RE: dns/ip resolve error in PASE

IBM i is capable of being a DNS server, but if you already have one running on another platform I see no need to duplicate that effort. To run DNS on IBM i you need to load the freebie
Resource
ID Option Feature Description
5770SS1 31 5050 Domain Name System

Short story version: There's an object (?data area?) which holds the bind version. I forget what it is and I have to hit the road. I know Jim O knows what it is.

Long story version:

* CAUTION *
Your thought below:
<snip>
This particular lpa I'm on is on 7.4 so I'm pretty sure the ptf's exist to support "new BIND version 9 DNS server"...
</snip>
Needs rethinking. Sure at release levels IBM updates the bind level in that dns server but rarely, if ever, at PTF levels. Instead they patch any CVE's found instead of upgrading to a bind level which addresses those same CVE's. This will cause you to fail audits (including IBM's) because the bind level will still be behind. With the bind level being behind they assume you are still exposed to those CVE's. The automated auditing tools (including IBM's) have no interest in looking up PTF's, nor do they test if the particular CVE has been addressed outside of the bind level. This makes sense when you think about it. Do you really want your auditing tool pouring tons of CPU power against you to see if they can crash your system?
I had RFE's opened up to get the bind level updated on a more frequent basis and it did not get accepted. I ended up removing the product from most lpars. I also had a RFE to get NSLOOKUP unbundled from option 31 and put into the base OS since the security in option 31 is flawed and that RFE got rejected.
However 7.4 does support some level of BIND 9 as per
https://www.ibm.com/docs/en/i/7.4?topic=services-domain-name-system
Which is a really flaked up section of the manual since why would a 7.4 manual have a section called "What's new for IBM i 7.2".

Rob Berendt