Re: Glue records (was Re: ATTN GARY KLINE)

2010-11-08 Thread Jonathan McKeown
On Friday 05 November 2010 22:51:01 Robert Bonomi wrote:
> > From owner-freebsd-questi...@freebsd.org  Fri Nov  5 02:26:31 2010
> > From: Jonathan McKeown 
> > To: freebsd-questions@freebsd.org
> > Date: Fri, 5 Nov 2010 10:27:38 +0200
> > Subject: Glue records (was Re: ATTN GARY KLINE)
> >
> > When a nameserver delegates a zone, it's not responsible for any of that
> > zone's records any more, with two exceptions. It provides NS records to
> > indicate which nameservers /are/ responsible, and it retains
> > responsibility for the A records of nameservers inside the zone - and
> > only those nameservers. (That's glue.)
> >
> > There's no way a .com nameserver should be providing A records for hosts
> > in the .au zone.
>
> sure there is.
>
>Domain:  foo.com  (an aussie company)
>   nameservers   ns1.alicesprings.au, ns2.umelbourneatperth.au

I think we're agreeing violently ;) The nameservers for the .com zone, when 
asked about foo.com, should reply with the hostnames of the two nameservers. 
It shouldn't reply with their IP addresses; the only nameservers that can do 
that are the ones serving the .au zone or the alicesprings.au and 
umelbourneatperth.au zones.

> They're still wrong to bw whinging about a lack o glue records.
> glue is needed _only_ when the nameserver is _in_ the domain it is the
> authoritative servr for.
>
> So, in the above frivolous example, foo.com does *NOT* need any glue
> records, but if ns1.alicesprings.au is an authoritative server for
> alicesprings.au, then *it* needs a glue record for that domain.

Well, the glue record will be ``above the cut'': if .au delegates 
alicesprings.au, it's the .au nameserver that provides the A record for 
ns1.alicesprings.au; but, yes.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Glue records (was Re: ATTN GARY KLINE)

2010-11-05 Thread Robert Bonomi
> From owner-freebsd-questi...@freebsd.org  Fri Nov  5 02:26:31 2010
> From: Jonathan McKeown 
> To: freebsd-questions@freebsd.org
> Date: Fri, 5 Nov 2010 10:27:38 +0200
> Subject: Glue records (was Re: ATTN GARY KLINE)
>
> On Friday 05 November 2010 09:28:27 Ian Smith wrote:
> > But you don't always have any control of what parent nameservers do;
> > eg we do DNS for a .com but both NS are in .au so DNS reports always
> > whinge about lack of glue
>
> They should be whingeing about lack of clue (their own) unless I'm horribly 
> wrong about how DNS works.
>
> When a nameserver delegates a zone, it's not responsible for any of that 
> zone's records any more, with two exceptions. It provides NS records to 
> indicate which nameservers /are/ responsible, and it retains responsibility 
> for the A records of nameservers inside the zone - and only those 
> nameservers. (That's glue.)
>
> There's no way a .com nameserver should be providing A records for hosts in 
> the .au zone.

sure there is.  

   Domain:  foo.com  (an aussie company)
  nameservers   ns1.alicesprings.au, ns2.umelbourneatperth.au

They're still wrong to bw whinging about a lack o glue records.
glue is needed _only_ when the nameserver is _in_ the domain it is the
authoritative servr for.

So, in the above frivolous example, foo.com does *NOT* need any glue
records, but if ns1.alicesprings.au is an authoritative server for 
alicesprings.au, then *it* needs a glue record for that domain.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-05 Thread kline
On Fri, Nov 05, 2010 at 01:32:11AM -0400, Jon Radel wrote:
> On 11/5/10 12:22 AM, kline wrote:
> >
> >i''m using evo to be able to click on.  i have fewer ``Fail'' type
> >responses, but do not understand the failure messages.  Also, since it
> >has been 9.5 years since I read DNS AND BIND, the jargon  is lost.  What
> >does "glue" means? and how should I resolve?
> >
> >It is time to  get this stuff arrow-straight, so hoping that someone
> >on-list can clue me in.
> >
> >
> >tx,
> >
> >
> >gary
> >
> >http://www.dnscog.com/report/thought.org/1288928790
> If your parents, the nameservers authoritative for .org, tell the
> world that one of the nameservers for thought.org is
> ns1.thought.org, they also have to tell the world what the IP
> address for ns1.thought.org is using an A record.  That A record is
> glue.  Otherwise you get a machine conversation something like:
> 
> Resolving nameserver trying to find a record in the thought.org zone
> (RN):  Please Mr. root server, I'd like to know about
> www.thought.org
> Root:  See the .org folks over there
> RN:  Please Mr. top-level dude, about that www.thought.org
> Org: Well, see ns1.thought.org
> RN:  Ahem, I'm trying to find out basic stuff about thought.org and
> I don't know the address for ns1.thought.org in order to ask it
> Org:  Well, ask ns1.thought.org what the address for ns1.thought.org is...
> RN:  But, but, butfollowed by petulant stomping off
> 
> Glue A records fix that problem.
> 
> BTW, the fact that a glue record isn't returned for ns2.everydns.net
> in response to a query about NS records for thought.org really isn't
> a problem; note the "info" rather than "fail" from DNSCog.



I did not see the "info" tag, thanks.  Here is what I have for
my "A" recordes in thought.org's external [and internal] filees.
Note that plsto and ns1 are different computers.  plato is my 
firewall.


thought.org.e.hosts:19:ethicA 209.180.213.210
thought.org.e.hosts:20:platoA 209.180.213.209
thought.org.e.hosts:21:ns1  A 209.180.213.209
thought.org.i.hosts:14:ethicA   10.47.0.230
thought.org.i.hosts:15:platoA 10.47.0.1
thought.org.i.hosts:16:tao  A   10.47.0.250
thought.org.i.hosts:18:zen  A   10.47.0.190


FWIW, ethic *is*  ns1.  LAst time someone criticized having
three IP's with the same quad decimal.  

(A couple years ago I was sown for several days and my wife had
to talk with some tech [from Qwest]. He was either in Mumbai or 
Manilla and had her erase a bunch of lines from my
"modem"/router.  I don't think that has any effect here, tho I
may be wrong.)


> 
> Biggest problem I still see is that ns2.everydns.net refuses to
> respond to queries about thought.org.  You sure your account there
> is still active and functional and that you're allowing zone
> transfers to them?  I note that you don't allow transfers from
> arbitrary addresses, and
> http://www.everydns.com/faq/secondary-domain/example-setup does warn
> that the source address for transfer requests was/will/did change.


I saw that and chaanged it, allowing transfers a day or two ago.
Where do I look in /var/log/  to see if these actually happened?
It may be that  everydns.net got tired of requests and I need to
re-do something.  
> 
> Some of the problems reported by DNSCog appear to be bogus.  They've
> got some bugs related to cases where a nameserver has a name in the
> domain in question.  (And also some bugs related to nameservers
> which are reachable by both ipv4 and ipv6, but that doesn't apply to
> you.)
> 
Thankee much. I'll grep around for xfer in /var/log/* and
hopefully see something from I recognize.)

gary


> 
> --Jon Radel
> j...@radel.com
> 
> 



-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
The 7.90a release of Jottings: http://jottings.thought.org/index.php
An Open Letter to Stephen Hawking http://www.thought.org/#oL

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Glue records (was Re: ATTN GARY KLINE)

2010-11-05 Thread Ian Smith
In freebsd-questions Digest, Vol 335, Issue 9, Message: 7
On Fri, 5 Nov 2010 10:27:38 +0200 Jonathan McKeown  wrote:
 > On Friday 05 November 2010 09:28:27 Ian Smith wrote:
 > > But you don't always have any control of what parent nameservers do;
 > > eg we do DNS for a .com but both NS are in .au so DNS reports always
 > > whinge about lack of glue
 > 
 > They should be whingeing about lack of clue (their own) unless I'm horribly 
 > wrong about how DNS works.

Indeed, my point .. I've tried quite a few free DNS health reporters 
over the time; some eg thednsreport.com list missing glue records as a 
warning, ending: "This will usually occur if your DNS servers are not in 
the same TLD as your domain" which is just the case, but others have 
splashed red ink over this one .. sorry, don't recall which offhand.

 > When a nameserver delegates a zone, it's not responsible for any of that 
 > zone's records any more, with two exceptions. It provides NS records to 
 > indicate which nameservers /are/ responsible, and it retains responsibility 
 > for the A records of nameservers inside the zone - and only those 
 > nameservers. (That's glue.)
 > 
 > There's no way a .com nameserver should be providing A records for hosts in 
 > the .au zone.

Nor, I guess, .org nameservers having A RRs for a .net NS, like Gary's.

 > > nonetheless it works, though only after a hunt down through the .au
 > > servers, until cached.
 > 
 > Yes, this is exactly what /should/ happen. Only the .au servers (or servers 
 > they delegate to) are authoritative for hosts in the .au zone.

Just so, Jonathan; I was referring to lack of clue of some reporting 
gadgets.  dnscog.com got this one right, but its mail report is sus.

cheers, Ian
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Glue records (was Re: ATTN GARY KLINE)

2010-11-05 Thread Jonathan McKeown
On Friday 05 November 2010 09:28:27 Ian Smith wrote:
> But you don't always have any control of what parent nameservers do;
> eg we do DNS for a .com but both NS are in .au so DNS reports always
> whinge about lack of glue

They should be whingeing about lack of clue (their own) unless I'm horribly 
wrong about how DNS works.

When a nameserver delegates a zone, it's not responsible for any of that 
zone's records any more, with two exceptions. It provides NS records to 
indicate which nameservers /are/ responsible, and it retains responsibility 
for the A records of nameservers inside the zone - and only those 
nameservers. (That's glue.)

There's no way a .com nameserver should be providing A records for hosts in 
the .au zone.

> nonetheless it works, though only after a hunt down through the .au
> servers, until cached.

Yes, this is exactly what /should/ happen. Only the .au servers (or servers 
they delegate to) are authoritative for hosts in the .au zone.

Jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-05 Thread Ian Smith
In freebsd-questions Digest, Vol 335, Issue 8, Message: 29
On Fri, 05 Nov 2010 01:32:11 -0400 Jon Radel  wrote:
 > On 11/5/10 12:22 AM, kline wrote:
[..]
 > > It is time to  get this stuff arrow-straight, so hoping that someone
 > > on-list can clue me in.
[..]
 > > http://www.dnscog.com/report/thought.org/1288928790

 > If your parents, the nameservers authoritative for .org, tell the world 
 > that one of the nameservers for thought.org is ns1.thought.org, they 
 > also have to tell the world what the IP address for ns1.thought.org is 
 > using an A record.  That A record is glue.  Otherwise you get a machine 
 > conversation something like:
 > 
 > Resolving nameserver trying to find a record in the thought.org zone 
 > (RN):  Please Mr. root server, I'd like to know about www.thought.org
 > Root:  See the .org folks over there
 > RN:  Please Mr. top-level dude, about that www.thought.org
 > Org: Well, see ns1.thought.org
 > RN:  Ahem, I'm trying to find out basic stuff about thought.org and I 
 > don't know the address for ns1.thought.org in order to ask it
 > Org:  Well, ask ns1.thought.org what the address for ns1.thought.org is...
 > RN:  But, but, butfollowed by petulant stomping off
 > 
 > Glue A records fix that problem.

Lovely description Jon :)  But you don't always have any control of what 
parent nameservers do; eg we do DNS for a .com but both NS are in .au so 
DNS reports always whinge about lack of glue .. nonetheless it works, 
though only after a hunt down through the .au servers, until cached.

 > BTW, the fact that a glue record isn't returned for ns2.everydns.net in 
 > response to a query about NS records for thought.org really isn't a 
 > problem; note the "info" rather than "fail" from DNSCog.
 > 
 > Biggest problem I still see is that ns2.everydns.net refuses to respond 
 > to queries about thought.org.  You sure your account there is still 
 > active and functional and that you're allowing zone transfers to them?  

Confirmed here, no response at all after a good long wait; worse than 
reyrning 'we don't do thought.org'

% dig @ns2.everydns.net. thought.org
; <<>> DiG 9.3.4-P1 <<>> @ns2.everydns.net. thought.org
; (1 server found)
;; global options:  printcmd
;; connection timed out; no servers could be reached

where they really should be quickly issuing a REFUSED response. 'dig 
@ns2.everydns.net. everydns.net' works fine, so I'm reaching it ok.

 > I note that you don't allow transfers from arbitrary addresses, and 
 > http://www.everydns.com/faq/secondary-domain/example-setup does warn 
 > that the source address for transfer requests was/will/did change.
 > 
 > Some of the problems reported by DNSCog appear to be bogus.  They've got 
 > some bugs related to cases where a nameserver has a name in the domain 
 > in question.  (And also some bugs related to nameservers which are 
 > reachable by both ipv4 and ipv6, but that doesn't apply to you.)

Bogus indeed.  Tested one local domain there and got whinging about not 
accepting <> and postmaster@ mail; odd, thought I, but maillog shows:

Nov  4 22:43:43  sm-mta[81227]: ruleset=check_relay, 
  arg1=[216.146.46.136], arg2=216.146.46.136, relay=[216.146.46.136], 
  reject=550 5.7.1 Fix reverse DNS for 216.146.46.136

% dig -x 216.146.46.136
[..]
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;136.46.146.216.in-addr.arpa.   IN  PTR

;; AUTHORITY SECTION:
46.146.216.in-addr.arpa. 1800   IN  SOA ns1.mydyndns.org. 
 zone-admin.dyndns.com. 2008082768 10800 1800 604800 1800

Seems a bit amateurish to me, running a service like that on a dynamic 
address without reverse resolution, then expecting mail to work ..

cheers, Ian
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-04 Thread Jon Radel

On 11/5/10 12:22 AM, kline wrote:


i''m using evo to be able to click on.  i have fewer ``Fail'' type
responses, but do not understand the failure messages.  Also, since it
has been 9.5 years since I read DNS AND BIND, the jargon  is lost.  What
does "glue" means? and how should I resolve?

It is time to  get this stuff arrow-straight, so hoping that someone
on-list can clue me in.


tx,


gary

http://www.dnscog.com/report/thought.org/1288928790
If your parents, the nameservers authoritative for .org, tell the world 
that one of the nameservers for thought.org is ns1.thought.org, they 
also have to tell the world what the IP address for ns1.thought.org is 
using an A record.  That A record is glue.  Otherwise you get a machine 
conversation something like:


Resolving nameserver trying to find a record in the thought.org zone 
(RN):  Please Mr. root server, I'd like to know about www.thought.org

Root:  See the .org folks over there
RN:  Please Mr. top-level dude, about that www.thought.org
Org: Well, see ns1.thought.org
RN:  Ahem, I'm trying to find out basic stuff about thought.org and I 
don't know the address for ns1.thought.org in order to ask it

Org:  Well, ask ns1.thought.org what the address for ns1.thought.org is...
RN:  But, but, butfollowed by petulant stomping off

Glue A records fix that problem.

BTW, the fact that a glue record isn't returned for ns2.everydns.net in 
response to a query about NS records for thought.org really isn't a 
problem; note the "info" rather than "fail" from DNSCog.


Biggest problem I still see is that ns2.everydns.net refuses to respond 
to queries about thought.org.  You sure your account there is still 
active and functional and that you're allowing zone transfers to them?  
I note that you don't allow transfers from arbitrary addresses, and 
http://www.everydns.com/faq/secondary-domain/example-setup does warn 
that the source address for transfer requests was/will/did change.


Some of the problems reported by DNSCog appear to be bogus.  They've got 
some bugs related to cases where a nameserver has a name in the domain 
in question.  (And also some bugs related to nameservers which are 
reachable by both ipv4 and ipv6, but that doesn't apply to you.)


--

--Jon Radel
j...@radel.com




Re: ATTN GARY KLINE

2010-11-04 Thread kline
On Thu, 2010-11-04 at 09:08 +0100, Bernt Hansson wrote:
> 2010-11-04 06:59, Gary Kline:
> > On Wed, Nov 03, 2010 at 08:10:07PM -0600, Robert Bonomi wrote:
> >>
> >>> Date: Tue, 2 Nov 2010 22:50:00 -0700
> >>> From: Gary Kline
> >>> Subject: Re: is there a utility...?
> >>>
> >>
> >> *please* fix the DNS for 'thought.org'. you are utterly unmailable.
> >>
> >> There is no IP address for the primary nameserver, 'ns1.thought.org'
> >> The secondary nameserver 'ns2.everydns.net'  times out on a query.
> >>
> >
> >
> > If I knew how to fix this I would.  The only IP that is
> > pingable is 209.180.213.209; this is "cd0" of my WAN on my
> > pfSense computer.  I changed ns1.thought.org to the prev IP
> > on my registrar and a few minutes ago edited my
> > master/thought.org.*files.   If this doesn't work in a few days,
> > let me know.
> >
> > I logged into my only outside account on a server in the
> > SouthEast, I  pinged ns1.thought.org, and it echoed the above
> > IP.
i''m using evo to be able to click on.  i have fewer ``Fail'' type
responses, but do not understand the failure messages.  Also, since it
has been 9.5 years since I read DNS AND BIND, the jargon  is lost.  What
does "glue" means? and how should I resolve?

It is time to  get this stuff arrow-straight, so hoping that someone
on-list can clue me in.


tx,


gary

http://www.dnscog.com/report/thought.org/1288928790
> > 
> >
> >
> >
> >
-- 
 Gary Kline  kl...@thought.org http://thought.org   Public Service Unix
  The 7.83a release of Jottings: http://jottings.thought.org
   http://journey.thought.org



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-04 Thread Gary Kline
On Thu, Nov 04, 2010 at 01:52:17AM -0400, Jon Radel wrote:
> On 11/4/10 1:29 AM, Polytropon wrote:
> >On Wed, 3 Nov 2010 21:51:04 -0500, Ryan Coleman  
> >wrote:
> >>He likely won't.  This was pointed out to him two months ago
> >>and nothing's been fixed.
> >Seems to be fine from here:
> >
> >% nslookup -type=any thought.org
> >Server: 192.168.100.1
> >Address:192.168.100.1#53
> >
> >Non-authoritative answer:
> >thought.org mail exchanger = 10 ethic.thought.org.
> >thought.org nameserver = ns2.everydns.net.
> >thought.org nameserver = ns1.thought.org.
> >
> >Authoritative answers can be found from:
> >
> >% host ethic.thought.org
> >ethic.thought.org has address 209.180.213.210
> >
> >% host ns1.thought.org
> >ns1.thought.org has address 209.180.213.210
> >
> >% host ns2.everydns.net
> >ns2.everydns.net has address 208.76.62.100
> >% ping -c 3 ns2.everydns.net
> >PING ns2.everydns.net (208.76.62.100): 56 data bytes
> >64 bytes from 208.76.62.100: icmp_seq=0 ttl=54 time=107.684 ms
> >64 bytes from 208.76.62.100: icmp_seq=1 ttl=54 time=107.073 ms
> >64 bytes from 208.76.62.100: icmp_seq=2 ttl=54 time=107.046 ms
> >
> >--- ns2.everydns.net ping statistics ---
> >3 packets transmitted, 3 packets received, 0.0% packet loss
> >round-trip min/avg/max/stddev = 107.046/107.268/107.684/0.295 ms
> >
> >Or am I misreading that?
> >
> >
> >
> You're overlooking the fact that ns2.everydns.net refuses to respond
> to queries about thought.org, though it is happy to respond to
> queries about everydns.net.  When half the servers for your zone
> refuse to answer, things work less than 100%.  On the other hand, I
> don't think things are completely broken.  Actually they're less
> broken than Gary's DNS frequently is; it gets discussed on a regular
> basis for a reason.
> 
> So is the last octet of ns1.thought.org's address 209 or 210?  ;-)
> 


209 as of midnight last.  I _may_ have things a bit closer
now.  I can ping ns1 from a server somewhere in SoCal, and 
nslookup finds stuff also.

(krap hit two fans simultaneously circa 29-30 Sept which was 
when I last got at this.  I forgot to update the Serial
number.)  --Ordinarrily, this would be an excuse  for not
getting the DNS files right; not considering.  Anyway, try 
ping and dig and nslookup... .

gary




> -- 
> 
> --Jon Radel
> j...@radel.com
> Consistency is the hobgoblin of little minds.
> 
> 


-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
The 7.90a release of Jottings: http://jottings.thought.org/index.php
An Open Letter to Stephen Hawking http://www.thought.org/#oL

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-04 Thread Bernt Hansson

2010-11-04 06:59, Gary Kline:

On Wed, Nov 03, 2010 at 08:10:07PM -0600, Robert Bonomi wrote:



Date: Tue, 2 Nov 2010 22:50:00 -0700
From: Gary Kline
Subject: Re: is there a utillity...?



*please* fix the DNS for 'thought.org'. you are utterly unmailable.

There is no IP address for the primary nameserver, 'ns1.thought.org'
The secondary nameserver 'ns2.everydns.net'  times out on a query.




If I knew how to fix this I would.  The only IP that is
pingable is 209.180.213.209; this is "cd0" of my WAN on my
pfSense computer.  I changed ns1.thought.org to the prev IP
on my registrar and a few minutes ago edited my
master/thought.org.*files.   If this doesn't work in a few days,
let me know.

I loggged into my only outside account on a server in the
SouthEast, I  pinged ns1.thought.org, and it echoed the above
IP.








% nslookup -type=any thought.org

Non-authoritative answer:
thought.org nameserver = ns1.thought.org
thought.org nameserver = ns2.everydns.net

Authoritative answers can be found from:
thought.org nameserver = ns1.thought.org
thought.org nameserver = ns2.everydns.net
ns2.everydns.netinternet address = 208.76.62.100



;<<>>  DiG 8.1<<>>  +deb +d2 thought.org @ns2.everydns.net
; (1 server found)
;; res_mkquery(0, thought.org, 1, 1)
;; res options: init debug recurs defnam dnsrch ?0x8000?
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;  thought.org, type = A, class = IN

;; Querying server (# 1) address = 208.76.62.100
;; timeout
;; Querying server (# 1) address = 208.76.62.100
;; timeout
;; Querying server (# 1) address = 208.76.62.100
;; timeout
;; Querying server (# 1) address = 208.76.62.100
;; timeout
;; res_send to server ns2.everydns.net  208.76.62.100: Operation timed out


;<<>>  DiG 8.1<<>>  +deb +d2 thought.org @ns1.thought.org
; Bad server: ns1.thought.org -- using default server and timer opts
;; res_mkquery(0, thought.org, 1, 1)
;; res options: init debug recurs defnam dnsrch ?0x8000?
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;  thought.org, type = A, class = IN


Have a look here
http://www.dnscog.com/report/thought.org/1285986283
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-03 Thread Gary Kline
On Thu, Nov 04, 2010 at 06:29:38AM +0100, Polytropon wrote:
> On Wed, 3 Nov 2010 21:51:04 -0500, Ryan Coleman  wrote:
> > He likely won't.  This was pointed out to him two months ago
> > and nothing's been fixed.
> 
> Seems to be fine from here:
> 
> % nslookup -type=any thought.org
> Server: 192.168.100.1
> Address:192.168.100.1#53
> 
> Non-authoritative answer:
> thought.org mail exchanger = 10 ethic.thought.org.
> thought.org nameserver = ns2.everydns.net.
> thought.org nameserver = ns1.thought.org.
> 
> Authoritative answers can be found from:
> 
> % host ethic.thought.org
> ethic.thought.org has address 209.180.213.210
> 
> % host ns1.thought.org
> ns1.thought.org has address 209.180.213.210
> 
> % host ns2.everydns.net
> ns2.everydns.net has address 208.76.62.100
> % ping -c 3 ns2.everydns.net
> PING ns2.everydns.net (208.76.62.100): 56 data bytes
> 64 bytes from 208.76.62.100: icmp_seq=0 ttl=54 time=107.684 ms
> 64 bytes from 208.76.62.100: icmp_seq=1 ttl=54 time=107.073 ms
> 64 bytes from 208.76.62.100: icmp_seq=2 ttl=54 time=107.046 ms
> 
> --- ns2.everydns.net ping statistics ---
> 3 packets transmitted, 3 packets received, 0.0% packet loss
> round-trip min/avg/max/stddev = 107.046/107.268/107.684/0.295 ms
> 
> Or am I misreading that?
> 

Or am I?

Once I found the `ping' worked on a rarely-used remote server, 
I cp'd Robert's nslookup line and got:


round-trip min/avg/max/stddev = 82.973/84.510/85.005/0.773 ms
vhost %  nslookup -type=any thought.org 
Server: 127.0.0.1
Address:127.0.0.1#53

Non-authoritative answer:
thought.org nameserver = ns1.thought.org.
thought.org nameserver = ns2.everydns.net.

Authoritative answers can be found from:
thought.org nameserver = ns1.thought.org.
thought.org nameserver = ns2.everydns.net.
ns1.thought.org internet address = 209.180.213.209
ns2.everydns.netinternet address = 208.76.62.100

vhost % 


What is left?


> 
> 
> -- 
> Polytropon
> Magdeburg, Germany
> Happy FreeBSD user since 4.0
> Andra moi ennepe, Mousa, ...
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
The 7.90a release of Jottings: http://jottings.thought.org/index.php
An Open Letter to Stephen Hawking http://www.thought.org/#oL

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-03 Thread Gary Kline

Seee below for typing from deadbbs.com.



On Wed, Nov 03, 2010 at 08:10:07PM -0600, Robert Bonomi wrote:
> 
> > Date: Tue, 2 Nov 2010 22:50:00 -0700
> > From: Gary Kline 
> > Subject: Re: is there a utillity...?
> >
> 
> *please* fix the DNS for 'thought.org'. you are utterly unmailable.
> 
> There is no IP address for the primary nameserver, 'ns1.thought.org' 
> The secondary nameserver 'ns2.everydns.net'  times out on a query.
> 
> % nslookup -type=any thought.org
> 
> Non-authoritative answer:
> thought.org   nameserver = ns1.thought.org
> thought.org   nameserver = ns2.everydns.net
> 
> Authoritative answers can be found from:
> thought.org   nameserver = ns1.thought.org
> thought.org   nameserver = ns2.everydns.net
> ns2.everydns.net  internet address = 208.76.62.100
> 
> 
> 
> ; <<>> DiG 8.1 <<>> +deb +d2 thought.org @ns2.everydns.net 
> ; (1 server found)
> ;; res_mkquery(0, thought.org, 1, 1)
> ;; res options: init debug recurs defnam dnsrch ?0x8000?
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;thought.org, type = A, class = IN
> 
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; res_send to server ns2.everydns.net  208.76.62.100: Operation timed out
> 
> 
> ; <<>> DiG 8.1 <<>> +deb +d2 thought.org @ns1.thought.org 
> ; Bad server: ns1.thought.org -- using default server and timer opts
> ;; res_mkquery(0, thought.org, 1, 1)
> ;; res options: init debug recurs defnam dnsrch ?0x8000?
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;thought.org, type = A, class = IN
> 



SO far, this works::


FreeBSD 7.0-RELEASE (vhost) #0: Sat Sep 13 04:51:19 PDT 2008
Wed Nov 3 22:50:57 PDT 2010
vhost % ping
usage: ping [-AaDdfnoQqRrv] [-c count] [-G sweepmaxsize] [-g
sweepminsize]
[-h sweepincrsize] [-i wait] [-l preload] [-M mask |
time] [-m ttl]
[-P policy] [-p pattern] [-S src_addr] [-s packetsize]
[-t timeout]
[-W waittime] [-z tos] host
   ping [-AaDdfLnoQqRrv] [-c count] [-I iface] [-i wait] [-l
preload]
[-M mask | time] [-m ttl] [-P policy] [-p pattern] [-S
src_addr]
[-s packetsize] [-T ttl] [-t timeout] [-W waittime]
[-z tos] mcast-group
vhost % ping ns1.thought.org
PING ns1.thought.org (209.180.213.209): 56 data bytes
64 bytes from 209.180.213.209: icmp_seq=0 ttl=55 time=84.971 ms
64 bytes from 209.180.213.209: icmp_seq=1 ttl=55 time=85.005 ms
64 bytes from 209.180.213.209: icmp_seq=2 ttl=55 time=84.827 ms
64 bytes from 209.180.213.209: icmp_seq=3 ttl=55 time=82.973 ms
64 bytes from 209.180.213.209: icmp_seq=4 ttl=55 time=84.772 ms
^C
--- ns1.thought.org ping statistics ---
5 packets transmitted, 5 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 82.973/84.510/85.005/0.773 ms
vhost %  nslookup -type=any thought.org 
Server: 127.0.0.1
Address:127.0.0.1#53

Non-authoritative answer:
thought.org nameserver = ns1.thought.org.
thought.org nameserver = ns2.everydns.net.

Authoritative answers can be found from:
thought.org nameserver = ns1.thought.org.
thought.org nameserver = ns2.everydns.net.
ns1.thought.org internet address = 209.180.213.209
ns2.everydns.netinternet address = 208.76.62.100

vhost % 


Everybody should see the name thing is a day or so.



-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
The 7.90a release of Jottings: http://jottings.thought.org/index.php
An Open Letter to Stephen Hawking http://www.thought.org/#oL
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-03 Thread Gary Kline
On Wed, Nov 03, 2010 at 08:10:07PM -0600, Robert Bonomi wrote:
> 
> > Date: Tue, 2 Nov 2010 22:50:00 -0700
> > From: Gary Kline 
> > Subject: Re: is there a utillity...?
> >
> 
> *please* fix the DNS for 'thought.org'. you are utterly unmailable.
> 
> There is no IP address for the primary nameserver, 'ns1.thought.org' 
> The secondary nameserver 'ns2.everydns.net'  times out on a query.
> 


If I knew how to fix this I would.  The only IP that is
pingable is 209.180.213.209; this is "cd0" of my WAN on my 
pfSense computer.  I changed ns1.thought.org to the prev IP
on my registrar and a few minutes ago edited my
master/thought.org.*files.   If this doesn't work in a few days,
let me know.  

I loggged into my only outside account on a server in the
SouthEast, I  pinged ns1.thought.org, and it echoed the above
IP.







> % nslookup -type=any thought.org
> 
> Non-authoritative answer:
> thought.org   nameserver = ns1.thought.org
> thought.org   nameserver = ns2.everydns.net
> 
> Authoritative answers can be found from:
> thought.org   nameserver = ns1.thought.org
> thought.org   nameserver = ns2.everydns.net
> ns2.everydns.net  internet address = 208.76.62.100
> 
> 
> 
> ; <<>> DiG 8.1 <<>> +deb +d2 thought.org @ns2.everydns.net 
> ; (1 server found)
> ;; res_mkquery(0, thought.org, 1, 1)
> ;; res options: init debug recurs defnam dnsrch ?0x8000?
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;thought.org, type = A, class = IN
> 
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; res_send to server ns2.everydns.net  208.76.62.100: Operation timed out
> 
> 
> ; <<>> DiG 8.1 <<>> +deb +d2 thought.org @ns1.thought.org 
> ; Bad server: ns1.thought.org -- using default server and timer opts
> ;; res_mkquery(0, thought.org, 1, 1)
> ;; res options: init debug recurs defnam dnsrch ?0x8000?
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;thought.org, type = A, class = IN
> 
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
The 7.90a release of Jottings: http://jottings.thought.org/index.php
An Open Letter to Stephen Hawking http://www.thought.org/#oL

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-03 Thread Jon Radel

On 11/4/10 1:29 AM, Polytropon wrote:

On Wed, 3 Nov 2010 21:51:04 -0500, Ryan Coleman  wrote:

He likely won't.  This was pointed out to him two months ago
and nothing's been fixed.

Seems to be fine from here:

% nslookup -type=any thought.org
Server: 192.168.100.1
Address:192.168.100.1#53

Non-authoritative answer:
thought.org mail exchanger = 10 ethic.thought.org.
thought.org nameserver = ns2.everydns.net.
thought.org nameserver = ns1.thought.org.

Authoritative answers can be found from:

% host ethic.thought.org
ethic.thought.org has address 209.180.213.210

% host ns1.thought.org
ns1.thought.org has address 209.180.213.210

% host ns2.everydns.net
ns2.everydns.net has address 208.76.62.100
% ping -c 3 ns2.everydns.net
PING ns2.everydns.net (208.76.62.100): 56 data bytes
64 bytes from 208.76.62.100: icmp_seq=0 ttl=54 time=107.684 ms
64 bytes from 208.76.62.100: icmp_seq=1 ttl=54 time=107.073 ms
64 bytes from 208.76.62.100: icmp_seq=2 ttl=54 time=107.046 ms

--- ns2.everydns.net ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 107.046/107.268/107.684/0.295 ms

Or am I misreading that?



You're overlooking the fact that ns2.everydns.net refuses to respond to 
queries about thought.org, though it is happy to respond to queries 
about everydns.net.  When half the servers for your zone refuse to 
answer, things work less than 100%.  On the other hand, I don't think 
things are completely broken.  Actually they're less broken than Gary's 
DNS frequently is; it gets discussed on a regular basis for a reason.


So is the last octet of ns1.thought.org's address 209 or 210?  ;-)

--

--Jon Radel
j...@radel.com
Consistency is the hobgoblin of little minds.




Re: ATTN GARY KLINE

2010-11-03 Thread Polytropon
On Wed, 3 Nov 2010 21:51:04 -0500, Ryan Coleman  wrote:
> He likely won't.  This was pointed out to him two months ago
> and nothing's been fixed.

Seems to be fine from here:

% nslookup -type=any thought.org
Server: 192.168.100.1
Address:192.168.100.1#53

Non-authoritative answer:
thought.org mail exchanger = 10 ethic.thought.org.
thought.org nameserver = ns2.everydns.net.
thought.org nameserver = ns1.thought.org.

Authoritative answers can be found from:

% host ethic.thought.org
ethic.thought.org has address 209.180.213.210

% host ns1.thought.org
ns1.thought.org has address 209.180.213.210

% host ns2.everydns.net
ns2.everydns.net has address 208.76.62.100
% ping -c 3 ns2.everydns.net
PING ns2.everydns.net (208.76.62.100): 56 data bytes
64 bytes from 208.76.62.100: icmp_seq=0 ttl=54 time=107.684 ms
64 bytes from 208.76.62.100: icmp_seq=1 ttl=54 time=107.073 ms
64 bytes from 208.76.62.100: icmp_seq=2 ttl=54 time=107.046 ms

--- ns2.everydns.net ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 107.046/107.268/107.684/0.295 ms

Or am I misreading that?



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN GARY KLINE

2010-11-03 Thread Ryan Coleman
He likely won't.  This was pointed out to him two months ago and nothing's been 
fixed.


On Nov 3, 2010, at 9:10 PM, Robert Bonomi wrote:

> 
>> Date: Tue, 2 Nov 2010 22:50:00 -0700
>> From: Gary Kline 
>> Subject: Re: is there a utillity...?
>> 
> 
> *please* fix the DNS for 'thought.org'. you are utterly unmailable.
> 
> There is no IP address for the primary nameserver, 'ns1.thought.org' 
> The secondary nameserver 'ns2.everydns.net'  times out on a query.
> 
> % nslookup -type=any thought.org
> 
> Non-authoritative answer:
> thought.org   nameserver = ns1.thought.org
> thought.org   nameserver = ns2.everydns.net
> 
> Authoritative answers can be found from:
> thought.org   nameserver = ns1.thought.org
> thought.org   nameserver = ns2.everydns.net
> ns2.everydns.net  internet address = 208.76.62.100
> 
> 
> 
> ; <<>> DiG 8.1 <<>> +deb +d2 thought.org @ns2.everydns.net 
> ; (1 server found)
> ;; res_mkquery(0, thought.org, 1, 1)
> ;; res options: init debug recurs defnam dnsrch ?0x8000?
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;thought.org, type = A, class = IN
> 
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; Querying server (# 1) address = 208.76.62.100
> ;; timeout
> ;; res_send to server ns2.everydns.net  208.76.62.100: Operation timed out
> 
> 
> ; <<>> DiG 8.1 <<>> +deb +d2 thought.org @ns1.thought.org 
> ; Bad server: ns1.thought.org -- using default server and timer opts
> ;; res_mkquery(0, thought.org, 1, 1)
> ;; res options: init debug recurs defnam dnsrch ?0x8000?
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;thought.org, type = A, class = IN
> 
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ATTN: Gary Kline

2005-09-27 Thread Dmitry Mityugov
On 9/27/05, Bill Schoolcraft <[EMAIL PROTECTED]> wrote:
> At Mon, 26 Sep 2005 it looks like Kris Kennaway composed:
>
> > You are blocking mail from me again:
> >
> > <[EMAIL PROTECTED]>: host ns1.thought.org[216.231.43.140] said: 550 5.0.0
> >No SPAM (in reply to MAIL FROM command)
> >
> > This has been an issue in the past..unless you can get it under
> > control I'll just stop bothering to read your emails, in case I'm
> > tempted to try to help you again.
> >
> > Thanks,
> > Kris
>
> Hey Kris,
>
> I feel for ya...
>
> I'm in the position where I can receive mail from the FreeBSD
> mailing list but can't post to it.

Your post contradicts to what you're saying.

--
Dmitry Mityugov, St. Petersburg, Russia
I ignore all messages with confidentiality statements

"We live less by imagination than despite it" - Rockwell Kent, "N by E"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ATTN: Gary Kline

2005-09-26 Thread Kris Kennaway
On Mon, Sep 26, 2005 at 03:50:30PM -0700, Bill Schoolcraft wrote:
> At Mon, 26 Sep 2005 it looks like Kris Kennaway composed:
> 
> >You are blocking mail from me again:
> >
> ><[EMAIL PROTECTED]>: host ns1.thought.org[216.231.43.140] said: 550 
> >5.0.0
> >   No SPAM (in reply to MAIL FROM command)
> >
> >This has been an issue in the past..unless you can get it under
> >control I'll just stop bothering to read your emails, in case I'm
> >tempted to try to help you again.
> >
> >Thanks,
> >Kris
> 
> Hey Kris,
> 
> I feel for ya...
> 
> I'm in the position where I can receive mail from the FreeBSD
> mailing list but can't post to it.

Talk to postmaster..he's very responsive.

Kris


pgpBZupXBauCV.pgp
Description: PGP signature


Re: ATTN: Gary Kline

2005-09-26 Thread Bill Schoolcraft

At Mon, 26 Sep 2005 it looks like Kris Kennaway composed:


You are blocking mail from me again:

<[EMAIL PROTECTED]>: host ns1.thought.org[216.231.43.140] said: 550 5.0.0
   No SPAM (in reply to MAIL FROM command)

This has been an issue in the past..unless you can get it under
control I'll just stop bothering to read your emails, in case I'm
tempted to try to help you again.

Thanks,
Kris


Hey Kris,

I feel for ya...

I'm in the position where I can receive mail from the FreeBSD
mailing list but can't post to it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"