about the zone file management
Hello, I'm not sure, is it right for the management of zone files, with both dynamic update and editting by hand? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: can @ be CNAME?
Thanks a lot Matthew. CNAME records are special. You can't have any other records for a label where you have a CNAME record (well, with the exception of RRSIG records if you're using DNSSEC). This is covered in great detail in any introductory text on DNS. The principle reason to want to have a CNAME record at the apex of a zone is to make http://example.com/ be a synonym for http://www.example.com/. The way to deal with that is to turn it round and make www.example.com be the CNAME record, and have the A record at example.com. Or just have A or records at both example.com and www.example.com ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
can @ be CNAME?
Hello, can I set @ to a cname type? like: @ IN CNAME www.example.com. Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
No cache for NS RR in public DNS
Hello, like this domain: blogchina.org I can't get its NS RR in public DNS: dig blogchina.org ns @8.8.8.8 get nothing. But it does work correctly. for example, query the record: dig udb.yy.blogchina.org works! How to setup Bind for this? Thanks! ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: No cache for NS RR in public DNS
--- On Fri, 15/10/10, Mark Andrews ma...@isc.org wrote: From: Mark Andrews ma...@isc.org Subject: Re: No cache for NS RR in public DNS To: Tech W. tech...@yahoo.com.cn Cc: bind-us...@isc.org Received: Friday, 15 October, 2010, 9:21 PM In message 811222.51900...@web15706.mail.cnb.yahoo.com, Tech W. writes: Hello, like this domain: blogchina.org I can't get its NS RR in public DNS: dig blogchina.org ns @8.8.8.8 get nothing. But it does work correctly. for example, query the record: dig udb.yy.blogchina.org works! No. It's just that the lookup of udb.yy.blogchina.org does not depend apon the presence of the blogchina.org ns records in the zone. The resolver uses the records from the org zone. Only when you explictly query for them do you notice their absence. So, is that a bad setup for the zone without a NS record? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
question on query process
Hello, I have a question about the query process of local dns cache to remote servers. When my local dns cache want to find the A record for a domain name, for example, www.example.com If the A record doesn't exist in its cache, but example.com's NS records are there. Thus the dns cache will query to example.com's ns servers directly, is it? If the domain's NS records are not there, how will dns cache handle the case? Thanks Regards, Ken ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
a question on bind cache
Hello, We have been facing this problem, sometime the original server was down, but Bind didn't know it, and still answered clients with the dead IP. Or sometime an external domain name has two or more IPs, accessing to part of them is fast, but accessing to another part is slow. So, do you think is there a resolving way for Bind which can implement the features: 1. check the popular domains' original IPs (like google's, yahoo's, aol's etc), and exclude the dead IPs from its cache. 2. for the popular domains, testing the access speed to each of their IPs and answers the fast IPs to local clients. Thanks for any suggestion. Regards, Wah. __ See what's on at the movies in your area. Find out now: http://au.movies.yahoo.com/session-times/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: a question on bind cache
- Original Message From: Kevin Darcy k...@chrysler.com To: bind-users@lists.isc.org Sent: Thu, 14 January, 2010 11:42:32 PM Subject: Re: a question on bind cache The highest incentive, and the optimal strategy, is for content *owners* to manage this, not *consumers*. http://lmgtfy.com/?q=content+distribution+network Thanks, I know something about CDN. But I also want to know if it's possible to let DNS handle this? Regards. __ See what's on at the movies in your area. Find out now: http://au.movies.yahoo.com/session-times/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: parent dns answers the ARR of child dns
--- On Fri, 4/12/09, Kevin Darcy k...@chrysler.com wrote: From: Kevin Darcy k...@chrysler.com Subject: Re: parent dns answers the ARR of child dns To: bind-users@lists.isc.org Received: Friday, 4 December, 2009, 1:56 AM Not only that, but DNS.gduf.edu.cn is performing recursion, while not setting RA in, and not copying RD into, the header of the response. % dig www.smartip.gduf.edu.cn. @DNS.gduf.edu.cn ; DiG 9.3.0 www.smartip.gduf.edu.cn. @DNS.gduf.edu.cn ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 593 ;; flags: qr aa; QUERY: 1, ANSWER: 3, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.smartip.gduf.edu.cn. IN A ;; ANSWER SECTION: www.smartip.gduf.edu.cn. 30 IN A 218.192.12.3 www.smartip.gduf.edu.cn. 30 IN A 218.192.12.4 www.smartip.gduf.edu.cn. 30 IN A 218.192.12.10 I suspect this is YABDLBD (Yet Another Brain-Damaged Load-Balancer Device). Or a defective DNS proxy. Thanks for your answers. But DNS.gduf.edu.cn is a Windows DNS Server running on MS Advanced Server, not a proxy or load-balancer. While the cache is populated with these records, even *non-recursive* queries will be given this answer directly, instead of a referral. Once the records time out, referrals are given again. Yes I am also confused by this behavior. So do you have any suggestion how to resolve it? I want, any query to the subzone should be answered by subzone's NS server, not by the parent one. Thanks again. Regards. __ Win 1 of 4 Sony home entertainment packs thanks to Yahoo!7. Enter now: http://au.docs.yahoo.com/homepageset/ ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: change NXDOMAIN to a A type response
--- On Mon, 3/8/09, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Many people consider that a bad idea. the DNS is used by many applications in many manners and providing false answers can break them in many ways. Here the primary ISP CN Telecom does do DNS hijack, though I hate this. anybody could try it using their DNS with nslookup: server 202.96.128.166 Default Server: cache-b.guangzhou.gd.cn Address: 202.96.128.166 www.notexists234256235.com Server: cache-b.guangzhou.gd.cn Address: 202.96.128.166 Non-authoritative answer: Name:www.notexists234256235.com Address: 59.37.71.85 www.notexists234256235.com doesn't exist, but this DNS does return an A RR. Wah. Access Yahoo!7 Mail on your mobile. Anytime. Anywhere. Show me how: http://au.mobile.yahoo.com/mail ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: about allow-update
Hi Evan,
I follow your suggestion to add the corresponding syntax into named.conf, then
I run rndc reload, but got:
# sbin/rndc reload
rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not syncronized, or
* the key is invalid.
bind version:
# sbin/named -v
BIND 9.6.0-P1
Please help, thanks.
Regards,
Wah.
--- On Thu, 16/7/09, Evan Hunt e...@isc.org wrote:
From: Evan Hunt e...@isc.org
Subject: Re: about allow-update
To: Tech W. tech...@yahoo.com.cn
Cc: bind-users@lists.isc.org
Received: Thursday, 16 July, 2009, 11:26 AM
Besides TSIG key, I want to limit the source address
also. That's to
say, I want the given address with specified key to
execute the update
only.
How can I do it? Is this syntax correct?
allow-update {key mykey; 192.168.1.254;};
Alas, no. What you want is:
allow-update { !{
!192.168.1.254; any; }; key mykey; }
See http://www.mail-archive.com/bind-users@lists.isc.org/msg00045.html
for my hard-to-read explanation of this painful syntax.
--
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
Access Yahoo!7 Mail on your mobile. Anytime. Anywhere.
Show me how: http://au.mobile.yahoo.com/mail
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: about tcp port 53
--- On Tue, 28/7/09, Stephane Bortzmeyer bortzme...@nic.fr wrote: what's the use of bind's tcp port 53? DNS requests and responses. oh, I was always thinking dns requests and responses are going with udp protocal. under what condition it uses tcp protocal? Regards, Wah. Access Yahoo!7 Mail on your mobile. Anytime. Anywhere. Show me how: http://au.mobile.yahoo.com/mail ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
about cache nonexist record
Hello, I have Bind-9.6.1 running on our university environment, have been using dynamic update. My question is, when other DNS query my named for a record, for example test.example.com, but this record doesn't exist. How long time will the remote DNS cache this nonexist record? I found the problem that if this nonexist record was cached by remote DNS, even if I added the corresponding record to named zone soon, the remote DNS can't find it quickly. This is not good for dynamic update IMO, for example, I need to change a record, then I have to do: nsupdate delete nsupdate add If the remote DNS query for this record just after 'nsupdate delete', then it will get nothing and cache this nonexist record for some time, even though the correct record has been added. How to deal with this case? Thanks. Regards, Wah. Access Yahoo!7 Mail on your mobile. Anytime. Anywhere. Show me how: http://au.mobile.yahoo.com/mail ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: about cache nonexist record
--- On Tue, 21/7/09, Mark Andrews ma...@isc.org wrote: From: Mark Andrews ma...@isc.org Subject: Re: about cache nonexist record To: Tech W. tech...@yahoo.com.cn Cc: bind-users@lists.isc.org Received: Tuesday, 21 July, 2009, 8:01 AM In message 950.42549...@web15608.mail.cnb.yahoo.com, Tech W. writes: Hello, I have Bind-9.6.1 running on our university environment, have been using dyna mic update. My question is, when other DNS query my named for a record, for example test. example.com, but this record doesn't exist. How long time will the remote DNS cache this nonexist record? For up to as long as you have told it too. The SOA minumum is used to set the timer. I found the problem that if this nonexist record was cached by remote DNS, ev en if I added the corresponding record to named zone soon, the remote DNS can 't find it quickly. This is not good for dynamic update IMO, for example, I need to change a reco rd, then I have to do: nsupdate delete nsupdate add Well do it in one transaction. nsupdate update delete ... update add ... send Thanks Mark and all. Can I ask how to call nsupdate in Perl language? I know some Perl but not good at it. Thanks. Regards, Wah. Access Yahoo!7 Mail on your mobile. Anytime. Anywhere. Show me how: http://au.mobile.yahoo.com/mail ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
no glue A record in child domain
Hello gurus, Say I have this glue record in parent's DNS: child.example.com. IN NS ns.child.example.com. ns.child.example.com. IN A 12.34.56.78 Then in child's zone file, I don't include the A record for ns.child.example.com.. What will be happened? Does it affect client's query to other records in this child domain? Thanks. Regards, Wah. Access Yahoo!7 Mail on your mobile. Anytime. Anywhere. Show me how: http://au.mobile.yahoo.com/mail ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
dynamic update for views
Hi, I know how to dynamic update on a basic named config. but my named has views setup, how to dynamic update the records to each view? Can you point to me some resources? Thanks. Regards, Wah. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
weight for RR
Hi, Is it possible to set weight for records? for example,I have these two A records: wwwIN A 192.168.1.100 IN A 192.168.1.101 But I want 192.168.1.100 take the weight of 75%, and 192.168.1.101 take the weight of 25%. That means, when clients query for www.domain.com, 1.100 has 75% chance to be responsed, and 1.101 has 25% chance to be responsed. Thanks in advance. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
MX is a numeric IP
What will be happened if a MX is an numeric IP? for example, # dig vip.online2.sh.cn mx +short 10 218.1.71.125. Thanks. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
named reloading
Hello, Just asked this question again, b/c it's not easy to test... When named is reloading with 'rndc reload' command, client's query is coming in, what will be happened? Will client's request be dropped? Thanks. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: dig info
--- On Mon, 18/5/09, Mark Andrews mark_andr...@isc.org wrote: From: Mark Andrews mark_andr...@isc.org Subject: Re: dig info To: Tech W. tech...@yahoo.com.cn Cc: bind-users@lists.isc.org Received: Monday, 18 May, 2009, 10:35 PM In message 980168.77226...@web15605.mail.cnb.yahoo.com, Tech W. writes: Sometime I dig a domain name, it returns the results below: ;; reply from unexpected source: 59.42.52.246#59721, expected 211.66.80.167#5 3 ;; reply from unexpected source: 59.42.52.246#59721, expected 211.66.80.167#5 3 ;; reply from unexpected source: 59.42.52.246#59721, expected 211.66.80.167#5 3 ;; connection timed out; no servers could be reached Is this a linux box dig is running on? Some linux kernels have the worst possible UDP port selection algorithms. They keep selecting the port that was last selected provided it is closed before you get the next port selection request. On a box with several short lived UDP sockets you will almost certainly get reply traffic destined to the last user of the port. This is what is happening here, dig seeing replies to whatever was using the port immediately before dig was run. Yes Mark it's a linux box with kernel 2.6.24. But I still can't understand for your meanings. Could you please explain it with more clear way? Thanks again. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
--- On Wed, 13/5/09, Stephane Bortzmeyer bortzme...@nic.fr wrote: Glue was sent back since wanadoo.fr's name servers are under wanadoo.fr . Ok please see dig info below. if I understand for it correctly, gdpu.cn is not under b.dns.cn, why b.dns.cn returns glues? Thanks. # dig gdpu.cn ns @B.DNS.cn ; DiG 9.5.0-P2 gdpu.cn ns @B.DNS.cn ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 53380 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;gdpu.cn. IN NS ;; AUTHORITY SECTION: gdpu.cn.21600 IN NS dns1.gdpu.cn. gdpu.cn.21600 IN NS dns2.gdpu.cn. ;; ADDITIONAL SECTION: dns1.gdpu.cn. 21600 IN A 219.136.229.41 dns2.gdpu.cn. 21600 IN A 219.136.229.42 Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
Oh yes, I have got it. Thanks. --- On Wed, 13/5/09, Stephane Bortzmeyer bortzme...@nic.fr wrote: From: Stephane Bortzmeyer bortzme...@nic.fr Subject: Re: glue record To: Tech W. tech...@yahoo.com.cn Cc: Stephane Bortzmeyer bortzme...@nic.fr, bind-users@lists.isc.org Received: Wednesday, 13 May, 2009, 3:40 PM On Wed, May 13, 2009 at 03:37:19PM +0800, Tech W. tech...@yahoo.com.cn wrote a message of 39 lines which said: if I understand for it correctly, gdpu.cn is not under b.dns.cn, True, but irrelevant. why b.dns.cn returns glues? Because the name servers of gdpu.cn are under gdpu.cn. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
--- On Wed, 13/5/09, Kal Feher kalman.fe...@melbourneit.com.au wrote: From: Kal Feher kalman.fe...@melbourneit.com.au Subject: Re: glue record To: bind-users@lists.isc.org Received: Wednesday, 13 May, 2009, 5:34 PM Your domain is still broken. You need to remove the NS record for your internal host. I have requested the hostmaster, who said the DNS server has been joined Windows domain, and has the hostname of dns4.dmz.local.. She can't remove this hostname from the windows DNS server. Once it was removed, after some time, it will be added into the name server automatically by windows. How can she handle this case? thanks. regards. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
glue record
I'm just not very sure, what's the usage for a glue record? When an upper DNS returns a domain's authorised DNS server, will it also returns the authorised DNS server's IP address? So glue record works as this way? Thanks for any replies. Regards. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
no NS but having A record
Hello, For this domain, gdpu.cn, I tried to find its ns record: dig gdpu.cn ns with no results. But I can dig its www record as below. why this happened? I can't understand entirely.. Thanks. # dig www.gdpu.cn ; DiG 9.5.0-P2 www.gdpu.cn ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 59573 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.gdpu.cn. IN A ;; ANSWER SECTION: www.gdpu.cn.2742IN A 219.136.229.45 ;; AUTHORITY SECTION: gdpu.cn.13652 IN NS dns2.gdpu.cn. gdpu.cn.13652 IN NS dns1.gdpu.cn. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: no NS but having A record
Hi, Firstly the DNS serveres for that domain is not mastered by me. I got the NS dig info as below. You can see, if I specify another public DNS (211.66.80.161), the results can be fetched. If I don't specify a DNS (use the default one 202.96.128.143 of my ISP), dig gets nothing. So I'm really confused on their configure. Please help again, thanks~ # dig gdpu.cn ns @211.66.80.161 ; DiG 9.5.0-P2 gdpu.cn ns @211.66.80.161 ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 57139 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2 ;; QUESTION SECTION: ;gdpu.cn. IN NS ;; ANSWER SECTION: gdpu.cn.21347 IN NS dns2.gdpu.cn. gdpu.cn.21347 IN NS dns1.gdpu.cn. ;; ADDITIONAL SECTION: dns2.gdpu.cn. 21347 IN A 219.136.229.42 dns1.gdpu.cn. 21347 IN A 219.136.229.41 ;; Query time: 3 msec ;; SERVER: 211.66.80.161#53(211.66.80.161) ;; WHEN: Mon May 11 18:51:19 2009 ;; MSG SIZE rcvd: 95 # dig gdpu.cn ns ; DiG 9.5.0-P2 gdpu.cn ns ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 15877 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;gdpu.cn. IN NS ;; Query time: 1 msec ;; SERVER: 202.96.128.143#53(202.96.128.143) ;; WHEN: Mon May 11 18:51:24 2009 ;; MSG SIZE rcvd: 25 --- On Mon, 11/5/09, Scott Haneda talkli...@newgeo.com wrote: I do not think you can have a .local NS. Both of those NS's have to be reachable by the outside world, and .local is not. It may be on your local lan, but outside that, it will not be. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: about resolving on a child zone
--- On Tue, 14/4/09, Chris Buxton cbux...@menandmice.com wrote: From: Chris Buxton cbux...@menandmice.com Subject: Re: about resolving on a child zone In this case, the answer is that your main zone (example.com) will have an error, because it will have an A record below the bottom of the zone that is not a glue record. In other words, it will recognize that www.my.example.com belongs to my.example.com, not to example.com. Thanks Chris for the good info. How about this case below? my.example.com. IN NS ns.my.example.com. ns.my.example.com. IN A 11.22.33.44 Under this case, the A record for ns.my.example.com. will be defined in main DNS or ns.my.example.com or both? Thanks again. Regards. Enjoy a better web experience. Upgrade to the new Internet Explorer 8 optimised for Yahoo!7. Get it now. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: help on strange dig info
--- On Sun, 12/4/09, Gregory Hicks ghi...@hicks-net.net wrote: From: Gregory Hicks ghi...@hicks-net.net Subject: Re: help on strange dig info To: bind-users@lists.isc.org, tech...@yahoo.com.cn Received: Sunday, 12 April, 2009, 3:33 PM I digged a domain name as below: r...@dev1:~# dig www.csfunds.com.cn ; DiG 9.5.0-P2 www.csfunds.com.cn ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 23283 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.csfunds.com.cn. IN A ;; ANSWER SECTION: www.csfunds.com.cn. 86149 IN CNAME www.f5.csfunds.com.cn. www.f5.csfunds.com.cn. 30 IN A 124.207.40.24 ;; AUTHORITY SECTION: f5.csfunds.com.cn. 85769 IN NS lc2.f5.csfunds.com.cn. f5.csfunds.com.cn. 85769 IN NS lc1.f5.csfunds.com.cn. It said f5.csfunds.com.cn's nameservers are lc1.f5.csfunds.com.cn and lc2.f5.csfunds.com.cn. But, I can't dig the info for both lc1 and lc2. Those are lame servers, kind sir. In other words, the domain is delegated to those servers but those servers don't recognize their authority. Thanks Hicks. Why F5's big-ip has been using a lame server there? Regards. The new Internet Explorer 8 optimised for Yahoo!7: Faster, Safer, Easier. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
about ns record in child domain
Greetings,
I have a domain said example.com.
in example.com's main DNS I added a NS record:
cdn.example.com. IN NS otherdns.example.com.
otherdns.example.com. IN A 12.34.56.78
Then in DNS of otherdns.example.com, I set something in named.conf like:
zone cdn.example.com {
type master;
file /var/cdn.example.com.db;
};
in cdn.example.com.db:
www.cdn.example.com. IN A 11.22.33.44
mail.cdn.example.com IN A xx.xx.xx.xx
...
But, my question is, how can I add NS records for zone itself of
cdn.example.com? I mean, I can't add something like this in cdn.example.com.db:
otherdns.example.com. IN A 12.34.56.78
(this NS item was defined in example.com's main dns.)
Please help, thanks!
Regards.
Ken.
The new Internet Explorer 8 optimised for Yahoo!7: Faster, Safer, Easier.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: about ns record in child domain
--- On Sun, 12/4/09, Chris Buxton cbux...@menandmice.com wrote: From: Chris Buxton cbux...@menandmice.com Subject: Re: about ns record in child domain To: Tech W. tech...@yahoo.com.cn Cc: bind-users@lists.isc.org Received: Sunday, 12 April, 2009, 11:04 AM On Apr 11, 2009, at 7:42 PM, Tech W. wrote: But, my question is, how can I add NS records for zone itself of cdn.example.com? I mean, I can't add something like this in cdn.example.com.db: otherdns.example.com. IN A 12.34.56.78 (this NS item was defined in example.com's main dns.) You've confused NS records with A records. Create the NS record; omit the A record. cdn.example.com. IN NS otherdns.example.com. Thanks Chris. Do you mean in a zone, we have a NS record, but we don't need to have an A record corresponding to that NS record? Regards. Enjoy a safer web experience. Upgrade to the new Internet Explorer 8 optimised for Yahoo!7. Get it now. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
