RE: Troubleshooting DNSSEC issue w/ ic.fbi.gov

2013-07-29 Thread Brad Bendily
Hi Ray, Did you ever get a resolution on this? We have had intermittent trouble getting to: www.nws.noaa.gov sites and the fix has been a full restart of the named service. I wasn't really sure how or where to start troubleshooting but when I saw this email I was hopeful there would be a fix. As

Re: Troubleshooting DNSSEC issue w/ ic.fbi.gov

2013-07-29 Thread Ray Van Dolson
On Mon, Jul 29, 2013 at 10:25:21AM -0500, Brad Bendily wrote: Hi Ray, Did you ever get a resolution on this? We have had intermittent trouble getting to: www.nws.noaa.gov sites and the fix has been a full restart of the named service. I wasn't really sure how or where to start

writing .jnl files to another path possible?

2013-07-29 Thread Christoph Anton Mitterer
Hi. Is it possible to have BIND writing the .jnl files from a dynamic update or that may be created on rndc reload to another place, e.g. when the zones are in /etc/bind/zones not placing them there but in e.g. /var/cache/bind/zones... Cheers, Chris. smime.p7s Description: S/MIME cryptographic

Re: writing .jnl files to another path possible?

2013-07-29 Thread Chris Thompson
On Jul 29 2013, Christoph Anton Mitterer wrote: Is it possible to have BIND writing the .jnl files from a dynamic update or that may be created on rndc reload to another place, e.g. when the zones are in /etc/bind/zones not placing them there but in e.g. /var/cache/bind/zones... Sure. Look at

bind9 and logrotation

2013-07-29 Thread Christoph Anton Mitterer
Hi. Is there a clean way to have bind9 reopening it's logfiles, in order to allow clean logrotation? AFAIK, it would work with rndc reload, but that doesn't just reload the logfiles but also everything else... If not, could that be implemented? Cheers, Chris. smime.p7s Description: S/MIME

Re: bind9 and logrotation

2013-07-29 Thread Mike Hale
You can use an option in named.conf to rotate the logs automatically. channel query_info { severity info; file /var/named/data/log/named.query.log versions 100 size 10m; print-time yes; print-category yes; }; The versions part

Re: bind9 and logrotation

2013-07-29 Thread Christoph Anton Mitterer
Hi Mike. On Mon, 2013-07-29 at 15:13 -0700, Mike Hale wrote: You can use an option in named.conf to rotate the logs automatically. Thanks but... well... I don't want to do that. IMHO logrotation shouldn't be in server daemons... but rather in it's own service. Cause only then you can do real

Re: writing .jnl files to another path possible?

2013-07-29 Thread Christoph Anton Mitterer
On Mon, 2013-07-29 at 20:18 +0100, Chris Thompson wrote: Look at the journal option in the zone statement. Thanks... that should do... =) Cheers, Chris. smime.p7s Description: S/MIME cryptographic signature ___ Please visit

BIND slave stops updating from master after 1-3 days

2013-07-29 Thread Brandon Whaley
Hi all, I've recently upgraded from a CentOS5 install of BIND 9 (bind-9.3.6-20.P1.el5_8.6) to a CentOS6 install (bind-9.8.2-0.17.rc1.el6_4.4.x86_64) for one of my two nameservers. The config I'm using is nearly identical (added rate limiting only) and the server that has not yet been updated is

Re: bind9 and logrotation

2013-07-29 Thread Chris Buxton
On Jul 29, 2013, at 3:09 PM, Christoph Anton Mitterer cales...@scientia.net wrote: Is there a clean way to have bind9 reopening it's logfiles, in order to allow clean log rotation? No. If not, could that be implemented? Send a feature request to ISC, or write it in yourself and maintain a

Re: bind9 and logrotation

2013-07-29 Thread Christoph Anton Mitterer
On Mon, 2013-07-29 at 15:55 -0700, Chris Buxton wrote: Send a feature request to ISC, or write it in yourself and maintain a patch. Do they have a bug tracker? I though they only pick up stuff from here? Of course you know logrotate can truncate files rather than renaming them, after first

Re: bind9 and logrotation

2013-07-29 Thread Steven Carr
On 30 July 2013 00:08, Christoph Anton Mitterer cales...@scientia.netwrote: You can also configure logrotate to work with the inactive log files created by BIND's own logging facility. That is, let BIND write and rotate log files, but then process them with logrotate afterward. Yeah... I