Re: bind 9.4 acache crashes

On 6/4/2009 9:23 μμ, JINMEI Tatuya / 神明達哉 wrote: At Fri, 03 Apr 2009 18:38:01 +0300, Sotiris Tsimbonis tsimbo...@forthnet.gr wrote: Anyone else seen crashes like these? FWIW, I've never seen any of these. Solaris 10, Bind 9.4.3b2 Logfile: 10-Mar-2009 09:14:19.460 general:

Re: BIND and Solaris rand()

On 04/06/09 16:06, Chris Thompson wrote: It turns out that rand(3c) in even recent Solaris versions returns values in the range 0..32767 only. I suppose this is part of Sun's rather extreme paranoia about backwards compatibility with programs written before the flood. rand(3C) - simple

Re: ip forwarding DNS 9.6.0

I started reading up on Kirk's suggestions of the allow-*** settings. In the global options level I put options { directory /etc/dns; allow-query-cache { any; }; allow-query { any; }; auth-nxdomain yes; }; and that definitely worked. By no means do I

Notify not working with latest Bind

I'm running the latest version of Bind on Fedora 10 32-bit systems in master-slave setup with notify on. Apparently when nsupdates happen, the notify doesn't get sent and transfers don't happen. The slave syncs with master only at regular refresh intervals. This seems like a regression from the

Necessity of DNSSEC Lookaside Validation(DLV)

Hi, We have deployed DNS on RHEL 5 Update 1. Below are feature of our DNS. 1. Implemented OS Security Best Practice ( e.g. Enable MD5 and shadow passwords, Root Login Console Restricted, Configure SSH as an alternative of Telnet e.t.c.). 2. Configured Openssl Version 0.9.8j. 3. Configured

Trouble configuring forwarders for reverse zones.

First of, apologies for any misuse of terms: it does keep tying me it knots this here DNS business. We're a small-ish educational charity and have the following setup. There are two subnets, 10.5.0.0/16 10.6.0.0/16 each with a Windows 2003 server running an MS nameserver. They handle all

Re: nameserver not responding (servfail)

At Tue, 7 Apr 2009 13:47:06 +0800, David Cake d...@difference.com.au wrote: It loads all domains fine on startup, and sends and receives notifies, but any attempts to lookup domains from the server itself seem to fail, returning servfail. Could you be more specific about any

Re: rdataset.c:652: REQUIRE(dbp != ((void *)0) *dbp == ((void *)0)) failed

At Tue, 07 Apr 2009 07:54:38 +0100, Howard Wilkinson how...@cohtech.com wrote: We have had a failure of one of our BIND installations this morning. The failure happened at 01:51:45 BST on a machine that was effectively idle at the time. The previous messages logged by 'named' were 30

Re: Necessity of DNSSEC Lookaside Validation(DLV)

On Apr 7, 2009, at 9:43 AM, Chandan Laskar wrote: Hi, We have deployed DNS on RHEL 5 Update 1. Below are feature of our DNS. 1. Implemented OS Security Best Practice ( e.g. Enable MD5 and shadow passwords, Root Login Console Restricted, Configure SSH as an alternative of Telnet

Re: rdataset.c:652: REQUIRE(dbp != ((void *)0) *dbp == ((void *)0)) failed

JINMEI Tatuya / 神明達哉 wrote: At Tue, 07 Apr 2009 07:54:38 +0100, Howard Wilkinson how...@cohtech.com wrote: We have had a failure of one of our BIND installations this morning. The failure happened at 01:51:45 BST on a machine that was effectively idle at the time. The previous messages

Re: Unreachable IP in allow transfer

At Tue, 07 Apr 2009 12:34:46 -0400, Barry Margolin bar...@alum.mit.edu wrote: This look more like the result of masters { 123.123.123.123;}. If a slave can't connect to the master, it will time out when it tries to perform a zone transfer. I'm not sure why this would cause slow response

Strange DNS Resolution Issues

Hi all, A few weeks ago, two of several internal DNS servers were suddenly unable to resolve some external sites (eg microsoft.com, yahoo.com), while all internal and other external sites (eg google.com) were resolving fine. Since we couldn't pinpoint the cause, the problem went on for about 5

Re: Strange DNS Resolution Issues

You should try a 'dig microsoft.com +trace' and see where the problem resides. Pablo Lionel Arturi Maipú 464 - 1° B - 1006 Capital Federal Ciudad Autónoma de Buenos Aires +5411 5218 4829 part...@bairesweb.com - Original Message - From: Revital Gorsht To: bind-users@lists.isc.org

Using TCP for checking

I'm involved in the CO.ZA Registry. In the process of registering a domain name in the co.za zone - we do a bunch of DNS checks using 'dig'. for each nameserver, a) check that the zone exists (fetch the SOA), b) fetch the NS RRSet count and compare entries. c) if Nameserver inside the

Re: Using TCP for checking

My one caution on this would be you may run into false negatives with TCP if people have misconfigured firewalls. It's surprising the number of people out there that believe TCP is only for xfers. -- -Ben Croswell On Tue, Apr 7, 2009 at 3:17 PM, Mark Elkins m...@posix.co.za wrote: I'm

Re: Windows servers triying to update my zone

I'm not clear what you're trying to achieve her but if you don't want the servers to update the zones you're fine as it is. You may want to look at the hosts that is trying to make updates and make changes on those accordingly. If you do want them to be able to update just add allow-update { ip;

Re: Round robin load distribution among servers does not work properly

In message 96c8e9660904071112p557840a4kfd85120d7c275...@mail.gmail.com, Mallappa Pallakke writes: Hi Mark/Kevin, I did the changes you suggested and it worked fine. Thanks a lot for all your help. Regarding round-robin load sharing instead of random, I have planned to

Regexp to match RR's

Hi all, I got some time over so I decide to hack a bit on a DNS management tool for my home-server. I'm curious as to wether someone knows of a list of regexps that can be used to match RR's. Thx /Jonathan ___ bind-users mailing list