Re: srv lookup in record

2020-08-25 Thread Grant Taylor via bind-users

On 8/25/20 8:43 PM, John Levine wrote:
These SRV records say that the service is on ports 31024, 31852, 
and 31790 on the respective servers.  CNAME does not give you a 
port number.  There is no way to fake SRV using CNAME.


Agreed.

I've had some off-line conversations with Marc about some related 
things, so I thought he was only looking for the IP aspect and not 
worried about the port aspect of the SRV records.




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: srv lookup in record

2020-08-25 Thread John Levine
In article  you write:
>> [@temp3]$ dig +short srv _http-apps._server.test._tcp.marathon.mesos
>> 0 1 31024 server.test-usbzr-s3.marathon.mesos.
>> 0 1 31852 server.test-z9x84-s3.marathon.mesos.
>> 0 1 31790 server.test-k7g8r-s4.marathon.mesos.

These SRV records say that the service is on ports 31024, 31852, and 31790 on
the respective servers.  CNAME does not give you a port number.  There is no
way to fake SRV using CNAME.

R's,
John
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: srv lookup in record

2020-08-25 Thread Grant Taylor via bind-users

On 8/21/20 4:26 PM, Marc Roos wrote:
Is it possible to use srv lookups, like eg cname. I do not want to 
create SRV record, I just want to 'get' the ip addresses, that I 
would get vai srv lookup.


I don't know of any over the counter - if you will - way to do what - I 
think - you want to do.



Say I have this task

[@temp3]$ dig +short server.test.marathon.mesos
192.168.123.101
192.168.124.50
192.168.124.52
192.168.124.51
192.168.123.100
192.168.123.102


Are these the IP addresses that the names in the following SRV records 
resolve to?



[@temp3]$ dig +short srv _http-apps._server.test._tcp.marathon.mesos
0 1 31024 server.test-usbzr-s3.marathon.mesos.
0 1 31852 server.test-z9x84-s3.marathon.mesos.
0 1 31790 server.test-k7g8r-s4.marathon.mesos.

[marc@os0 temp3]$ dig +short srv 
_http-demo._server.test._tcp.marathon.mesos

0 1 31791 server.test-c8g8b-s4.marathon.mesos.
0 1 31025 server.test-wtbza-s3.marathon.mesos.
0 1 31853 server.test-d0x87-s3.marathon.mesos.

I would like to only make available the ip addresses that are in the 
same range. If I would use a cname like this:


What does "same range" mean in this context?

Is it the client's IP range?  Or is it the server's IP range?  Or some 
reference to _http-apps vs _http-demo?


To me, the following three owner names are completely independent of 
each other.


 - server.test.marathon.mesos
 - _http-apps._server.test._tcp.marathon.mesos
 - _http-demo._server.test._tcp.marathon.mesos

I see how we as humans can probably correlate the three.  But I don't 
see how BIND will do it.



server.local.   CNAMEserver.test.marathon.mesos.


That seems like a simple enough alias.  Simple enough that I think that 
it's existence can largely be ignored and focus on the IP extraction 
from SRV record(s) that I think you're asking about.



I would get 6 of which 3 ip addresses are not in the same range. So I
need to have something like

server.local.   ???  _http-apps._server.test._tcp.marathon.mesos.


How are you going to convey the "???" portion in the owner name of the 
DNS query?



Is this possible in bind-9.8.2-0.68.rc1.el6_10.3.x86_64?


I don't think what - I'm speculating - you want is possible as is with 
stock BIND.


I do wonder if you might be able to write a custom Dynamic Loadable Zone 
database (?) driver that might be able to do what you want.


Specifically, if you could create a DLZ driver that could take the query 
name, apply some logic to it (to determine the "???" above), perform the 
proper resolution of the SRV record(s), post process, and return the 
desired result to the original DNS query.


$Marc's_Request   IN   CNAME   bind-dlz.sourceforge.net

Link - BIND DLZ Home
 - http://bind-dlz.sourceforge.net/

Aside:  I think this is atypical of BIND.  But I also think that it 
/may/ be in BIND's wheel house to ... hack a possible solution to.


Further aside:  I have wondered about a custom DLZ that would return the 
client's IP address (as seen by the server).  I'd like to roll my own 
"what's my IP" type service.  }:-)




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Reverse lookup response format

2020-08-25 Thread Anand Buddhdev

On 25/08/2020 16:29, Brad Stevenson wrote:

Hi Brad,


I would like to have the behavior of the reverse lookup responses to only
include the hostname, not the hostname with the reverse zone appended. So
for example:

# nslookup 192.168.2.206

206.2.168.192.in-addr.arpa  name = server1.ctois.local


In your zone file, append a dot to the server name, like this:

server1.ctois.local.

Regards,
Anand
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Reverse lookup response format

2020-08-25 Thread tale via bind-users
> Instead of the way it is now:
> # nslookup 192.168.2.206
> 206.2.168.192.in-addr.arpa  name = 
> server1.ctois.local.2.168.192.in-addr.arpa.

In your zone file be sure that the name that is the target of the PTR
records has a final dot.   Without the trailing dot, the names are
interpreted as relative to the current origin.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Reverse lookup response format

2020-08-25 Thread Warren Kumari
On Tue, Aug 25, 2020 at 10:30 AM Brad Stevenson
 wrote:
>
> Hello, I apologize if this has been discussed before. I tried to search the 
> archives but couldn’t find anything.
>
>
>
> I would like to have the behavior of the reverse lookup responses to only 
> include the hostname, not the hostname with the reverse zone appended. So for 
> example:
>
> # nslookup 192.168.2.206
>
> 206.2.168.192.in-addr.arpa  name = server1.ctois.local
>
>
>
> Instead of the way it is now:
>
> # nslookup 192.168.2.206
>
> 206.2.168.192.in-addr.arpa  name = 
> server1.ctois.local.2.168.192.in-addr.arpa.
>
>
>
> Is this possible? Thanks in advance.

Yup -- you just need a period ('.') at the end of the name --
presumably in the zone file you have server1.ctois.local - that needs
to be server1.ctois.local.  (without the period the server doesn't
know that the name is fully qualified and adds the zone name...

W

>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
>
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Reverse lookup response format

2020-08-25 Thread Brad Stevenson
Hello, I apologize if this has been discussed before. I tried to search the
archives but couldn’t find anything.



I would like to have the behavior of the reverse lookup responses to only
include the hostname, not the hostname with the reverse zone appended. So
for example:

# nslookup 192.168.2.206

206.2.168.192.in-addr.arpa  name = server1.ctois.local



Instead of the way it is now:

# nslookup 192.168.2.206

206.2.168.192.in-addr.arpa  name =
server1.ctois.local.2.168.192.in-addr.arpa.



Is this possible? Thanks in advance.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users