Re: recursive clients quota maxes out when dnssec-validate and dlv-lookaside set to auto

2011-12-20 Thread Phil Mayers
On 12/19/2011 11:14 PM, Mark Jeftovic wrote: And it sorta almost works. Except what happens when we restart or reconfigure bind is that the number of recursive clients skyrockets to the maximum (currently the default 1000) in under a minute and then everything starts failing or timing out with

Re: Cache only and reverse mapping

2011-12-20 Thread Matus UHLAR - fantomas
On 19.12.11 11:40, sasa sasa wrote: I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree (answering world), and I know about cache vulnerabilities so I was wondering what is the best solution for ISPs? By separating cache from authorities, you mean implementing 2 DNSs (2

About root zones

2011-12-20 Thread 00Lxns
Hi! I'm using Bind to provide some friendly names for my local services, such as: svn.localhost, php.localhost (for php prjects), java.localhost (for JavaEE) and so on. I have no trouble to set up this behave. But also I wants to study how DNS and Bind works, cause I'm studding computer

Re: About root zones

2011-12-20 Thread Mark Andrews
Named has a compiled in set of root hints. It is used if a root zone is not defined in named.conf. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: About root zones

2011-12-20 Thread Peter Andreev
2011/12/20 Mark Andrews ma...@isc.org:        Named has a compiled in set of root hints.  It is used if        a root zone is not defined in named.conf.        Mark Whether it means that without hint zone named still can perform iterative lookups for its internal purposes? -- Mark

Re: purpose of the RIR(for example RIPE) domain: object

2011-12-20 Thread Martin T
Ok, but who will use reverse delegations in RIPE? regards, martin 2011/12/19, Matus UHLAR - fantomas uh...@fantomas.sk: On 19.12.11 10:32, Martin T wrote: what is the purpose of RIPE database domain: objects? Are they practically used for something? And according to RIPE database manual,

Re: purpose of the RIR(for example RIPE) domain: object

2011-12-20 Thread Matus UHLAR - fantomas
On 20.12.11 19:32, Martin T wrote: Ok, but who will use reverse delegations in RIPE? well, everybody who wants to resolve reverse DNS in Europe (and all IP space maintained by RIPE). Maybe I had to rephrase: In RIPE, reverze delegations are done through RIPE database domain: objects.

load-balancing in DNS using two A records

2011-12-20 Thread Martin T
I have seen setups where one domain name has two address records. First IP address is in the ISP-A network and the other one is in the ISP-B network. In case I execute host www.domainname.com, I always get two IP addresses as a reply and they always appear by turns. Am I correct, that setup like

Re: About root zones

2011-12-20 Thread Matus UHLAR - fantomas
2011/12/20 Mark Andrews ma...@isc.org:        Named has a compiled in set of root hints.  It is used if        a root zone is not defined in named.conf. On 20.12.11 17:37, Peter Andreev wrote: Whether it means that without hint zone named still can perform iterative lookups for its internal

Re: load-balancing in DNS using two A records

2011-12-20 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/20/2011 12:37 PM, Martin T wrote: I have seen setups where one domain name has two address records. First IP address is in the ISP-A network and the other one is in the ISP-B network. In case I execute host www.domainname.com, I always get

Re: load-balancing in DNS using two A records

2011-12-20 Thread Matus UHLAR - fantomas
On 20.12.11 19:37, Martin T wrote: I have seen setups where one domain name has two address records. First IP address is in the ISP-A network and the other one is in the ISP-B network. In case I execute host www.domainname.com, I always get two IP addresses as a reply and they always appear by

Re: load-balancing in DNS using two A records

2011-12-20 Thread Mark Andrews
In message 2011122018.ga3...@fantomas.sk, Matus UHLAR - fantomas writes: On 20.12.11 19:37, Martin T wrote: I have seen setups where one domain name has two address records. First IP address is in the ISP-A network and the other one is in the ISP-B network. In case I execute host

DLZ provider other than a database?

2011-12-20 Thread Doug Barton
I've been given an interesting challenge that I doubt I'm the first one to face, so I thought I'd ask. :) I have an internal project for which I have a large'ish number of hostnames that I want to return a fairly standard set of RRs for, but (for a variety of reasons) I'd rather not create any

Re: DLZ provider other than a database?

2011-12-20 Thread SM
At 17:53 20-12-2011, Doug Barton wrote: I've been given an interesting challenge that I doubt I'm the first one to face, so I thought I'd ask. :) I have an internal project for which I have a large'ish number of hostnames that I want to return a fairly standard set of RRs for, but (for a