Re: Breaking up RFC 1918 reverse space

2011-07-26 Thread Peter Laws
On 07/23/11 22:08, Karl Auer wrote: Maybe this is an overly naive approach, but can't you set up one zone for 10.0.0.0/8 and delegate as necessary from that single zone file? Anything that you don't have an answer for will get NXDOMAIN, which is presumably what you want. So: zone

DNS Caching Issue

2011-07-26 Thread Sathyan Arjunan (sarjunan) [CONTRACTOR]
Recent days, I am facing frequent caching issues with my DNS servers which are responsible for recursive lookup to external queries. As a temporary solution, we used to refresh the named daemon to clear the cache. To isolate this issue we upgraded the BIND to BIND 9.7.3 but even after the upgrade

Re: Forward only zones.

2011-07-26 Thread Vbvbrj
On 25.07.2011 10:15, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND but that would be useless server. I

Views and no answers ...

2011-07-26 Thread Thomas Schweikle
Hi! I have set up a view for one site. It is bound to change answers as necessary for different IP-ranges. It works as far as I could see. But with one ip-range there is a problem ... I can query internal addresses: !user@kvm2~# host intweb.example.de !web.example.de has address 192.168.180.46

Re: Forward only zones.

2011-07-26 Thread Mark Andrews
In message 4e2de4bb.6050...@chrysler.com, Kevin Darcy writes: On 7/24/2011 2:15 AM, Vbvbrj wrote: options { allow-transfer { none; }; recursion yes; forward first; forwarders { a.b.c.d; }; // Forward to providers dns. }; zone my_domain.com IN { type forward; forward

Re: DNS Caching Issue

2011-07-26 Thread Kevin Darcy
On 7/25/2011 10:22 AM, Sathyan Arjunan (sarjunan) [CONTRACTOR] wrote: Recent days, I am facing frequent caching issues with my DNS servers which are responsible for recursive lookup to external queries. As a temporary solution, we used to refresh the named daemon to clear the cache. To

Re: howto know if a query was delegated to cache

2011-07-26 Thread Mark Andrews
To answer the original question. There isn't a flag for the query or the client as answers are made up of data from multiple sources. 'is_zone' is set to ISC_TRUE or ISC_FALSE depend apon whether the current db is a zone data base or not. aa is only applicable to the first rrset in a

Re: DNS Caching Issue

2011-07-26 Thread Lyle Giese
On 07/25/11 09:22, Sathyan Arjunan (sarjunan) [CONTRACTOR] wrote: Recent days, I am facing frequent caching issues with my DNS servers which are responsible for recursive lookup to external queries. As a temporary solution, we used to refresh the named daemon to clear the cache. To isolate this

Re: DNS Caching Issue

2011-07-26 Thread Mark Andrews
The zone is badly configured so that all queries end up going to a dead server after a sucessful query. nameserver1.gpi-g.com says the NS RRset is just nameserver2.gpi-g.com. nameserver2.gpi-g.com returns SERVFAIL. Both nameservers should be listed in the zone rather than just one and the

Re: stub zone

2011-07-26 Thread Mark Andrews
In message 1311623708.59385.yahoomail...@web44803.mail.sp1.yahoo.com, ju wusuo writes: Would like to use the BIND stub zone function, however, heard that ISC cons= iders stopping support to stub zone in the future, is that true?=A0 No. There are no plans to remove support for stub zones.

Re: howto know if a query was delegated to cache

2011-07-26 Thread harish badrinath
Whatever you're trying to accomplish, it's would not appear to be consistent with the founding RFCs for DNS: I am not trying to modify when/how/which upstream name server is contacted, i am not invalidating cached data at my will. I am not trying to modify requests/responses. Basically i am

Re: stub zone

2011-07-26 Thread Feng He
On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo juwu...@yahoo.com wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support to stub zone in the future, is that true? ___ Hi, what's the use of stub zone? I

Re: stub zone

2011-07-26 Thread ju wusuo
Thanks Mark .. I think that probably is the misunderstanding of the delegation usage part. From: Mark Andrews ma...@isc.org To: ju wusuo juwu...@yahoo.com Cc: bind-users@lists.isc.org bind-us...@isc.org Sent: Monday, July 25, 2011 9:57 PM Subject: Re: stub zone

Re: Breaking up RFC 1918 reverse space

2011-07-26 Thread Mark Andrews
Just delegate the /16's that make up the /10's. I don't understand why people want to make this more complicated than it needs to be. Similarly of /17-/23 you just delegate the /24's. Using CNAMES only make sense for /25-/32. Mark In message 4e2de5f0.9050...@ou.edu, Peter Laws writes: On

Re: stub zone

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 10:33 PM, Feng He wrote: On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo juwu...@yahoo.com wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support to stub zone in the future, is that true?

Strange SERVFAIL issue

2011-07-26 Thread Stuart Gall
Hello, I have a caching nameserver setup it has been working for ages. Today I have a problem resolving a particular domain and I just cant see why there is a problem. (BIND 9.5.0-P2) It appears that ONLY I have a problem resolving this single domain ! [root@felix etc]# dig mx

Re: stub zone

2011-07-26 Thread ju wusuo
need to use it to send out iterative queries, instead of recursive ones (if using forwarding). From: Feng He lt;short...@gmail.comgt; To: ju wusuo lt;juwu...@yahoo.comgt; Cc: quot;bind-users@lists.isc.orgquot; lt;bind-users@lists.isc.orggt; Sent: Tuesday, July

Re: DNS Caching Issue

2011-07-26 Thread TCPWave Customer Care
lame-ttl is an option in named.conf which defines the number of seconds to cache lame delegations or lame servers i.e servers which are marked as authoitative but do not respond as authoritative. Set that option to 0 so that you will never cache a bad delegation. max-ncache-ttl sets the maximum

Re: Forward only zones.

2011-07-26 Thread Matus UHLAR - fantomas
On 24.07.2011 18:40, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND but that would be useless server. On

Re: stub zone

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 12:55 PM, ju wusuo wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support to stub zone in the future, is that true? I've heard that rumor from my customers, too. But I haven't heard anything from ISC about not supporting

Re: stub zone

2011-07-26 Thread Cathy Almond
On 25/07/11 20:55, ju wusuo wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support to stub zone in the future, is that true? I think we may have confused some people in the past about support for this because of what's written in the ARM about

Re: howto know if a query was delegated to cache

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 5:33 AM, Feng He wrote: There is a rr flag in the response which indicates the answer is not from a cache. There is no 'rr' flag. Perhaps you mean one of the following: - 'aa' means that the server queried is authoritative for the answer. Not applicable to the OP's

Re: Forward only zones.

2011-07-26 Thread Vbvbrj
On 26.07.2011 00:48, Kevin Darcy wrote: Correct. That's the distinction which is typically made between a DNS *forwarder* (which caches) and a DNS *proxy* (which doesn't). As far as I know, BIND cannot be configured to be a DNS proxy. But I don't want BIND as a proxy. ) Answers from its

Re: Forward only zones.

2011-07-26 Thread harish badrinath
On Mon, Jul 25, 2011 at 7:53 PM, Vbvbrj vbv...@gmail.com wrote: I just can't for now move active directory's dns database to BIND. You could use something much simpler like dnsmasq (http://thekelleys.org.uk/dnsmasq/doc.html). Setting it up as a DNS forwarder is a breeze, while you migrate DNS

Re: Breaking up RFC 1918 reverse space

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 2:53 PM, Peter Laws wrote: On 07/23/11 22:08, Karl Auer wrote: Maybe this is an overly naive approach, but can't you set up one zone for 10.0.0.0/8 and delegate as necessary from that single zone file? Anything that you don't have an answer for will get NXDOMAIN,

Re: Forward only zones.

2011-07-26 Thread Peter Andreev
2011/7/25 Vbvbrj vbv...@gmail.com: On 25.07.2011 10:15, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND

Re: howto know if a query was delegated to cache

2011-07-26 Thread harish badrinath
Hello, I have posted a patch at https://lists.isc.org/pipermail/bind-workers/2011-July/003061.html. It might be a hack but it does the job and passed some simple tests that i did to verify the functionality that i wanted. The patch is against BIND 9.7.1-P2 Regards, Harish

Re: stub zone

2011-07-26 Thread Feng He
On Wed, Jul 27, 2011 at 8:51 AM, Chris Buxton chris.p.bux...@gmail.com wrote: On Jul 25, 2011, at 10:33 PM, Feng He wrote: On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo juwu...@yahoo.com wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support to

Re: DNS update on host down

2011-07-26 Thread Feng He
I did the same stuff using a script. When the host is down, run dynamic update to modify the records. Some BIND based GSLB such as F5 BIG-IP GTM has this feature. Regards. On Tue, Jul 26, 2011 at 10:23 PM, Paul Reilly parei...@tcd.ie wrote: Is there a simple utility, which can ICMP ping or HTTP