Re: Re: clients-per-query vs max-clients-per-query

2014-06-08 Thread Timothe Litt
On 07-Jun-14 12:36, Evan Hunt wrote: On Sat, Jun 07, 2014 at 12:02:24PM -0400, Jorge Fábregas wrote: For me, this clients-per-query of 10 is an upper limit (maximum number of clients before it starts dropping). So then, what's the purpose of max-clients-per-query? Over time, as it runs,

Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-08 Thread Jorge Fábregas
Hi everyone, I'm about to start DNSSEC validation on my resolvers (BIND 9.8) but wanted to know beforehand if there was a way to disable DNSSEC validation for particular domains. I searched the archives and found the answer to be no (at present time). This change is going to impact thousands of

Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-08 Thread Evan Hunt
I'm about to start DNSSEC validation on my resolvers (BIND 9.8) but wanted to know beforehand if there was a way to disable DNSSEC validation for particular domains. I searched the archives and found the answer to be no (at present time). The answer is still no. We do have negative trust

Re: Re: clients-per-query vs max-clients-per-query

2014-06-08 Thread Evan Hunt
On Sun, Jun 08, 2014 at 09:45:23AM -0400, Timothe Litt wrote: Consider a continuous stream of queries to a slow server. For the sake of exposition, assume the incremental adjustment is 1 rather than 5. Named drops the 11th query, but increases the limit. It only increases the limit if one

dont understand dns tree with fishing email url , dns-friewall

2014-06-08 Thread Hans-Cees Speel
Hi, I got a fishing email and for my dns-firewall I want to find the dns server that serves the domain. Somehow it doesn't work, so they probably use a trick. They want you to click this link: https://bit.ly/1lfxB4n parsing it withhttp://www.getlinkinfo.com/ show this redirects to 1.

Re: dont understand dns tree with fishing email url , dns-friewall

2014-06-08 Thread Reindl Harald
Am 08.06.2014 23:16, schrieb Hans-Cees Speel: I got a fishing email and for my dns-firewall I want to find the dns server that serves the domain. Somehow it doesn't work, so they probably use a trick. They want you to click this link: https://bit.ly/1lfxB4n parsing it with

Re: dont understand dns tree with fishing email url , dns-friewall

2014-06-08 Thread Steven Carr
On 8 June 2014 22:16, Hans-Cees Speel hansc...@hanscees.com wrote: Somehow it doesn't work, so they probably use a trick. But I can't find the dns servers. Any help is apreciated. No trick, query for the SOA, then query for the NS of the domain returned in the SOA... sjcarr@elmo:~ $ dig