Re: statistics server access log
Put a proxy between BIND and your monitoring team? Ondrej -- Ondřej Surý ond...@isc.org > On 26 Nov 2019, at 00:38, Veaceslav Revutchi wrote: > > I'm looking for a way to detect and alert when our monitoring team > starts pulling the stats from our resolvers by http://resolver:8080 > instead of http://resolver:8080/xml/v3/server > > as the short url results in a large download and can be service > impacting. Picking up the packets on the wire on that port, and > extracting the url would be one way to do it, but was hoping for > something simpler. > > running: 9.11.4-P2-RedHat > > Thank you, > Slava > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
statistics server access log
I'm looking for a way to detect and alert when our monitoring team starts pulling the stats from our resolvers by http://resolver:8080 instead of http://resolver:8080/xml/v3/server as the short url results in a large download and can be service impacting. Picking up the packets on the wire on that port, and extracting the url would be one way to do it, but was hoping for something simpler. running: 9.11.4-P2-RedHat Thank you, Slava ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Using TSIG Keys Between Linux OS and Windows OS
[ Classification Level: PUBLIC ] To clarify, the OP didn't specify what DNS software they were using, only the OS (Windows 2016). If using Microsoft DNS, then as Mark pointed out, Microsoft has not implemented regular shared-key TSIG. They have, however, implemented GSS-TSIG, which, I believe, can be configured on the BIND side (although I've never personally done that). If using BIND on Windows, then, as Chuck pointed out, configuration is no different than any other BIND-to-BIND TSIG setup. - Kevin On Mon, Nov 25, 2019 at 11:27 AM Chuck Aurora wrote: > On 2019-11-25 02:36, Mark Andrews wrote: > > You don’t as Microsoft has not implemented TSIG. > > You could, perhaps, switch the Microsoft nameserver for BIND named. > > >> On 25 Nov 2019, at 18:52, Mundile wrote: > > > >> How do I accomplish zone transfers (Master and Slave) between Master > >> Linux Nameserver and Slave Windows 2016 Nameserver using TSIG Keys > > In that case (using BIND for Windows) it is simple, no different than > TSIG from one Unix BIND to another. > > https://downloads.isc.org/isc/bind9/9.14.6/doc/arm/Bv9ARM.ch04.html#tsig > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Using TSIG Keys Between Linux OS and Windows OS
On 2019-11-25 02:36, Mark Andrews wrote: You don’t as Microsoft has not implemented TSIG. You could, perhaps, switch the Microsoft nameserver for BIND named. On 25 Nov 2019, at 18:52, Mundile wrote: How do I accomplish zone transfers (Master and Slave) between Master Linux Nameserver and Slave Windows 2016 Nameserver using TSIG Keys In that case (using BIND for Windows) it is simple, no different than TSIG from one Unix BIND to another. https://downloads.isc.org/isc/bind9/9.14.6/doc/arm/Bv9ARM.ch04.html#tsig ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Using TSIG Keys Between Linux OS and Windows OS
You don’t as Microsoft has not implemented TSIG. -- Mark Andrews > On 25 Nov 2019, at 18:52, Mundile wrote: > > > How do I accomplish zone transfers (Master and Slave) between Master Linux > Nameserver and Slave Windows 2016 Nameserver using TSIG Keys > > Sent from Mail for Windows 10 > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
