listen-to clusterIP address

2013-06-05 Thread paul
Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because the cluster Ip was not available when named originally started even though I have listen-to the cluster ip listed in my named.conf. Is there a way to make

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
On 06/05/2013 07:37 PM, paul wrote: Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because You don't have to restart it. rndc reconfig will re-check the IPs on the machine and re-listen. the cluster Ip

Re: listen-to clusterIP address

2013-06-05 Thread paul
Thanks for the quick reply. rndc reconfig has the same problem as a restart. I need to automatically listen to the new ip address without manual intervention. On Wed, 2013-06-05 at 09:14 +0100, Phil Mayers wrote: On 06/05/2013 07:37 PM, paul wrote: Hi. I have a two node active passive cluster

Re: listen-to clusterIP address

2013-06-05 Thread Peter Andreev
2013/6/5 Phil Mayers p.may...@imperial.ac.uk On 06/05/2013 07:37 PM, paul wrote: Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because You don't have to restart it. rndc reconfig will re-check the IPs

Re: listen-to clusterIP address

2013-06-05 Thread Mitchell Warden
Hi Paul, BIND will rescan the interfaces automatically - I think by default every 60 minutes. If a listen-on address becomes available it should be used. It would probably be better to automatically trigger a reconfig, but you can lower the scan time with the interface-interval option. I

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
Peter Andreev andreev.pe...@gmail.com wrote: 2013/6/5 Phil Mayers p.may...@imperial.ac.uk On 06/05/2013 07:37 PM, paul wrote: Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because You don't have to

Re: listen-to clusterIP address

2013-06-05 Thread G.W. Haywood
Hi there, On Wed, 5 Jun 2013, paul wrote: I need to automatically listen to the new ip address without manual intervention. Listen on a virtual/alias whatever interface amnd forward ports from the real one(s)? -- 73, Ged. ___ Please visit

Re: listen-to clusterIP address

2013-06-05 Thread Abdul Khader
Better to write a script which would first check the availability of Virtual IP before doing rndc reconfig during a failover. In case the script does not find the VIP in the first run, you can put in a loop to check for VIP for N number of times with N number of seconds interval. The failover

Re: listen-to clusterIP address

2013-06-05 Thread Mark Andrews
Use IPv6 and listen-on-v6 { any; };. The IPv4 socket api doesn't have the hooks to force the UDP replies from the correct address. The IPv6 socket api has more functionality. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
On 05/06/13 12:42, Mark Andrews wrote: Use IPv6 and listen-on-v6 { any; };. The IPv4 socket api doesn't have the hooks to force the UDP replies from the correct address. The IPv6 socket api has more functionality. For what it's worth, there is code to do this in other projects:

Confused about a basic concept

2013-06-05 Thread Bryan Harris
Hi all,I think I may be confused about a very basic DNS concept. Sorry if this has been asked before.1. I have a master and two slaves.2. The master server is the SOA for my zone. The SOA record points to the master server.3. Each of the two slaves are authoritative for my zone.4. There are 2 NS

Re: Confused about a basic concept

2013-06-05 Thread Ben Croswell
Everything you listed is pretty close to accurate. A couple points of clarification. 8) The master needs UDP/TCP 53 open to the slaves. Before a zone transfer can happen the slave needs to get the SOA RR from the master to see if the serial number has changed. This normally happens over UDP

Re: Confused about a basic concept

2013-06-05 Thread Warren Kumari
On Jun 5, 2013, at 9:02 AM, Bryan Harris bryanlhar...@me.com wrote: Hi all, I think I may be confused about a very basic DNS concept. Many people are, but most don't a: know or B: admit it :-P Sorry if this has been asked before. 1. I have a master and two slaves. 2. The master

Re: Confused about a basic concept

2013-06-05 Thread Carlos M. Martinez
The 'hidden master' setup is a very good strategy for a number of reasons. I think the original description only derails a bit when using the term 'authoritative': I'm being told our authoritative DNS servers should not receive any queries, as well as DNS slaves respond to queries.

Re: any requests

2013-06-05 Thread Tony Finch
Leonard Mills l...@yahoo.com wrote: If your some of your clients are SMTP relays, then ANY is the default lookup for an MX and is perfectly normal. Much better from the point of view of the mail servers to do one lookup instead of several. You are not quite correct. See

This list's prefix

2013-06-05 Thread Narcis Garcia
It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for messages' subject? For example: [bind-u] Thanks. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: This list's prefix

2013-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Narcis Garcia informat...@actiu.net Date: Wednesday, June 5, 2013 12:43 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: This list's prefix It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for

Re: This list's prefix

2013-06-05 Thread Phil Mayers
On 05/06/13 17:43, Narcis Garcia wrote: It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for messages' subject? This is getting to be an FAQ. Please read this entire (recent) thread:

Re: Confused about a basic concept

2013-06-05 Thread Bryan Harris
Hi everyone,Thanks for all the detailed responses, I think I have a better understanding of things now. I was completely and totally confused about UDP/TCP. I am just going to take a wild guess that doing iptables the way I described would've caused a bunch of problems...After reading everything

Re: This list's prefix

2013-06-05 Thread Narcis Garcia
Somebody has answered me privately and didn't realized until I've checked all details of each message. I've been near to respond to the list about that message, unknown for the whole list. There are some Mailman's features that help a lot to usability for users, both subject prefix and Reply-To

Re: This list's prefix

2013-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Narcis Garcia informat...@actiu.net Date: Wednesday, June 5, 2013 1:02 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: This list's prefix Somebody has answered me privately and didn't realized until I've checked all details of each message.

Re: This list's prefix

2013-06-05 Thread Warren Kumari
On Jun 5, 2013, at 11:43 AM, Narcis Garcia informat...@actiu.net wrote: It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for messages' subject? You have unwittingly walked into a religious argument. If, like me, you really like list prefixes,

Re: This list's prefix

2013-06-05 Thread Carlos M. Martinez
That's a neat trick, thanks Warren! I also do like prefixes, BTW (as can be seen in the other thread referenced). cheers! ~Carlos On 6/5/13 2:46 PM, Warren Kumari wrote: On Jun 5, 2013, at 11:43 AM, Narcis Garcia informat...@actiu.net wrote: It's not the only mailing list where I'm

Re: This list's prefix

2013-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Warren Kumari war...@kumari.net Date: Wednesday, June 5, 2013 1:46 PM To: Narcis Garcia informat...@actiu.net Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: This list's prefix -- Curse the dark, or light a match. You decide, it's your dark.

Re: Confused about a basic concept

2013-06-05 Thread Tony Finch
Bryan Harris bryanlhar...@me.com wrote: After reading everything it looks to me like our hidden master configuration is basically okay, but by some of the best practices described, it could be better and easier to work with if we had a separate caching layer. Note that the caches live on the

Re: any requests

2013-06-05 Thread Tony Finch
Vernon Schryver v...@rhyolite.com wrote: If you have a domain to which you can can add records for a subdomain with differing 5-30 second TTLs and can spend not just 5 seconds but a few minutes playing around, you might come to my conclusion. I think they treat ANY as if it were

Re: any requests

2013-06-05 Thread Doug Barton
On 06/05/2013 11:33 AM, Tony Finch wrote: I believe the ANY hack on mail servers was a Sendmailism 20ish years ago. s/Send/q/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

Re: any requests

2013-06-05 Thread Chris Buxton
On Jun 5, 2013, at 11:59 AM, Doug Barton do...@dougbarton.us wrote: On 06/05/2013 11:33 AM, Tony Finch wrote: I believe the ANY hack on mail servers was a Sendmailism 20ish years ago. s/Send/q/ That makes even more sense. DJB always thinks he knows best.

Re: any requests

2013-06-05 Thread Vernon Schryver
From: Tony Finch d...@dotat.at a few minutes playing around, you might come to my conclusion. I think they treat ANY as if it were psuedo-rdataset containing some of the RRs for the domain with a TTL equal to the minimum of all of the TTLs of the contained rdatasets. (I thought I

Re: This list's prefix

2013-06-05 Thread Elmar K. Bins
war...@kumari.net (Warren Kumari) wrote: If, like me, you really like list prefixes, *and* you use procmial, you can add them yourself: [...] And the 100-dollar-question is: How do you remove them on outgoing mails? ;-) Elmar. PS: But thank you for the adding recipe already.

Re: This list's prefix

2013-06-05 Thread Warren Kumari
Warren Kumari -- Please excuse typing, etc -- This was sent from a device with a tiny keyboard. On Jun 5, 2013, at 2:27 PM, Elmar K. Bins e...@4ever.de wrote: war...@kumari.net (Warren Kumari) wrote: If, like me, you really like list prefixes, *and* you use procmial, you can add

Re: This list's prefix

2013-06-05 Thread Elmar K. Bins
war...@kumari.net (Warren Kumari) wrote: And the 100-dollar-question is: How do you remove them on outgoing mails? ;-) You don't -- that's part of the churches evangelism / outreach effort. ;) (Less flip answer: sorry, don't know if you can...) Just wondering, because your responses

Re: This list's prefix

2013-06-05 Thread SM
Hi Elmar, At 12:27 05-06-2013, Elmar K. Bins wrote: And the 100-dollar-question is: How do you remove them on outgoing mails? ;-) The answer is to edit the subject line after hitting the reply button. :-) Regards, -sm ___ Please visit

Re: This list's prefix

2013-06-05 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/05/2013 03:47 PM, Elmar K. Bins wrote: war...@kumari.net (Warren Kumari) wrote: And the 100-dollar-question is: How do you remove them on outgoing mails? ;-) You don't -- that's part of the churches evangelism / outreach effort. ;)

Re: does zone trump forward?

2013-06-05 Thread Dave Warren
On 2013-06-04 06:42, Alan Shackelford wrote: We have 2843 authoritative zones. We run a split brain DNS. The new hospitals and other entities need to see our internal zone view once they have joined. So I have them forward queries during the early stages of the merger, until I can get control

Re: does zone trump forward?

2013-06-05 Thread Jonathan Reed
But then I just hate forwards. Burned 1000x times, lesson learned :) What are you referring to? Why are forwards such a bad idea? On Wed, Jun 5, 2013 at 4:54 PM, Dave Warren da...@hireahit.com wrote: On 2013-06-04 06:42, Alan Shackelford wrote: We have 2843 authoritative zones. We run a

Re: does zone trump forward?

2013-06-05 Thread Dave Warren
On 2013-06-05 14:27, Jonathan Reed wrote: But then I just hate forwards. Burned 1000x times, lesson learned :) What are you referring to? Why are forwards such a bad idea? They're not automatically a bad idea, but I always prefer having a local copy of a zone unless that's not

Re: Confused about a basic concept

2013-06-05 Thread btb
On 2013.06.05 10.02, Bryan Harris wrote: Hi all, I think I may be confused about a very basic DNS concept. Sorry if this has been asked before. 1. I have a master and two slaves. 2. The master server is the SOA for my zone. The SOA record points to the master server. 3. Each of the

Re: any requests

2013-06-05 Thread Dave Warren
On 2013-06-05 12:28, Vernon Schryver wrote: I thought Google Public DNS re-fetched RRsets as they were expiring in order to keep the cache populated, which would explain what you see, I don't understand how they could pre-fetch the gazillions of RRsets that are rarely requested. As far as I

[Off-Topic] RE: This list's prefix

2013-06-05 Thread Stuart Browne
-Original Message- From: bind-users-bounces+stuart.browne=ausregistry.com...@lists.isc.org [mailto:bind-users-bounces+stuart.browne=ausregistry.com...@lists.isc.org] On Behalf Of Elmar K. Bins Sent: Thursday, 6 June 2013 5:46 AM To: bind-users@lists.isc.org Subject: Re: This list's

Re: Confused about a basic concept

2013-06-05 Thread Mark Andrews
In message 05883710-136f-4dc2-8079-e29a68fed...@me.com, Bryan Harris writes: Hi everyone, Thanks for all the detailed responses, I think I have a better understanding of things now. I was completely and totally confused about UDP/TCP. I am just going to take a wild guess that doing

Re: any requests

2013-06-05 Thread Vernon Schryver
From: Dave Warren da...@hireahit.com I thought Google Public DNS re-fetched RRsets as they were expiring in order to keep the cache populated, which would explain what you see, I don't understand how they could pre-fetch the gazillions of RRsets that are rarely requested. ... I'm not