DHCP3-Server doesn't request a zone update

2009-09-29 Thread Markus Feldmann
Hi All, i am trying to get my Debian Lenny Server running with DNS, DHCP, NFS and CUPS. My DNS- and DHCP-Server is up and running, but it seems that my DDNS doesn't work. I am using DCHP-Server version 3.1.1-6+lenny and BIND9.5.1.dfsg.P3-1. My client is debian Lenny too and it gets an IP

Somewhat OT: SOA serial wraparound and Windows DNS Server slaves

2009-09-29 Thread Chris Thompson
This is strictly off-topic for bind-users, but if (like us) you are in the unfortunate position of having many Windows DNS Server instances stealth slaving your zones, and are planning a wrap around increase of your SOA serial numbers, all nicely in accordance with RFC 1982 (13 years old, for

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Stephane Bortzmeyer
On Thu, Sep 24, 2009 at 07:16:35AM +1000, Mark Andrews ma...@isc.org wrote a message of 77 lines which said: It's a pity registries are not required to verify correct operation of the nameservers they are delegating to before accepting the delegation. Some do!

DNSSEC

2009-09-29 Thread Paveza, Gary
I'm currently working on setting up DNSSEC for all our zones. I have a question regarding keys. Do you use different ZSK and KSKs for each zone? Or do you use the same keys for all zones? How do you handle the reverse zones since they can be comprised of many different domain names? If you

Re: DNSSEC

2009-09-29 Thread Chris Thompson
On Sep 29 2009, Paveza, Gary wrote: I'm currently working on setting up DNSSEC for all our zones. I have a question regarding keys. Do you use different ZSK and KSKs for each zone? Or do you use the same keys for all zones? You can't really use the same ZSK and/or KSK for different zones,

Re: DNSSEC

2009-09-29 Thread Paul Wouters
On Tue, 29 Sep 2009, Chris Thompson wrote: On Sep 29 2009, Paveza, Gary wrote: I'm currently working on setting up DNSSEC for all our zones. I have a question regarding keys. Do you use different ZSK and KSKs for each zone? Or do you use the same keys for all zones? You can't really use

Re: DNSSEC

2009-09-29 Thread Kevin Darcy
Paul Wouters wrote: On Tue, 29 Sep 2009, Chris Thompson wrote: What I would like to see is for more reverse zones to go away, by use of the scheme I describe in http://people.pwf.cam.ac.uk/cet1/prune-reverse-zones I don't see how moving the reverse into a special forward zone decreases

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Mark Andrews
In message 20090929122845.ga13...@nic.fr, Stephane Bortzmeyer writes: On Thu, Sep 24, 2009 at 07:16:35AM +1000, Mark Andrews ma...@isc.org wrote a message of 77 lines which said: It's a pity registries are not required to verify correct operation of the nameservers they are delegating

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Paul Wouters
On Wed, 30 Sep 2009, Mark Andrews wrote: http://www.afnic.fr/outils/zonecheck/_en The key word is required. I know some do, I just wish more did. I for one, welcome our new named-checkzone overlords. (especially if named-checkzone would fail to OK a zone with NSEC3RSASHA1 keys and re-used

Re: Dig ANY gives SERVFAIL / FORMERR

2009-09-29 Thread Mark Andrews
In message alpine.lfd.1.10.0909291125070.11...@newtla.xelerance.com, Paul Wou ters writes: On Wed, 30 Sep 2009, Mark Andrews wrote: http://www.afnic.fr/outils/zonecheck/_en The key word is required. I know some do, I just wish more did. I for one, welcome our new named-checkzone

Re: DHCP3-Server doesn't request a zone update

2009-09-29 Thread Markus Feldmann
How can i check whether or not my DHCP Server tries to update my zone ifrom my DNS Server ? regards Markus ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNSSEC

2009-09-29 Thread Mark Andrews
In message prayer.1.3.2.0909291446310.21...@hermes-1.csi.cam.ac.uk, Chris Thom pson writes: DNSSEC certainly adds to the aggravation of having lots of piddling little reverse zones. Some people may just decide not to bother signing reverse zones (reverse lookup results should only be treated