Re: Bind 9.6.1 stops after few hours.

2009-07-08 Thread Anatoly Pugachev
On 07.07.2009 / 11:55:34 -0400, Rob Payne wrote: What do you mean by stop? Did the daemon crash, simply not respond to queries, or something else? I don't know if this is the same as what Laurence is seeing. Testing 9.6.1 on Solaris 10/sparc, with a local build (THREADS, no MEMFILL,

Re: DNSSEC closed environment

2009-07-08 Thread Marco Davids
Eduardo Júnior wrote: it's possible configure dnssec only between 2 name servers, first is the authoritative and second is the recurisve? The authoritative name server would have zones signed and the recursive will do querys and validation. Sure, why not? I personally prefer my setup

DNS Maintenance

2009-07-08 Thread Alans
Hi, Can someone tell me how webhosting providers or ISPs do maintenance on their DNSs? I mean, can they take it offline? What is the procedure usually? Thanks, Alans ___ bind-users mailing list bind-users@lists.isc.org

Re: DNS Maintenance

2009-07-08 Thread Alan Clegg
Alans wrote: Can someone tell me how webhosting providers or ISPs do maintenance on their DNSs? I mean, can they take it offline? What is the procedure usually? You need to define maintenance. With very few exceptions (none?) I can't think of a reason to take a DNS server off-line to do

Re: DNS Maintenance

2009-07-08 Thread Barry Dean
I have been thinking of this same issue lately when I had to move a dns service from one host to another to re-build the OS. I use virtual IPs on the host making it relatively easy to move the service around. But as I use Solaris 10 as the platform I am thinking that Zones would be a

namespace verification

2009-07-08 Thread Todd Snyder
Good day all, I am looking at making some sweeping changes to some zone files, cleaning up NS records primarily. As I'm pondering the impact of this, I got to thinking about how to validate every single record in my namespace, and therefore the entirety of my change. What I'm thinking of is a

Re: rDNS Round-Robin

2009-07-08 Thread Bryan Irvine
On Mon, Jul 6, 2009 at 4:08 PM, Kevin Darcyk...@chrysler.com wrote: Bryan Irvine wrote: Other than to really annoy me;  is there a valid reason for rr rDNS? Once upon a time, BIND specifically *disabled* round-robin behavior for non-address (A/) record types. PTR RRsets, among other

Re: bind 9.6.1 under perform after running for a couple of hours

2009-07-08 Thread Fr34k
Hello, A few of the default settings changed from 9.4.x to 9.6.x The appropriate README files, change logs, and BIND ARM will provide details about them. Below are some options and logging configurations you may want to investigate. Ye Ole Disclaimer: Please be sure to understand what these do

Re: DNSKEY dynamic update: unexpected change 9.6.0-P1 - 9.6.1

2009-07-08 Thread Shumon Huque
On Wed, Jul 08, 2009 at 09:20:29PM +, Evan Hunt wrote: Is there any reason these flags should not be set by default? Yes, there is: the code as written uses the NSEC3PARAM record in a way that, debatably, could be an RFC violation. We're planning to correct this, and turn the feature

Re: rDNS Round-Robin

2009-07-08 Thread Mark Andrews
In message 53d706300907081412r191946eeo5c9a66657bf8e...@mail.gmail.com, Bryan Irvine writes: On Mon, Jul 6, 2009 at 4:08 PM, Kevin Darcyk...@chrysler.com wrote: Bryan Irvine wrote: Other than to really annoy me; =A0is there a valid reason for rr rDNS? Once upon a time, BIND