KkyzBqaTwK2pRD2mIEbVitkY5MA2MuRHdGuTJe RxjfMb6wpPTC9XFt1HoxBICf/BYqq3ERlH26cz/tjCjeP61UFNvCz4tXxwNS4Rx7R9wDMMxEtzFN jBPSxHZZj0GrOn6ii+G5d57R723nmQuyncYjCyrligO0PDQuAr7O/vXFcF1Uj/4jvmxJl8Hz8ufu bKV5Z7UUHsZreF7b2bWiuCWMF0ER9C+W4iAbEPD6R9L+7J1dJfpHRuJMwhX5TQY8lnOgZ1tieCNg WIeXRJA3cfn39M76bRJswYCN9W4e7JXhJWFQHWYspE1h1y9/AUNaN5UBBKWhXx84LiskYHgZLGf6 sHYt7qRNY9b0+Cx8OajDxM24JWv0yQi+J2NUKE0kXYagDf+ajxO6qFUVoeFsvOXd8yKwiE/Tf2XR mPNHmgfbeOBLgbHgGPwao7kuABkGrJiA0RjeD0Ptt5NHiyZGwKRrynzRi21U4JSckcnXzpDrm2UD gjK043Xg+YBxb1ipAd4Y2leMDfcRfD6a+gUGSB43iV/r5+O6kU7p1Zlik1JlWQ9uy/C7+nvKkLyu AYJCjBRYdQGjxTFYNTx7pP5jLPDi+nl8D8oQEURiO0FNrY5s35ICa/nKvZ7goLEzB3345Uwcj1/X Abg/470USpObg6xyYEN083E+wVFQ4xAewaOS/hmXxPMiUi0z5POYmpGdo2XyAysFAEfR0oYHVk0A rCowH2PAQZisVGADUi2FnLqUoAWfi9IS09JViw4P5VpmTo6sdjBj3AsebMjSlp6VLcfiYSb0/EWN jVz+xnWwPzUzS7YBzscqixMxl1WL42sBrNSwd6/AuD7uG8jnxdu2938sOk47fTlR/jZehzuqbDt6 zzcLatXtuooxR9DdI2Rlxbx1m6Qq7eUlK9Ue55SpSQqLvx6tnnqJjoeF0/B+vei7DZvpX9Mm0f+M 0n/yyhm3hOa1KL8Yv+Ow6dARWc1zS05SWNyayFJ41vnprMPBXy5VZlF+6QzPi+wE0nmsYP9yqTKL 8ot4XmQaEHrxw/K8FuULrFpXxntL1jZY3Lq0Rr4Xy5HE81qywaIc0QWrKlQppeV5LcoVErShHgKe 10qVWZQnJNerPG9JfozRMl6LPx35R1hQ42Gqyy4OlvFalAkCO7WjRh3aqq3iQPT/b44mgz0VcVcA AAAASUVORK5CYII=

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Reindl Harald@21:1/5 to All on Tue Aug 4 19:50:08 2020
    Am 04.08.20 um 19:34 schrieb Matus UHLAR - fantomas:
    On 04.08.20 17:29, Leroy Tennison wrote:
    I have a situation where, due to the system's location (IP subnet),
    its DNS
    name is <webserver>.<internal subdomain>.datavoiceint.com.  We have a
    certificate for *.datavoiceint.com which we prefer to use

    wildcard in certificates only covers one level of subdomains, so *.datavoiceint.com will cover <internal subdomain>.datavoiceint.com but not anything under it.

    you will have to strip the  <webserver> part or get other certificate

    proper wildcard certifiocates are looking like this

    X509v3 Subject Alternative Name: DNS:*.buildserver.thelounge.net DNS:*.thelounge.net
    DNS:thelounge.net

    in other words: you have "*.domain.tld" and "domain.tld" in your SAN

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)