• CNAME restrictions (1/2)

    From Leroy Tennison@21:1/5 to All on Tue Aug 4 22:25:45 2020
    Thank you, -d surfaced the issue - now to decide what to do about it...

    ________________________________
    From: bind-users <bind-users-bounces@lists.isc.org> on behalf of Kevin Darcy <kevin.darcy@fcagroup.com>
    Sent: Tuesday, August 4, 2020 3:28 PM
    To: bind-users@lists.isc.org <bind-users@lists.isc.org>
    Subject: [EXTERNAL] Re: CNAME restrictions


    CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


    [ Classification Level: GENERAL BUSINESS ]

    Offhand, it looks like the server side is configured to only allow authenticated updates, but you're sending an unauthenticated one.

    A more nuanced issue might be if the ID you're running the nsupdate as, can't read the key files, so even though you may have intended the update to be signed, it actually wasn't.

    Did you try adding a -d to the nsupdate command? If so, does the debug output give any clues?

    - Kevin

    On Tue, Aug 4, 2020 at 1:30 PM Leroy Tennison <leroy@datavoiceint.com<mailto:leroy@datavoiceint.com>> wrote:
    I have a situation where, due to the system's location (IP subnet), its DNS name is <webserver>.<internal subdomain>.datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&c=E,1,0gSBGzOV_9iJ4F-vOfqNwsk4Kjf6AQvm_
    Nt3gjCZAng77d3CYgiVYS_-yNeGK3M-LLCuD8B-erwPcTNMkAxJaTdxayw90W-cIVfFe6TBpYonsjiZafcGPSBGsgSS&typo=1>. We have a certificate for *.datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&c=E,1,e3FlEDT18o4d4tQSRMvBH_pJRuK7156_
    n6wtGIzdpwjQt88Y_j375seki-O4IjtqsVLmsYGablGT9qnLV7jap1khSDSeV8Qt3U6JQ73WAhGbMMeoi10k&typo=1> which we prefer to use instead of having to acquire a certificate for <internal subdomain>.datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%
    2fdatavoiceint.com&c=E,1,6-PPelQOIFl5wSdbP2RNe2N6pkrhqneq6Ezfx3p5-pXYgNrt6J521WJEJJKFmvxtsjfuSzRbWHJnSbpTUyu6XqeAeCg6OO0-KzDJiXfe1ccW7qg9pN7g2CgI&typo=1> since this is a one-off internal-only web server. Our (ISC) DNS servers (version 9.10.3-P4-Ubuntu
    that comes with Ubuntu 16.04) serve both domains. I thought a solution would be to use a CNAME but, when I attempt this (via nsupdate with the update key which works for A and PTR adds and deletes) I get (on "send"):

    TSIG error with server: expected a TSIG or SIG(0)
    update failed: NOTIMP

    What I tried (on both <internal subdomain>.datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&c=E,1,WqKTpCcatx2SaWvqy4SyBLF0mNa1-gW8LKH80Ec2eWBinE3E7c5lEHLpjRuSiRnF_xc32FO_Ke1HOfMD3_RKS1c_-Gb4quMBWrNQrHh74wi-HJkg&typo=1>.
    and datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&c=E,1,gDRbc9b7Hocp2adLEqMg2H4aBk9B80nSlj9DRUkwds45t2gqX4OYSPpS7T0rTc7SpPNhIUwv5Qxh01PYiNrEy5_9cB7--c16EqfcCxXOM4w,&typo=1>.) was:

    update add <webserver>.datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&c=E,1,LMSRr0xOj2dbcOJlyj5U8VIFyRH5ecttdkU4Je538OMUPmbLfqBLc5uT1bH4P4-AQWj7eME7APcmrfzjgPYOORSQ1gGlo41FqXQQU67iTV6fGo1tYi-G3-c,&typo=1>. 86400 IN
    CNAME <webserver>.<internal subdomain>.datavoiceint.com<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&c=E,1,K69ghu-8VkYZl4XrnMCfdzlp4UUfK2BGmh9Q9xWS3VzeXkVGOtpJequZa-J_gQCYM2J904MVlyeH5VboQjCatM-y6QbI5FtcIV32w9Cx&typo=1>.

    Apparently I'm mis-understanding CNAME usage, if I actually can use a CNAME record what should the format be (or do I need to configure bind differently to use it since part of the reply is NOTIMP)? If that's not possible due to CNAME restrictions are
    there any alternatives?

    Thanks for your help.

    Harriscomputer

    Leroy Tennison
    Network Information/Cyber Security Specialist
    E: leroy@datavoiceint.com<mailto:leroy@datavoiceint.com>
    P:


    [cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG]


    2220 Bush Dr
    McKinney, Texas
    75070
    www.datavoiceint.com<http://www..com>


    This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc.

    If you prefer not to be contacted by Harris Operating Group please notify us<https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fsubscribe.harriscomputer.com%2f&c=E,1,tDHN8eusdo1dmAH7sVm4QCbMt63IMR6Im_-
    2r3epFrKvWDlRIiNUdnjRrqlc7YbDFZi26vf4PH2bi8fXxWwxgooQFPSr0rZ89dfsdV3EvGhNQhzOxc6dkeUO&typo=1>.



    This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named
    addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message.





    _______________________________________________
    Please visit https://lists.isc.org/mailman/listinfo/bind-users<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,CDMflPVUr90kiYfSOvXo00T7TBy9AFUx6FdLRdQBJa-nfuss1-
    6v2StCLMjo5N7XEWIzaAMYqdLxCJm19LkU41PJ7S70tpWHEbsHm_wRreEtphpp0w,,&typo=1> to unsubscribe from this list

    ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.isc.org%2fcontact%2f&c=E,1,zAjBUTG3aODlmEnA9xOCfIc-
    FLN7uOu1DJKXw8Di5qzNFwVHyjgzPL-Fz4AGawuWpUobdCCcvjoC2yzfGz6u5wChvrFo_HlzGCt2MGZRPraxh9UnfgFFPElXjA,,&typo=1> for more information.


    bind-users mailing list bind-users@lists.isc.org<mailto:bind-users@lists.isc.org> https://lists.isc.org/mailman/listinfo/bind-users<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,S19JJd3-XjKGpp0iiFqcNeZ9ZhMDJTJXXYfdHBbUbJTkidDuGUItxy4j8ymlHdHl1DtSX9Y5wSZGiz_-
    fngKSPWyp8oCKUEsRXNwiJ2pcgcpoug,&typo=1>

    Harriscomputer

    Leroy Tennison
    Network Information/Cyber Security Specialist
    E: leroy@datavoiceint.com
    P:


    [cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG]


    2220 Bush Dr
    McKinney, Texas
    75070
    www.datavoiceint.com<http://www..com>


    This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc.

    If you prefer not to be contacted by Harris Operating Group please notify us<http://subscribe.harriscomputer.com/>.



    This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged or confidential or otherwise legally exempt from disclosure. If you are not the named
    addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message.





    --_23675f81-9dd9-4b61-948d-8811edced6a8_
    Content-Type: text/html; charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable

    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
    </head>
    <body dir="ltr">
    <div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
    Thank you, -d surfaced the issue - now to decide what to do about it...</div> <div>
    <div id="appendonsend"></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

    </div>
    <hr tabindex="-1" style="display:inline-block; width:98%">
    <div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> bind-users &lt;bind-users-bounces@lists.isc.org&gt; on behalf of Kevin Darcy &lt;kevin.darcy@fcagroup.com&gt;<br>
    <b>Sent:</b> Tuesday, August 4, 2020 3:28 PM<br>
    <b>To:</b> bind-users@lists.isc.org &lt;bind-users@lists.isc.org&gt;<br> <b>Subject:</b> [EXTERNAL] Re: CNAME restrictions</font>
    <div>&nbsp;</div>
    </div>
    <div>
    <p></p>
    <div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
    <span style="color:#9C6500">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.</div>

    <p></p>
    <div>
    <div dir="ltr">
    <div>[ Classification Level: <font color="blue">GENERAL BUSINESS</font> ]</div> <br class="x_cursAfter">
    Offhand, it looks like the server side is configured to only allow authenticated updates, but you're sending an unauthenticated&nbsp;one.
    <div><br>
    </div>
    <div>A more nuanced issue might be if the ID you're running the nsupdate as, can't read the key files, so even though you may have intended the update to be signed, it actually wasn't.</div>
    <div><br>
    </div>
    <div>Did you try adding a -d to the nsupdate command? If so, does the debug output give any clues?</div>
    <div><br>
    </div>
    <div>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &
    nbsp; &nbsp;- Kevin</div>
    <div><br>
    <div class="x_gmail_quote">
    <div dir="ltr" class="x_gmail_attr">On Tue, Aug 4, 2020 at 1:30 PM Leroy Tennison &lt;<a href="mailto:leroy@datavoiceint.com">leroy@datavoiceint.com</a>&gt; wrote:<br>
    </div>
    <blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
    <div dir="ltr">
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">I have a situation where, due to the system's location (IP subnet), its DNS name is &lt;webserver&gt;.&lt;internal subdomain&gt;.<a href="https://linkprotect.
    cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&amp;c=E,1,0gSBGzOV_9iJ4F-vOfqNwsk4Kjf6AQvm_Nt3gjCZAng77d3CYgiVYS_-yNeGK3M-LLCuD8B-erwPcTNMkAxJaTdxayw90W-cIVfFe6TBpYonsjiZafcGPSBGsgSS&amp;typo=1" target="_blank">datavoiceint.com</a>.&nbsp;
    We have a certificate for *.<a href="https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&amp;c=E,1,e3FlEDT18o4d4tQSRMvBH_pJRuK7156_n6wtGIzdpwjQt88Y_j375seki-O4IjtqsVLmsYGablGT9qnLV7jap1khSDSeV8Qt3U6JQ73WAhGbMMeoi10k&amp;typo=1" target="_
    blank">datavoiceint.com</a>
    which&nbsp;</span><span style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">we prefer to use instead of having to acquire a certificate for &lt;internal subdomain&gt;.<a href="https://linkprotect.cudasvc.com/url?a=
    http%3a%2f%2fdatavoiceint.com&amp;c=E,1,6-PPelQOIFl5wSdbP2RNe2N6pkrhqneq6Ezfx3p5-pXYgNrt6J521WJEJJKFmvxtsjfuSzRbWHJnSbpTUyu6XqeAeCg6OO0-KzDJiXfe1ccW7qg9pN7g2CgI&amp;typo=1" target="_blank">datavoiceint.com</a>
    since this is a one-off internal-only web server.&nbsp; Our (ISC) DNS servers (version 9.10.3-P4-Ubuntu that comes with Ubuntu 16.04) serve both domains.&nbsp; I thought a solution would be to use a CNAME but, when I attempt this (via nsupdate with the
    update key which
    works for A and PTR adds and deletes) I get (on &quot;send&quot;):</span><br> </div>
    <div>
    <div dir="ltr">
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">&nbsp;TSIG error with server: expected a TSIG or SIG(0)</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">update failed: NOTIMP<br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">What I tried (on both &lt;internal subdomain&gt;.<a href="https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&amp;c=
    E,1,WqKTpCcatx2SaWvqy4SyBLF0mNa1-gW8LKH80Ec2eWBinE3E7c5lEHLpjRuSiRnF_xc32FO_Ke1HOfMD3_RKS1c_-Gb4quMBWrNQrHh74wi-HJkg&amp;typo=1" target="_blank">datavoiceint.com</a>.
    and&nbsp;<a href="https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&amp;c=E,1,gDRbc9b7Hocp2adLEqMg2H4aBk9B80nSlj9DRUkwds45t2gqX4OYSPpS7T0rTc7SpPNhIUwv5Qxh01PYiNrEy5_9cB7--c16EqfcCxXOM4w,&amp;typo=1" target="_blank">datavoiceint.com</a>.
    ) was:</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">update add &lt;<span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!
    important">webserver&gt;</span>.<a href="https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fdatavoiceint.com&amp;c=E,1,LMSRr0xOj2dbcOJlyj5U8VIFyRH5ecttdkU4Je538OMUPmbLfqBLc5uT1bH4P4-AQWj7eME7APcmrfzjgPYOORSQ1gGlo41FqXQQU67iTV6fGo1tYi-G3-c,&amp;typo=1"
    target="_blank">datavoiceint.com</a>.
    86400 IN CNAME&nbsp;<span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">&lt;webserver&gt;.&lt;internal subdomain&gt;</span>.<a href="https://linkprotect.cudasvc.com/url?a=http%3a%2f%
    2fdatavoiceint.com&amp;c=E,1,K69ghu-8VkYZl4XrnMCfdzlp4UUfK2BGmh9Q9xWS3VzeXkVGOtpJequZa-J_gQCYM2J904MVlyeH5VboQjCatM-y6QbI5FtcIV32w9Cx&amp;typo=1" target="_blank">datavoiceint.com</a>.<br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">Apparently I'm mis-understanding CNAME usage, if I actually can use a CNAME record what should the format be (or do I need to
    configure
    bind differently to use it since part of the reply is NOTIMP)?&nbsp; If that's not possible due to CNAME restrictions are there any alternatives?</span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important"><br>
    </span></div>
    <div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
    <span style="font-family:Calibri,Arial,Helvetica,sans-serif; background-color:rgb(255,255,255); display:inline!important">Thanks for your help.</span></div>
    </div>
    </div>
    <p id="x_m_-6032679741644376038c1-id-7" style="font-size:0px; font-family:Arial; color:#fff">
    Harriscomputer</p>
    <table id="x_m_-6032679741644376038c1-id-8" style="border-left-width:0px; border-right-width:0px; border-bottom-width:0px; padding-bottom:0px; padding-top:0px; padding-left:0px; margin:0px; padding-right:0px; border-top-width:0px">
    <colgroup id="x_m_-6032679741644376038c1-id-9"><col id="x_m_-6032679741644376038c1-id-10"></col></colgroup>
    <tbody id="x_m_-6032679741644376038c1-id-11">
    <tr id="x_m_-6032679741644376038c1-id-12">
    <td id="x_m_-6032679741644376038c1-id-13">
    <table id="x_m_-6032679741644376038c1-id-14" cellspacing="0" cellpadding="0" border="0" style="height:0px; width:100%">
    <colgroup id="x_m_-6032679741644376038c1-id-15"><col id="x_m_-6032679741644376038c1-id-16"><col id="x_m_-6032679741644376038c1-id-17"><col id="x_m_-6032679741644376038c1-id-18"></col></col></col></colgroup>
    <tbody id="x_m_-6032679741644376038c1-id-19">
    <tr id="x_m_-6032679741644376038c1-id-27">
    <td id="x_m_-6032679741644376038c1-id-28" style="width:33%">
    <p align="left" style="font-size:10pt; font-family:Arial"><b id="x_m_-6032679741644376038c1-id-30"><font id="x_m_-6032679741644376038c1-id-31" face="Arial">Leroy Tennison<br id="x_m_-6032679741644376038c1-id-32">
    </font></b><font id="x_m_-6032679741644376038c1-id-33" size="2" face="Arial">Network Information/Cyber Security Specialist<br id="x_m_-6032679741644376038c1-id-38">
    <span id="x_m_-6032679741644376038c1-id-39" style="font-size:8pt">E: <a href="mailto:leroy@datavoiceint.com" target="_blank">
    leroy@datavoiceint.com</a><br>
    P:</span></font></p>
    </td>
    <td id="x_m_-6032679741644376038c1-id-40" style="width:33%">
    <p align="center" style="font-size:10pt; font-family:Arial; text-align:center"><br id="x_m_-6032679741644376038c1-id-43">
    <img border="0" data-outlook-trace="F:0|T:1" src="cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG"></p>
    </td>
    <td id="x_m_-6032679741644376038c1-id-45" style="width:33%">
    <p id="x_m_-6032679741644376038c1-id-46" align="right" style="font-size:10pt; font-family:Arial; text-align:right">
    <font id="x_m_-6032679741644376038c1-id-47" face="Arial" style="font-size:8pt">2220 Bush Dr<br id="x_m_-6032679741644376038c1-id-48">
    McKinney, Texas<br id="x_m_-6032679741644376038c1-id-49">
    75070<br>
    <font id="x_m_-6032679741644376038c1-id-51" face="Arial" style="font-size:8pt"><a href="http://www..com" target="_blank">www.datavoiceint.com</a></font></font><font id="x_m_-6032679741644376038c1-id-56" size="3">&nbsp;</font></p>
    </td>
    </tr>
    </tbody>
    </table>
    <table id="x_m_-6032679741644376038c1-id-57" cellspacing="2" border="0" style="width:100%">
    <colgroup id="x_m_-6032679741644376038c1-id-58"><col id="x_m_-6032679741644376038c1-id-59"><col id="x_m_-6032679741644376038c1-id-60"><col id="x_m_-6032679741644376038c1-id-61"></col></col></col></colgroup>
    <tbody id="x_m_-6032679741644376038c1-id-62">
    <tr id="x_m_-6032679741644376038c1-id-63">
    <td id="x_m_-6032679741644376038c1-id-64" colspan="3">
    <p id="x_m_-6032679741644376038c1-id-65" style="margin-bottom:0px; font-size:10pt; font-family:Arial; margin-top:0px">
    <font id="x_m_-6032679741644376038c1-id-66" size="1" face="Arial">This message has been sent on behalf of a company that is part of the Harris Operating Group of Constellation Software Inc.</font></p>
    <p style="margin-bottom:0px; font-size:10pt; font-family:Arial; margin-top:0px"><font size="1" face="Arial">If you prefer not to be contacted by Harris Operating Group
    <a href="https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fsubscribe.harriscomputer.com%2f&amp;c=E,1,tDHN8eusdo1dmAH7sVm4QCbMt63IMR6Im_-2r3epFrKvWDlRIiNUdnjRrqlc7YbDFZi26vf4PH2bi8fXxWwxgooQFPSr0rZ89dfsdV3EvGhNQhzOxc6dkeUO&amp;typo=1" target="_blank">
    please notify us</a>. </font></p>
    <p style="margin-bottom:0px; font-size:10pt; font-family:Arial; margin-top:0px">&nbsp;</p>
    <p style="margin-bottom:0px; font-size:10pt; font-family:Arial; margin-top:0px"><font size="1" face="Arial"></font></p>
    <p style="margin-bottom:0px; font-size:10pt; font-family:Arial; margin-top:0px"><font size="1" face="Arial">This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is
    proprietary,
    privileged or confidential or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error,
    please
    notify the sender immediately by e-mail and delete all copies of the message.</font></p>
    </td>
    </tr>
    </tbody>
    </table>
    </td>
    </tr>
    </tbody>
    </table>
    <p id="x_m_-6032679741644376038c1-id-74" style="font-size:10pt; font-family:Arial">
    &nbsp;</p>
    </div>
    _______________________________________________<br>
    Please visit <a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&amp;c=E,1,CDMflPVUr90kiYfSOvXo00T7TBy9AFUx6FdLRdQBJa-nfuss1-6v2StCLMjo5N7XEWIzaAMYqdLxCJm19LkU41PJ7S70tpWHEbsHm_wRreEtphpp0w,,&amp;
    typo=1" rel="noreferrer" target="_blank"> https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>

    ISC funds the development of this software with paid support subscriptions. Contact us at
    <a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.isc.org%2fcontact%2f&amp;c=E,1,zAjBUTG3aODlmEnA9xOCfIc-FLN7uOu1DJKXw8Di5qzNFwVHyjgzPL-Fz4AGawuWpUobdCCcvjoC2yzfGz6u5wChvrFo_HlzGCt2MGZRPraxh9UnfgFFPElXjA,,&amp;typo=1" rel="noreferrer"
    target="_blank">
    https://www.isc.org/contact/</a> for more information.<br>


    bind-users mailing list<br>
    <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
    <a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&amp;c=E,1,S19JJd3-XjKGpp0iiFqcNeZ9ZhMDJTJXXYfdHBbUbJTkidDuGUItxy4j8ymlHdHl1DtSX9Y5wSZGiz_-fngKSPWyp8oCKUEsRXNwiJ2pcgcpoug,&amp;typo=1" rel="
    noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
    </blockquote>
    </div>
    </div>
    </div>
    </div>
    </div>
    </div>

    <P id=c1-id-7
    style="FONT-SIZE: 0px; FONT-FAMILY: Arial; COLOR: #fff">Harriscomputer</P> <TABLE id=c1-id-8
    style="BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">
    <COLGROUP id=c1-id-9>
    <COL id=c1-id-10></COL></COLGROUP>
    <TBODY id=c1-id-11>
    <TR id=c1-id-12>
    <TD id=c1-id-13>
    <TABLE id=c1-id-14 style="HEIGHT: 0px; WIDTH: 100%" cellSpacing=0
    cellPadding=0 border=0>
    <COLGROUP id=c1-id-15>
    <COL id=c1-id-16>
    <COL id=c1-id-17>
    <COL id=c1-id-18></COL></COL></COL></COLGROUP>
    <TBODY id=c1-id-19>
    <TR id=c1-id-27>
    <TD id=c1-id-28 style="WIDTH: 33%">
    <P style="FONT-SIZE: 10pt; FONT-FAMILY: Arial" align=left><B
    id=c1-id-30><FONT id=c1-id-31 face=Arial>Leroy Tennison<BR
    id=c1-id-32></FONT></B><FONT id=c1-id-33 size=2
    face=Arial>Network Information/Cyber Security Specialist<BR id=c1-id-38><SPAN id=c1-id-39
    style="FONT-SIZE: 8pt">E: leroy@datavoiceint.com<BR>P:</SPAN></FONT></P></TD>
    <TD id=c1-id-40 style="WIDTH: 33%">
    <P style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; TEXT-ALIGN: center"
    align=center><BR id=c1-id-43><IMG border=0
    src="cid:Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG"></P></TD>
    <TD id=c1-id-45 style="WIDTH: 33%">
    <P id=c1-id-46
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; TEXT-ALIGN: right"
    align=right><FONT id=c1-id-47 style="FONT-SIZE: 8pt"
    face=Arial>2220 Bush Dr<BR id=c1-id-48>McKinney, Texas<BR
    id=c1-id-49>75070<BR><FONT id=c1-id-51
    style="FONT-SIZE: 8pt" face=Arial><A
    href="http://www..com">www.datavoiceint.com</A></FONT></FONT><FONT
    id=c1-id-56 size=3>&nbsp;</FONT></P></TD></TR></TBODY></TABLE>
    <TABLE id=c1-id-57 style="WIDTH: 100%" cellSpacing=2 border=0>
    <COLGROUP id=c1-id-58>
    <COL id=c1-id-59>
    <COL id=c1-id-60>
    <COL id=c1-id-61></COL></COL></COL></COLGROUP>
    <TBODY id=c1-id-62>
    <TR id=c1-id-63>
    <TD id=c1-id-64 colSpan=3>
    <P id=c1-id-65
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    id=c1-id-66 size=1 face=Arial>This message has been sent on behalf
    of a company that is part of the Harris Operating Group of
    Constellation Software Inc.</FONT></P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    size=1 face=Arial>If you prefer not to be contacted by Harris
    Operating Group <A
    href="http://subscribe.harriscomputer.com/">please notify us</A>.
    </FONT></P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px">&nbsp;</P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    size=1 face=Arial></FONT></P>
    <P
    style="MARGIN-BOTTOM: 0px; FONT-SIZE: 10pt; FONT-FAMILY: Arial; MARGIN-TOP: 0px"><FONT
    size=1 face=Arial>This message is intended exclusively for the
    individual or entity to which it is addressed. This communication
    may contain information that is proprietary, privileged or
    confidential or otherwise legally exempt from disclosure. If you are
    not the named addressee, you are not authorized to read, print,
    retain, copy or disseminate this message or any part of it. If you
    have received this message in error, please notify the sender
    immediately by e-mail and delete all copies of the
    message.</FONT></P></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
    <P id=c1-id-74
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">&nbsp;</P></body>
    </html>

    --_23675f81-9dd9-4b61-948d-8811edced6a8_
    Content-Description: Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG
    Content-Type: image/png
    Content-Disposition: inline
    Content-Transfer-Encoding: base64
    Content-ID: <Data-Voice-International-LOGO_aa3d1c6e-5cfb-451f-ba2c-af8059e69609.PNG>

    iVBORw0KGgoAAAANSUhEUgAAAK8AAABDCAYAAADqFFWMAAAAAXNSR0IArs4c6QAAAARnQU1BAACx jwv8YQUAAAAJcEhZcwAAEnQAABJ0Ad5mH3gAAAAZdEVYdFNvZnR3YXJlAEFkb2JlIEltYWdlUmVh ZHlxyWU8AAAD9GlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSLvu78i IGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9i ZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42LWMxMzggNzkuMTU5ODI0LCAy MDE2LzA5LzE0LTAxOjA5OjAxICAgICAgICAiPiA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93 d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8cmRmOkRlc2NyaXB0aW9uIHJk ZjphYm91dD0iIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIg eG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJl ZiMiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIgeG1sbnM6ZGM9Imh0 dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InV1aWQ6NUQyMDg5MjQ5M0JGREIxMTkxNEE4NTkwRDMxNTA4QzgiIHhtcE1NOkRvY3VtZW50SUQ9 InhtcC5kaWQ6NERDMzVBNEFFQTZFMTFFN0E2QTNDODdCMENGMzRGN0EiIHhtcE1NOkluc3RhbmNl SUQ9InhtcC5paWQ6NERDMzVBNDlFQTZFMTFFN0E2QTNDODdCMENGMzRGN0EiIHhtcDpDcmVhdG9y VG9vbD0iQWRvYmUgSWxsdXN0cmF0b3IgQ0MgMjAxNyAoTWFjaW50b3NoKSI+IDx4bXBNTTpEZXJp dmVkRnJvbSBzdFJlZjppbnN0YW5jZUlEPSJ1dWlkOjY1ODFiNWQyLWQxMWItODQ0Zi04Yzk1LTE0 ZGE3OTJiNGU1ZiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDpjNDgxZDkxYS0yMGQyLTRhODUt ODBjNy00MGNiYTNmM2Q1ZGMiLz4gPGRjOnRpdGxlPiA8cmRmOkFsdD4gPHJkZjpsaSB4bWw6bGFu Zz0ieC1kZWZhdWx0Ij5QcmludDwvcmRmOmxpPiA8L3JkZjpBbHQ+IDwvZGM6dGl0bGU+IDwvcmRm OkRlc2NyaXB0aW9uPiA8L3JkZjpSREY+IDwveDp4bXBtZXRhPiA8P3hwYWNrZXQgZW5kPSJyIj8+ tu59AgAAG8RJREFUeF7tnQd8VNW2xleAkBBIIRCqEEMJVTqEXlS6iFwBwQKiCBdRvHZ9Pi+2e+UJ KiLCBRWpF8ECNkAQRDpJ6C0QQktIQkgC6T3nrW+dfZLDMJNJkGiC5+9vnJx9ypyZWXvtb6299uCi MWRhUYZoMfVF8vbwoD0z31Qt9rGM16LM4dLpTv6fC2khm1WLfSqoZwuLskPlyvxwpYysbNVgH8t4 LcoUaZlZ4nWpYkU6cylOtdrHMl6LMkVyeoZuvBUq0JlYy3gtyhFJ6elsvPwHjNfyvBbliQLPW7EC nbWM16I8oXteSzZYlAE2Hz5GLncOp9Mxl1RL0RRqXgRsl1WrfSzjtShVlmzZRpSWTp9u3KJaiibJ JBssz2vxp5KQkkpUxZ0ORJxTLUVjlg0Zlua1+DOJSbwiEw57wyNUS9EUyAaQm6s/O8AyXotSJTrx KlElV0o+F6laiiaJJYYYr0iHihQVn6j2XI9lvBalyiV4XpYA0LBRCY4N0aDA8+bny3lF5Xot47Uo Xa4msZWxMVaqRMGnnEsH0byMV7WqYsRFBW2W8Vr8LgZOn0Hr9x1SW3bIzdOf2XhDiqF7xfOy1+3Y OIBI0yzPa1E6bDsWRhu/X08T536qWq7lalqayAUYIVWqSMHhZ9Qex0iqLD+P2jXyl/OKmmWzjNfi htl27ASRjzdFOxjaJVhju61Tw1ckwN5Tp9UexyRDNuTlU/sA3Xgt2WBRKmw9wsbrVpldLBupHSRN xl50SMe27IErUdqFKLXHMbrnzWfPe7slGyxKj82HjoqWhWHayyQYnrc2e+c2IgOILlyOV3vtIwEb G+8d/g34WaNYy/NalAowRJUGO27Hq0bD8zI1vTypY5NGLB3IacYhTTyvWplWxV3PVjjAMl6LGwLB mizXQTBWsSIdi7yo9hQSc8VsvAHyt9OgTaaH9T99avvx/10oJYMN2g6W8VrcEFuPHBePW50NE3nc Y3Y9r66FxXgbs4Zlgp2ly+B54c2ZgNq15NlR0HZLGW9Wbi5dSkmjOH6kZ+eo1tIBr3E5NY0uJady cJyvWokSUtMpnh9oz8wpem7eICUzizadKN7cf1lh61EO1vLy6emhA4hy8lg2XO95Ddng5+VFnSAb 2EsHO8s4QDF4eMifjcTzsvE6CNpuKePdfvoC9ftwMd310VL6b8gR1Vo6vLXuNxowZzndya/109Fw 1UrU84MvaOi8/1K3WYso00lhiUEvPufV7zbT1C/XqZayz68I1rhzPjNsEFFuTpGe18/bkyqxtIDM yIiMlrYi8agiTwF1DM9rv673ljLeyhz5+latIg+Pyq6q1Tn//PFXeuDzr+njrXtVi3MGt2pCnu6V qZZnVToTr3uYq+mZ5OXuRtU93Kl57Rrkg4DDCfC6Wbl5VMXVlWKSU1RrOQCF4t5e5OtZTQKs5Cg7 mld53nrVq8tzg6aN5fmsgyLz1IxMefZWxttIyQZHExVFGu/Ji9EUHh1Lp2Ni5Tksqhi95k9E6fwS cyz6MkVdSaZE6K1i0i2ggRhdJdZnp+ISpC3sUjy5sg7MzsujXk38pc0Znmzsix4ZTgNaNqZl40eo 1rLNnpM89PP77NGmlWy71q0t5YvZNiNNZiLSZxpVdq0k211gvMg4ONC9Rl0Dfi0HNCrwvCU03kmf fEbN732IAkeOp6YjHpHnFsMfoglzFqgjbozIywnSI40HdFHsFcfpkOLwS9gZ2nchmryquPFnY9+E Q3n/j0dOUfC5Qg+Rzx7jChtsUmYmufMHDGOEljUDg1zHsmDrqWuLqeHdq/A5FThYOXmp0HhhzNl8 ne6NbpM2g9/Cz8vrR1y+Ph96u683PdWnM2XY0chbTp6lDcdPy33aspn34d7s7StNxs+eLxmGHi0D Zbu1P96rCx09byMd0vi+quheFHRuyrqXCXGQLpO6BsaLP1tgeF5HmlfvEna4wkEHpv4aBjSkGp6e lJiaSufPnKcrNl9uSWjw+NMUBaHvgj6jcnmILNPSafY7r+n6qYQMnruCrvJwgyo6DNPVeCg3B2sx SSl095xlIiPgFZFC9GCj2/KP8ZSYkUFd3/uMmtaqwQGzixh2EG+fffsZObfz/33Kx2tyXkW+5/Sc HPpq4ihq4ucr+7s1akAhfE4yfiiDCY9LFONNzcqmno0bStuxmDgav2QtSxrWfEw2BznN+PVWTPib bGexwfZmnQ65cUe92rR43HBpD2dvPnbRN+TGUiiP76Gud1VaM2mM7Nsafo7+8dUG6ah5mh4sTusb RBN7dJC/S4t9EWep00T+bHhkQQ721ZH3SnvLBrfRgd2hdDwyijqorIJ4Yf5M3WrokgF0CdRlg2PP qxuvdxWz571+injD/kPU/LZ6jj0vPAqMatG0SbT/w3/R8uem8nYatxepNIrkKgqNfXyoUdtW1Lht a2ravg35BvCb9a1O0Qn2pxiL4oPNuyktO5t8WGMaRmPrd1Mysyk3P596sKHBSKu5uUq3efHbjVSd vcLtNXw4CNbkAUNpVLPww77MHbh9gzrUxb++GB/07WPLvlN7iYJury8SAcadyF7mNLwq30B9Hy8e VdFRNHp48RqqWc1DNG3jmr7cwdwo6moyPb16vVwDn7Mvazw8oKENxrDh4jx0uhx+DXQugAzHND4X xv6/g3vT2slj5O+PtwaLwZcWTy9cTJ3GTmQtkEVBQR1J27SGfKpWlX2tGuqjjDlos9W7IAjGy5/J XoeeV5cNhufFZwjnlhNXqJHRKQY/NJm6PP+684BNKtsZqRD6ncjNJCVTxIIP6TQ/Ts1/n955eDQR e86KbAAl5ZuDJ+TLRdCz7bkJ9PqQPmLAZhA8nZz+FM0eNYiWjLuP6nHkC2Pbyx6zIhvOL9PG8bCb KQbuX92bNj8zTp3J2u7Fx+mzh+6lOaMH00DWpEiJYWg3huluAbeJ1HDlIfRIdJx4eUiRXk10r7t4 90ExLIwErwzoQcseHcGdp7LIjR0RF6TDGEZpZtGuA1SV31ceXwteft8rk+idYXfJvk9+C6GaVT3Y oPPp/vYtpLO1rOPH3spNPo+bDd6z38OTae7SVTJi/ueNl2nPzLfUXp1WDerL8zFTuszINNRlx2Tg 4eZG5O5O2RxL2aPA8yrNK/jVuGY50Ptrf+Iv1YdG9+zq2HjlhezggUKMG0TSJYz8HpUi2cHsiTOQ Q4W2xBfcvkFdaYN3g7cz48fecv72UOo68zMKfGMuXWB9DS9tHJeFIVABAzZz+OIlGvjxMjlv7aEw 8cww+Fw2HFDbq5p45Mr8vr49eFx0Mzxxd/byQAI4eA4+vlU9Xb+1rV9HtmHA2C8d2oajLDVwXYwq 04f2kbYWdWrK81EOLtFZ0ClbvzOPWrz1iXQcdKKz8SUfvZzR9cXpFM+BeqVaNenKlrU0eeCdak8h LZXnhWwwMHK89Xx95NnAX3Svi92l8AWF6CrbABrV5mCQjz+nMhTvr10ntQ9TBt99rfF+uvFXcuXg rCb3tBVbd0jFkPFFyXPlyvTl9l3kzcOHCwdvzy9aIfscEfDEP8h95KNU7YHHyGfsE5TAXhc6KN/G SG4EGJrhtIxfaYXSseWpVevEA9b2rEahrzxBg1o2kS/azqHcVti6Ivgwvbz2FzagXPp20mh6656+ BV7dxeQtIR1YdFBYbIJ0Cnhmw3jRsYxLGmfYcbTXAe9tYP4b5CuNC28+c8QAmvvAELm390b0pym9 O8m+m0no6TMyMuZ8u6xAJtjSBNkG/g4iTAFb9BW9I9UzeV5gZBzsFaYbAZvZ8xoZh8iEBJEMCZAc

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)