NXDOMAIN Problem

2012-06-11 Thread Stefan Certic
Hello, I have following problem with Bind9 zone matching: If i add two zones as shown bellow, all of them return NXDOMAIN. If i disable one, remaining one works correctly. What should i do to match both zones to appropriate forwarder? zone 6.7.9.e164enum { type forward;

Re: Selective filtering of multi-address answers

2012-06-11 Thread Kevin Darcy
**Configure sortlists to push those bad A records to the end of the response. This may on the surface seem like a kludge, but remember, the whole point of sortlists is to give preference to certain addresses over others, and IMO, a working/reachable address is preferred over one that isn't

How to handle zones that need to be the same in all views?

2012-06-11 Thread Max Bowsher
I've inherited some responsibility for existing DNS system that makes extensive use of BIND's view feature (there are 10 views; external, internal-site1, internal-site2, ...etc...). I'm experiencing a problem in that there's really only one zone that differs between views, and now I'm facing the

Re: Selective filtering of multi-address answers

2012-06-11 Thread Andris Kalnozols
On 6/11/2012 1:23 PM, Kevin Darcy wrote: **Configure sortlists to push those bad A records to the end of the response. This may on the surface seem like a kludge, but remember, the whole point of sortlists is to give preference to certain addresses over others, and IMO, a working/reachable

Re: Selective filtering of multi-address answers

2012-06-11 Thread Kevin Darcy
On 6/11/2012 5:29 PM, Andris Kalnozols wrote: On 6/11/2012 1:23 PM, Kevin Darcy wrote: **Configure sortlists to push those bad A records to the end of the response. This may on the surface seem like a kludge, but remember, the whole point of sortlists is to give preference to certain addresses

Re: Selective filtering of multi-address answers

2012-06-11 Thread Mark Andrews
Andris, you should also be pushing for proper multi-homed server support in those applications that are causing you problems (read just about all IP applications). This is relatively easy for TCP. https://www.isc.org/community/blog/201101/how-to-connect-to-a-multi-homed-server-over-tcp

Re: Selective filtering of multi-address answers

2012-06-11 Thread Kevin Darcy
At the risk of exceeding my cynicism quota for the week, this is an Active Directory client we're talking about: since when does Microsoft listen to best-practice suggestions from *anyone*? A more fruitful approach, in my experience, is to approach the owners of the AD zone and have them

Re: Selective filtering of multi-address answers

2012-06-11 Thread Andris Kalnozols
On 6/11/2012 2:54 PM, Mark Andrews wrote: Andris, you should also be pushing for proper multi-homed server support in those applications that are causing you problems (read just about all IP applications). This is relatively easy for TCP.

Re: Selective filtering of multi-address answers

2012-06-11 Thread Andris Kalnozols
No arguments from me on that reality check. I'm just glad there is a Plan B while waiting for vendors and/or corporate IT to attend to these details. -- Andris On 6/11/2012 3:17 PM, Kevin Darcy wrote: At the risk of exceeding my cynicism quota for the week, this is an Active Directory

Verify raw data within slaves on 9.9.x

2012-06-11 Thread Walter Smith
Folks, What tools/commands I can run to get plain ascii/text data out of modern raw/binary on BIND 9.9.x slaves? I just want to verify that changes are correct down to the slaves. So - I can check-in these changes into svn etc. Thanks, --WS___ Please

RE: Verify raw data within slaves on 9.9.x

2012-06-11 Thread Spain, Dr. Jeffry A.
What tools/commands I can run to get plain ascii/text data out of modern raw/binary on BIND 9.9.x slaves? I just want to verify that changes are correct down to the slaves. So - I can check-in these changes into svn etc. See the ARM under named-checkzone.

Re: Verify raw data within slaves on 9.9.x

2012-06-11 Thread Sten Carlsen
Would an option be to do a dig axfr on the zone? On 12/06/12 1:44, Spain, Dr. Jeffry A. wrote: What tools/commands I can run to get plain ascii/text data out of modern raw/binary on BIND 9.9.x slaves? I just want to verify that changes are correct down to the slaves. So - I can check-in

Re: How to handle zones that need to be the same in all views?

2012-06-11 Thread Max Bowsher
That won't help me for slave zones: * the zones get needlessly re-transferred once for each view * the files on disk will be repeatedly overwritten as bind tries to save the zone data separately for each zone, to the same filename * bind will only act on a notify for the view that receives it,

RE: Verify raw data within slaves on 9.9.x

2012-06-11 Thread Spain, Dr. Jeffry A.
Would an option be to do a dig axfr on the zone? That works if allow-transfer is set appropriately. It gives you the zone data in canonical rather than relative format. Jeff. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to

Re: How to handle zones that need to be the same in all views?

2012-06-11 Thread Barry Margolin
In article mailman.1002.1339459440.63724.bind-us...@lists.isc.org, Max Bowsher _...@maxb.eu wrote: That won't help me for slave zones: * the zones get needlessly re-transferred once for each view Unless they're huge, so what? * the files on disk will be repeatedly overwritten as bind

Re: Verify raw data within slaves on 9.9.x

2012-06-11 Thread pangj
We wrote a Perl script to transparently translate a raw zone file into text, so all of our old code that assumes that a zone file is in text format wouldn't die. We also wrote the perl scripts to map the data from database to zone file, and also from zone file to database. See