Re: invalid requests for dns_registration.*

In article mailman.974.1269852204.21153.bind-us...@lists.isc.org, Matus UHLAR - fantomas uh...@fantomas.sk wrote: on one of my nameservers I see many of these messages in log files: Mar 29 07:59:07 gtssk1 named[5012]: security: error: client 195.168.29.200#65293: view gtsi: check-names

Re: problem with notifies

find out why it sends notify to itself.. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I don't have lysdexia. The Dog wouldn't allow

invalid requests for dns_registration.*

for nextra.sk, but not for in.nextra.sk, so I think there's a broken DNS resolver/updater somewhere. Has anyone an idea what kind of devices or cofnigurations can issue these requests? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: what is a SPF (type 99) record and who do I implement?

apparently need trailing dots, with them it's syntactically correct. If it's what you want/need is not the same... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: Dealing with unexpected RCODE (SERVFAIL)

In message 20100316131539.ga10...@fantomas.sk, Matus UHLAR - fantomas writes: It's apparently because DNS was designed to provide records that exist, not those that do not. On 17.03.10 09:22, Mark Andrews wrote: Actually it's designed to provide records that exist *and* to tell you when

Re: threading and linux (2.6.

advantage of multiple CPUs. If not specified, named will try to determine the number of CPUs present and create one thread per CPU. If it is unable to determine the number of CPUs, a single worker thread will be created. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Dealing with unexpected RCODE (SERVFAIL)

occuring (other than users not being able to spell). you can ignore it or set up own empty version of hotemil.com. Or, fill bug in their reporting system. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Dealing with unexpected RCODE (SERVFAIL)

/IN': 10.0.1.3#53 Mar 16 04:59:15 mx02 named[4606]: unexpected RCODE (SERVFAIL) resolving 'hotmeil.com/MX/IN': 10.1.1.3#53 In message 20100316090709.gc7...@fantomas.sk, Matus UHLAR - fantomas writes: the microsoft's nameservers are providing only A and TXT records for hotmeil.com

Re: return address for failed DNSSEC validation

thing is that 'validation error rewriting' could be abandoned again if DNSSEC arrives at the OS/applications. I believe that SERVFAIL rewriting would lead to the same kind of problems NXDOMAIN rewriting leads to. Imho, simply DON'T. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Split View DNS

qugAoIwHOmvsZyrHDfbZEDsY1Rp1/tFZ =aL9s -END PGP SIGNATURE- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive

Re: reverse lookup zone different from /24

and all records unreachable). On 05.03.10 17:02, balkris...@subisu.net.np wrote: Please try the link http://www.indelible.org/ink/classless/ This descries classless DNS for subnets smaller than /24. For wider than /24 it's mostly useless. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Notify message from slaves

. check all notify settings in config file. Maybe the one you see is not the one that applies. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: multiple options{} statements in bind config

Matus UHLAR - fantomas wrote: I would now like to have one main config that would include small files containing those statements. Since listen-on and notify are in options statement; while statistics-channel is a statement of its own, I would like to know, if it's possible to define

Re: Notify message from slaves

in config file. Maybe the one you see is not the one that applies. as I advised you before? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu

Re: Notify message from slaves

On 03.03.10 09:41, Fuat Demir (Garanti Teknoloji) wrote: I checked notify messages but in also-notify setting for a specific zone does not have any public IP address like 1.1.1.1 or 1.1.1.2... did you check whole file, includes, etc? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

multiple options{} statements in bind config

to define the same IP sets in masters {} and acl {}. Can they at least have the same names? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: check-names vs. acl

In message 20100225123134.gb2...@fantomas.sk, Matus UHLAR - fantomas writes: On 25.02.10 12:01, Matus UHLAR - fantomas wrote: I see that hosts that are not allowed to recurse are often generating check-named errors. check-names it is. I apparently too often use named so I do

check-named vs. acl

Hello, I see that hosts that are not allowed to recurse are often generating check-named errors. I wonder if it wouldn't be better to check ACL's first and check-names just after it? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

check-names vs. acl

On 25.02.10 12:01, Matus UHLAR - fantomas wrote: I see that hosts that are not allowed to recurse are often generating check-named errors. check-names it is. I apparently too often use named so I do this king of mistypes. I wonder if it wouldn't be better to check ACL's first and check-names

Re: Differences between 9.3 and later versions

On Feb 23 2010, Matus UHLAR - fantomas wrote: since 9.5, the default for allow-recursion is { localhost; localnets; }; previous versions used iirc { all; }; On 23.02.10 16:48, Chris Thompson wrote: Actually, that change was made in 9.4. (Some of the cross-inheritance of the different query

Re: hosts or subnet number in delegation?

-126 $ CNAME $.65-126 Note that addresses .64 and .127 belong to that range too (someone might want to have record for them) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: Query denied errors on PTR records for delegated zone

to the sender that you have received the message in error, and delete it. Thank you. -- ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Matus UHLAR - fantomas

Re: Query denied errors on PTR records for delegated zone

be, ehm, bloated. Those tools and nameservers should be fixed imho. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Saving Private Ryan

Re: Query denied errors on PTR records for delegated zone

you think the above. bind 9.4 and later has new option allow-query-cache that allows tune this behaviour too and the default is same as allow-recursion. (actually they cross-inherit each other, if either is not set) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning

Re: Query denied errors on PTR records for delegated zone

.wemadeusa.com.0-59.173.150.66.in-addr.arpa. Try fixing this first, maybe this is your real problem. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: Differences between 9.3 and later versions

{ all; }; - if you didn't have recursion enabled, you may need to do so now. Note that enabling recursion to anyone is security risk. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: Strange issue - please enlighten me

zone delegation. No, NS delegations ni parent zones are NOT enough. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Spam = (S)tupid (P

Re: reverse Zone example!

) or customers DNSs! The same applies for reverse and forward zones. There's no difference here. If you can properly configure forward zone, do the same for reverse. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Host/nslookup/dig queries wrong server

: 127.0.0.1#53 Aliases: [...] there are two host commands, one comes from bind, one from dunnowhere. check which one do you have installed. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: Deny MX queries for dynamic IP pools

and helping http clients to find out correct site in case of mistake. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. A day without sunshine

Re: how do I get a slave to send NOTIFY messages?

servers. notify explicit; is here for this usage -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Saving Private Ryan... Private Ryan exists

Re: Disabling recursion causes browser hangs on clients with auto proxy config

resolved from given hostname. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease

Re: Server overwhelmed by rejections?

to your port 53. If you have recursive-only nameserver, you can safely disable requests to it from unauthorized sources and allow only authorized networks. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

master server selection / notify

servers, is the one preferred or is the source of NOTIFY ignored and the selection works as usual? I have small farm of servers and when any of them fetches zone from the master and sends notify, I't like others to fetch zone from this one as a small optimization. Thank you. -- Matus UHLAR

Re: change ONLY one record in zone

I need to change only one record in zone (not deligated to my server, can't transfer it too) RECORD.DOMAIN.NET IN A 192.168.1.1 to RECORD.DOMAIN.NET IN CNAME RECORD.DOMAIN.ORG Only one record! Is this possible via bind? Matus UHLAR - fantomas wrote: Not if ht domain is not yours. You

Re: Remove/add [A] records based upon server availability

level, L3 switches and load balancers exist to have this functionality. Or, it could be checked at application level -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: questions on bind cache with views

-recursion setting is used. The default is { localhost; localnets; }; which is apparently not enough for you. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: which information is cached?

(or at least all servers have to provide correct informations) otherwise you may find strange problems. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu

Re: Reverse DNS Dig returning PTR results only with trace option

CNAME delegations. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. My mind is like a steel trap - rusty and illegal in 37 states

Re: Bind sometimes SERVFAIL

.in-addr.arpa not found: 3(NXDOMAIN) Use 'dig -x 209.85.255.187 @ns1.isp' and look at NS records and TTLs. Invalid delegations and inconsistent NS records (domain is delegated from parent to different servers than those listed in the domain) often cause these kinds of problems. -- Matus UHLAR

Re: Slave to Win2003 DNS

is updated, server again responses to queries etc. I suspect this is not a problem in the BIND, but in the Windows 2003 DNS, but any ideas anyway, what to look in the server? Haven't been playing with the Windows DNS a lot... Is the master updating SOA serial? -- Matus UHLAR - fantomas, uh

Re: Feature request - disable internal recursion cache

those responses? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The early bird may get the worm, but the second mouse gets the cheese

Re: New BIND server

that might be unsecure. Only take care about allow-recursion setting if you plan to use it as recursive (if not, recursion no should be in the config)) and that should be enough for now. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: dump cache's content

On 26.10.09 08:08, net...@royal.net wrote: Can I change bind cache's content? you can remove objects via rnds flushname name. You can't forge cache content without modifying BIND source or playing with process' memory. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: Problems with include in acl file

of multiple files if only plain IP/CIRD list could be loaded within an ACL statement... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: adding new RR?

don't think this way is effective,so i'm very appreciate some one could give me a guid, or some example:souce code is perfect Better try to explain what do you want to achieve -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Our DNS is vulnerable --need help

recursion only for the ISP's customers, which means, IP ranges assigned to the ISP. configure allow-recursion with your IP ranges. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: recursion on auth-only server

Matus UHLAR - fantomas wrote: I have moved authoritative server to new IP address. I have changed the DNS name pointing to it so the NS would point to the new IP. Now I looked at the traffic and it seems that there are ~4 of 1000 recursive requests sent to it. Are there any known

Re: Query Refused problem

using allow-query help anything, since it defaults to any;. I thought there's something misconfigured on your server... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: SIBLING GLUE address records (A or AAAA)

and only when they are used for .xx zone. And imho, domains should not be registered on servers that do not have their glue records in the proper zone, .xx or other. That would spare servers from many useless lookups. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: slave transfer troubleshooting issue

not seem to attempt a transfer of the additional zones from the master? It seems you did not configure bind to have any slave zones. do you have any slave zone statements on the second server? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: Glue record miunderstanding

. 172800 IN A 208.77.188.44 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 10 GOTO 10 : REM (C) Bill Gates 1998, All Rights

Re: Query Refused problem

any other allows's ? the first error message indicated that you didn't allow query-cache or recursion for some clients. Apparently you cloned a view but forget to allow either one in the new view... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: socket is not connected error on bind 9.5.1-P3

many of them? Do you allow transfers to all clients? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux - It's now safe to turn on your

Re: Query Refused problem

things as YOU want them to be :-). Could you post your config (and optional includes) somewhere? I still thinkthe real problem lied elsewhere... Matus UHLAR - fantomas schrieb: On 30.09.09 15:59, Sven Eschenberg wrote: When I had no allow-query statement at all in my config, everything

Re: rndc command for erased zone?

reconfig should forget removed zones too, but you may be - either seeing the same zone in other view - see records fetched from other servers after zone was removed -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: DNS server works but keep getting host unreachable resolving error

. The tcpdump would help us, unless you are satisfied with using linux iptables... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 10 GOTO 10

slave zone header in bind8

Hello, IIRC, slave zones transferred to BIND8 had header that informed us when was the zone transferred and from where. Do I remember correctly? If so, when was this feature removed and why? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e

Re: Need help on delegation to subdomain/external servers

above). As said, my issue is not really load balancing, but active-standby switching, where only one server will ever respond at any given time. There are packages that do that, using DNS for that is not good idea. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: Class B Rev Zone?

the server? And, did you query THIS server? What do logs say? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. BSE = Mad Cow Desease ... BSA

Re: Class B Rev Zone?

? And, did you query THIS server? What do logs say? On 17.09.09 16:12, stefan novak wrote: The logs says nothing. So as there is no update of the zone. Just waited a minute or so. did file timestamp change after the change? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: root and in-addr.arpa zone transfers

On Freitag 11 September 2009 Matus UHLAR - fantomas wrote: - it's quite useless to cache the .arpa and .in-addr.arpa since unlike other TLD's they are hierarchically organised so there won't be any valuable benefit from slaving them, only risks (see above). On 12.09.09 09:27, Michael

Re: slave server

will return domain domain is not exist ? what do you mean query answer? You server will send what it has in the cache or what will serverA return, or an error if serverA is not accessible. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: root and in-addr.arpa zone transfers

it and above is list of servers that do allow transfers... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Due to unexpected conditions

Re: query reply servfail

) to three servers and they all only reply with A record, no NS. I encountered the same problem with different domain under the same circumstances. I think that if www.hsbc.com.hk. is delegated to some servers, they should provide NS and SOA too... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: OpenDNS.com howto

-cache and entries with bind you can flush names and reload config files (to change zones list), which is a bit far from manipulate. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: I have a question concerning the spf

community mailing lists. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty to obtain a little temporary

Re: hardware requirements per hits

or local socket and parsing that line in the another process. Logging to file is just faster and more reliable unless you use remote logging features of syslog. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Logwatch Unmatched Entries

but microsoft had a genial idea so they ask by themselves. it can be turned off but the default is on... sorry, I don't know about the rest... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto

Re: Classless CIDR delegation...

. 96.55.139.64.in-addr.arpa. CNAME 96.whatever.55.139.64.in-addr.arpa. or even to: 96.55.139.64.in-addr.arpa. CNAME 96.hicks-net.net. the second way (96/28) is preferred by RFC2317. Ask your ISP which way he requires/supports. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: hardware requirements per hits

question is what hardware you need to be able to process your traffic. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Support bacteria

Re: forwarders question

-recursive queries to a forwarding server. I think it would be interesting to know if this behaviour could bring us some benefits but apparently nobody's going to code this... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: cache poisoning

On 11.08.09 13:27, Nelson Serafica wrote: I need to set bind to listen to all address. I'm using AMAZON EC2 no, you don't. you configure listening IPs/ports by using listen-on and listen-on-v6. query-source only configures from which IP/port will your requests come from. -- Matus UHLAR

Re: Problem with caching domain

? if those records are meant to be used in NS records, yes, they must be changed. This happen with your bind server? this happens with dns servers. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: problems in forwarding

to try another server. Is that possible? you can configure zone test.es to be forwarded to different server. There is no functionality in BIND that would continue searching for a name when a server responds the name does not exist. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: change NXDOMAIN to a A type response

consider that a bad idea. the DNS is used by many applications in many manners and providing false answers can break them in many ways. You won't get different answer on this list, i guess. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: [SPAM] Win2k and bind

so), new BIND won't be compatible with w2k. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. We are but packets in the Internet of life

Re: Disable automatic empty IPv6 zones (with -4 already specified)

On 30.07.09 10:35, Matthew Huff wrote: Is there any way to disable BIND from loading the automatic empty zones (D.F.IP6.APRA, etc...). They are being generated even with the -4 command line. have you looked at the disable-empty-zone configuration directive? -- Matus UHLAR - fantomas, uh

Re: idsable ipv6 in config?

. default is over used. oh, although it should work, it's a bit dirty workaround... it needs a statefull firewall allowing only replies to go out... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: idsable ipv6 in config?

; }; work? no, it would prevent server from replying v6 requests -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Microsoft dick is soft to do

Re: SRV Record Priority set by IP Address

, some time ago I've been having similar problems, it seemed that nss_lwres was responsible for that. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu

Re: rDNS Round-Robin

. With most of applications doing reverse resolution and using its result anyhow it's still better to have always the same name... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: host -t txt _domainkey.fakessh.eu. bitsy.mit.edu.

On 01.07.09 16:53, fake...@fakessh.eu wrote: it would be possible to add this server bitsy.mit.edu. in / etc / resolv.conf to increase the speed of propagation - /etc/resolv.conf can only contain IPs. - /etc/resolv.conf is not a BIND issue. - propagation of what? -- Matus UHLAR - fantomas

Re: NS rr configuration: 1*NS + 4xA vs. 4xNS ?

On 30.06.09 01:08, Mark Andrews wrote: In message 20090629101834.ga31...@fantomas.sk, Matus UHLAR - fantomas writes: I am planning to change NS records in our and our customers' zones. I'll have four nameservers on different networks, and I'd like to make configuration as easy

Re: NS rr configuration: 1*NS + 4xA vs. 4xNS ?

In message 20090629200938.ga6...@fantomas.sk, Matus UHLAR - fantomas writes: On 30.06.09 01:08, Mark Andrews wrote: In message 20090629101834.ga31...@fantomas.sk, Matus UHLAR - fantomas wri tes: I am planning to change NS records in our and our customers' zones. I'll have

Re: control channel logging

this fall under? If in doubts and docs won't tell you, just enable print-category yes; -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Chernobyl

Re: SPF/TXT records

mail to hotmail, I think there are better ways to get your mail anywhere. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. My mind is like

Re: publish bind9 server

, which means, that a midomain.com maintainer must put there NS records for test.midomain.com pointing to your server. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Specific DNS configuration

UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. You have the right to remain silent. Anything you say will be misquoted, then used against you

Re: negative caching time and TTLs

to) is clear enough. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. WinError #9: Out of error messages

Re: PTR for localhost

, the builtin default zone name is 127.in-addr.arpa and I prefer creating this one. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux IS user

Re: Server names for query

how does BIND send notifies? does it send them to _any_ of those IP addresses? Some RFCs in the past iirc assumed that one name with multiple IPs is one multihomed host, which could lead to assumption that it's enough to query one of those IP's. I believe it's not true. -- Matus UHLAR - fantomas

Re: zone transfer from slave to master not working

you are transferring from. Check allow-transfer directive, globally for the nameserver and locally for the configured zone. I think the default is none (check the docs for sure) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: dig error

it for an email (especially to a list like this) I see no reason to chide someone for doing it. What about irony? Hello is shorter, simpler and more common on the net, expecially in mailing lists... and he -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: BIND logging

-severity yes; }; category default { nextra_syslog; default_debug; }; -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: referral doubt

.testing.server.comhttp://ns1.testing.server.com/A 192.123.123.23 doesn't responds? will it try to get the others? yes, if it's able to find out their IPs. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: query an external nameserver doubt

CNAME ts.example.test2.com If they have recursion or query-cache enabled, they may also respond with ts.example.test2.com A in answer section and example.test.com NS info in authority/additional sections -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: NS validation?

WHOIS record. Is does now. Some registrars require nameservers to have WHOIS records if you want to use them for registering domains. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: Caching-only Name server does Zone Updates

only if the zone is configured on the nameserver. Do you have any zones configured (other than .)? How do you know that it's performing zone updates? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT Illegal

is shining and exposed to the light of day. Once upon a time the world was 'flat'. For some of you, apparently is still is 'flat'. Don Quijote -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie

<    4   5   6   7   8   9   10   >