Query about mirroring Root DNS Server
Dear All, Somewhere I heard that one of the Root Servers allows you to take a zone copy of that, so that if you want to look and feel about Root DNS servers, you can do so. Is it true? If yes then can anyone please guide me which Root DNS Server is allowing for the same? Thanks n Regards, GAURAV KANSAL 9910118448 VoIP - 6259 Operation And Routing Unit NIC , NEW DELHI 2012... Now you can use your 1984 calenders again.:P:P Please don't print this e-mail until unless you really need, it will save Trees on Planet Earth. IPv4 is Over, Are your ready for new Network. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Query about mirroring Root DNS Server
Gaurav Kansal gaurav.kan...@nic.in wrote: Somewhere I heard that one of the Root Servers allows you to take a zone copy of that, so that if you want to look and feel about Root DNS servers, you can do so. Is it true? If yes then can anyone please guide me which Root DNS Server is allowing for the same? You can find out for yourself (see below). I usually use the F root since I know the ISC has a long-term policy of allowing zone transfers. Some people like to slave the root zone on their recursive servers instead of using the root zone hints. This is not the same as looking or feeling like a root server. If you want to actually look and feel like a root server, talk to ICANN who are very liberal in allowing sites to host instances of the L root. http://blog.icann.org/2012/03/l-root-in-your-pocket/ http://dns.icann.org/lroot/infocollect/ $ for i in `jot -c 13 97`; do echo === $i; dig axfr . @$i.root-servers.net | grep failed; done === a ; Transfer failed. === b === c === d ; Transfer failed. === e ; Transfer failed. === f === g === h ; Transfer failed. === i ; Transfer failed. === j ; Transfer failed. === k === l ; Transfer failed. === m ; Transfer failed. Tony. -- f.anthony.n.finch d...@dotat.at http://dotat.at/ Viking: Northeasterly 4 or 5, increasing 6 or 7 later in northwest. Slight or moderate, becoming rough later in north. Fair. Moderate or good. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Query about mirroring Root DNS Server
On 07/06/2012 06:30 AM, Tony Finch wrote: Gaurav Kansal gaurav.kan...@nic.in wrote: Somewhere I heard that one of the Root Servers allows you to take a zone copy of that, so that if you want to look and feel about Root DNS servers, you can do so. Is it true? If yes then can anyone please guide me which Root DNS Server is allowing for the same? You can find out for yourself (see below). I usually use the F root since I know the ISC has a long-term policy of allowing zone transfers. Some people like to slave the root zone on their recursive servers instead of using the root zone hints. This is not the same as looking or feeling like a root server. If you want to actually look and feel like a root server, talk to ICANN who are very liberal in allowing sites to host instances of the L root. http://blog.icann.org/2012/03/l-root-in-your-pocket/ http://dns.icann.org/lroot/infocollect/ it can also be retrieved out of band: https://www.iana.org/domains/root/files -ben ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name-labels) failed
On Fri, Jul 06, 2012 at 12:18:10PM -0300, Noel Rocha wrote: I have this error in my bind9(9.7.0 - last version for ubuntu 10.04 LTS): That's a very old version, and I'm fairly sure this bug has been fixed. If you're in a position where you can ditch the packaged version and build BIND from scratch, you can get newer versions from our website at https://www.isc.org. (If you can't do that, then I would have to suggest taking it up with Ubuntu -- if it's long-term-support release and hasn't reached end of life, then it ought to be tracking the 9.7.x releases; we're up to 9.7.6-P1.) -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name-labels) failed
Thank you, I'll turn off the dnssec for zone with problem while I'll update the ubuntu/bind. Best regards, On 07/06/2012 02:14 PM, Evan Hunt wrote: On Fri, Jul 06, 2012 at 12:18:10PM -0300, Noel Rocha wrote: I have this error in my bind9(9.7.0 - last version for ubuntu 10.04 LTS): That's a very old version, and I'm fairly sure this bug has been fixed. If you're in a position where you can ditch the packaged version and build BIND from scratch, you can get newer versions from our website at https://www.isc.org. (If you can't do that, then I would have to suggest taking it up with Ubuntu -- if it's long-term-support release and hasn't reached end of life, then it ought to be tracking the 9.7.x releases; we're up to 9.7.6-P1.) ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: DNSSEC - NSEC3 - name.c:1715: INSIST(nlabels == name-labels) failed
On 07/06/2012 02:14 PM, Evan Hunt wrote: On Fri, Jul 06, 2012 at 12:18:10PM -0300, Noel Rocha wrote: I have this error in my bind9(9.7.0 - last version for ubuntu 10.04 LTS): Do you remember the bug's name or number? I'll search on ubuntu repository a binds version with this bug already fixed. Thanks in advanced, Best regards, Noel Rocha ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
