Bind doesn't make zone delegation.

2012-04-19 Thread Ellad G. Yatsko
Hello! I have FreeBSD 7.2 x64 installed. And Bind 9.4: /etc/namedb named -v BIND 9.4.3-P2 I have zone /united-networks.ru/ and I try to do the following: ... $ORIGIN sokol.msk.united-networks.ru. @ IN NS srvgate srvgate

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
Hi, First of all, nslookup isn't a good tool for debug DNS problems. Use dig instead. Could you show the output of dig @freebsdbox sokol.msk.united-networks.ru. NS +norec run from freebsd box itself? 2012/4/19 Ellad G. Yatsko eyat...@ngs.ru Hello! I have FreeBSD 7.2 x64 installed.

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
2012/4/19 Ellad G. Yatsko eyat...@ngs.ru Hello! Here is output: /etc/namedb dig @172.16.0.1 sokol.msk.united-networks.ru. NS +norec ; DiG 9.4.3-P2 @172.16.0.1 sokol.msk.united-networks.ru. NS +norec ; (1 server found) ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode:

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Ellad G. Yatsko
Nope. FreeBSD is not the master for sokol.msk.united-networks.ru. It delegates zone sokol.msk only. Not more.Master for sokol.msk.united-networks.ru is srvgate.sokol.msk.united-networks.ru (Ubuntu server). Indeed, now when I try nslookup sokol.msk.united-networks.ru - it returns me its IP.

[ANN] ndsiff 1.39 - create nsupdate script from master file changes

2012-04-19 Thread Tony Finch
nsdiff is a small perl program that examines old and new versions of a DNS zone and outputs the differences as a script for use by BIND's nsupdate program. It bridges the gap between static master files and dynamic updates. I have published version 1.39 which has a new -q quiet / quick check

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
2012/4/19 Ellad G. Yatsko eyat...@ngs.ru Nope. FreeBSD is not the master for sokol.msk.united-networks.ru. It delegates zone sokol.msk only. Not more.Master for sokol.msk.united-networks.ru is srvgate.sokol.msk.united-networks.ru (Ubuntu server). Indeed, now when I try nslookup

Re: www.glb.hud.gov

2012-04-19 Thread Chris Thompson
On Apr 19 2012, Richard Laager wrote: Are others timing out trying to resolve www.glb.hud.gov? This seems (though I haven't done extensive testing) to only happen to me with BIND. http://dnsviz.net/d/www.glb.hud.gov/dnssec/ shows a couple of DNSKEY warnings, so maybe that's it. I always

Re: www.glb.hud.gov

2012-04-19 Thread Casey Deccio
On Thu, Apr 19, 2012 at 5:59 AM, Chris Thompson c...@cam.ac.uk wrote: On Apr 19 2012, Richard Laager wrote: Are others timing out trying to resolve www.glb.hud.gov? This seems (though I haven't done extensive testing) to only happen to me with BIND.

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Barry Margolin
In article mailman.545.1334821108.63724.bind-us...@lists.isc.org, Ellad G. Yatsko eyat...@ngs.ru wrote: Hello! I have FreeBSD 7.2 x64 installed. And Bind 9.4: /etc/namedb named -v BIND 9.4.3-P2 I have zone /united-networks.ru/ and I try to do the following:

Zone transfer using TSIG

2012-04-19 Thread Carlos Ribas
Hello all, I have a server that is authoritative to my domain and is secondary to four different domains. What is the best way to receive the zones from master using TSIG? May I have something like this into a view statement? server 10.0.1.1 { keys hostA-myserver; }; server 10.0.1.2 { keys

Re: Zone transfer using TSIG

2012-04-19 Thread Rich Goodson
Carlos, zone example.com { ... allow-transfer { key hostA-myserver.key; }; ... }; and in our environment, I have the key files readable only by the user that named is running as, then use something like: include keys/tsig_key_file.key in named.conf so that the named.conf file can remain

Re: Zone transfer using TSIG

2012-04-19 Thread Rich Goodson
Forgot to reply all in my corrected answer. On Apr 19, 2012, at 3:09 PM, Carlos Ribas wrote: Thanks Rich! I completely forgot that I can use the key in the definitions of master. Regards, - Carlos Eduardo Ribas 2012/4/19 Rich Goodson