Re: Configuring CNAME for nosslsearch.google.com

2012-05-09 Thread Tobias Krais
Hi together, thanks for these many hints. Wow! So many mistakes in a few lines. Here ist now my config file: -%- @ IN SOA localhost. root.localhost. ( 2012050900 7200

DNSSEC

2012-05-09 Thread Ben
Hi, I have a some queries regarding dnssec.Kindly clear me out it. 1) DNSSEC is required for authoritative dns or is it for caching dns or for both? 2) If we enable DNSSEC , do we face any performance problem while concerning with throughput? 3) What is actual flow of dnssec? Regards,

RE: DNSSEC

2012-05-09 Thread Gaurav Kansal
DNSSEC is done on Authoritative side. Caching DNS only check whether that particular domain is signed or not, only if that caching DNS is designed to do so. As we don't signed our records on fly in DNSSEC, so DNSSEC doesn't increase the load but ya it increases the size of the response of the

Re: bind caching dns

2012-05-09 Thread Eivind Olsen
Matthew Seaman wrote: Not to my knowledge. It should be possible to write an agentx plugin that translates from the XML data provided natively, but you'll have to write your own MIBs since the standard one from RFC1612 seems to have received little development since. Indeed RFC3197

RE: DNSSEC

2012-05-09 Thread Tony Finch
Gaurav Kansal gaurav.kan...@nic.in wrote: DNSSEC is done on Authoritative side. Signing is done on authority servers. It's straightforward with inline-signing mode, or if you maintain your zone with dynamic updates. Caching DNS only check whether that particular domain is signed or not, only

Re: DNSSEC

2012-05-09 Thread Barry Margolin
In article mailman.736.1336590990.63724.bind-us...@lists.isc.org, Tony Finch d...@dotat.at wrote: Gaurav Kansal gaurav.kan...@nic.in wrote: DNSSEC is done on Authoritative side. Signing is done on authority servers. It's straightforward with inline-signing mode, or if you maintain your

Re: DNSSEC

2012-05-09 Thread Ben
Hi, How's your experience with DNSSEC while using it with caching dns and authoritative dns ? If we are using DNSSEC enable with caching resolver, and remote domain is not DNSSEC enabled so in that case , do we face any problem, means any failure or something? Regards, Ben Gaurav

Re: DNSSEC

2012-05-09 Thread Barry Margolin
In article mailman.738.1336594400.63724.bind-us...@lists.isc.org, Ben benjo11...@gmail.com wrote: If we are using DNSSEC enable with caching resolver, and remote domain is not DNSSEC enabled so in that case , do we face any problem, means any failure or something? No. If the domain

measuring dns query

2012-05-09 Thread PFUnix Mail
all, im looking for a way to measure dns queries and am looking for an opensource solution if possible. any suggestions? i want to measure the time it takes for 1DNS query in bind vs. dns Active-Directory integrated. thanks, B ___ Please visit