Re: Does anyone remember ...

2018-11-18 Thread Jaap Akkerhuis
Red Cricket writes: > Does anyone remember a project involving DNS at UCS where someone set up a > dns server(s) to do arithmetic? If so can you reply with a link or > something? > > Thanks I assume you mean Bert's Secure Reverse Polish DNS Calculator (BSRPDNSC)

Re: Monitor DNS queries toward Root severs

2016-05-04 Thread Jaap Akkerhuis
Daniel Dawalibi writes: > > Hello > > > > Is there any tool or configuration that allows us to monitor/graph the > number of outbound DNS queries toward the Root servers? http://dnstop.measurement-factory.com/ jaap ___ Please

Re: dig md - Feature? Bug? What's going on?

2015-07-27 Thread Jaap Akkerhuis
Matthew Horsfall (alh) writes: Attempting to 'dig' for 'md' does something really weird. What am I missing? The dot. Use dig md. so dig doesn't take the md as the obsoleted RR type md for mail destination. There are more of those name clashes such as MX, CH etc. jaap

Re: dnssec validation issue

2015-06-19 Thread Jaap Akkerhuis
Eray Aslan writes: On Thu, Jun 18, 2015 at 07:26:28PM -0700, Carl Byington wrote: On Fri, 2015-06-19 at 11:10 +1000, Mark Andrews wrote: To use the keys in /etc/named.iscdlv.key set dnssec-validation auto; New centos rpms at http://www.five-ten-sg.com/mapper/bind with a default

Re: com.google how did they do that

2015-04-03 Thread Jaap Akkerhuis
Evan Hunt writes: On Thu, Apr 02, 2015 at 09:46:16PM -0500, Grant Taylor wrote: I think I saw a tweet with a figure around $185,000 US Dollars.I wonder if that is on the low side. I believe that's the fee to apply, per domain. Proof of ability to provision and run a registry

Re: AXFR root zone

2014-09-28 Thread Jaap Akkerhuis
I ask because I have indeed written a script which I will be running on the order of once per day, and which needs to be able to suck down a copy of the root zone. May I rely on this continuing to some of the root-servers allow an axfr, but you are probably better off looking at

Re: Building a fresh named.root

2013-02-14 Thread Jaap Akkerhuis
You too are missing some A and records! Here is mine: Use bufsize=4096 or at least something around 700, else the answer doesn't fitand is truncated. jaap dig +bufsize=4096 . ns @198.41.0.4 ; DiG 9.8.4-P1 +bufsize=4096 . ns @198.41.0.4 ;; global options: +cmd ;; Got

Re: Bug in Bind 9.8 or am I doing something wrong?

2011-09-06 Thread Jaap Akkerhuis
Mark, you remark somewhere that: Additionally .local is reserved for mDNS .. Make me wonder who reserved .local and specifically earmaked it to be used for mDNS. Iana http://www.iana.org/domains/root/db/ doesn't seem to know about this. Can you give some references? jaap

Re: caching of expired RRSIG's ?

2011-01-03 Thread Jaap Akkerhuis
I agree for the consequence of those cache misses. But doesnot that mean that RFC4035 needs amended to state : remove atomic entry if *all* its RRSIGs get invalid (because now it states : any = at least one) And it implicitly confirms that these statements in the RFC

Re: dns-sec and Maintaining Human Sanity

2010-08-06 Thread Jaap Akkerhuis
That is, if one can get the latest version to compile under FreeBSD8.0. So far, the configure process is one dependency after another and I have yet to see it actually finish so that is shades of years gone by when installing software was an art on good days. Use the port,