Glue Record Error
Hi, Can someone suggest why i am having Glue Record Error ? And how i can resolve it. http://dnscheck.iis.se/?time=1275458333id=764597view=basiclang=test=standard Thanks -dani ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue Record Error
In message aanlktilhhrxumzsgdvlj93lw_vwqtbhwr2rqexlug...@mail.gmail.com, itservices88 writes: --===7275078350313162311== Content-Type: multipart/alternative; boundary=000e0cd47bf05bcb27048805d6bd --000e0cd47bf05bcb27048805d6bd Content-Type: text/plain; charset=ISO-8859-1 Hi, Can someone suggest why i am having Glue Record Error ? And how i can resolve it. http://dnscheck.iis.se/?time=1275458333id=764597view=basiclang=test=standard Thanks -dani The site tells you. The address of a name server differed from the child and the parent. This is a configuration error and should be corrected as soon as possible. The ORG servers have: mgmt.uslhcnet.org. 86400 IN A 192.91.244.20 The zone has: mgmt.uslhcnet.org. 86400 IN A 192.65.196.189 The two should be consistent. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue record miunderstanding
Yeah, I just ran a few queries and can't figure out what exactly it's complaining about. Matt It's making a observation (i in a blue circle) that there were not additional records for ns1.nacio.com being returned by ns1.hostwizard.com presumable because ns1.hostwizard.com doesn't serve the zone that contains ns1.nacio.com. There is nothing wrong with this. These records are NOT GLUE records. Only parent servers return GLUE records. That being said there would be a error condition if the address (A/) record for ns1.hostwizard.com didn't exist except as glue. The way to check for that is to make a query for ns1.hostwizard.com and follow all the delegations until you get to the zone that serves ns1.hostwizard.com. Modern versions of named attempt to detect glue only delegations and refuse to load zones that contain have them. Thank you for the explanation Mark. Also I was not aware that newer versions of named would refuse to load zones that were in error of glue only. This is good to know. Thank you. -- Scott * If you contact me off list replace talklists@ with scott@ * ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue record miunderstanding
On 01-Oct-2009, at 16:03, Scott Haneda wrote: Is it also correct, I only need a NS glue record for the actual NS itself. There does not need to be a glue record for very zone that I am providing DNS for? On 01.10.09 18:25, Matthew Pounsett wrote: The only case where glue *must* be present is when a nameserver name is a subdomain of the zone it's authoritative for. So, if ns1.example.com is one of the nameservers for example.com, then there must be glue in the com zone. In all other cases it is not required. However, some registries may include glue even when its not necessary, since it simplifies the logic of generating their zone. and often breaks when the A record of nameserver changes. To check if glue is present, ask your parent's nameservers for some record inside your zone. When you get back the delegation response, if glue is present it'll be included in the ADDITIONAL section. to check if glue is present in the zone, you usually must see the zone. the exception is when you know that the server doesn't have any other zones loaded where the record could appear. Here's a real-world example. In this case, glue is unnecessary in the com zone, but Verisign is including it anyway: 18:24:04 % dig +norec IN A www.example.com @a.gtld-servers.net ;; AUTHORITY SECTION: example.com. 172800 IN NS a.iana-servers.net. example.com. 172800 IN NS b.iana-servers.net. ;; ADDITIONAL SECTION: a.iana-servers.net. 172800 IN A 192.0.34.43 b.iana-servers.net. 172800 IN A 193.0.0.236 the server returns glue records in additional section because it's also authoritative for .net and iana-servers.net has those glue records in .net zone. Therefore server constructed response of all data it has loaded: % dig any iana-servers.net. @a.gtld-servers.net ;; ANSWER SECTION: iana-servers.net. 172800 IN NS a.iana-servers.net. iana-servers.net. 172800 IN NS b.iana-servers.org. iana-servers.net. 172800 IN NS c.iana-servers.net. iana-servers.net. 172800 IN NS d.iana-servers.net. iana-servers.net. 172800 IN NS ns.icann.org. ;; ADDITIONAL SECTION: a.iana-servers.net. 172800 IN A 192.0.34.43 c.iana-servers.net. 172800 IN A 139.91.1.10 d.iana-servers.net. 172800 IN A 208.77.188.44 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 10 GOTO 10 : REM (C) Bill Gates 1998, All Rights Reserved! ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Glue record miunderstanding
Hello, I believe I understand what a glue record is, and why I would need one. I would like some clarification if possible. While I am not the hugest fan of the dns report services, this report was brought to my attention: http://www.intodns.com/hostwizard.com It says I am missing glue for my ns1 at 64.84.37.14 This domain is registered through goDaddy. First Question: What is the procedure for using `dig` to determine that I am in fact missing an A record for my NS at the parent NS? I would like to confirm their message. Second, I logged into the control panel at GoDaddy, (I do not mind switching registrars, though I find it hard to believe they do not supply glue records for NS's), and I see something that looks like a glue record area. http://dl.getdropbox.com/u/340087/Drops/10.01.09/dns-8234d865-130008.png However, I did not add that data, it was already there. It also references IPv6, and any edits or changes to it do not seem to stick. I emailed support at GoDaddy, asking how to add a glue record through their system. I am not sure they understood the issue at hand, but this is what I recieved back: Thank you for contacting Online Support. Unfortunately this is not something you would be able to setup through us. We apologize for any inconvenience. Is it also correct, I only need a NS glue record for the actual NS itself. There does not need to be a glue record for very zone that I am providing DNS for? Thanks for any suggestions. -- Scott * If you contact me off list replace talklists@ with scott@ * ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue record miunderstanding
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01-Oct-2009, at 16:03, Scott Haneda wrote: Is it also correct, I only need a NS glue record for the actual NS itself. There does not need to be a glue record for very zone that I am providing DNS for? The only case where glue *must* be present is when a nameserver name is a subdomain of the zone it's authoritative for. So, if ns1.example.com is one of the nameservers for example.com, then there must be glue in the com zone. In all other cases it is not required. However, some registries may include glue even when its not necessary, since it simplifies the logic of generating their zone. To check if glue is present, ask your parent's nameservers for some record inside your zone. When you get back the delegation response, if glue is present it'll be included in the ADDITIONAL section. Here's a real-world example. In this case, glue is unnecessary in the com zone, but Verisign is including it anyway: 18:24:04 % dig +norec IN A www.example.com @a.gtld-servers.net ; DiG 9.4.3-P3 +norec IN A www.example.com @a.gtld-servers.net ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 55065 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.example.com. IN A ;; AUTHORITY SECTION: example.com.172800 IN NS a.iana-servers.net. example.com.172800 IN NS b.iana-servers.net. ;; ADDITIONAL SECTION: a.iana-servers.net. 172800 IN A 192.0.34.43 b.iana-servers.net. 172800 IN A 193.0.0.236 ;; Query time: 65 msec ;; SERVER: ;; WHEN: Thu Oct 1 18:24:13 2009 ;; MSG SIZE rcvd: 113 -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.11 (Darwin) iEYEARECAAYFAkrFLHkACgkQmFeRJ0tjIxF8qwCeILXgTweMvfy5/44oA3PTV//G z5YAoJBBRer7pj1RE9xfUdGG2GugFUfM =crTH -END PGP SIGNATURE- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue record miunderstanding
On Oct 1, 2009, at 3:25 PM, Matthew Pounsett wrote: On 01-Oct-2009, at 16:03, Scott Haneda wrote: Is it also correct, I only need a NS glue record for the actual NS itself. There does not need to be a glue record for very zone that I am providing DNS for? The only case where glue *must* be present is when a nameserver name is a subdomain of the zone it's authoritative for. So, if ns1.example.com is one of the nameservers for example.com, then there must be glue in the com zone. In all other cases it is not required. However, some registries may include glue even when its not necessary, since it simplifies the logic of generating their zone. To check if glue is present, ask your parent's nameservers for some record inside your zone. When you get back the delegation response, if glue is present it'll be included in the ADDITIONAL section. Here's a real-world example. In this case, glue is unnecessary in the com zone, but Verisign is including it anyway: 18:24:04 % dig +norec IN A www.example.com @a.gtld-servers.net ; DiG 9.4.3-P3 +norec IN A www.example.com @a.gtld- servers.net ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 55065 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.example.com. IN A ;; AUTHORITY SECTION: example.com.172800 IN NS a.iana-servers.net. example.com.172800 IN NS b.iana-servers.net. ;; ADDITIONAL SECTION: a.iana-servers.net. 172800 IN A 192.0.34.43 b.iana-servers.net. 172800 IN A 193.0.0.236 ;; Query time: 65 msec ;; SERVER: ;; WHEN: Thu Oct 1 18:24:13 2009 ;; MSG SIZE rcvd: 113 Taking your example: $dig +norec IN A ns1.hostwizard.com @a.gtld-servers.net ; DiG 9.4.3-P3 +norec IN A ns1.hostwizard.com @a.gtld- servers.net ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 31543 ;; flags: qr; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;ns1.hostwizard.com.IN A ;; ANSWER SECTION: ns1.hostwizard.com. 172800 IN A 64.84.37.14 ;; AUTHORITY SECTION: hostwizard.com. 172800 IN NS ns1.hostwizard.com. hostwizard.com. 172800 IN NS ns1.nacio.com. ;; ADDITIONAL SECTION: ns1.hostwizard.com. 172800 IN A 64.84.37.14 ns1.nacio.com. 172800 IN A 64.84.0.18 ;; Query time: 252 msec ;; SERVER: 2001:503:a83e::2:30#53(2001:503:a83e::2:30) ;; WHEN: Thu Oct 1 16:00:56 2009 ;; MSG SIZE rcvd: 122 So I see my NS is listed in the additional section. This to me tells me there is in fact glue, so I should consider the report at http://intodns.com/hostwizard.com to be inaccurate? -- Scott * If you contact me off list replace talklists@ with scott@ * ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue record miunderstanding
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01-Oct-2009, at 19:03, Scott Haneda wrote: So I see my NS is listed in the additional section. This to me tells me there is in fact glue, so I should consider the report at http://intodns.com/hostwizard.com to be inaccurate? Yeah, I just ran a few queries and can't figure out what exactly it's complaining about. Matt -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.11 (Darwin) iEYEARECAAYFAkrFTN4ACgkQmFeRJ0tjIxHkYwCfdIo1dfhDzGov84ouWPviqWrk 5IIAnAy44CUqm7gfX43PQ88KOdUQv47K =XnOk -END PGP SIGNATURE- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Glue record miunderstanding
In message 73e2882f-00b3-41cb-b46d-351774486...@conundrum.com, Matthew Pounse tt writes: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01-Oct-2009, at 19:03, Scott Haneda wrote: So I see my NS is listed in the additional section. This to me tells me there is in fact glue, so I should consider the report at http://i ntodns.com/hostwizard.com to be inaccurate? Yeah, I just ran a few queries and can't figure out what exactly it's complaining about. Matt It's making a observation (i in a blue circle) that there were not additional records for ns1.nacio.com being returned by ns1.hostwizard.com presumable because ns1.hostwizard.com doesn't serve the zone that contains ns1.nacio.com. There is nothing wrong with this. These records are NOT GLUE records. Only parent servers return GLUE records. That being said there would be a error condition if the address (A/) record for ns1.hostwizard.com didn't exist except as glue. The way to check for that is to make a query for ns1.hostwizard.com and follow all the delegations until you get to the zone that serves ns1.hostwizard.com. Modern versions of named attempt to detect glue only delegations and refuse to load zones that contain have them. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
On Wed, May 13, 2009 at 11:46:29AM +0800, Tech W. tech...@yahoo.com.cn wrote a message of 14 lines which said: When an upper DNS returns a domain's authorised DNS server, will it also returns the authorised DNS server's IP address? So glue record works as this way? Why don't you test? Computer science is an experimental science. % dig @a.nic.fr A www.google.fr ; DiG 9.5.1-P1 @a.nic.fr A www.google.fr ; (2 servers found) ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 47237 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.google.fr. IN A ;; AUTHORITY SECTION: google.fr. 172800 IN NS ns1.google.com. google.fr. 172800 IN NS ns2.google.com. google.fr. 172800 IN NS ns3.google.com. google.fr. 172800 IN NS ns4.google.com. ;; Query time: 2 msec ;; SERVER: 192.93.0.129#53(192.93.0.129) ;; WHEN: Wed May 13 09:00:19 2009 ;; MSG SIZE rcvd: 124 No glue was sent back, since all google.fr nameservers are outside of google.fr. % dig @a.nic.fr A www.wanadoo.fr ; DiG 9.5.1-P1 @a.nic.fr A www.wanadoo.fr ; (2 servers found) ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 29937 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 5 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.wanadoo.fr.IN A ;; AUTHORITY SECTION: wanadoo.fr. 172800 IN NS ns11.wanadoo.fr. wanadoo.fr. 172800 IN NS ns.wanadoo.fr. wanadoo.fr. 172800 IN NS ns2.wanadoo.fr. wanadoo.fr. 172800 IN NS ns10.wanadoo.fr. ;; ADDITIONAL SECTION: ns.wanadoo.fr. 172800 IN A 80.12.255.24 ns2.wanadoo.fr. 172800 IN A 80.12.255.159 ns10.wanadoo.fr.172800 IN A 80.12.255.23 ns11.wanadoo.fr.172800 IN A 80.12.255.152 ;; Query time: 2 msec ;; SERVER: 192.93.0.129#53(192.93.0.129) ;; WHEN: Wed May 13 09:01:49 2009 ;; MSG SIZE rcvd: 180 Glue was sent back since wanadoo.fr's name servers are under wanadoo.fr (so you could not find their IP addresses, without the glue records). ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
--- On Wed, 13/5/09, Stephane Bortzmeyer bortzme...@nic.fr wrote: Glue was sent back since wanadoo.fr's name servers are under wanadoo.fr . Ok please see dig info below. if I understand for it correctly, gdpu.cn is not under b.dns.cn, why b.dns.cn returns glues? Thanks. # dig gdpu.cn ns @B.DNS.cn ; DiG 9.5.0-P2 gdpu.cn ns @B.DNS.cn ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 53380 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;gdpu.cn. IN NS ;; AUTHORITY SECTION: gdpu.cn.21600 IN NS dns1.gdpu.cn. gdpu.cn.21600 IN NS dns2.gdpu.cn. ;; ADDITIONAL SECTION: dns1.gdpu.cn. 21600 IN A 219.136.229.41 dns2.gdpu.cn. 21600 IN A 219.136.229.42 Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
On Wed, May 13, 2009 at 03:37:19PM +0800, Tech W. tech...@yahoo.com.cn wrote a message of 39 lines which said: if I understand for it correctly, gdpu.cn is not under b.dns.cn, True, but irrelevant. why b.dns.cn returns glues? Because the name servers of gdpu.cn are under gdpu.cn. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
In article gudtlf$1u4...@sf1.isc.org,
Tech W. tech...@yahoo.com.cn wrote:
--- On Wed, 13/5/09, Stephane Bortzmeyer bortzme...@nic.fr wrote:
Glue was sent back since wanadoo.fr's name servers are
under
wanadoo.fr .
Ok please see dig info below.
if I understand for it correctly, gdpu.cn is not under b.dns.cn, why b.dns.cn
returns glues?
How would you look up anything in this domain if it didn't return glue?
To look up anything.gdpu.cn, you have to ask dns1.gdpu.cn or
dns2.gdpu.cn. This requires you to find the IP of dns{1,2}.gdpu.cn,
which you can only do by asking dns{1,2}.gdpu.cn. The glue keeps you
from getting stuck in this loop.
Thanks.
# dig gdpu.cn ns @B.DNS.cn
; DiG 9.5.0-P2 gdpu.cn ns @B.DNS.cn
;; global options: printcmd
;; Got answer:
;; -HEADER- opcode: QUERY, status: NOERROR, id: 53380
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;gdpu.cn. IN NS
;; AUTHORITY SECTION:
gdpu.cn.21600 IN NS dns1.gdpu.cn.
gdpu.cn.21600 IN NS dns2.gdpu.cn.
;; ADDITIONAL SECTION:
dns1.gdpu.cn. 21600 IN A 219.136.229.41
dns2.gdpu.cn. 21600 IN A 219.136.229.42
--
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Cannot Delete Glue record
I have a glue (nameserver host) record which hasn't been used in years and I want to delete it (and ultimately re-use the name). Attempting a delete through UKreg (Fasthosts) gives me this: Error: NameServerHosts Delete (Nameserver deletion failed at registry: 420 Object association prohibits operation.) I cannot find any way to check what domains are attached to it, and UKreg support are unable to help (check manually was their answer). We don't have that many domains, so I've checked them all manually, both the zone files and what the registrar has listed as authoritive, but this glue record isn't used by us. Is there a way/tool which can check what domains are attached to a glue record. For reference, the name is ns0.broadbean.net Any advice appreciated. Thanks Luke ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
Oh yes, I have got it. Thanks. --- On Wed, 13/5/09, Stephane Bortzmeyer bortzme...@nic.fr wrote: From: Stephane Bortzmeyer bortzme...@nic.fr Subject: Re: glue record To: Tech W. tech...@yahoo.com.cn Cc: Stephane Bortzmeyer bortzme...@nic.fr, bind-users@lists.isc.org Received: Wednesday, 13 May, 2009, 3:40 PM On Wed, May 13, 2009 at 03:37:19PM +0800, Tech W. tech...@yahoo.com.cn wrote a message of 39 lines which said: if I understand for it correctly, gdpu.cn is not under b.dns.cn, True, but irrelevant. why b.dns.cn returns glues? Because the name servers of gdpu.cn are under gdpu.cn. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
Your domain is still broken. You need to remove the NS record for your internal host. $ dig @dns2.gdpu.cn gdpu.cn ns ;; ANSWER SECTION: gdpu.cn.3600IN NS dns1.gdpu.cn. gdpu.cn.3600IN NS dns2.gdpu.cn. gdpu.cn.3600IN NS dns4.dmz.local.** ;; ADDITIONAL SECTION: dns1.gdpu.cn. 3600IN A 219.136.229.41 dns2.gdpu.cn. 3600IN A 219.136.229.42 dns4.dmz.local. 3600IN A 10.55.11.11** On 13/5/09 11:18 AM, Tech W. tech...@yahoo.com.cn wrote: Oh yes, I have got it. Thanks. --- On Wed, 13/5/09, Stephane Bortzmeyer bortzme...@nic.fr wrote: From: Stephane Bortzmeyer bortzme...@nic.fr Subject: Re: glue record To: Tech W. tech...@yahoo.com.cn Cc: Stephane Bortzmeyer bortzme...@nic.fr, bind-users@lists.isc.org Received: Wednesday, 13 May, 2009, 3:40 PM On Wed, May 13, 2009 at 03:37:19PM +0800, Tech W. tech...@yahoo.com.cn wrote a message of 39 lines which said: if I understand for it correctly, gdpu.cn is not under b.dns.cn, True, but irrelevant. why b.dns.cn returns glues? Because the name servers of gdpu.cn are under gdpu.cn. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY 2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHR tX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creati veholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=ma iltagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Kal Feher ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
--- On Wed, 13/5/09, Kal Feher kalman.fe...@melbourneit.com.au wrote: From: Kal Feher kalman.fe...@melbourneit.com.au Subject: Re: glue record To: bind-users@lists.isc.org Received: Wednesday, 13 May, 2009, 5:34 PM Your domain is still broken. You need to remove the NS record for your internal host. I have requested the hostmaster, who said the DNS server has been joined Windows domain, and has the hostname of dns4.dmz.local.. She can't remove this hostname from the windows DNS server. Once it was removed, after some time, it will be added into the name server automatically by windows. How can she handle this case? thanks. regards. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: glue record
On Wed, May 13, 2009 at 09:04:07PM +0800, Tech W. tech...@yahoo.com.cn wrote a message of 13 lines which said: Remove the allow-update directive. But she is running the windows DNS server not Bind.. Then it is probably off-topic for this list. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Cannot Delete Glue record
Luke Hopkins wrote: I have a glue (nameserver host) record which hasn't been used in years and I want to delete it (and ultimately re-use the name). Attempting a delete through UKreg (Fasthosts) gives me this: Error: NameServerHosts Delete (Nameserver deletion failed at registry: 420 Object association prohibits operation.) I cannot find any way to check what domains are attached to it, and UKreg support are unable to help (check manually was their answer). We don't have that many domains, so I've checked them all manually, both the zone files and what the registrar has listed as authoritive, but this glue record isn't used by us. Is there a way/tool which can check what domains are attached to a glue record. For reference, the name is ns0.broadbean.net They should be able to look into the registry database to find this. It might be very difficult for you, as a customer, to ascertain, outside of the DNS protocol itself, what domain(s) might be delegated to that name. If your registry is lax about checking such things, it's conceivable that someone has delegated their domain(s) to your nameserver without your consent, in order to meet a 2-nameserver delegation requirement, while only actually having a single authoritative nameserver hosting the zone. In that scenario, if you have everything in a single view, and open access to the cache, and with open recursion (or one of your trusted recursive clients went rogue), they might even be able to poke your nameserver periodically, in order to populate your cache with desired records, and thus leech off your resolution services. That's another reason why it's recommended to either a) strictly limit access to your cache (later versions of BIND do this more conveniently and by default), or b) have separate views for recursive and non-recursive (hosting) service. But I digress... One investigative approach would be to point that name at a valid address in your Internet-facing range, and record -- by using a sniffer, or bringing up a minimal nameserver and turning on query logging -- what queries you're getting, and for what zones. - Kevin ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
glue record
I'm just not very sure, what's the usage for a glue record? When an upper DNS returns a domain's authorised DNS server, will it also returns the authorised DNS server's IP address? So glue record works as this way? Thanks for any replies. Regards. Need a Holiday? Win a $10,000 Holiday of your choice. Enter now.http://us.lrd.yahoo.com/_ylc=X3oDMTJxN2x2ZmNpBF9zAzIwMjM2MTY2MTMEdG1fZG1lY2gDVGV4dCBMaW5rBHRtX2xuawNVMTEwMzk3NwR0bV9uZXQDWWFob28hBHRtX3BvcwN0YWdsaW5lBHRtX3BwdHkDYXVueg--/SIG=14600t3ni/**http%3A//au.rd.yahoo.com/mail/tagline/creativeholidays/*http%3A//au.docs.yahoo.com/homepageset/%3Fp1=other%26p2=au%26p3=mailtagline ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
