Re: Systemd bind9.service file?

2017-07-23 Thread Tom Browder
On Sat, Jul 22, 2017 at 04:06 Alberto Colosi wrote: > as just said inside previous mail > > ever if you edit some , you should understand > Thanks for your help and good links, Alberto. -Tom ___ Please visit

Re: DNS traffic accounting

2017-07-23 Thread Abi Askushi
Hi Grant, Thanx for the reply. My intention is not academic but some business case. Let me try to describe it. I have some network appliance sitting on a remote end and using satellite for internet connectivity. The traffic accounting on the wan is already implemented and dns that is consumed

Re: BIND and Windows DNS logging and archiving

2017-07-23 Thread Phil Mayers
On 23/07/2017 15:16, Mick Lee wrote: I have a colleague who has said he has a parts of a PCAP to BIND query log agent that runs on UNIX platforms, and he is happy to port that to Windows for me - he's actually working on it now (for a few beers :) ). dnscap basically does the same thing. No

Re: DNS traffic accounting

2017-07-23 Thread Abi Askushi
Hi Matus, You have a point and seems that i will do this at the end. I was just wondering if there is another approach from the technical standpoint. Currently I am not accounting DNS at all. It is provided for free. I am accounting all other traffic though (http, etc). Since every byte is

Re: DNS traffic accounting

2017-07-23 Thread Matus UHLAR - fantomas
On 22.07.17 21:51, Abi Askushi wrote: I was wondering if bind9 can support TPROXY. This would facilate my accounting as then all WAN traffic would have the client IP as the source IP. ( I have a similar configuration with squid where I was able to account the WAN traffic using this trick without

Re: BIND and Windows DNS logging and archiving

2017-07-23 Thread Mick Lee
Thanks Phil, You are right it's not a BIND issue :) I am a BIND user myself, and I was wondering how other BIND users have copied when they've had to deal with Windows DNS servers like this. I appreciate any response to be honest. I have a colleague who has said he has a parts of a PCAP to

Re: BIND and Windows DNS logging and archiving

2017-07-23 Thread Phil Mayers
On 22/07/2017 07:33, Mick Lee wrote: Hi Guys, Can anyone offer any advice based on their experience? Well, if I understand correctly, your main problem is the windows boxes running windows DNS, so this is not a bind problem. You might be better asking elsewhere. However, honestly I would

Re: DNS traffic accounting

2017-07-23 Thread Abi Askushi
Because i would like to avoid counting traffic for cached responses. But this is an option also if all other are not easy. On Jul 23, 2017 16:19, "Matus UHLAR - fantomas" wrote: > On 22.07.17 21:51, Abi Askushi wrote: > >> I was wondering if bind9 can support TPROXY. This

Re: DNS traffic accounting

2017-07-23 Thread Matus UHLAR - fantomas
On 22.07.17 21:51, Abi Askushi wrote: I was wondering if bind9 can support TPROXY. This would facilate my accounting as then all WAN traffic would have the client IP as the source IP. ( I have a similar configuration with squid where I was able to account the WAN traffic using this trick without