Re: ISC DHCP does not work with BIND 9.10

2015-02-19 Thread JINMEI Tatuya /
At Thu, 19 Feb 2015 19:20:29 +0100, Jiri Popelka jpope...@redhat.com wrote: But it's still not possible to stop them, one has to use 'kill -9'. Any ideas ? Hmm, that's beyond my experiments. (Do you mean you cannot terminate them by SIGTERM?) Hopefully someone else has a clue. -- JINMEI,

Re: historical issues with query performance during AXFR

2013-04-26 Thread JINMEI Tatuya /
At Thu, 25 Apr 2013 13:42:00 -0500, C. B. cbroo...@gmail.com wrote: I was wondering if there were any well known (or otherwise) historical issues with query performance by an authoriative BIND server answering queries for records in a zone it was in the middle of performing an AXFR/IXFR on?

Re: Configure error - BIND10, 1.0.0 on Mac OS X 10.8.2

2013-02-22 Thread JINMEI Tatuya /
At Sat, 23 Feb 2013 09:30:55 +1100, James Brown jlbr...@bordo.com.au wrote: Received an error running configure on Mountain Lion: ./configure checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir

Re: Recommended value for max-cache-size for cache-only shared hosts..

2012-06-05 Thread JINMEI Tatuya /
At Mon, 04 Jun 2012 12:53:31 -0700, Doug Barton do...@dougbarton.us wrote: If your cache is too small the CPU will peg when the cleaning-interval goes. Maybe that's changed but the behavior still exists in the 9.7 branch. Setting your cache size really depends on your query load. On a

Re: Recommended value for max-cache-size for cache-only shared hosts..

2012-06-04 Thread JINMEI Tatuya /
At Fri, 1 Jun 2012 21:14:06 +, Dan Mason danma...@qwest.net wrote: cleaning interval has been effectively no-op since BIND 9.5. Tweaking it won't improve performance, although it shouldn't cause a bad effect either. If your cache is too small the CPU will peg when the

Re: Recommended value for max-cache-size for cache-only shared hosts..

2012-06-01 Thread JINMEI Tatuya /
At Fri, 01 Jun 2012 03:27:22 -0700, Doug Barton do...@dougbarton.us wrote: One thing that can help is to set the cleaning interval more aggressively, but that can also cause performance problems for your clients if you are CPU bound, so use that option with care, and monitor the results after

Re: View-specific logging

2012-01-04 Thread JINMEI Tatuya /
At Mon, 02 Jan 2012 09:42:29 +, Florian Weimer fwei...@bfk.de wrote: I would like to switch on query logging for specific views only. Is this possible using BIND 9.7 (or any other BIND version, for that matter)? As far as I know it's not possible with any version of BIND 9 (and not only

Re: Experience with DDNS (RFC 2136)

2011-10-13 Thread JINMEI Tatuya /
At 11 Oct 2011 13:57:38 +0100, Chris Thompson c...@cam.ac.uk wrote: Maybe an off topic in this thread, but out of curiosity, is there any specific reason you don't use the database as the direct source of the zone with BIND 9's dlz or PowerDNS? In general it will be slower, and I can't

Re: Experience with DDNS (RFC 2136)

2011-10-07 Thread JINMEI Tatuya /
At 06 Oct 2011 20:26:48 +0100, Chris Thompson c...@cam.ac.uk wrote: Are you willing to share the stories of your DDNS deployments, maybe including approximate number of zones, records, update frequencies, etc.? We converted all our regular DNS updating operations to use dynamic updates in

some questions about BIND 9's xfrin.c code...

2011-10-04 Thread JINMEI Tatuya /
I've been looking at BIND 9's IXFR(-in) implementation and encountered a few questions. I was not sure if these should be considered a bug, so I'm asking these here before actually filing a bug report. The source file in question is lib/dns/xfrin.c. 1. In xfrin_recv_done(), if an RR is found in

Re: Stats ouput 9.3 vs 9.7

2011-09-07 Thread JINMEI Tatuya /
At Wed, 7 Sep 2011 10:13:28 -0500, Baird, Josh jba...@follett.com wrote: Just upgraded some authoritative boxes to RHEL6, thus upgrading to BIND 9.7.3. On RHEL5 (BIND 9.3.x), I had scripts that parsed the output of the named.stats file, and piped them through net-snmpd so my NMS could

Re: BIND 9.8.0b1 Released Today

2011-01-22 Thread JINMEI Tatuya /
At Sat, 22 Jan 2011 20:38:46 +0100, Florian Weimer f...@deneb.enyo.de wrote: Does this work with DNSSEC if one loads an explicit trust anchor, even if in the world view the trust anchor is missing? I'm afraid I don't understand the question. Could you be more specific, e.g., by using

Re: BIND 9.8.0b1 Released Today

2011-01-21 Thread JINMEI Tatuya /
At Fri, 21 Jan 2011 14:00:19 -0500 (EST), Paul Wouters p...@xelerance.com wrote: * BIND now supports a new zone type, static-stub. This allows the administrator of a recursive nameserver to force queries for a particular zone to go to IP addresses of the administrator's choosing, on a

Re: maximum number of FD events (64) received

2010-09-28 Thread JINMEI Tatuya /
At Mon, 27 Sep 2010 13:27:01 +0400, Samer Khattab skhat...@gmail.com wrote: I'm using Bind as a caching name server and serving around 2000 req per second, and recently have the following messages showing up from time to time in the general.log. 27-Sep-2010 10:45:47.639 sockmgr

Re: list zones

2010-08-03 Thread JINMEI Tatuya /
At Tue, 3 Aug 2010 12:39:05 +0300, Mihamina Rakotomandimby miham...@gulfsat.mg wrote: Manao ahoana, Hello, Bonjour, Without grepping the configuration files from the system shell, is it possible to lists all the master zones on a running bind9? What tool with? If you enable zone-statistics

Re: Bind hang out when named reach to 5-600 Mb

2010-07-20 Thread JINMEI Tatuya /
At Tue, 20 Jul 2010 01:18:54 -0700 (PDT), khanh rua duonghoahoc_k4...@yahoo.com wrote: I mean hang is bind still running but it cannot response query from user. I suspect it still responds to queries that don't require recursion, e.g. version.bind txt ch. Is that correct? --- JINMEI, Tatuya

Re: Bind hang out when named reach to 5-600 Mb

2010-07-13 Thread JINMEI Tatuya /
At Thu, 8 Jul 2010 02:30:25 -0700 (PDT), khanh rua duonghoahoc_k4...@yahoo.com wrote: I install bind as a cache server on Solaris 10, Sun Sparc T5140. It has problem, bind always hang out when named reach to 5-600 Mb ('prstat' check). I have several servers and all have this problem even when

Re: Bind 9.7.0-P2 Bus Error - Solaris 9

2010-06-14 Thread JINMEI Tatuya /
At Mon, 14 Jun 2010 09:06:50 -0500 (CDT), b19...@anl.gov wrote: Do I need to file an official bug report? Yes, please. --- JINMEI, Tatuya Internet Systems Consortium, Inc. ___ bind-users mailing list bind-users@lists.isc.org

Re: Bind 9.7.0-P2 Bus Error - Solaris 9

2010-06-14 Thread JINMEI Tatuya /
At Mon, 14 Jun 2010 09:06:50 -0500 (CDT), b19...@anl.gov wrote: This morning on a Solaris 9 system, I issued these comands: I believe I found the cause of the bug. Please try the patch copied below. --- JINMEI, Tatuya Internet Systems Consortium, Inc. Index: dighost.c

Re: odd behaviour on caching ns with views

2010-06-13 Thread JINMEI Tatuya /
At Tue, 8 Jun 2010 11:03:55 +0200, Torsten t...@the-damian.de wrote: Everything works perfectly okay except queries for 1.0.0.127.in-addr.arpa and 0.0.0.0.in-addr.arpa. These are refused by the caching server (denied entries in default log). Asking those queries on an identical server without

Re: disable dnssec in bind resolver

2010-06-04 Thread JINMEI Tatuya /
At Fri, 4 Jun 2010 16:50:26 +0200, Jan Buchholz 96de...@googlemail.com wrote: how i can disable dnssec in the bind resolver ? My firewall don´t let packets with D0 flag through. I´ve tried 'dnssec-enable no;' , but this don´t fix the problem. I believe that only disables *serving*

Re: rndc flush(more-than-one)name

2010-06-03 Thread JINMEI Tatuya /
At Thu, 3 Jun 2010 15:21:08 +0200, Matus UHLAR - fantomas uh...@fantomas.sk wrote: rndc flushnamespace / rndc flushname -recurse would have to walk the tree and remove each entry. This can be time consuming. is this planned feature or does it already work somewhere? This is a

Re: clarification on AXFR

2010-06-03 Thread JINMEI Tatuya /
At Thu, 3 Jun 2010 11:39:30 +0530, rams brames...@gmail.com wrote: During AXFR of a zone, the zone.dbfile is not created till the AXFR completes. Till AXFR completes, the file name will be some value as 456eefwfc. Is it correct behavior? Yes, that's the intended behavior. --- JINMEI, Tatuya

Re: Understanding Total QPS from named stats

2010-05-24 Thread JINMEI Tatuya /
At Thu, 20 May 2010 19:37:34 -0700 (PDT), ivan jr sy ivan...@yahoo.com wrote: But is there a best practice in calculating it from the named stats? Can the dynamic updates, notify and such be considered as queries? In named.stats you copied, no: 5818360608 IPv4 requests received

Re: Explanation of a resolver.c error message

2010-05-18 Thread JINMEI Tatuya /
At Tue, 18 May 2010 12:07:12 -0600, Keith Christian keith1christ...@gmail.com wrote: Could anyone offer an explanation for what condition(s) trigger this error in older, out of date versions of BIND, specifically, BIND 9.5.1b1 ? resolver.c:5617: REQUIREquery) != ((void *)0)) (((const

Re: KAMINSKY vulnerability !!

2010-05-10 Thread JINMEI Tatuya /
At Mon, 10 May 2010 10:05:47 -0400, P.A ra...@meganet.net wrote: Today I came in and both my name server stopped answering queries. I restarted the servers a couple of times and they are now up. I have posted the primary/slave look below. My question is did I just get rid by the kaminsky

Re: Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-05-03 Thread JINMEI Tatuya /
At Thu, 29 Apr 2010 14:53:44 -0700, Dale Kiefling dale.kiefl...@cbs.com wrote: We have a Bind 9.7.0-P1 instance that is throwing the following errors: 21-Apr-2010 16:59:00.173 general: error: socket: file descriptor exceeds limit (1024/1024) The fact that the FD limit is 1024 suggests your

Re: Zone Statistics in Bind9.7.0

2010-03-25 Thread JINMEI Tatuya /
At Wed, 10 Mar 2010 14:45:48 +0100, Dangl, Thomas thomas.t.da...@siemens.com wrote: in Bind 9.6.2 the zone statistics looked like that: Now with Bind9.7.0 it only covers zone name4.3.2.1.e164.arpa/IN/name rdataclassIN/rdataclass serial8/serial

Re: BIND 9.6.1-P1 crashing

2010-01-08 Thread JINMEI Tatuya /
At Tue, 05 Jan 2010 08:24:16 +0100, Dario Miculinic dario.miculi...@t-com.hr wrote: I dont't have the same core dump, but this is from one that happend yesterday: Thanks, but unfortunately the detailed stack traces don't seem to provide a useful hint for the race. If you can help debug this

Re: [BUG] bind crash in statschannel.c

2010-01-08 Thread JINMEI Tatuya /
At Tue, 5 Jan 2010 10:00:34 +0100, Marinescu Paul dan pauldan.marine...@epfl.ch wrote: bind (9.6.1-P2) dies when one tries to retrieve statistics via HTTP from the statistcs-channel feature if an underlying call to libxml fails (returns a NULL pointer) at statschannel.c:720 - writer =

Re: File Descriptor limit and malfunction bind

2010-01-07 Thread JINMEI Tatuya /
At Tue, 05 Jan 2010 10:36:27 +0200, Imri Zvik im...@inter.net.il wrote: i have a high load DNS server running bind 9.4.3 on RH - yesterday we experienced a problem with the bind  (the bind froze) , and when looking at the logs i saw the following error : named error: socket: file

Re: BIND 9.6.1-P1 crashing

2010-01-04 Thread JINMEI Tatuya /
At Wed, 30 Dec 2009 10:23:17 +0100, Dario Miculinic dario.miculi...@t-com.hr wrote: I'm administrating 4 DNS servers running CentOS release 5.4 and Red Hat Enterprise Linux Server release 5.2. with BIND version 9.6.1-P1. On 3 of them BIND crashed 7 times in last 10 days. There's nothing in

Re: Feature request - disable internal recursion cache

2009-11-03 Thread JINMEI Tatuya /
At Mon, 02 Nov 2009 18:24:54 +0300, Dmitry Rybin kirg...@corbina.net wrote: Kevin Darcy wrote: Daemon as unbound, pdns-recursor - much faster in recursion queries, that bind. :( ___ So, you don't cache locally, you forward to another daemon

Re: call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-27 Thread JINMEI Tatuya /
At Mon, 26 Oct 2009 11:42:53 -0400, Gerry Scott gscot...@gmail.com wrote: OpenSolaris build 125 includes execinfo.h within the /usr/include directory. Also, backtrace() functionality has been included within the OS since build 63.

Re: call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-26 Thread JINMEI Tatuya /
At Thu, 22 Oct 2009 10:09:12 -0400, Gerry Scott gscot...@gmail.com wrote: Backtrace executes successfully on the latest build of OpenSolaris for SPARC (snv_125) with gcc version 3.4.6 # uname -a SunOS nemesis 5.11 snv_125 sun4u sparc SUNW, 5-slot Sun Enterprise E3500 # gcc -v Reading

Re: named error messages

2009-10-24 Thread JINMEI Tatuya /
At Fri, 16 Oct 2009 08:42:55 +0200, Toto t...@the-damian.de wrote: we're getting quite a lot of messages like the ones below recently. The server is a resolver running bind 9.6.1-P1 (compiled from source on debian etch). 16-Oct-2009 08:28:50.430 dispatch: dispatch 0xeed08400: shutting down

Re: call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-22 Thread JINMEI Tatuya /
At Wed, 21 Oct 2009 20:19:59 -0400, Dave Knight d...@knig.ht wrote: If the test fails on your platform, please report it to bind9-b...@isc.org, including the OS, its version, and hardware architecture (x86, amd64, sparc, etc). Possibly also useful to report success here so that many

call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-21 Thread JINMEI Tatuya /
Dear beta testers, At Tue, 20 Oct 2009 20:29:20 +, Evan Hunt e...@isc.org wrote: BIND 9.7.0b1 is now available. [snip] - On some platforms, named and other binaries can now print out a stack backtrace an assertion failure, to aid in debugging. I'd like

Re: call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-21 Thread JINMEI Tatuya /
At Wed, 21 Oct 2009 15:50:00 -0700, JINMEI Tatuya jin...@isc.org wrote: On success, backtrace_test simply exits without any output (I know it's not a good UI); if something goes wrong it will dump some warning messages to stderr and exit with a non-0 exit code. If the test fails on your

Re: acache cleaning (not periodic)

2009-09-03 Thread JINMEI Tatuya /
At Wed, 19 Aug 2009 16:52:57 +0200, Matus UHLAR - fantomas uh...@fantomas.sk wrote: I have authoritative-only server with enough of memory to run with acache. I have set acache-cleaning-interval to 0 and I am wondering if it's safe when there will not be any periodic cleaning. If a domain is

Re: 9.7.0a2 - deny-answer-addresses

2009-08-26 Thread JINMEI Tatuya /
At Tue, 25 Aug 2009 22:08:11 +0200, clemens fischer ino-n...@spotteswoode.dnsalias.org wrote: How about the patch copied below? With this it would fail like this: 24-Aug-2009 16:46:41.334 /Users/jinmei/src/isc/bind9-current/bin/named/named.conf:22: failed to add dnsbl-1.uceprotect.net

Re: no more recursive clients: quota reached

2009-08-26 Thread JINMEI Tatuya /
At Wed, 26 Aug 2009 13:37:09 -0400, Lisa Casey l...@jellico.net wrote: The lins recursive clients: 564/1000 bothers me, did my change to /etc/named.conf not get oicked up? It appears that the max recursive clients is still at bind's default of 1000. True. It's also true that

Re: 9.7.0a2 - deny-answer-addresses

2009-08-24 Thread JINMEI Tatuya /
At Fri, 21 Aug 2009 10:42:31 -0500 (CDT), Jeremy C. Reed jr...@isc.org wrote: deny-answer-addresses { 127/8; 192.168/16; 10/8; 172.16/12; } except-from { zen.spamhaus.org; dnsbl-1.uceprotect.net; dnsbl-1.uceprotect.net; This is repeated, resulting in

Re: attach-cache sample

2009-08-14 Thread JINMEI Tatuya /
At Fri, 14 Aug 2009 10:30:02 +0400, Dmitry Rybin kirg...@corbina.net wrote: Have you read the ARM? It may not be sufficient (while I personally believe it's quite extensive), but at least there *is* documentation. OK, Please explain what configuration parameter mismatch: view world

Re: attach-cache sample

2009-08-13 Thread JINMEI Tatuya /
At Thu, 13 Aug 2009 17:03:53 +0400, Dmitry Rybin kirg...@corbina.net wrote: Have anybody test option attach-cache? There is no documentation about it. :( Have you read the ARM? It may not be sufficient (while I personally believe it's quite extensive), but at least there *is* documentation.

Re: cache vs acache in bind 9.4.3

2009-08-04 Thread JINMEI Tatuya /
At 04 Aug 2009 12:49:41 -0400, LENA MATUSOVSKAYA, BLOOMBERG/ 731 LEXIN lmatusovs...@bloomberg.net wrote: Can you pls explain the difference between cache and acache (additional cache) under bind 9.4.3? Is it possible to see the content of each and how? cache is a widely-common DNS cache (I

Re: Dig shows wrong ip

2009-08-03 Thread JINMEI Tatuya /
At 03 Aug 2009 11:52:10 +0100, Chris Thompson c...@cam.ac.uk wrote: will believe this answer (and cache it). This would only be proper behaviour if the *.gtld-servers.net were slaving (possibly stealth slaving) potomacnetworks.com - which of course they aren't, but how is the poor recursive

Re: Bind9.6.0 Statistics Output

2009-08-03 Thread JINMEI Tatuya /
At Thu, 30 Jul 2009 09:53:13 +0200, Dangl, Thomas thomas.t.da...@siemens.com wrote: I collect statistics data via the http interface and parse the XML file. There are some differences of the layout of the XML result between Bind9.5 and Bind9.6. To be precise, there have been substantial

Re: socket.c:4524: unexpected error in BIND 9.4.3 P3

2009-07-31 Thread JINMEI Tatuya /
At Thu, 30 Jul 2009 22:16:47 +0700, Le Vu lev@gmail.com wrote: I have updated BIND from 9.4.2-P2 to 9.4.3-P3 to mitigate the Dynamic Update DOS attack. I have noted a lot of errors from socket.c (which I have never seen before with v9.4.2) Jul 30 06:25:18 DNS1 named[2]:

Re: idsable ipv6 in config?

2009-07-30 Thread JINMEI Tatuya /
At Thu, 30 Jul 2009 09:02:51 +0200, Gilles Massen gilles.mas...@restena.lu wrote: Is there a way to prevent Bind (9.6) from using ipv6 transport for making queries, by an entry in the config file rather than by 'named -4'? No. --- JINMEI, Tatuya Internet Systems Consortium, Inc.

Re: idsable ipv6 in config?

2009-07-30 Thread JINMEI Tatuya /
At Thu, 30 Jul 2009 12:10:14 +0200, Gilles Massen gilles.mas...@restena.lu wrote: Is there a way to prevent Bind (9.6) from using ipv6 transport for making queries, by an entry in the config file rather than by 'named -4'? No. Ok, thanks. In that case I would humbly suggest to

Re: Bind 9.6.1: skipping zone transfer, but why ?

2009-07-28 Thread JINMEI Tatuya /
At Wed, 22 Jul 2009 15:56:38 +0200, Jan Hansen bi...@nhl-data.dk wrote: As I wrote in the post Master is unreachable (cached), I've switched to windows server 2003, which currently *seem* to have a positive effect. I haven't seen the behaviour yet after the switch, but Ian Tait sees this

Re: A smarter stub resolver??

2009-07-23 Thread JINMEI Tatuya /
At Wed, 15 Jul 2009 10:04:30 -0400, Taylor, Gord gord.tay...@rbc.com wrote: Is there a smarter stub resolver that acts more like a DNS server using Round Trip Time (RTT) to pick the best DNS server from the list? We run well over 500 xNix boxes (and growing), so running DNS on each of these

Re: Bind 9.6.1: skipping zone transfer, but why ?

2009-07-20 Thread JINMEI Tatuya /
At Mon, 20 Jul 2009 16:13:03 +0100, Ian Tait ia...@thoughtbubble.net wrote: I see exactly this problem too on windows 2003. Lookups happen normally after this behaviour occurs though. Restarting bind cures the problem. I haven't bothered to debug the issue as yet :-) We've found a bug that

Re: Bind 9.6.1: skipping zone transfer, but why ?

2009-07-20 Thread JINMEI Tatuya /
At Mon, 20 Jul 2009 12:41:24 -0700, JINMEI Tatuya jin...@isc.org wrote: We've found a bug that can cause this problem. We're working on a complete fix to the problem, but a workaround patch copied below may work for you in the mean time. Sorry that patch was incorrect. Copying the correct

Re: bind 9.6.1 under perform after running for a couple of hours

2009-07-09 Thread JINMEI Tatuya /
At Wed, 08 Jul 2009 21:24:17 +0300, Imri Zvik im...@inter.net.il wrote: After a couple of hours, performance of bind 9.6.1 suddenly drops. While the server remains responsive, the response time increases, the rate of the failed queries increases, and CPU/load average usage increases.

Re: Bind 9.6.1 stops after few hours.

2009-07-07 Thread JINMEI Tatuya /
At Tue, 7 Jul 2009 11:55:34 -0400, Rob Payne rnspa...@the-paynes.com wrote: After an upgrade to 9.6.1 we noticed the Bind daemon stops after few hours. What do you mean by stop? Did the daemon crash, simply not respond to queries, or something else? I don't know if this is the

Re: Bind 9.6.1 stops after few hours.

2009-07-05 Thread JINMEI Tatuya /
At Fri, 3 Jul 2009 17:31:57 -0300, Laurence Stendard lstend...@diveo.net.br wrote: After an upgrade to 9.6.1 we noticed the Bind daemon stops after few hours. What do you mean by stop? Did the daemon crash, simply not respond to queries, or something else? From which version did you upgrade

Re: How See what is Cached?

2009-07-05 Thread JINMEI Tatuya /
At Sun, 5 Jul 2009 15:01:29 +0300, Alans batpowe...@yahoo.co.uk wrote: One more question regarding cache, ns1 cache file is 60+ MB while ns2 cache file is 5 MB!! How to improve this issue? What do you mean by improve? Having both servers cache (approximately) the same amount of data? If

Re: Bind-9.5.0-P2

2009-06-26 Thread JINMEI Tatuya /
At Fri, 26 Jun 2009 10:55:07 -0400, Del Solar Navarrete Maria Cristina mdelso...@entel.cl wrote: I have Red Hat Enterprise Linux Server release 5 (Tikanga) Okay, then if your kernel supports epoll (at least all 2.6 kernels should support it as far as I know), 9.5.1 should work much better for

Re: Bind-9.5.0-P2

2009-06-25 Thread JINMEI Tatuya /
At Thu, 25 Jun 2009 13:05:27 -0400, Del Solar Navarrete Maria Cristina mdelso...@entel.cl wrote: Y have a problem with bind, part of file mesagges is: Please use 9.5.1. 9.5.0-P2 is an emergency security fix version with limitation on performance/scalability. It should still work (or have

Re: SERVFAIL debugging

2009-06-24 Thread JINMEI Tatuya /
At Wed, 24 Jun 2009 10:13:51 +0400, Dmitry Rybin kirg...@corbina.net wrote: new experimental feature just for that purpose: Is this feature going to be back ported to 9.4 and 9.5 releases as well? For 9.5, yes. For 9.4, not according to the current plan. named[87071]: 22-Jun-2009

Re: SERVFAIL debugging

2009-06-22 Thread JINMEI Tatuya /
At Mon, 22 Jun 2009 13:30:42 +0400, Dmitry Rybin kirg...@corbina.net wrote: Please try 9.6.1b1, which we expect to be released next week. It has a new experimental feature just for that purpose: Is this feature going to be back ported to 9.4 and 9.5 releases as well? For 9.5, yes.

Re: Tracking down validation failures

2009-06-12 Thread JINMEI Tatuya /
At 12 Jun 2009 17:50:39 +0100, Chris Thompson c...@cam.ac.uk wrote: (They don't add up to as much as the statistics-channel ValFail counter is increasing by, though.] It's not surprising: if validation attempt succeeds with one authoritative server after some validation failures with other

Re: Bind is hanging on CentOS 4.4

2009-05-29 Thread JINMEI Tatuya /
At Fri, 29 May 2009 13:56:40 -0400, Jesse Cabral jcab...@mtsolutions.net wrote: I just tried that and re-ran the ./configure --disable-threads Then I killed the named pid and started named: ps -Leo user,pid,ppid,lstart,lwp,nlwp,psr,args |egrep LWP|named USER PID PPID

Re: Bind is hanging on CentOS 4.4

2009-05-29 Thread JINMEI Tatuya /
At Fri, 29 May 2009 15:41:26 -0400, David Ford da...@blue-labs.org wrote: Every few releases I try to add threads back in and get the same results. Both on my 32bit linux and 64bit linux machines (current gentoo). Named crashes or hangs. Jeff Lightner wrote: This may have something to

Re: servfail on 9.6.1rc1

2009-05-28 Thread JINMEI Tatuya /
At Thu, 28 May 2009 17:12:54 +0400, Anatoly Pugachev ma...@team.co.ru wrote: Installed bind-9.6.1rc1 for the query-errors category debugging. Server is a usual recursive server on solaris 10 x86 with 4Gb of RAM. Named was compiled with SunStudio 12 compiler suite as: CFLAGS=-m32 -xarch=sse2

Re: AW: file descriptors and max-clients-per-query

2009-05-26 Thread JINMEI Tatuya /
At Thu, 14 May 2009 17:46:42 +0200, Philippe Maechler pmaechler...@glattnet.ch wrote: I'm running a bind 9.4.2-p2 and a 9.5.1-P1 both on a FreeBSD 6.x box as caching servers. let's call them ns1 and ns2 :P short after we shutdown server one we get error messages on the

Re: Bind Statistics questions

2009-05-05 Thread JINMEI Tatuya /
At Tue, 5 May 2009 11:11:13 +0100, Nuno Ribeiro nribeir...@gmail.com wrote: I have some doubts and I would like clarify them: - Bind ( version 9.5) provides lots of statistics information and provides two interfaces for users to get access to it (file dump and HTTP access). For what I see and

Re: Scale BIND over multiple kernels effectively

2009-04-30 Thread JINMEI Tatuya /
At Thu, 30 Apr 2009 11:46:05 -0700, Jonathan Petersson jpeters...@garnser.se wrote: I've been running some dnsperf tests on a couple of servers I have resulting in some interesting behaviors. [...] Any input would be valuable, thanks! Roughly summarizing (ignoring many details), what you

Re: Scale BIND over multiple kernels effectively

2009-04-30 Thread JINMEI Tatuya /
At Thu, 30 Apr 2009 15:41:03 -0700, Jonathan Petersson jpeters...@garnser.se wrote: in light of this is it possible to tell BIND how many threads it should utilize or is it a ALL or ONE case? Do you mean the -n command line option? usage: named [-4|-6] [-c conffile] [-d debuglevel] [-f|-g]

Re: request timeout

2009-04-29 Thread JINMEI Tatuya /
At Tue, 28 Apr 2009 00:42:29 -0700, Jeff Pang hostmas...@duxieweb.com wrote: When a Bind requests another Bind for a name resolving, what's the timeout value for this resuest? I mean, within how many seconds peer Bind doesn't answer it, this Bind will give up the query? There are various

Re: approach on parsing the query-log file

2009-04-28 Thread JINMEI Tatuya /
At Tue, 28 Apr 2009 10:01:02 -0700, Jonathan Petersson jpeters...@garnser.se wrote: So I gave tail a try in perl both via File::Tail and by putting tail -f in a pipe. Neither seems to be handling the logrotation well. In my case I'm running a test sending 1 million queries, of those half is

Re: IPV6 Bind doubt

2009-04-23 Thread JINMEI Tatuya /
At Thu, 23 Apr 2009 20:34:23 +0100, Nuno Ribeiro nribeir...@gmail.com wrote: I will try to clarify my doubt based in your comments: Bind will be configured to listen IPv4 and IPv6 queries. When receiving a query via IPv6 it can forward only via IPv4? I was considering to forward the query to

Re: IPV6 Bind doubt

2009-04-22 Thread JINMEI Tatuya /
At Wed, 22 Apr 2009 12:12:51 +0100, Nuno Ribeiro nribeir...@gmail.com wrote: I have a doubt about bind and I would like you, if possible, to clarify it to me: It is possible to a bind server to receive a DNS query in IPV6, and forward it using IPV4 to another server? If yes, how can I

Re: can bind filter the result

2009-04-20 Thread JINMEI Tatuya /
At Mon, 20 Apr 2009 14:55:56 +0800, Ken Lai soulhacker...@gmail.com wrote: let's take an example. my DNS server called SrvA, the outer DNS server called SrvB. normally, the client sent the query to SrvA, and SrvA forwards it to SrvB. and SrvA return a result which came from SrvB to the

Re: Bind 9 Configuration and Statistics

2009-04-13 Thread JINMEI Tatuya /
At Sat, 11 Apr 2009 20:59:18 -0600, ic.nssip ic.ns...@northwestel.net wrote: I have only a little question about Bind 9 Configuration and Statistics page. I activated statistics-channels on a 9.5.0-P2 and a 9.6.0 DNS Server. I'm not getting any records for: - Outgoing Queries from View

Re: nameserver not responding (servfail)

2009-04-07 Thread JINMEI Tatuya /
At Tue, 7 Apr 2009 13:47:06 +0800, David Cake d...@difference.com.au wrote: It loads all domains fine on startup, and sends and receives notifies, but any attempts to lookup domains from the server itself seem to fail, returning servfail. Could you be more specific about any

Re: rdataset.c:652: REQUIRE(dbp != ((void *)0) *dbp == ((void *)0)) failed

2009-04-07 Thread JINMEI Tatuya /
At Tue, 07 Apr 2009 07:54:38 +0100, Howard Wilkinson how...@cohtech.com wrote: We have had a failure of one of our BIND installations this morning. The failure happened at 01:51:45 BST on a machine that was effectively idle at the time. The previous messages logged by 'named' were 30

Re: Unreachable IP in allow transfer

2009-04-07 Thread JINMEI Tatuya /
At Tue, 07 Apr 2009 12:34:46 -0400, Barry Margolin bar...@alum.mit.edu wrote: This look more like the result of masters { 123.123.123.123;}. If a slave can't connect to the master, it will time out when it tries to perform a zone transfer. I'm not sure why this would cause slow response

Re: how bind supports multi-processors?

2009-03-18 Thread JINMEI Tatuya /
At Wed, 18 Mar 2009 22:48:34 +0100, Florian Weimer f...@deneb.enyo.de wrote: Is threads stable enough in product use of Bind? It's stable on mainstream architectures. GNU/Linux on i386 and amd64 is fine in general. GNU/Linux on hppa, mips(el), ia64, and others is problematic. The hppa

Re: how bind supports multi-processors?

2009-03-18 Thread JINMEI Tatuya /
At Wed, 18 Mar 2009 23:11:07 +0100, Florian Weimer f...@deneb.enyo.de wrote: That's an optional feature, even if it's enabled by default when found to be available by autoconf. If the atomic operations cause stability problems, you can disable them by rebuilding BIND9 with

Re: SERVFAIL debugging

2009-03-13 Thread JINMEI Tatuya /
At Fri, 13 Mar 2009 17:31:37 -0400, R Dicaire kri...@gmail.com wrote: Please try 9.6.1b1, which we expect to be released next week. It has a new experimental feature just for that purpose: Is this feature going to be back ported to 9.4 and 9.5 releases as well? For 9.5, yes. For 9.4,

Re: statschannel assertion failure

2009-02-26 Thread JINMEI Tatuya /
At Thu, 26 Feb 2009 07:58:29 -0600, Timothy Holtzen t...@nebrwesleyan.edu wrote: No it is a single processor on both production and test systems. Production is an Opteron and the test system is an Athlon64 but both are single core processors. Just to be sure I did a configured with a

Re: statschannel assertion failure

2009-02-25 Thread JINMEI Tatuya /
At Wed, 25 Feb 2009 14:17:27 -0600, Timothy Holtzen t...@nebrwesleyan.edu wrote: I applied the patch on my test system and ran my little test using wget and this is the output I got in the log Feb 25 13:51:12 arthur named[17030]: libxml2 Error: Input is not proper UTF-8, indicate encoding !

Re: rndc reconfig issue

2009-02-24 Thread JINMEI Tatuya /
At Tue, 24 Feb 2009 14:47:17 +0100, Ronni Jensen r...@mvb.dk wrote: Every night I have a perl script generate a config file which contains approximately 5000 zones at the moment, but this will vary in size as zones are added/removed. However, when I put include /etc/special-zones.conf; into

Re: File descriptors

2009-02-24 Thread JINMEI Tatuya /
At Tue, 24 Feb 2009 13:14:27 -0500, Todd canada...@gmail.com wrote: We ran into an issue this morning with some caching DNS servers. One of the zones we heavily rely on was having DNS issues, which appears to have been causing very slow responses to us. The servers in question handle about

Re: File descriptors

2009-02-24 Thread JINMEI Tatuya /
At Tue, 24 Feb 2009 15:10:36 -0500, Todd canada...@gmail.com wrote: The servers in question are running a mix of BIND versions .. 9.2.3, 9.2.4, 9.3.2, 9.3.4, 9.4.1, 9.4.2-p2, the majority are 9.3.4 and 9.4.2-P2 Then are confused somehow. Among above, the only version that could cause the too

Re: statschannel assertion failure

2009-02-24 Thread JINMEI Tatuya /
At Tue, 24 Feb 2009 14:26:45 -0600, Timothy Holtzen t...@nebrwesleyan.edu wrote: Hi guys I'm getting this assertion failure again under Bind 9.5.1-P1 on RHEL 5.2. Feb 23 22:00:01 foo named[18476]: statschannel.c:696: INSIST(xmlrc = 0) failed Feb 23 22:00:01 foo named[18476]: exiting (due

Re: isc_socket_create: fcntl/reserved: Too many open file

2009-02-19 Thread JINMEI Tatuya /
At Thu, 19 Feb 2009 23:29:44 +0530, kamal pandy kmlpa...@gmail.com wrote: I am running ISC-9.3.5P1 on my HP-UX-IA machine, and I am seeing this message isc_socket_create: fcntl/reserved: Too many open files in syslog. (I've sent the same (but a bit more detailed) response to bind9-bugs)

Re: ResendRE: ns_type question

2009-02-17 Thread JINMEI Tatuya /
At Sun, 15 Feb 2009 00:34:38 -0800, Jack Tavares j.tava...@f5.com wrote: Any suggestions on this? [snip] I have downloaded libbind6.0b1 My question is; the arpa/nameser.h file included does not include type definitions for DNSKEY (or other dnssec rr types) in the ns_type enum. am I

Re: Disable cache in bind 9.6

2009-02-04 Thread JINMEI Tatuya /
At Wed, 04 Feb 2009 11:51:10 +0300, Dmitry Rybin kirg...@corbina.net wrote: max-cache-size 800M; It's way too much, if this applies to all of the 50 views. Oh! I decrease memory to 16Mb. Okay, and according to this: : Started at Feb 3 00:51 (Now Feb 4 11:15:37) MSK : Startup mem:

Re: Bind-9.5.1 logging

2009-02-04 Thread JINMEI Tatuya /
At Wed, 4 Feb 2009 12:53:20 -0500, Peter Fraser petros.fra...@gmail.com wrote: Ok thanks, I did see that file and I did post some of the output. So what else do I need to do to get say query or security logs into the files I have specified? Regarding query logs, you need to configure it

Re: Bind-9.5.1 logging

2009-02-02 Thread JINMEI Tatuya /
At Fri, 30 Jan 2009 22:06:57 -0500, Peter Fraser petros.fra...@gmail.com wrote: I'm trying to configure bind-9.5 logging to help troubleshoot a problem. I put this in named.conf logging { channel myfile { file /etc/namedb/dns.log; severity info; print-time

Re: Is per view logging possible with bind?

2009-02-02 Thread JINMEI Tatuya /
At Sat, 31 Jan 2009 08:31:35 -0500 (EST), Justin Piszcz jpis...@lucidpixels.com wrote: I have multiple views: internal external localhost Is it possible instead of seeing this in the logs: It's impossible if my understanding of the implementation is correct. --- JINMEI, Tatuya

Re: Upgrade 9.5.1-P1 to 9.6.0.P1 question

2009-02-02 Thread JINMEI Tatuya /
At Mon, 2 Feb 2009 12:34:06 -0800 (PST), Terpasaur emery.rudo...@gmail.com wrote: I successfully and effortlessly upgraded two Bind servers running 9.5.1-P2 directly to 9.6.0-P1, simply by running ./configure make make install Although this worked just fine, I am now planning to perform

Re: Is per view logging possible with bind?

2009-02-02 Thread JINMEI Tatuya /
At Mon, 2 Feb 2009 15:13:54 -0800 (PST), Gregory Hicks ghi...@hicks-net.net wrote: Is it possible instead of seeing this in the logs: It's impossible if my understanding of the implementation is correct. I may have mis-understood here, but I have TWO views and get logging by view,

Re: referral doubt

2009-01-29 Thread JINMEI Tatuya /
At Thu, 29 Jan 2009 15:39:01 +, Luis Silva luisfilsi...@gmail.com wrote: I have a question related with the contacting external servers. If my server receives an referral answer from an external server with 3 NS records but just 1 A additional record, what is the normal behaviour? is the

Re: Bind 9 query logging

2009-01-29 Thread JINMEI Tatuya /
At Thu, 29 Jan 2009 14:33:31 -0500, cod3fr3ak rvc.pobox+unixli...@gmail.com wrote: channel query_log { file /var/adm/dns-logs/dns_query.log versions 7 size 2G; severity debug 3; print-category yes;

Re: Disable cache in bind 9.6

2009-01-26 Thread JINMEI Tatuya /
At Thu, 22 Jan 2009 09:12:11 +0300, Dmitry Rybin kirg...@corbina.net wrote: +50 views of zone data + memory for 10 clients + You have a 32bit build which will give a maximum of 2G data. You are just trying to cram too much into too small a place. OK. May be you

  1   2   >