Re: Adding records to a domain I don't control for anyone who uses my nameserver

2009-03-03 Thread Stephane Bortzmeyer
On Mon, Mar 02, 2009 at 01:07:36PM -0500, Matthew Huff mh...@ox.com wrote a message of 62 lines which said: Spoofing the dns zones are the only solution. It won't work when (if) DNSSEC will be deployed (and I assume the banking sector will be one of the first to adopt it)... Why not using

Re: Adding records to a domain I don't control for anyone who uses my nameserver

2009-03-03 Thread Alan Clegg
Spoofing the dns zones are the only solution. Why not using your own XMPP server, that you control and where you can activate logging? Actually, in a previous lifetime, we discovered that the MOST effective way to deal with this was to write it into the policy and procedures manual and make

how to create a private test. zone?

2009-03-03 Thread Rui Lopes
Hello, I'm trying to create a private test. zone for use in my local testing lab. I've setup an recursive DNS server that will serve the test. zone (in Sun host; see the network diagram bellow). The resolution of a domain in the test zone works as expected, eg: dig sun.test ; DiG 9.4.2-P2

BIND 9 and BIND 8 issue

2009-03-03 Thread bradonkuo
Dear all bind users, I am new to manage 3 BIND 9 servers, lately, I got some complains about users cannot connect to some websites while they use our BIND 9 servers, this issue will be solved if they use other ISP's BIND 8 servers, one example is as below. Can we modify any configurations

Re: Change my primary DNS server safely...

2009-03-03 Thread Thomas Manson
Thanks Jeff and Robert, Robert's plan seems to be the best way to do the thing so I'll follow that plan ;) Thanks again, Thomas. On Fri, Feb 27, 2009 at 17:39, Jeff Lightner jlight...@water.com wrote: In your case it sounds like you're going to have two external IPs.  If so I'd leave the

Re: BIND 9 and BIND 8 issue

2009-03-03 Thread Stefan Schmidt
On Fri, Feb 27, 2009 at 11:39:40AM +0800, bradonkuo wrote: Dear all bind users, Hi Brandon, I am new to manage 3 BIND 9 servers, lately, I got some complains about users cannot connect to some websites while they use our BIND 9 servers, this issue will be solved if they use other ISP's

Unable to resolve visitriverside.com

2009-03-03 Thread Scott Baker
I am unable to resolve visitriverside.com with my Bind 9 server. I don't have any problems resolving other domains, it just appears to be this host. http://www.perturb.org/code/dns-tool.php?host=visitriverside.comtype=A I can't resolve the name servers for this domain either. If I check my

Re: BIND logging in a separate node

2009-03-03 Thread Jeremy C. Reed
What I'm trying to do is log /var/bind/named.stats in a separate node. Note that file name is commonly used for the rndc stats statistics-file. It may be a good idea to use a different name so you don't cause confusion or conflict. So my question is, can I specify the node IP address and

Re: BIND logging in a separate node

2009-03-03 Thread Prabhat Rana
Jeremy, Thanks for the response. Yes I need to change the file name to avoid confusion. Yes I can forward the syslog to a different node my making changes in the syslogger. But I'm not sure how to make such changes so that only named/bind related syslog will be forwarded and the rest will

RE: BIND logging in a separate node

2009-03-03 Thread Ben Bridges
Something like the following might work. BIND: ... channel my_syslog { syslog local6; severity info; }; ... syslog.conf: ... local6.* @remote-syslog-server // Forward all messages with local6 facility

Re: BIND 9 and BIND 8 issue

2009-03-03 Thread Mark Andrews
In message 397019c15b5a45899bb02b1b212e1...@bradon, bradonkuo writes: Dear all bind users, I am new to manage 3 BIND 9 servers, lately, I got some complains about = users cannot connect to=20 some websites while they use our BIND 9 servers, this issue will be = solved if they use other

Re: how to create a private test. zone?

2009-03-03 Thread Mark Andrews
In message 49ace778.6040...@ruilopes.com, Rui Lopes writes: Mark Andrews wrote: Mark Andrews writes: In message 49ac5d59.1010...@ruilopes.com, Rui Lopes writes: Hi, Ben Bridges wrote: [...] You could try creating example.test as a forward zone in named.conf on

Re: named with DLZ

2009-03-03 Thread Josh Miller
Jeff Lightner wrote: I have been talked with getting named with DLZ support on Red Hat 5.2 Enterprise. I have never worked on Red Hat or with RPM, can someone point me to the rpm I need? Any other basic pointers? I was thinking to just build it out myself, but if there is a confident

Re: how to create a private test. zone?

2009-03-03 Thread Kevin Darcy
Rui Lopes wrote: Mark Andrews wrote: Mark Andrews writes: In message 49ac5d59.1010...@ruilopes.com, Rui Lopes writes: Hi, Ben Bridges wrote: [...] You could try creating example.test as a forward zone in named.conf on your sun server and specifying

Re: BIND 9 and BIND 8 issue

2009-03-03 Thread Kevin Darcy
hangan.org.tw is delegated to www.hangan.org.tw and mail.hangan.org.tw, the glue records that are provided resolve both of those names to the address 211.21.92.25. I believe BIND 8 considers a glue record to be good enough to serve as an answer, so it returns the glue record. BIND 9, however,

Re: [OT] Is it possible to set a ddns hostname to access a name-based virtual host?

2009-03-03 Thread Barry Margolin
In article gofs8j$83...@sf1.isc.org, Michael Milligan mi...@acmeps.com wrote: Danny Mayer wrote: Michael Milligan wrote: Just being more general. A URL is a HTTP URI... Google has plenty of explanations. That's nonsense. A URL was never just an HTTP URI. It's one example of one

Re: how to create a private test. zone?

2009-03-03 Thread Barry Margolin
In article goip2j$2a0...@sf1.isc.org, Rui Lopes r...@ruilopes.com wrote: Why isn't bind just following the example.test. NS plesk.test. RR that is inside the test. zone without removing the forwarders? Because the point of configuring forwarders is to use them INSTEAD of following NS