Re: DMARC question

2018-08-15 Thread John Levine
In article you write: >We have a couple of small domains whose DNS is served by BIND on our dedicated >machines. Almost 3 years ago we had set up DMARC records, >and were getting reports from various MXs every day until a couple of days ago >(Aug 13). Then they suddenly stopped! > >Nothing in

Re: Local Slave copy of root zone

2018-08-15 Thread Tony Finch
Doug Barton wrote: > > Slaving the root and ARPA zones is a small benefit to performance for a busy > resolver, [...] > This technique is particularly useful for folks in bad/expensive network > conditions. While the current anycast networks of root servers is much better > than it was "in the

DMARC question

2018-08-15 Thread Paul Kosinski
We have a couple of small domains whose DNS is served by BIND on our dedicated machines. Almost 3 years ago we had set up DMARC records, and were getting reports from various MXs every day until a couple of days ago (Aug 13). Then they suddenly stopped! Nothing in the BIND config or zone files

Re: Local Slave copy of root zone

2018-08-15 Thread Doug Barton
On 08/15/2018 09:11 AM, Bob McDonald wrote: I've recently been investigating having a local slave copy of the root zone on a caching/forwarder type server. I've even put the local slave copy of the root zone into a separate view accessed via a different loopback address. (An limited example of

Re: Local Slave copy of root zone

2018-08-15 Thread Bob McDonald
Thank you sir! I'll investigate the newer bind implementations. Regards. Bob On Wed, Aug 15, 2018 at 12:41 PM Tony Finch wrote: > Bob McDonald wrote: > > > I've recently been investigating having a local slave copy of the root > zone > > on a caching/forwarder type server. > > I do this on

Re: Local Slave copy of root zone

2018-08-15 Thread Tony Finch
Bob McDonald wrote: > I've recently been investigating having a local slave copy of the root zone > on a caching/forwarder type server. I do this on my toy server for various strange reasons, and although it has worked OK I'm not confident it's really solid enough for production. If you are

Local Slave copy of root zone

2018-08-15 Thread Bob McDonald
I've recently been investigating having a local slave copy of the root zone on a caching/forwarder type server. I've even put the local slave copy of the root zone into a separate view accessed via a different loopback address. (An limited example of this exists on the ISC site) My question is