Problem resolving one particular domain

2011-07-27 Thread Danilo Godec
Hi, I'm running three DNS servers (1 master, 2 slaves) running bind 9.7.3, hosting about 150 domains, while also providing DNS service for my network. Recently a customer complained that they cannot send an email (they use my SMTP server) to a specific domain 'rabobank.com' - Postfix logged

Re: Forward only zones.

2011-07-27 Thread Matus UHLAR - fantomas
On 26.07.2011 00:48, Kevin Darcy wrote: Correct. That's the distinction which is typically made between a DNS *forwarder* (which caches) and a DNS *proxy* (which doesn't). As far as I know, BIND cannot be configured to be a DNS proxy. On 26.07.11 11:11, Vbvbrj wrote: But I don't want BIND as

Re: Problem resolving one particular domain

2011-07-27 Thread Danilo Godec
On 07/27/2011 10:31 AM, Stephane Bortzmeyer wrote: On Wed, Jul 27, 2011 at 09:59:32AM +0200, Danilo Godecdanilo.go...@agenda.si wrote a message of 247 lines which said: Weirdness number 2 - using dig directly with their servers works: Nothing weird here: dig does not behave like the BIND

Re: Problem resolving one particular domain

2011-07-27 Thread Stephane Bortzmeyer
On Wed, Jul 27, 2011 at 10:31:30AM +0200, Stephane Bortzmeyer bortzme...@nic.fr wrote a message of 34 lines which said: 1) It means you are vulnerable to Kaminsky-style cache poisoning. In 2011, 'query-source port 53;' should have disappeared a long time ago. For the record, there are

Re: Problem resolving one particular domain

2011-07-27 Thread Mark Andrews
In message 4e2fea67.7080...@agenda.si, Danilo Godec writes: On 07/27/2011 10:31 AM, Stephane Bortzmeyer wrote: On Wed, Jul 27, 2011 at 09:59:32AM +0200, Danilo Godecdanilo.go...@agenda.si wrote a message of 247 lines which said: Weirdness number 2 - using dig directly with their

Re: stub zone

2011-07-27 Thread Chris Buxton
On Jul 26, 2011, at 10:51 PM, Feng He wrote: On Wed, Jul 27, 2011 at 8:51 AM, Chris Buxton chris.p.bux...@gmail.com wrote: On Jul 25, 2011, at 10:33 PM, Feng He wrote: On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo juwu...@yahoo.com wrote: Would like to use the BIND stub zone function,

Re: DNS update on host down

2011-07-27 Thread Gloria Rom
On 07/26/11 07:23, Paul Reilly wrote: Is there a simple utility, which can ICMP ping or HTTP ping a host, and update the hosts DNS entry if the host is down? Will a significant number of your users have locally cached the out-of-date entry? -- Gloria Rom UCLA Library Information Technology

Re: Views and no answers ...

2011-07-27 Thread Bob
These two views are identical in any way I can see, so the fault may be in an included configuration file that is not included in your message. Look for allow-query, allow-recursion or allow-cache statements in your other config files. When using views, I often find it more manageable to

Re: DNS update on host down

2011-07-27 Thread Mark Andrews
In message 4e307a5c.9070...@library.ucla.edu, Gloria Rom writes: On 07/26/11 07:23, Paul Reilly wrote: Is there a simple utility, which can ICMP ping or HTTP ping a host, and update the hosts DNS entry if the host is down? Ping + nsupdate can do this. Note if you applications are properly