Re: spf ent txt records.

2013-03-14 Thread Noel Butler
On Wed, 2013-03-13 at 19:33 -0700, Dave Warren wrote: On 3/13/2013 17:11, Noel Butler wrote: On Wed, 2013-03-13 at 14:43 -0700, Dave Warren wrote: I almost wouldn't bother with SPF records these days though, except that the code was already written. # grep SPF maillog

Re: Blocking private addresses with a optionq

2013-03-14 Thread Tony Finch
King, Harold Clyde (Hal) h...@utk.edu wrote: Is there an option for bind like the allow-recursion { network-acl } For blocking out going records of 10.0.0.0/8 and 192.168.0.0/16 so I could do a view like: I'm not sure what you mean by blocking out going records but there are a couple of

RE: Building from source and running in chroot environment

2013-03-14 Thread Spain, Dr. Jeffry A.
Are there relatively recent instructions on how to build BIND from source and run it in a chroot environment? It sounds obvious but everything I've come across assumes BIND is provided by some package manager or included with the operating system. I'd like to build the latest version of

Re: Blocking private addresses with a optionq

2013-03-14 Thread Chris Buxton
On Mar 14, 2013, at 3:29 AM, Tony Finch wrote: King, Harold Clyde (Hal) h...@utk.edu wrote: Is there an option for bind like the allow-recursion { network-acl } For blocking out going records of 10.0.0.0/8 and 192.168.0.0/16 so I could do a view like: I'm not sure what you mean by

Re: Blocking private addresses with a optionq

2013-03-14 Thread Niall O'Reilly
On 14 Mar 2013, at 15:57, Chris Buxton wrote: No, I'm pretty sure the OP wants to strip records from responses if the records are A records referring to private address space (RFC 1918). I've no idea how you would do this. Other than separate views, with a trimmed zone in the

Re: Blocking private addresses with a optionq

2013-03-14 Thread Chris Buxton
On Mar 14, 2013, at 9:07 AM, Niall O'Reilly wrote: On 14 Mar 2013, at 15:57, Chris Buxton wrote: No, I'm pretty sure the OP wants to strip records from responses if the records are A records referring to private address space (RFC 1918). I've no idea how you would do this.

Re: Blocking private addresses with a optionq

2013-03-14 Thread Niall O'Reilly
On 14 Mar 2013, at 16:22, Chris Buxton wrote: Well, yes, if the server in question is authoritative for all the data in question. But if it's just a resolver, that may be more difficult. Fair comment. I was (perhaps naïvely) being led by my aversion to open resolvers

Re: How to minimize the downtime in my case

2013-03-14 Thread Chuck Swiger
Hi-- On Mar 14, 2013, at 12:04 PM, Manish Rane wrote: I right now have NS server hosted with ISP and I am planning to set up my own BIND servers. Now I would like to understand that I need to ask my Registrar to populate the entry of my new NS server which would take 4-6 hours to propagate

Re: How to minimize the downtime in my case

2013-03-14 Thread Andrew Latham
Manish That is a perfectly good plan. One note is to study your TTL. If your ISP has set a longer TTL on your NS records then you would need to first ask for a shorter TTL and wait until the time has passed. Example: if TTL is set to one week, ask for change to shorter period and then wait for

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
hmm...you are talking about SOA TTL Value? On Fri, Mar 15, 2013 at 12:40 AM, Andrew Latham lath...@gmail.com wrote: Manish That is a perfectly good plan. One note is to study your TTL. If your ISP has set a longer TTL on your NS records then you would need to first ask for a shorter TTL

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
Also when my ISP DNS servers are live do I need to add mine one as a slave ones? both? On Fri, Mar 15, 2013 at 12:44 AM, Manish Rane manish...@gmail.com wrote: hmm...you are talking about SOA TTL Value? On Fri, Mar 15, 2013 at 12:40 AM, Andrew Latham lath...@gmail.com wrote: Manish

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
Will my new config would look like this? will it be a Slave for my new servers? ns1.example.com1.2.3.4--- Master ns2.example.com 5.6.7.8--Slave mynewns1.example.com 20.20.20.20 -- Slave mynewns2.example.com 30.30.30.30

BIND 9.9.3b2 is now available

2013-03-14 Thread Michael McNally
Introduction BIND 9.9.3b2 is the second beta release of BIND 9.9.3. This document summarizes changes from BIND 9.9.2 to BIND 9.9.3b2. Please see the CHANGES file in the source code release for a complete list of all changes. Download The latest versions of BIND 9 software can

Announcements for latest beta releases delayed by accident.

2013-03-14 Thread Michael McNally
With apologies to readers of this list: the announcement e-mails for BIND 9.6-ESV-R9b2, 9.8.5b2, and 9.9.3b2 were sent to the bind-announce list earlier this week but a typo in my shell script incorrectly prevented the bind-users and bind-workers lists from receiving the announcement at that

RE: How to minimize the downtime in my case

2013-03-14 Thread Shawn Bakhtiar
Given the that you will eventually stop using ns1 and ns2 You should probably set up mynewns1 as the master with mynewns2 as a slave of mynewns1. Date: Fri, 15 Mar 2013 01:05:50 +0530 Subject: Re: How to minimize the downtime in my case From: manish...@gmail.com To: lath...@gmail.com CC: