RE: forward first: iterative or recursive query

2011-05-05 Thread iharrathi.ext
Hi, i have a server called server1 that is acting as a cache server( recursion none). And i forward the zone example.com to server2 which has recursion enabled and master on some zone like example.com. this is the forwarding zone on server1: zone example.com { type forward;

Re: how to check if a slave zone is expired

2011-05-05 Thread John Bond
On 5/4/11 10:22 AM, hugo hugoo wrote: So..no way to check that a zone is expired? Hello Hugo, I recently wrote a small script which mails me about any zones that is due to expire within the next 24 hours. This works by using the last change time of the file on disk and the SOA expiry time.

Re: how to check if a slave zone is expired

2011-05-05 Thread Chris Thompson
On May 4 2011, Doug Barton wrote: On 05/04/2011 01:22, hugo hugoo wrote: So..no way to check that a zone is expired? You're asking the wrong question. The correct question is, How can I make sure that a zone is up to date on all of the slaves? You do that by querying the SOA record for the

Re: bind-9.8 for openSUSE / SLES

2011-05-05 Thread Uwe Gansert
on Wednesday 04 May 2011 Flex Banana wrote: Anyone have the link or the software for obtaining (if exist) the rpm x86_64 compiled for openSUSE-11.4 / SLES-11 of bind-9.8.0 ? The last release offered by the community is 9.7.3 as of this writing. I have submitted a 9.8.0 You can download it

Problems in views in a zone transfer

2011-05-05 Thread Luis Silva
Hi all, I'm using bind as frontend solution and I have another server as backend and I'm implementing zone transfer between the two (bind is the slave and my server is the master). The problem is that I want to use dns views. Bind supports it but my backend server is currently not supporting. I'm

Re: forward first: iterative or recursive query

2011-05-05 Thread Chris Buxton
If recursion is disabled, forwarding doesn't happen. I think you've confused some terms and configurations. Don't use forwarding from a recursive server to a non-recursive server. Use a stub zone instead, if you can't rely on the recursion process to find the correct server to query. If

Re: how to check if a slave zone is expired

2011-05-05 Thread Doug Barton
On 05/05/2011 04:35, Chris Thompson wrote: On May 4 2011, Doug Barton wrote: On 05/04/2011 01:22, hugo hugoo wrote: So..no way to check that a zone is expired? You're asking the wrong question. The correct question is, How can I make sure that a zone is up to date on all of the slaves? You

Re: named crashed (mem.c:1099: INSIST(ctx-stats[i].gets == 0U) failed)

2011-05-05 Thread Fr34k
Hello All, Thanks Evan. Should the Community expect a BIND 9.7.3 train update/maintenance release which, among other things, addresses this mem.c issue? If so, any ETA? It is not my intent to sound pushy. Let me explain. We were in the process of rolling 9.7.3 out but we stopped figuring a

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread Torinthiel
On 05/05/11 22:47, dchilton+b...@bestmail.us wrote: missed it by THAT much thx! relocating to bind-users. On Thu, 05 May 2011 14:37 -0500, /dev/rob0 r...@gmx.co.uk wrote: FWIW I think you hit the wrong list. Did you mean bind-users@isc? On Thu, May 05, 2011 at 12:25:27PM -0700,

DNS BIND Security Advisory: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones

2011-05-05 Thread Larissa Shapiro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Note: https://www.isc.org/CVE-2011-1907 is the authoritative source for this Security Advisory. Please check the source for any updates. Summary: When a name server is configured with a response policy zone (RPZ), queries for type RRSIG can trigger

Re: Error when trying to make secondary nameserver from copying primary nameserver

2011-05-05 Thread Eivind Olsen
Samad Agha wrote: 1- found out which version of bind dsn1 is running and installed exactly that version on dns2: [root@dns1 named]# named -v BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 That version is quite old. In general, just because server 1 has an old BIND isn't a reason to choose an old BIND

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread Mark Andrews
In message 1304628473.25384.1448737...@webmail.messagingengine.com, dchilton+ b...@bestmail.us writes: missed it by THAT much thx! relocating to bind-users. On Thu, 05 May 2011 14:37 -0500, /dev/rob0 r...@gmx.co.uk wrote: FWIW I think you hit the wrong list. Did you mean

Re: DNSSEC submit of DLV vs DNSKEY records?

2011-05-05 Thread
On Fri, 06 May 2011 12:45 +1000, Mark Andrews ma...@isc.org wrote: [I hope someone will correct me if I'm wrong.] My understanding: if the parent is signed, that is the only way a child zone can be validated, unless of course using trusted-keys. DLV is only done when the parent

Re: Problems in views in a zone transfer

2011-05-05 Thread Jeff Pang
2011/5/6 Luis Silva luisfilsi...@gmail.com: Hi all, I'm using bind as frontend solution and I have another server as backend and I'm implementing zone transfer between the two (bind is the slave and my server is the master). The problem is that I want to use dns views. Bind supports it but