Yup. But if the DNS infra is under my control, then definitely the keys (which
i have used for encryption) will also be with me. Am i missing something here ?
類
—
Gaurav Kansal
> On 03-May-2022, at 14:40, Petr Špaček wrote:
>
> On 03. 05. 22 10:56, Gaurav Kansal wrote:
>> Or i
and you can achieve high QPS.
One such tool which can do all for you is dnsmonster -
https://github.com/mosajjal/dnsmonster <https://github.com/mosajjal/dnsmonster>
. Just send mirror traffic to this and it will do everything for you.
Thanks,
Gaurav Kansal
> On 25-Apr-2022, at 22:15, m3
-
From: bind-users@lists.isc.org
To: bind-users@lists.isc.org
Sent: Tuesday, August 24, 2021 5:37:35 PM
Subject: Re: Logging statements w.r.t. view in Bind 9.16.18
Hi there,
On Tue, 24 Aug 2021, Gaurav Kansal wrote:
> I want a clarity whether we can have individual logging statement
> pe
ew and doesn't
want to log REFUSED queries (which are for PUBLIC view) in query-error
category.
please help how can i achieve this.
Thanks,
Gaurav Kansal
Disclaimer:
This e-mail and its attachments may contain official Indian Government
information. If you are not the intende
r the draft is in review and it will be merged some time this
> year.
>
> --
> Ondřej Surý — ISC (He/Him)
>
> My working hours and your working hours may be different. Please do not feel
> obligated to reply outside your normal working hours.
>
>>> On 7. 8. 2021, at 19:33,
Hi guys,
I need the help in figuring out whether BIND supports ANAME ? If yes, then from
which version on wards ?
Use case of ANAME RR is explained here - [
https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ |
https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ ]
Thanks.
Gaurav
ontact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
--
Thanks and Regards,
Gaurav Kansal
+91-9910118448
Disclaimer:
This e-mail and its attachments may contain official Indian Government information. If you are not
ut this page:
https://www.dns.icann.org/services/axfr/
Regards,
Anand
On 12/12/2020 13:39, Gaurav Kansal wrote:
Hello folks,
Like the way Root zone file is available here
<https://www.internic.net/domain/root.zone>, does we have the zone files
of "in-addr.arpa" and "ip6.arpa" avail
am
looking for whole zone file at a single place.
--
Thanks and Regards,
Gaurav Kansal
+91-9910118448
Disclaimer:
This e-mail and its attachments may contain official Indian Government information. If you are not the intended recipient, please notify the sender immediately and delete this
Sent from my iPhone
> On 22-Dec-2019, at 11:02 PM, h.rei...@thelounge.net wrote:
>
>
>
>> Am 22.12.19 um 18:28 schrieb Paul Kosinski via bind-users:
>> Every so often, we get a run of peculiar queries to our (BIND / named)
>> DNS server. Note the apparently random mix of lower case and
This is a “spoofing resistance” technique.
For more info, check “0x20 Bit Encoding”.
Sent from my iPhone
> On 22-Dec-2019, at 10:59 PM, bind-users@lists.isc.org wrote:
>
> Every so often, we get a run of peculiar queries to our (BIND / named)
> DNS server. Note the apparently random mix of
what is the issue.
--
Thanks and Regards,
Gaurav Kansal
+91-9910118448
Disclaimer:
This e-mail and its attachments may contain official Indian Government information. If you are not the intended recipient, please notify the sender immediately and delete this e-mail. Any dissemination or use
In case, i have my hint file in bind configuration and it also have its
hard-coded one, who will get the priority.
Means which file will be used by bind for getting responses from root ?
Sent by kansal's device.
On Wed, Jun 17, 2015 at 7:17 AM -0700, Anand Buddhdev ana...@ripe.net wrote:
* * *
May be ISC guys can help me out in this. As they are managing the F.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Stuart Browne
Sent: Tuesday, June 16, 2015 5:05 AM
Cc: bind-users@lists.isc.org
.
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
anydnsmby.38495 i.root-servers.net.domain: 43451 [1au]
NS? 6.mr. (33)
17:25:16.707989 IP anydnsmby.35834 i.root-servers.net.domain: 61843 [1au]
NS? 3.mr. (33)
17:56:44.855060 IP anydnsmby.61903 a.root-servers.net.domain: 23284 [1au]
NS? 172.192.168.2. (42)
Regards,
Gaurav Kansal
I am trying to telnet (port 53)/ping/dig on 2001:500:2F::F address.
Src address is 2405:8a00::/32.
Trace is blocked at firewall end. If needed i wl try to get the same.
Regards,
Gaurav Kansal
Sent by kansal's device.
From: Warren Kumari
Sent: Monday, June 15, 6:54 PM
Subject: Re
This is happening because I am calling same zone file in both view.
Please help me out what I should do for getting rid of this issue.
Thanks and Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users
Thanks for information.
Is there any other way by which I can define the zone (which are same for
all views) outside the view or anything else by which I don't need to
replicate the file for all the views.
Regards,
Gaurav Kansal
-Original Message-
From: Niall O'Reilly [mailto:niall.orei
definition and the second one contains 'in-view' parameter). I know that
this is not at all tough I but I just need to know if I can use same file
for including in both the view (by anyhow).
Regards,
Gaurav Kansal
___
Please visit https
?
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
)
and many other..
Fb is on the 2nd spot in the AS wise query statistics. (Paper
http://kansal15.blogspot.in/2014/09/ipv6-dns-measurement-stats.html )
I was wondering why Fb is querying us and that too in so much quantity ?
Did anyone face similar behavior from FB ASn ??
Regards,
Gaurav
.
Is there any way out to figure out the same ?
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman
not run test program using OpenSSL from
/usr/lib and /usr/include.
Please check the argument to --with-openssl and your
shared library configuration (e.g., LD_LIBRARY_PATH).
Pl. help me what should I do ???
Regards,
Gaurav Kansal
library
configure:15436: error: /usr/include/openssl//include/openssl/opensslv.h
not found
## ##
## Cache variables. ##
Regards,
Gaurav Kansal
-Original Message-
From: Jeremy C. Reed [mailto:jr...@isc.org]
Sent: Friday, May 02, 2014 6:08 PM
To: Gaurav Kansal
Cc
Hi Matus,
I also notice the same thing.
This may be an issue or any other feature in bind tool which is producing this
result.
I did it on windows 8, so I think that may be 8 and bind 9.9.5 is producing
this and I didn't do much troubleshooting on this.
Sent frm Kansal's Mobile
Sry for typo
Ok I wl try.
Shd I upgrade bind on dns servers also ???
Sent frm Kansal's Mobile
Sry for typo error :)
Mark Andrews ma...@isc.org wrote:
Use BIND 9.9.5-W1.
Mark
In message 9jawi1csarsretigbud1n5h0.1395229889...@email.android.com, Gaurav K
ansal writes:
Hi Matus,
I also notice the same
At the time of posting this question, I didn't think that this thread will
cause this much of discussion. :)
Thanks to all for nice explanation and help.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users
HI Tony,
Thanks for help.
I was wondering if HMAC* keys are not used for zone then why the same is
displayed when we use dnssec-keygen -h.
Regards,
Gaurav Kansal
-Original Message-
From: Tony Finch [mailto:fa...@hermes.cam.ac.uk] On Behalf Of Tony Finch
Sent: Monday, March 3
query channels or by any other means) which we can save for
future reference purposes.
Thanks and Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind
the difference between Zone or Host ?? Is
it key generation for one client machine or what ?
I also want to know which algorithm is the best one on security aspects for
generating Keys for DNSSEC.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Intercom - 7331
Have
Thanks Evan. J
-Original Message-
From: Evan Hunt [mailto:e...@isc.org]
Sent: Tuesday, December 31, 2013 1:27 AM
To: Gaurav Kansal
Cc: bind-users@lists.isc.org
Subject: Re: Enabing RRL in bind
On Mon, Dec 30, 2013 at 05:47:13PM +0530, Gaurav Kansal wrote:
In bind 9.9.4, Reponse
Thanks Chris for your useful comments.
On Dec 30, 2013, at 9:46 PM, Gaurav Kansal gaurav.kan...@nic.in wrote:
I am getting the error message for lot of domains.
Log of error entries are attached.
All the ones I checked were caused by broken implementations.
Is this a broken
.
I want to ask is it possible to have a CNAME configuration by which I can
divert all queries for my xyz.gov.in domain to xyz.in domain.
Happy New Year J.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Intercom - 7331
Have you enabled IPv6 on something today
//IN': 64.208.141.10#53
Dec 30 15:55:32 IPV6-NKN-DNS named[13123]: error (FORMERR) resolving
'ib.sin1.geoadnxs.com//IN': 64.208.141.11#53
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Intercom - 7331
Have you enabled IPv6 on something today
a list of feature which needs to explicitly enabled,
pl. share the same.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Intercom - 7331
Have you enabled IPv6 on something today...?
___
Please visit https://lists.isc.org
Hi Chris,
Thanks for your response.
I am getting the error message for lot of domains.
Log of error entries are attached.
Is it possible to configure bind so that error message should not be
generated in logs file.
Regards,
Gaurav Kansal
-Original Message-
From
whether this feature is available in Bind or in
any Open-Source Program which in turn can be combined with BIND to achieve
the desired result.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Have you enabled IPv6 on something today
trainer.
And these events are economical too.
Charges was Rs. 15,000/- (Roughly $300) only.
I can't comment how best is ISC Courses because ISC training rarely happens in
INDIA.
As per my opinion, ISC should focus on training events in INDIA also.
Regards,
Gaurav Kansal
-Original
--dport 53 -m state --state NEW -m
recent --update --seconds 60 --hitcount 5 --name DNSQF --rsource -j DROP
If anyone is using iptables for limiting DNS Query per IP, then pl. help me
out.
Thanks and Regards,
Gaurav Kansal
Mob - 9910118448
Happy New Year 2013.
IPv4 is Over
Hi Team,
Thanks for help.
My Firewall was dropping packet size larger than 512 bytes.
Cisco 5580 having ASA 8.3. It is by default blocking my EDNS0 Packet.
Thanks and Regards,
Gaurav Kansal
On 12/31/12, Sten Carlsen st...@s-carlsen.dk wrote:
With the replies you have shown
daemon or in case of system restart?
Sorry to bother you guys but I can't STOP/START the named service at my end.
That's why I am asking this question.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind
-31 09:40:11 UTC
164.100.1.206 sent EDNS buffer size 4096
164.100.1.206 DNS reply size limit is at least 490
Does this mean that my server is not supporting EDNS0 ???
Thanks and Regards,
Gaurav Kansal
Mob - 9910118448
Happy New Year 2013.
IPv4 is Over,
Are your ready for new
I just want to test whether this limit is within my organization.
Is any method available by which I can check this?
Regards,
Gaurav Kansal
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Sten Carlsen
Dear Team,
I want to collect some stats (such as most which zone has queried most,
which DNS Server queries us most and so on) based on my DNS Logs.
Is there any open-source tool available to filter out these statistics using
my dns logs.
Thanks and Regards,
Gaurav Kansal
Mob
for which I am the master?
Thanks
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
2012... Now you can use your 1984 calenders again.:P:P
Please don't print this e-mail until unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network
Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
2012... Now you can use your 1984 calenders again.:P:P
Please don't print this e-mail until unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network
Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
2012... Now you can use your 1984 calenders again.:P:P
Please don't print this e-mail until unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network
Hi Rock,
So have u got success in mapping specific v6 network to defined v4 network?
From: Rock July [mailto:headgea...@yahoo.com]
Sent: Monday, June 04, 2012 10:55 AM
To: Gaurav Kansal; 'Phil Mayers'; bind-users@lists.isc.org
Subject: Re: DNS64 - multiple mapping
Hi Gaurav,
My
Why u are using mapped{} options in dns64 conf ???
What we are doing is:
dns64 2001:db8:5200::/96 {
Clients {
2001:db8:1000:10::/64;
2001:db8:20:10::/64;
...
};
};
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
DNSSEC is done on Authoritative side. Caching DNS only check whether that
particular domain is signed or not, only if that caching DNS is designed to
do so.
As we don't signed our records on fly in DNSSEC, so DNSSEC doesn't increase
the load but ya it increases the size of the response of the
Firstly, where do we get the public key for the DS records?
Can you clarify your question???
Second, why do I get multiple DS records as response? -
You will always get a 2 DS Records in response. One for SHA-1 and second for
SHA-256.
_
dig +dnssec -t DS isc.org
will be highly obliged.
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
Please don't print this e-mail until unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Miek Gieben
Sent: Saturday, February 18, 2012 12:42 AM
To: bind-users@lists.isc.org
Subject: Re: A few conceptual question
-Original Message-
From: Chuck Swiger [mailto:cswi...@mac.com]
Sent: Saturday, February 18, 2012 1:04 AM
To: Gaurav kansal
Cc: bind-users@lists.isc.org
Subject: Re: Query Regarding AKAMAI Working Model
Hi, Gaurav--
On Feb 17, 2012, at 11:15 AM, Gaurav kansal wrote:
I want
Ya.
It also appears the same to me.
-Original Message-
From: Jan-Piet Mens [mailto:jpm...@gmail.com] On Behalf Of Jan-Piet Mens
Sent: Wednesday, January 11, 2012 5:00 PM
To: bind-users@lists.isc.org
Cc: Gaurav kansal
Subject: Re: DNSSEC authentication and ad parameter
DNS OARC runs
Earth.
IPv4 is Over,
Are your ready for new Network.
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
-Original Message-
From: Anand Buddhdev [mailto:ana...@ripe.net]
Sent: Wednesday, January 11, 2012 4:37 PM
To: Gaurav kansal
Cc
until unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network.
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
___
Please visit https
, and it is showing the RRSIG
record in the query answer.
It this is sufficient to prove that .IN Domain is DNSSEC enabled or i have to
check something else.
Please don't print this e-mail until unless you really need, it will save
Trees on Planet Earth.
Thanks n Regards,
GAURAV KANSAL
Did you increment the Serial Number in SOA??
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Gregory Machin
Sent: Tuesday, 20 December, 2011 7:40 AM
To: bind-us...@isc.org
: REFUSED.
So, Is the error is because I am trying to transferring a zone on a
different IP which is not Authoritative for that zone or because of
something else
Thanks and Regards,
Gaurav Kansal
9910118448
___
Please visit https
To: bind-users@lists.isc.org
Subject: Re: Zone Transfer Query
On 05/12/11 12:32, Gaurav Kansal wrote:
Dear All,
I have a master DNS on IPv4 AND slave DNS on IPv6.
I also have a IPv4 address on slave (But only IPv6 address is entered
in NS). Now I am trying to transfer my zone from master to slave
1. When was 1/8 allocated, recently? Maybe you need to update your
bogon filter?
Can we anyhow find when an IP block is assigned to an organization by RIR
???
I have tried WHOIS but didn't find anything for the same.
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
Can you please explain What is the meaning of INVALID RECORD?
Thanks and Regards,
Gaurav Kansal
9910118448
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Michael McNally
: 180.149.63.3#53(180.149.63.3)
;; WHEN: Tue Nov 15 17:59:33 2011
;; MSG SIZE rcvd: 165
[@gaurav ~]#
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from
is not an issue at all. But I
don't understand where exactly is this limitation exists???
Please some elaborate on this.
Thanks and Regards,
Gaurav Kansal
9910118448
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users
Dear Sven,
Client queries a name for Both A and records.
Now, the thing is NAME exist but either A or doesn't exist for this.
Then how can a server reply that no such name??
Thanks and Regards,
Gaurav Kansal
9910118448
From: bind-users-bounces+gaurav.kansal=nic
.
And at the destination point, ipv4 header is removed and packet is forwarded
as per its ipv6 destination.
No issue as at all except slowness in opening some website due to the MTU
size of the tunnels. So keep in mind the MTU size of your tunnel AND fine
tune it for smooth browsing.
Thanks and Regards,
Gaurav
.
Then it will first go to root servers then .in NS server and then nkn.in NS
server.
I wanna show this to my trainees as a POC. Is this possible?
Thanks and Regards,
Gaurav Kansal
NIC
8860785630
9910118448
___
Please visit https://lists.isc.org
this website from ipv4 machine. For this, I need DNS
Translation. Is this is possible?
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind
on ipv4 internet. But I need the reverse one.
I already have my website running on ipv6 and wanna to make it accessible to
ipv4 only network users.
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
will be
down (Or it will stop responding) ???
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
73 matches
Mail list logo
