Re: Question about at zone transfer behaviour on slave

2019-06-05 Thread Techs-yama
Thanks for reply. Sorry I'm write wrong, It is about when configure the slave at the first time. What do trigger on polling at the timing? Because I think slave server do not have soa date at first time. Also, assuming that have not received notify from the master. Thanks and regards.

Re: Question about at zone transfer behaviour on slave

2019-06-05 Thread Ben Croswell
You are looking for the refresh timer in the SOA if you mean the timer for a slave to check the serial with the master. On Wed, Jun 5, 2019, 10:09 PM Techs-yama wrote: > Hi all, > > Have a question about at zone transfer behaviour on slave server. > > In case of slave zone configure and

Re: Bind9 stops responding for some clients

2019-06-05 Thread Gregory Sloop
Thanks for the idea. I did resolve this a day or two ago. The story is; This server was a fairly recent replacement for an older Ubuntu setup. The new server as well as the old one are/were VM's - yet on different VM platforms. The old VM was turned off, and was marked never to start except

Question about at zone transfer behaviour on slave

2019-06-05 Thread Techs-yama
Hi all, Have a question about at zone transfer behaviour on slave server. In case of slave zone configure and restarting named on slave server, After the named restart, It looks like starting polling to the master server for zone transfer by slave server. How many seconds polling interval on

Re: Bind9 stops responding for some clients

2019-06-05 Thread Gordon Lang
I just randomly spotted this post, and thought I would toss in 2¢ How many nics and how many it's are on the servers? Are the failing clients on the same subnet as the server? -- Gordon A. Lang On Thu, May 30, 2019, 8:10 PM Gregory Sloop wrote: > So, this is a very odd situation and I'm kind

Pure Python Dnstap

2019-06-05 Thread Fred Morris
All: Here is a pure python implementation of a Dnstap consumer designed to work with Python 3: https://github.com/m3047/shodohflo Implementations of Frame Streams and Protobuf: https://github.com/m3047/shodohflo/tree/master/shodohflo While the implementations of Frame Streams and

Re: rpz using a forward zone

2019-06-05 Thread Vadim Pavlov via bind-users
You can spin up a separate instance of bind (or use my opensource ioc2rpz dns server) to feed (via a zone transfer) the modified zone to your older bind instance. Vadim > On Jun 5, 2019, at 13:04, Mike Woods wrote: > > I was afraid that would be the answer, time to try some other solutions

Re: Change DNS records automatically when a link is DOWN

2019-06-05 Thread Kevin Darcy
Publish all 3 NSes. Publish MX records with primary/failover preferencing. Use a load-balancer (free or commercial, software/hardware/cloud-based) to direct the web traffic. - Kevin On Wed, Jun 5, 2019 at 11:16 AM Roberto Carna

Re: Change DNS records automatically when a link is DOWN

2019-06-05 Thread Ben Croswell
If you can craft the monitor for the link it could call nsupdate to make the change On Wed, Jun 5, 2019, 11:16 AM Roberto Carna wrote: > Dear people, I have two sites: > > - Main site with an Internet link and two BIND services (DNS1 y DNS2) and > a /28 block, and web and mail services

Change DNS records automatically when a link is DOWN

2019-06-05 Thread Roberto Carna
Dear people, I have two sites: - Main site with an Internet link and two BIND services (DNS1 y DNS2) and a /28 block, and web and mail services supported - Backup site with a second Internet link and a BIND service (DNS3) and another /28 block When the Internet link from main site is DOWN, the

Re: What is maximum size BIND can accept in A Record?>

2019-06-05 Thread Mukund Sivaraman
On Wed, Jun 05, 2019 at 02:57:41PM +0100, Tony Finch wrote: > Mukund Sivaraman wrote: > > > On Wed, Jun 05, 2019 at 12:07:56PM +0100, Tony Finch wrote: > > > The maximum length is 254 including the terminating dot. The maximum > > > > 254 excluding the terminating dot or 255 including the

Re: What is maximum size BIND can accept in A Record?>

2019-06-05 Thread Tony Finch
Mukund Sivaraman wrote: > On Wed, Jun 05, 2019 at 12:07:56PM +0100, Tony Finch wrote: > > The maximum length is 254 including the terminating dot. The maximum > > 254 excluding the terminating dot or 255 including the terminating dot. 255 is the wire format limit not the presentation format

Re: What is maximum size BIND can accept in A Record?>

2019-06-05 Thread Mukund Sivaraman
On Wed, Jun 05, 2019 at 12:07:56PM +0100, Tony Finch wrote: > The maximum length is 254 including the terminating dot. The maximum 254 excluding the terminating dot or 255 including the terminating dot. Mukund ___ Please visit

Re: What is maximum size BIND can accept in A Record?>

2019-06-05 Thread Blason R
Yep thats what I wanted so I was right and couple of records are above 254 hence my zone is failing. On Wed, Jun 5, 2019 at 4:37 PM Tony Finch wrote: > Blason R wrote: > > > As soon as I find the longs URLs with more than 150 words and remove it. > It > > start perfectly > > > > Though 150 is

Re: A couple of regression problems between 9.11.7 and 9.14.2

2019-06-05 Thread Borja Marcos
> On 5 Jun 2019, at 14:56, Tony Finch wrote: > > Borja Marcos wrote: > rigol.com is related to DNS cookies as well as the DNS flag day, yes. > > login.repsol.com is a lame delegation that is exposed by qname minimization. Thanks, I missed the second one looking at packet captures. Guess I’m

Re: A couple of regression problems between 9.11.7 and 9.14.2

2019-06-05 Thread Daniel Stirnimann
On 05.06.19 14:35, Borja Marcos wrote:> Problem 1: > I had a problem resolving the rigol.com domain. Looking at packet > captures and comparing I saw that the authoritative servers for > rigol.com were ignoring packets with a cookie option. > > On 9.14 the operation got stuck when sending a

Re: A couple of regression problems between 9.11.7 and 9.14.2

2019-06-05 Thread Tony Finch
Borja Marcos wrote: > > Problem 1: > > I had a problem resolving the rigol.com domain. Looking at packet > captures and comparing I saw that the authoritative servers for > rigol.com were ignoring packets with a cookie option. > > Problem 2: > > I also noticed that 9.14.2 is not resolving

A couple of regression problems between 9.11.7 and 9.14.2

2019-06-05 Thread Borja Marcos
Hi, I’ve been trying bind 9.14.2 and I have noticed a couple of behavior differences between 9.11 and 9.14. Problem 1: I had a problem resolving the rigol.com domain. Looking at packet captures and comparing I saw that the authoritative servers for rigol.com were ignoring packets with a

Re: What is maximum size BIND can accept in A Record?>

2019-06-05 Thread Tony Finch
Blason R wrote: > As soon as I find the longs URLs with more than 150 words and remove it. It > start perfectly > > Though 150 is I considered and even tried with 200 and it worked. So > wondering what is the limit? I infer that you are talking about length of domain names, specifically owner

Re: rpz using a forward zone

2019-06-05 Thread Mike Woods
I was afraid that would be the answer, time to try some other solutions then. Thanks. On 05/06/2019 12:03, Tony Finch wrote: > Mike Woods wrote: >> >> So, the long and short of things, is it actually possible to point the >> response policy at a forward zone > > No, the RPZ zone file has to

Re: rpz using a forward zone

2019-06-05 Thread Tony Finch
Mike Woods wrote: > > So, the long and short of things, is it actually possible to point the > response policy at a forward zone No, the RPZ zone file has to be present on the resolver. The RPZ is parsed into a special fast lookup data structure so that policies can be applied efficiently.

What is maximum size BIND can accept in A Record?>

2019-06-05 Thread Blason R
Hi Team, I have BIND RPZ built on BIND version BIND 9.10.3-P4-Ubuntu and wondering what is the maximum size of A record any zone can have? because really big domains are not getting parsed and my reloading is failing consistently. As soon as I find the longs URLs with more than 150 words and

rpz using a forward zone

2019-06-05 Thread Mike Woods
Hi Guys, hopefully a pretty straightforward question for my first post to the list. We're trying to mitigate an issue with the spamhaus dbl list interrupting our internal dns service (and yes, I'm aware that this is a known issue and fixes exist in later builds but there are issues for us