Re: Last transfer time?

2010-12-03 Thread Mark Andrews
in the logs. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: DS queries on parents vs. correct behaviour in answering

2010-12-04 Thread Mark Andrews
___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users

Re: DS queries on parents vs. correct behaviour in answering

2010-12-04 Thread Mark Andrews
Mark Andrews writes: In message 02d001cb93f5$513ca2b0$f3b5e8...@janssen@eurid.eu, Peter Janssen writes: When a validating resolver queries the parent of a zone for the DS record(s), and the (child) zone is NOT signed, the response contains no answer but it does contain NSEC (NSEC3

Re: bind9 cache

2010-12-04 Thread Mark Andrews
-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing

Re: can't validate existing negative responses (not a zone cut) messages

2010-12-06 Thread Mark Andrews
#837744. [RT #22309] Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: Troubleshooting slow DNS lookup

2010-12-07 Thread Mark Andrews
/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: Troubleshooting slow DNS lookup

2010-12-08 Thread Mark Andrews
dnskey . @a.root-servers.net With just dig +dnssec dnskey . you are talking to your own server so are not going through the firewall. You will also notice it took 1/2 a second to get that answer so named did several different attempts in that 1/2 second. ;; Query time: 547 msec -- Mark Andrews

Re: Unusual TSIG problem

2010-12-08 Thread Mark Andrews
/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: bind autosign - DS distribution

2010-12-09 Thread Mark Andrews
it distribute DS records to parent zones somehow? and if not, what are ways to do that? On 10.12.10 09:15, Mark Andrews wrote: This is IETF dnsext/dnsop fodder. The simple way would be to just record a TSIG key in the child zones config to update the parent zone and use signed

Re: DiG 9.3.6-P1 segfaults on CentOS

2010-12-09 Thread Mark Andrews
. The DNSBL runs a modified (only the back-end, SFAIK) version of rbldnsd. -- bk ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: forwarding

2010-12-12 Thread Mark Andrews
the same named.conf configuration file, the issue =0Adisappears.=A0= Is this is a known issue?=A0 Is there a configuration item I'm not =0Aawar= e of that I need to set or unset?=0A=0AThanks, Colin=0A=0A=0A -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871

Re: Silently drop queries for AAAA records

2010-12-13 Thread Mark Andrews
this and realise that it will self correct as more sites start using IPv6 and records. IPv4 really has passed its use by date. - Kevin -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Strange behaviour of dnssec-signzone

2010-12-15 Thread Mark Andrews
of dnssec-signzone (version 9.7.1-P2). Thanks, Patrick Vande Walle ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: BIND 9 and IDN

2010-12-16 Thread Mark Andrews
that start with xn--. All the IDN knowledge is outside of named. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org

BIND 9.8.0a1

2010-12-16 Thread Mark Andrews
this release possible. If you would like to contribute to ISC to assist us in continuing to make quality open source software, please visit our donations page at http://www.isc.org/supportisc. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: dnssec-lookaside != auto

2010-12-20 Thread Mark Andrews
In message 4d0f00dd.9060...@data.pl, Torinthiel writes: On 12/20/10 01:32, Mark Andrews wrote: In message 4d0e8340.9060...@data.pl, Torinthiel writes: Hello everyone, I've recently updated bind to version 9.7.2_p3. Upgraded from what? From 9.4.3_p5 I've

Re: bind slave not get DNS update

2011-01-05 Thread Mark Andrews
list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: Confused about /24 in-addr.arpa NS delegation debug problem

2011-01-06 Thread Mark Andrews
/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: NSEC3 ISSUE

2011-01-07 Thread Mark Andrews
When doing query without +cd option. Can you figure out what would be the exact problem? Thanks Regards, Ramesh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Confused about /24 in-addr.arpa NS delegation debug problem

2011-01-07 Thread Mark Andrews
else are they going to get wrong? Mark Have fun with DNS in 2011. Cheers! Gary ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: stale cache in alternate views?

2011-01-10 Thread Mark Andrews
, it sees the new records immediately after the rndc reload. Anyone know how to change this behavior? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St

Re: only the response has aa flag can be cached?

2011-01-11 Thread Mark Andrews
___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: query cache denied

2011-01-19 Thread Mark Andrews
200.31.4.71#41137: query (cache) 's3.xxrz.game.yy.com.cdn20.com/A/IN' denied I'm using bind-9.6, it's the authoritative name server only. How does the client make a query to request to bind's cache? It asks for a name in a zone that you don't server or are not a parent for. -- Mark Andrews

Re: Telling rndc Which IP Address to Use

2011-01-20 Thread Mark Andrews
://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org

Re: when one view doesn't have the zone

2011-01-20 Thread Mark Andrews
In message 20110121030937.da19e2c...@mail.nsbeta.info, p...@mail.nsbeta.info w rites: Mark Andrews writes: In message 20110121024745.bcd2e2c...@mail.nsbeta.info, p...@mail.nsbeta.in fo w rites: Hello, My named.conf looks as: -- view

Re: service if s/up/down/g ipv6

2011-01-22 Thread Mark Andrews
, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;. IN NS ;; Query time: 342 msec ;; SERVER: 87.98.186.232#53(87.98.186.232) ;; WHEN: Sun Jan 23 12:58:48 2011 ;; MSG SIZE rcvd: 17 % -- Mark Andrews, ISC 1

Re: service if s/up/down/g ipv6

2011-01-22 Thread Mark Andrews
. host 3600 IN A 1.2.3.4 host 3600 IN 2002:1234:abde:1b78:2002:1234:abde:1b78 -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind

Re: service if s/up/down/g ipv6

2011-01-24 Thread Mark Andrews
- --nextPart4788602.X930IZQvoN-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: service if s/up/down/g ipv6

2011-01-24 Thread Mark Andrews
/bind-users --===0053086760583786854==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

Re: Bind with publicly routable DDNS mappings for IPv6 but not IPv4

2011-01-24 Thread Mark Andrews
-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===0962283465469852765==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind

BIND 9.6.3rc1 is now available

2011-01-24 Thread Mark Andrews
. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

BIND 9.7.3rc1 is now available.

2011-01-24 Thread Mark Andrews
at http://www.isc.org/supportisc. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: DNSSEC auto-dnssec issue bind-9.7.2-P3

2011-01-25 Thread Mark Andrews
-- Kal Feher ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: root hints

2011-01-26 Thread Mark Andrews
. D. Yao ** \*/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: bind Bind or BIND?

2011-01-26 Thread Mark Andrews
. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: IXFR and AXFR

2011-01-27 Thread Mark Andrews
the requested axfr stream. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: IXFR and AXFR

2011-01-27 Thread Mark Andrews
In message 20110127124124.5b8ed2d...@mail.nsbeta.info, p...@mail.nsbeta.info writes: Mark Andrews writes: The master will return a AXFR style IXFR whenever it doesn't have the requested a xfr stream. Do you mean whenever it doesn't have the requested IXFR stream? When you make

Re: Bind 9.7 - sanity check or a bug

2011-01-28 Thread Mark Andrews
. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: root hints

2011-01-29 Thread Mark Andrews
@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users And one can always turn on DNSSEC and then it doesn't matter which server gives you the information. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: cache server with authoritative answer

2011-01-30 Thread Mark Andrews
through the cache cleaned up the answers the stub resolvers saw. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org

Re: DS record in child zone

2011-01-31 Thread Mark Andrews
list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users

Re: Clarification on wildcard scenario

2011-01-31 Thread Mark Andrews
) in the zone file above. What you added to the zone was www.joshfeb1.com.joshfeb1.com. not www.joshfeb1.com.. You needed a period at the end of com or to just use www. Mark Thanks Regards, Ramesh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Clarification on wildcard scenario

2011-01-31 Thread Mark Andrews
for www.joshfeb1.com, it should map to **. joshfeb1.com. right? Thanks Regards, Ramesh * Thanks Regards, Ramesh -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: [OT] does deliveragent must have a PTR RR

2011-01-31 Thread Mark Andrews
reduced my TTL's to 5 minutes to reduce the impact of the renumbering. * I have a warm spare in a different data center and as most client behave badly when one of the addresses is unreachable I only advertise one address. More stupid unrealistic hoops to jump through. Mark -- Mark Andrews, ISC 1

Re: Again Crashed Bind

2011-02-03 Thread Mark Andrews
Upgrade as recommended in CVE-2010-3613. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

Re: bind makes RRSIG disappear?

2011-02-06 Thread Mark Andrews
mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind

Re: dealing with multi-homed machine

2011-02-08 Thread Mark Andrews
interfaces on the server ? tia Please go read the FAQ. http://www.isc.org/software/bind/faq -j ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: dealing with multi-homed machine

2011-02-08 Thread Mark Andrews
In message c7798a38-e7ae-4112-a6b6-8ca117fee...@beth.k12.pa.us, donovan jeffr ey j writes: On Feb 8, 2011, at 5:17 PM, Mark Andrews wrote: In message 3ad9c812-cba3-4dcd-a27e-26e63d912...@beth.k12.pa.us, donovan j effr ey j writes: Greetings I have an external dns server

Re: compile error bind-9.7.2-P3 osx 10.5.8 ppc

2011-02-08 Thread Mark Andrews
. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: [SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-11 Thread Mark Andrews
max-udp-size controls what you send. MAX(512, MIN(max-udp-size, client's UDP size)) edns-udp-size controls what you advertise you can receive. MAX(512, MIN(edns-udp-size, server's UDP size)) -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: additional empty zones

2011-02-12 Thread Mark Andrews
://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: additional empty zones

2011-02-13 Thread Mark Andrews
In message 20110213155712.ga1...@fantomas.sk, Matus UHLAR - fantomas writes: On 13.02.11 09:25, Mark Andrews wrote: In message 20110212220459.ga23...@fantomas.sk, Matus UHLAR - fantomas writ es: 2011/2/12 Matus UHLAR - fantomas uh...@fantomas.sk: Is it possible to add additional

Re: Spurious TYPE65534 at the end of a NSEC3, why?

2011-02-13 Thread Mark Andrews
-P1 by just adding a DNSKEY record at the apex but not in 9.7.2. There were a number of NSEC3 fixes between 9.7.1 and 9.7.2. Upgrade. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark

BIND 9.7.3 is now available.

2011-02-14 Thread Mark Andrews
this release possible. If you would like to contribute to ISC to assist us in continuing to make quality open source software, please visit our donations page at http://www.isc.org/supportisc. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

BIND 9.8.0rc1 is now available.

2011-02-14 Thread Mark Andrews
in continuing to make quality open source software, please visit our donations page at http://www.isc.org/supportisc. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: migration bind8/bind9: config problems.

2011-02-15 Thread Mark Andrews
that the provisioning in hte future introduces duplicates as it is t he case in my present setup. Is this possible? No. Run the configuration through named-checkconf if you are worried. It will catch the duplicates before you run named. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: migration bind8/bind9: config problems.

2011-02-16 Thread Mark Andrews
In message col105-w177d907c41a3b909556c83ac...@phx.gbl, hugo hugoo writes: Does exist a tool to automaticaly remove the duplicates in the configuratio= n? No. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: [SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-19 Thread Mark Andrews
Content-Disposition: inline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===7478579667512691322==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia

Re: bind and IPV6

2011-02-22 Thread Mark Andrews
compliancy? IS bind-9.6-ESV-R3 totally compliant with IPV6? Yes. Thanks in advance to share your experience/knowledge. Regards, Hugo, = -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: [SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-22 Thread Mark Andrews
: Wed Feb 23 11:54:06 2011 ;; MSG SIZE rcvd: 574 2) Older version of Binds (like 9.3) seems able to resolve vwall4a.nyc.gov as shown the packets I captured in my previous e-mail. What options in named.conf I can use to set tc? Thank you. Shaoquan Lin -- Mark Andrews, ISC 1 Seymour St

Re: inconsistency dnssec debuguers response and writing conseil for new areas zone

2011-03-01 Thread Mark Andrews
==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Help with unresolvable domain (subdomain, actually)

2011-03-01 Thread Mark Andrews
balancer should return default records or 0.0.0.0/:: to indicate the name is good but doesn't currently have a address. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: about AUTHORITY SECTION

2011-03-04 Thread Mark Andrews
list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users

Re: Slaves and views

2011-03-04 Thread Mark Andrews
://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org

Re: different behavior: A Records in DNS answer, when query of type any (existing CNAME)

2011-03-07 Thread Mark Andrews
with specific type the application needs when it isn't returned are broken. ANY queries are handled differently to normal queries. Similarly CNAME queries are handled differently to normal queries. Mark Kind regards Adrian -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE

Re: IXFR manually edited zone files

2011-03-08 Thread Mark Andrews
(cfg_obj_asstring(obj), slave) + else if (!strcasecmp(cfg_obj_asstring(obj), slave) ztype == dns_zone_slave) ixfrdiff = ISC_TRUE; else -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: Reliability and performance on a simple caching BIND9 server for uncached queries

2011-03-12 Thread Mark Andrews
. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: necessary to have a secondary dns ipv6

2011-03-13 Thread Mark Andrews
multiple servers reachable over IPv6 the same as you need multiple servers over IPv4. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind

Re: Stub zone vs forward zone

2011-03-14 Thread Mark Andrews
/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: A very Odd SOA Problem

2011-03-14 Thread Mark Andrews
. Martin McCormick WB5AGZ Stillwater, OK Systems Engineer OSU Information Technology Department Telecommunications Services Group ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC

Re: Zones not getting transferred after a restart

2011-03-15 Thread Mark Andrews
. Adjust lame-ttl. I have searched for a named.conf knob and have failed to find any. Closest I have found is serial-query-rate, which is not set in our environment and should default to 20. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Best ipfw Rules for DNS-SEC

2011-03-15 Thread Mark Andrews
: add pass udp from any to any frag ipf: pass in quick proto udp from any to any with frag keep frag -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind

Re: Best ipfw Rules for DNS-SEC

2011-03-15 Thread Mark Andrews
the servers directly you will need to specify +edns=0 or +dnssec with dig to get the TXT record. dig +dnssec edns-v4-ok.isc.org txt @edns-v4-ok.isc.org (IPv4) dig +dnssec edns-v6-ok.isc.org txt @edns-v6-ok.isc.org (IPv6) Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: FORMERR for wikipedia...

2011-03-16 Thread Mark Andrews
...@uiowa.edu, phone: 319-335-, fax: 319-335-2951 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: Need help to know about ROOT DNS query

2011-03-18 Thread Mark Andrews
/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: ip6.arpa help

2011-03-18 Thread Mark Andrews
in the /48. tcp-self just lets the machine update its records. Adding 56-self and 60-self would be relatively straight forward. Named also has external match. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: problem validate key of isc dlv

2011-03-20 Thread Mark Andrews
: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 63623 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 -- gpg --keyserver pgp.mit.edu --recv-key 092164A7 http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x092164A7 -- Mark Andrews, ISC 1 Seymour St

Re: problem validate key of isc dlv

2011-03-20 Thread Mark Andrews
claim to implement DNSSEC and that should mean that you can get DS records addeded for your zone. I have no idea what do you mean by this sentence. Torinthiel =20 =20 =20 Le lundi 21 mars 2011 =C3=A0 08:25 +1100, Mark Andrews a =C3=A9crit : In message 1300650238.6651.15.camel

Re: Not Exact error

2011-03-21 Thread Mark Andrews
in the following release: 9.6.3, 9.7.3 and 9.8.0. 3007. [bug] Named failed to preserve the case of domain names in rdata which is not compressible when writing master files. [RT #22863] -- Mark Andrews, ISC 1 Seymour St., Dundas

Re: Reverse dns issue

2011-03-23 Thread Mark Andrews
boss.vlan100.domain 10.100.2.129.64666: 42379 NXDomain 0/1/0 (100) Thanks in advance ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117

Re: rndc-key has expired

2011-03-23 Thread Mark Andrews
___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===8954482665668778810==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: Q on clients-per-query, max-clients-per-query

2011-03-23 Thread Mark Andrews
list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users

Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Mark Andrews
In message 688460.82562...@web121414.mail.ne1.yahoo.com, Fr34k writes: - Original Message From: Mark Andrews To: Fr34k Cc: Bindlist Sent: Wed, March 23, 2011 9:04:00 PM Subject: Re: Q on clients-per-query, max-clients-per-query In message , Fr34k writes: Hello

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message 1300993213.12273.96.camel@localhost.localdomain, fakessh @ write s: hi bind //guru/ hi isc guru hi mark andrews hi michel graff There are no DLV records for fakessh.eu. See below. There are no DS records for fakessh.eu. See below. Two of the nameservers for your zone

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message 1301004136.12273.106.camel@localhost.localdomain, fakessh @ writes: Le vendredi 25 mars 2011 =C3=A0 08:24 +1100, Mark Andrews a =C3=A9crit : In message 1300993213.12273.96.camel@localhost.localdomain, fakessh @= write s: hi bind //guru/ hi isc guru hi mark andrews

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
/WrARqEbUJAqroJV8f8tVajQlS6FomY5d2w9T7jCEO3U= ) ; key_tag=14518 1.696:INFO Name servers which responded: 83.246.72.252, 2001:500:71::30, 2001:500:60::30, 2001:4F8:0:2::19, 149.20.64.3, 93.186.33.42, 199.6.1.30, 2001:4B10:100:7::53, 199.6.0.30 1.696:FINAL_SUCCESS Success. -- Mark Andrews, ISC 1 Seymour St

Re: problem for validate the script dnssec to isc dlv

2011-03-26 Thread Mark Andrews
Mark Andrews writes: In message 1301008426.12273.115.camel@localhost.localdomain, fakessh @ wr ites: it is 6 months since I used no worries dlv What keys do you have recorded with dlv.isc.org? Do they match what you currently have in the zone? You did not answer these questions

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread Mark Andrews
3 5 AwEAAaXxSyYC5WHJdozSpEX5foltzSpNYJZb78zJldfgHF8zseINQNQj xQp9SdxsM81n6xw68zuJtd0I2grxexvQ0N4SdwM70tifbZD0VTBr8vgr rMOwfP2tCTzI/3VqHpFl+JZEcbcJqX4HcYh+fH9s+ZwHgybJ9FeSzYmu CakqAfHn -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: problem for validate the script dnssec to isc dlv

2011-03-27 Thread Mark Andrews
: i reajust my blog immediately Le lundi 28 mars 2011 =C3=A0 03:43 +1100, Mark Andrews a =C3=A9crit : In message 1301241108.12273.192.camel@localhost.localdomain, fakessh @= writ es: i use the key BEPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE 1

Re: is notify message going with UDP or TCP?

2011-03-28 Thread Mark Andrews
/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo

Re: Trouble loading a zone file after updating BIND

2011-03-31 Thread Mark Andrews
nameservers can't catch all configuration errors. Just because a zone loads doesn't mean that it will work. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: BIND 9 And Short Name resolution Problem

2011-04-01 Thread Mark Andrews
need to be more selective see server. e.g. To just use 6to4 homed server. server ::/0 { bogus yes; }; server 2002::/16 { bogus no; }; Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: BIND 9.7 behavior - lack of response causes

2011-04-04 Thread Mark Andrews
, be responsible for this lack of return traffic? Anyone have ideas to share? Thank you. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW

Re: 9.8.0 in 2008 R2 x64 server

2011-04-05 Thread Mark Andrews
___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind

Re: Change Query Type on nslookup

2011-04-07 Thread Mark Andrews
___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --===7001123361952416593==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET

Re: Anyway to disable dns_zone_nscheck in 9.8.0?

2011-04-08 Thread Mark Andrews
. A nameserver pointing to a CNAME/DNAME causes resolution problems. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users

Re: Anyway to disable dns_zone_nscheck in 9.8.0?

2011-04-08 Thread Mark Andrews
In message banlktimic+ndbnj_rovnhqwzas130bv...@mail.gmail.com, Rodney Hives w rites: On Fri, Apr 8, 2011 at 1:49 AM, Mark Andrews ma...@isc.org wrote: Please explain the operating conditions under which when you think this is a sensible thing to do? A nameserver without address

Re: BIND 9.8.0 + openssl 1.0.0d + chroot == issues

2011-04-19 Thread Mark Andrews
://SupersetSolutions.com/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma

Re: the valid content of TXT RR

2011-04-21 Thread Mark Andrews
In message BANLkTik=rv4nh7noo5+rdegp6yet4nx...@mail.gmail.com, Doug writes: Hello, what characters can or can't be included in a TXT record for DNS? Thanks. Named supports 8 bit data using the same presentation encoding as domain names. e.g. 0x00 is \000, 0xff is \255 -- Mark Andrews

Re: DNSSEC signing issues

2011-04-22 Thread Mark Andrews
/bind-users --===5749675706925016482==-- -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https

<    1   2   3   4   5   6   7   8   9   10   >