Re: questions on bind cache with views

2009-12-17 Thread Matus UHLAR - fantomas
On 17.12.09 17:39, Young H. wrote: I have config the bind-9.6.1 with multi-views and recursion yes. recursion yes is usually not enough, you must set allow-recursion { }; But I found bind always deny the query to its cache, the log shows: if allow-query-cache is not specified, the

Re: questions on bind cache with views

2009-12-17 Thread Mark Andrews
In message 35686be10912170139j3d89c414n1da84870b47c9...@mail.gmail.com, Youn g H. writes: Hello, I have config the bind-9.6.1 with multi-views and recursion yes. But I found bind always deny the query to its cache, the log shows: Dec 17 17:30:42 localhost named[15603]: client

Re: questions on bind cache with views

2009-12-17 Thread Young H.
On Thu, Dec 17, 2009 at 6:59 PM, Mark Andrews ma...@isc.org wrote: In message 35686be10912170139j3d89c414n1da84870b47c9...@mail.gmail.com, Youn g H. writes: Hello, I have config the bind-9.6.1 with multi-views and recursion yes. But I found bind always deny the query to its cache, the log

Re: questions on bind cache with views

2009-12-17 Thread Cathy Almond
Young H. wrote: On Thu, Dec 17, 2009 at 6:59 PM, Mark Andrews ma...@isc.org wrote: In message 35686be10912170139j3d89c414n1da84870b47c9...@mail.gmail.com, Youn g H. writes: Hello, I have config the bind-9.6.1 with multi-views and recursion yes. But I found bind always deny the query to

Re: questions on bind cache with views

2009-12-17 Thread Young H.
On Thu, Dec 17, 2009 at 10:16 PM, Cathy Almond cat...@isc.org wrote: There are three configuration settings that are relevant to what you're trying to do. allow-query - this controls who is allowed to query the nameserver at all.  The default if undefined is to allow any. allow-recursion

Re: questions on bind cache with views

2009-12-17 Thread Barry Margolin
In article mailman.3.1261049906.21153.bind-us...@lists.isc.org, Young H. armyw...@gmail.com wrote: On Thu, Dec 17, 2009 at 6:59 PM, Mark Andrews ma...@isc.org wrote: allow-query-cache        Specifies which hosts are allowed to get answers from the        cache. If

Re: dnssec updated zone data is not live ??

2009-12-17 Thread Kevin Darcy
Gregory Machin wrote: On Fri, Dec 11, 2009 at 12:22 AM, Kevin Darcy k...@chrysler.com wrote: Gregory Machin wrote: Hi Please can you advise. I's been ages since I have configured dnssec . I used nsupdate (with dnssec) to update a zone file with all the host current ip's so that they

[Fwd: Re: dnssec updated zone data is not live ??]

2009-12-17 Thread Kevin Darcy
Sorry, I meant journal file, not log file. Also, your original message states that the change was written to the journal. How are you checking that? Using something like journalprint? I'd still recommend doing an AXFR if you want to know what's _really_ in the zone on the master.