Re: T_ANY

2010-03-20 Thread Florian Weimer
* Glenn English: Hi. This is the qmail-send program at yahoo.com. Both servers are Debian lenny, 'named -v' says BIND 9.5.1-P3, and bind's config check says it's OK. But it has nothing to do with any of that, I think, because the query works from inside. Have you compiled qmail yourself?

Re: T_ANY

2010-03-20 Thread Glenn English
On Mar 20, 2010, at 10:12 AM, Florian Weimer wrote: Have you compiled qmail yourself? Thanks, Florian, but it's fixed. The problem was that my PIX firewall's IDS blocks T_ANY queries by default, and Yahoo's qmail does T_ANY queries. I turned the block off in the PIX. I'm told that qmail

Re: T_ANY

2010-03-20 Thread Tony Finch
On Sat, 20 Mar 2010, Glenn English wrote: Just why qmail reports a T_ANY failure as a CNAME failure, I also don't know. This is a bug in qmail. It tries to canonicalize domains in the SMTP envelope of outgoing messages. It originally did this by performing CNAME queries on each domain, but

Re: dnssec signing tools

2010-03-20 Thread groups
I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a complete rebuild of a Master DNS server running 9.6.1.P3. (will

Re: dnssec signing tools

2010-03-20 Thread Gary Wallis
groups wrote: I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a complete rebuild of a Master DNS server running

Re: how to ignore external queries?

2010-03-20 Thread Leonardo Rodrigues
Em 19/03/2010 19:43, ic.nssip escreveu: and the results came up with a statement that External Queries are REJECTED and It would be better for it to ignore external queries. _Question is... How can I IGNORE External Queries instead of Rejecting them?_ firewall them !!! The better would

Re: dnssec signing tools

2010-03-20 Thread Kevin Oberman
Date: Sat, 20 Mar 2010 16:28:59 -0500 From: groups gro...@obsd.us Sender: bind-users-bounces+oberman=es@lists.isc.org I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles

Re: dnssec signing tools

2010-03-20 Thread groups
Gary Wallis wrote, On 03/20/2010 04:52 PM: groups wrote: I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a

PTR format question

2010-03-20 Thread groups
In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4 Current PTR in this format: (1 tab between entries) $ORIGIN 58.172.in-addr.arpa. $ORIGIN 0.58.172.in-addr.arpa. 11PTRnat-172-58-0-11.example.com. 12PTRnat-172-58-0-12.example.com. ...

Re: dnssec signing tools

2010-03-20 Thread charles
Kevin Oberman wrote, On 03/20/2010 05:48 PM: Date: Sat, 20 Mar 2010 16:28:59 -0500 From: groups gro...@obsd.us Sender: bind-users-bounces+oberman=es@lists.isc.org I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in

Re: PTR format question

2010-03-20 Thread Alan Clegg
groups wrote: In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4 Current PTR in this format: (1 tab between entries) $ORIGIN 58.172.in-addr.arpa. $ORIGIN 0.58.172.in-addr.arpa. 11PTRnat-172-58-0-11.example.com. 12PTR

BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread michael peters
I've been reading documentation, searching the archives, searched Google for the answer, but have found nothing that solves the problem. I have an Ubuntu 9.10 system with BIND 9.6.1 installed for my internal DNS system. External forward and reverse work fine, Internal forward works fine but it

Re: PTR format question

2010-03-20 Thread Doug Barton
First off, please don't grab an unrelated message and reply to it when starting a new thread. Please actually post a new message. In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4 Current PTR in this format: (1 tab between entries) $ORIGIN

Re: BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread Doug Barton
On 03/20/10 16:46, michael peters wrote: I've been reading documentation, searching the archives, searched Google for the answer, but have found nothing that solves the problem. I have an Ubuntu 9.10 system with BIND 9.6.1 installed for my internal DNS system. You'll want to update to at

Re: PTR format question

2010-03-20 Thread groups
groups wrote: In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4 Current PTR in this format: (1 tab between entries) $ORIGIN 58.172.in-addr.arpa. $ORIGIN 0.58.172.in-addr.arpa. 11PTRnat-172-58-0-11.example.com. 12PTR

Re: PTR format question

2010-03-20 Thread groups
First off, please don't grab an unrelated message and reply to it when starting a new thread. Please actually post a new message. Doug.. I grabbed the wrong thread.. Actually double posted too.. :-/ In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4

Re: BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread michael peters
On Sat, Mar 20, 2010 at 7:11 PM, michael peters mdpeter...@gmail.comwrote: Mar 20 19:07:37 catapult named[29579]: starting BIND 9.6.1-P1 -u bind Mar 20 19:07:37 catapult named[29579]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bi nd'

Re: BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread Doug Barton
On 03/20/10 17:11, michael peters wrote: zone 0.253.150.10.in-addr.arpa in { type master; file /etc/bind/10.150.253.0.rev; }; zone 0.0.16.172.in-addr.arpa in { type master; file /etc/bind/172.16.0.0.rev; }; This is your problem, you're not

Re: T_ANY

2010-03-20 Thread Mark Andrews
In message alpine.lsu.2.00.1003202112330.2...@hermes-2.csi.cam.ac.uk, Tony Fi nch writes: On Sat, 20 Mar 2010, Glenn English wrote: Just why qmail reports a T_ANY failure as a CNAME failure, I also don't know. This is a bug in qmail. It tries to canonicalize domains in the SMTP