Re: IPAM advantages (was Re: MySQL BIND SDB)

2010-11-17 Thread Gary Wallis
Chris Buxton wrote: On Nov 16, 2010, at 12:44 PM, Gary Wallis wrote: IPAM is an Infloblox proprietary system that Cricket Liu is involved with. No. IPAM = IP Address Management. It is not a product, but rather a product category. I believe the term was coined by Lucent, or whoever owned QIP

Re: IPAM advantages (was Re: MySQL BIND SDB)

2010-11-17 Thread Alan Clegg
On 11/17/2010 7:15 AM, Gary Wallis wrote: [.. Discussion of non-open-source IPAM solutions ..] (If we use FOSS BIND why should we support anti FOSS businesses like many mentioned above?) Several of the businesses listed in the original post are BIND Forum members and are supporting ISC in

Is it Possible to Log nxdomain Responses?

2010-11-17 Thread Martin McCormick
We are chasing down some problems in which clients are trying to resolve lookups to a domain related to Microsoft Active Directory zones. We were able to determine that clients were querying this AD zone when it was thought they weren't needing to do so. We enabled querylogging for a

Re: Is it Possible to Log nxdomain Responses?

2010-11-17 Thread Phil Mayers
On 17/11/10 13:48, Martin McCormick wrote: We are chasing down some problems in which clients are trying to resolve lookups to a domain related to Microsoft Active Directory zones. We were able to determine that clients were querying this AD zone when it was thought they weren't needing to do

Re: Is it Possible to Log nxdomain Responses?

2010-11-17 Thread Stephane Bortzmeyer
On Wed, Nov 17, 2010 at 07:48:55AM -0600, Martin McCormick mar...@dc.cis.okstate.edu wrote a message of 22 lines which said: It would be nice to log each nxdomain for a while so we can verify that the new deligated zone we are about to install fixed the problem. May be with dnscap

Nslookup not working for external domain

2010-11-17 Thread Moore, Mark A.
We are running into a issue where one of our slave servers isn't resolving non-local domain names. For the two domains hosted on this server, we can resolve any entry. However, if we try to do an nslookup to cnn, google, yahoo, etc. it fails. We have turned off iptables and verified internet

Spaces in keys

2010-11-17 Thread Thomas Schulz
When I copied the key for root from http://www.isc.org/community/blog/201007/using-root-dnssec-key-bind-9-resolvers I ended up with spaces in the key. I assumed that they should not be there and removed them. I since noticed that the key in /etc/bind.keys supplied with the bind distribution has

Re: Spaces in keys

2010-11-17 Thread Hugo Salgado
On 11/17/2010 05:01 PM, Thomas Schulz wrote: When I copied the key for root from http://www.isc.org/community/blog/201007/using-root-dnssec-key-bind-9-resolvers I ended up with spaces in the key. I assumed that they should not be there and removed them. I since noticed that the key in

Re: Nslookup not working for external domain

2010-11-17 Thread Barry Margolin
In article mailman.797.1290017599.555.bind-us...@lists.isc.org, Moore, Mark A. mmo...@osmre.gov wrote: We are running into a issue where one of our slave servers isn't resolving non-local domain names. For the two domains hosted on this server, we can resolve any entry. However, if we try

Re: High named CPU every 10 minutes?

2010-11-17 Thread Dave Sparro
On 11/17/2010 2:26 PM, blrmaani wrote: I see a peculiar behavior on my DNS server. The named CPU reaches 90% + every 10 minutes and my monitoring software keeps paging me. I have a DNS host running FreeBSD 7.x, running BIND 9.4.x on a 2-CPU machine with 4GB RAM. It is a recursive DNS server.