On 2015-11-17 04:21, Ray Bellis wrote:
On 17/11/2015 02:09, Grant Taylor wrote:
On 11/16/2015 06:56 PM, /dev/rob0 wrote:
You either specify a hints file to use, or use the compiled-in root
hints.
Interesting. I was not aware that it was an exclusive or type
situation.
It's important that
On 2014-07-13 12:11, Gary Wallis wrote:
Hello,
What are the drawbacks, if any, of running only master name servers
for the set of authoritative NSs?
For example given:
[root@rc37 unxsVZ]# dig latimes.com NS +short
dns1.tribune.com.
dns2.tribune.com.
dns4.tribune.com.
dns3.tribune.com.
Where a
On 2014-04-08 07:35, Jason Brandt wrote:
...
All of our Windows clients resolve through our Bind servers, and have
no problems with any AD resources. The only MSW machines that point
to our AD DNS servers, are our DC's. All clients will resolve just
fine through BIND, so long as your zones are
On 2014-04-08 06:08, Bryan Harris wrote:
Hello all,
We have a sort of private DNS such that servers can lookup zones that
don’t actually exist in the real, public DNS, they just exist within
our private NOCs. In addition, we have always had both Windows AD
handling the Windows side of things an
On 2014-01-14 09:56, Chris Thompson as IP Register wrote:
...
199.101.28.20 seems to be search.dnsassist.verizon.net. Are you
sure that the nameservers you are using aren't doing "friendly"
rewriting of NXDOMAIN responses for you?
...
Ack. Good thing you can't see how embarrassed I'm blushing
On 2014-01-14 12:39, Blason R wrote:
Hi Folks,
I am not sure if this is an appropriate forum to answer since more or
less it is pertaining to Go Daddy support but since its a huge
community our there and I am sure many of them are already using Go
Daddy wondering if su-domain delegation is possi
On 2014-01-12 10:04, Chris Thompson wrote:
On Jan 11 2014, Joseph S D Yao wrote:
[...snip...]
(2) There is no requirement that a domain name refer to the Web site
for that domain. I personally don't like that (for no special
reason), and neither apparently does the owner of this domain
On 2014-01-10 15:01, Eduardo Bonsi wrote:
...
It seems like they have their domain configuration A Record pointed
to the localhost. We all know that the localhost is not routable
outside of the internet. Therefore I am sure their website cannot
resolve out of the 127.0.0.1.
In addition to that, i
On 2013-11-13 16:44, Mark Andrews wrote:
...
RFC 1123 (October 1989) applies to all applications on all hosts.
Note "SHOULD" and "until".
...
Mark, I've always read "SHOULD" here as more of a plaintive hope than
anything else. People have certainly felt free to ignore it. Yes, that
makes t
On 2013-11-13 00:16, Manish Rane wrote:
...
6.Assume if ISP1 goes down, client coming on ISP1 would never be able
to reach; hence as per DNS protocol will try for another link and
come
on ISP2 and then probably get an IP address of Link 2 i.e. 2.2.2.2.
...
I'm not sure about your DNS setup,
On 2013-11-11 12:11, S. Jeff Cold wrote:
...
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22495
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;jeffdiss.org. IN A
...
BIND's configuration file is :
$TTL 3600
$ORIGIN jeffdiss.org.
; St
On 2013-09-08 07:06, Carol Overes wrote:
Hi Phil,
Apologies if my approach was not clear, after Steve's mail. But I
tested
by using dig without the +trace option. I have tested the following
from
an IP, which is accepted via the trusted ACL:
dig @10.10.10.1 www.domain2.com A
dig @10.10.10.1
to get your
DDS and do dentistry instead, fewer headaches.
--
/*\
**
** Joe Yao j...@tux
On Sat, Apr 06, 2013 at 01:04:47AM -0400, Joseph S D Yao wrote:
...
> Just as a logistical thing, the SOA record should be in the zone file
> that $INCLUDEs the rest of the information, anmd no SOA record in the
> latter.
...
Which means, I should have added, that any time you u
--
/*************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
Please visit https://lists.isc.org
ne "zonename" {
...
file "data/zone.zonename.for-the-many";
...
};
};
--
/*************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\
r www.google.com. This is as bad a
suggestion as all the others - worse, because it doesn't scale to a
site with multiple workstations.
--
/*****\
**
** Joe Ya
ichever you
do, as I started out saying, you need both DNS entries. Whatever they
may be.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\**
On Fri, Jul 08, 2011 at 10:26:16AM -0700, Chris Buxton wrote:
> On Jul 8, 2011, at 9:11 AM, Joseph S D Yao wrote:
> > I'd rather that recursion controls only control recursion.
> > And not forwarding - have separate forwarding controls, says I.
>
> Forwarding is a res
forwarding - have separate forwarding controls, says I.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
o j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
***\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
more than once.
Now, if you are lucky enough to be on a Linux or BSD or Unix or Mac
system, run
$ man nslookup
$ man host
$ man dig
$ man alias
for more information.
--
/***************
not.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-us
ice.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mail
eement between yourself and them about why it's there and how changes
will be communicated.
--
/*****************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
ponse is appropriate and necessary.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://l
with large UDP packets blocked,
this breaking EDNS0. Although there is no firm upper limit, there is a
suggested upper limit of 4096 bytes for EDNS0.
--
/*\
**
** Joe Yao
't understand the question. Is it at all related to my suggestion?
--
/*\
**
** Joe Yao
the generated keys.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@
ttp://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7
Are you running 'rndc' from the same server on which the 'named' is
running? If not, make sure that both have the same time.
--
/*\
**
** Joe Y
job is resolving, that
are not authoritative name servers for any domain. On those name
servers, you forward queries for the domain under discussion to the
unlisted internal name server that nonetheless IS authoritative for the
domain. In less ideal circumstances, the internal recursiv
this from the earlier description.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing l
j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
two zone transfers, because sourcing the zone
and serving it are not separate abstractions.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S
;
allow-transfer { ext-tsig-key; };
type slave;
file "slaved/rest/zone.example.us";
masters { 20.20.20.20; 30.30.30.30; };
}
}
zone "internal.us" {
// sourced and served only in one view
view "here" {
ition:
VeriSign has been selected by the U.S. General Services Administration
(GSA) to operate the domain name registry for .gov. ..."
Perhaps the new name servers are different somehow.
--
/*\
**
** Joe Yao
ved copies of zone files, it's not expected that humans will be
reading the file, so confusion is not a consideration.]
Teaching texts should use comments rather than $ORIGIN lines to indicate
what the domain is at given points in a zone file.
IMHO, of course.
--
/
***************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
ter.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mail
On Sun, Jan 30, 2011 at 09:40:51AM +0800, p...@mail.nsbeta.info wrote:
> Joseph S D Yao writes:
>
> >
> > The labels must follow the rules for ARPANET host names. They must
> > start with a letter, end with a letter or digit, and have as interior
> > characters on
change,
with a mutually agreed-on time to make the change (and using decreased
TTLs etc. as usual with such a change).
--
/*************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
number is incorrect.]
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
__
I know. May not be true on some private internets, tho.
--
/*\
**
** Joe Yao j...@tux.org
On Fri, Jan 28, 2011 at 09:51:13PM -0500, Joseph S D Yao wrote:
> On Fri, Jan 28, 2011 at 08:10:10PM +, Jack Tavares wrote:
> > I have a question about the hints file.
> >
> > It is "built in" to BIND.
> >
> > Does bind check for updates to
nized the BigIP in my last posting, you were right!]
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@li
On Fri, Jan 28, 2011 at 04:40:50PM +0800, p...@mail.nsbeta.info wrote:
> Joseph S D Yao writes:
> > Just because we don't need to, doesn't mean that it's a good practtice
> > not to. And it's so easy to create one on a system where DNS is already
> > se
***\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
visible file compiled in.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.o
\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
But I have only done this once, just for the
experience.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mail
the page is, "Nsbeta.info DNS Lookup | Nameserver Lookup -
Who.is - Who.is". They probably did just exactly that - DNS lookup.
Anything in DNS is public information.
--
/*\
**
** Joe Yao
#x27;rndc'. For
this, you do need the "rndc.conf" file, IIRC.
--
/*********\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\***
On Tue, Aug 10, 2010 at 02:37:54PM -0400, Joseph S D Yao wrote:
...
> Then either it's not serving DNS or you haven't found the right buttons.
> What is it? Can you explain a bit more?
...
Sorry, in my hurry I didn't fast-forward through the thread. Glad that
it&
******\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
On Fri, Aug 06, 2010 at 10:05:01AM -0700, CLOSE Dave (DAE) wrote:
> Joseph S D Yao wrote:
>
> > If you have two forwarders, as you listed, your server will try to
> > forward first to one and then to the other. If it gets any answer at
> > all from one - even an error
*************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
On Sat, Jul 24, 2010 at 04:32:21PM +0100, Matthew Seaman wrote:
> On 24/07/2010 16:17:13, Joseph S D Yao wrote:
> > Quick, knee-jerk, which of these is
> > one day?
> > 86300
> > 68300
> > 863000
>
> It
recommend is getrting rid of those ugly "$ORIGIN"s and
sticking to the original "@".
--
/*\
**
** Joe Yao
t know about other Web servers; I know some
are not IPv6-aware.
Oh - you can't make up an IPv6 address; you have to use one that is
compatible with the IPv6 transport you get.
--
/*********\
**
zone that was
> edited.
>
> Good suggestion though.
Check $PATH or use the full file name from "/".
--
/*\
**
** Joe Yao
j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
itions into the resolving name server ...
but, nahhh, that really defeats predictability ["if I got hit by a
truck, could they figure it out?"].
--
/**************
h restriction should
be inferred.
That having been said, I always feel better, myself, when there is a
1-to-1 mapping.
--
/*************\
and if that authoritative name server is configured to not allow
recursive resolution, and the chain goes off that name server, then the
chain is broken and will not continue.
--
/**************
nough entropy.
http://en.wikipedia.org/wiki/Entropy_%28computing%29
I hope that this helps!
--
/*\
**
** Joe Yao
urse, you have no control over the many MTAs that presumably are
sending e-mail to domain-ow...@emip.mg.
--
/*************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*
99. Not that I ever do ...
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.o
On Sat, Apr 10, 2010 at 01:08:16AM -0400, Joseph S D Yao wrote:
...
> I strongly recommend that anyone wanting some degree of security use
> look at the lists of IPv4 networks in RFC 5735/6/7 and the list of IPv6
> networks in RFC 5156. Decide which of those networks you want to b
st just because it is not YET allocated!
--
/*\
**
** Joe Yao j...@tux.org
y doesn't matter! ;-)
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/
nimum
>
> 1D IN NS172.16.30.30
> * IN A172.16.30.30
--
/*****************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\**
**\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
n
the global 'also-notify' list will not be sent NOTIFY messages for that
zone."
I suspect that the notify option is set to 'no' either in your global
options or in your view or in your zone.
--
/*\
**
** Joe Yao
than the parent's?
Shouldn't there be an additional @parent.name.server argument?
Thanks.
--
/*****\
**
** Joe Ya
***\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
r(s) with SOA
> queries whch seems to take a really long time.
Your NOTIFY tree sounds like it's many-to-many. Maybe you should be
using a sparser tree.
--
/*\
**
** Joe Yao
***\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
-conscious as
to have separate resolving name servers and authoritative name servers,
then their resolving name servers can have the same "forward" zone
declaration as your name servers.
--
/***************
parent zone files to once
again be the SAME IDENTICAL name server information as in your newly
revised zone files.
I hope that this helps!
--
/************
s.
Isn't one of Alan Perlis' quotes about, a high-level language is one
where you don't have to worry about unnecessary detail?
--
/*\
**
** Joe Yao
problem with the specific poster, who is presumably using
something from a compile of a current BIND distribution, but a problem
when generalising.
--
/*\
**
** Joe Yao j...@t
the IQUERY operation, declaring it entirely obsolete.
This document updates RFC 1035.
--
/*\
**
** Joe Yao j...@tux.o
\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
es against use in RHS of MX and NS.
Which, unfortunately, does not prevent their use in many cases ...
--
/*\
**
** Joe Yao j...
On Wed, Dec 02, 2009 at 12:47:08PM +, Sam Wilson wrote:
> In article ,
> Joseph S D Yao wrote:
[incorrectly]
> > No.
...
> Not true. CNAME chains - CNAMEs pointing to other CNAMEs - are
> inefficient and discouraged but the DNS spec is built to ensure that
>
;
category lame-servers { null; };// ignore
category default { all; };
};
--
/*****************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\***
...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
at the slaved copies for the internal view and the
external view go to DIFFERENT files? Otherwise they overwrite each
other and strange timing effects occur.
Just thoughts.
--
/*\
**
** Joe Yao j...@t
7.9.11.13
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
r.c and work out in exactly which cases cfg_parse_mapbody
> in the latter gets called :-(
As I've said before, only the code never lies. But it may take some
exegesis.
--
/************
ation file, "include" is a part of the actual
language being parsed, and so must appear only where it's expected, and
not at any random position.
I hope that this helps.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S.
l to
'umask' immediately before the execution of 'named'.
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
but nobody else had thought to do that.)
--
/*************\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
't; or some automatic process that is trying to get your
information will not fail cleanly.
ISTM, it's better to try and do failover some other way, such as with
high-availability Linux, than to try to get DNS to do load balancing.
--
/**************
On Sat, Aug 22, 2009 at 02:45:19PM +0200, Hauke Lampe wrote:
> Joseph S D Yao wrote:
>
> > It turned out that this latter file was needed, but for some
> > inexplicable reason perhaps having to do with library routines [I have
> > not gone chasing down the code], it ALSO
After some experimenting, here is the whole answer, hinted at by one
response on this mailing list.
On Thu, Jul 30, 2009 at 05:40:54PM -0400, Joseph S D Yao wrote:
...
> In dig(1), the '-k' option is said to require a "TSIG key file" as an
> option. I have a TSIG file
lly, the CNAME records can also be auto-generated by inserting
$GENERATE 96-111 $ CNAME $.96-28
I hope that this helps!
--
/*\
**
** Joe Yao j...@tux.org - Joseph S. D. Yao
**
\*/
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
gust 2006
...
Yah, I guess I need to catch up a wee bit. Thanks again!
--
/*\
**
** Joe Yao j...@tux.org - Joseph
On Fri, Jul 31, 2009 at 01:43:58PM +0200, Mark Elkins wrote:
> On Thu, 2009-07-30 at 17:40 -0400, Joseph S D Yao wrote:
>
> > What does work is:
> > dig -y mynet.:Ain/tGonnaTellNoWay== axfr example.zone
> > @other.example.zone
> > but I really, really fin
1 - 100 of 114 matches
Mail list logo
