Cache only and reverse mapping

2011-12-15 Thread sasa sasa
For an ISP, is there any risk in configuring BIND DNS as cache only and adding customer's reverse mapping zones? Any other possible implementations? regards, Sa ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: bind as a service on windows -c option not working

2011-12-15 Thread Danny Mayer
On 12/15/2011 5:52 AM, Vbvbrj wrote: On 15.12.2011 03:11, Danny Mayer wrote: On 12/14/2011 2:35 PM, Vbvbrj wrote: Bind 9.8.1 P1 installed in D:\bind9. Config files and other zone files and log files in D:\bind_config Service configuration: Path to executable D:\bind9\bin\named.exe -c

Re: BIND for Active directory with secure update

2011-12-15 Thread Danny Mayer
On 12/14/2011 2:36 PM, Vbvbrj wrote: Hello. I've setup BIND to serve the requests to lan instead of Microsoft DNS by first setting bind as a secondary dns server for Microsoft DNS, copy the zones, and making the BIND the master. In order for domain member hosts to update the records of the

Re: Cache only and reverse mapping

2011-12-15 Thread /dev/rob0
On Thursday 15 December 2011 02:07:12 sasa sasa wrote: For an ISP, is there any risk in configuring BIND DNS as cache only and adding customer's reverse mapping zones? Any other possible implementations? To be precise, when you are serving any zones authoritatively, your server is no longer

Re: BIND for Active directory with secure update

2011-12-15 Thread Nicholas F Miller
You need to be running Bind 9.7.2-P2 or higher for GSS-TSIG to work. Create a user account in your AD. Then run: ktpass -out name_of_your_keytab.keytab -princ DNS/domain.name@DOMAIN.NAME -pass * -mapuser AD_user_you_created@domain.name _

Re: bind as a service on windows -c option not working

2011-12-15 Thread Danny Mayer
On 12/15/2011 11:43 AM, Vbvbrj wrote: On 15.12.2011 15:39, Danny Mayer wrote: Thanks for answering. I want to keep all the files related to bind in one folder, not across the system folder. And keeping the named.conf in the system32 folder may be lost when the system is reinstalled and in a

Bind, rpz and views

2011-12-15 Thread Job
Hello Bind ML, i am trying to setup some blacklists foqr some users. I have a file for every blacklist, example: blacaklistA blacklistB blacklistC. I have to assign different combination of A B C to users. I created dns bind view that, by matching source ip client, provide different answer

Re: Fwd: Re: .TLD minimum number of nameservers rule

2011-12-15 Thread Kevin Darcy
To settle the question of are 2 nameservers required by the RFCs?, I'm surprised you guys missed this text in RFC 1034, Section 4.1: A given zone will be available from several name servers to insure its availability in spite of host or communication link failure. By administrative

Re: Fwd: Re: .TLD minimum number of nameservers rule

2011-12-15 Thread Chris Thompson
On Dec 15 2011, Kevin Darcy wrote: To settle the question of are 2 nameservers required by the RFCs?, I'm surprised you guys missed this text in RFC 1034, Section 4.1: A given zone will be available from several name servers to insure its availability in spite of host or communication

Bind, rpz and views

2011-12-15 Thread Job
Hello Bind ML, i am trying to setup some blacklists foqr some users. I have a file for every blacklist, example: blacaklistA blacklistB blacklistC. I have to assign different combination of A B C to users. I created dns bind view that, by matching source ip client, provide different answer

information in slave zone file

2011-12-15 Thread hugo hugoo
Hello, I have recently done a migration bind8 to bind9. I have remarked that in my slave zones file, I did not have anymore some interesting information I had with bind8. These informations are comments on the last zone transfer. Can anybody tell me if it is possible in BINDP to have the same

Re: information in slave zone file

2011-12-15 Thread Mark Andrews
Please contact your MUA vendor and report that there printed-quotable generation is broken. printed-quotable SHOULD NOT be escaping ; and ,. printed-quotable should be doing the bare minimum of trasformation as one of its design goals is for the result to be readable by HUMANS. Un-necessary