Re: Recursive bind becomes unresponsive with high load

If you are crawling lots of new names, the cache size won't have much impact. Each new query will require recursing vs hitting the cache. Try "rndc recursing" and look at what you have sitting around waiting for answers. Hopefully that provides some clues. This can be all sorts of things like

Re: DNS Server goofiness

Do you really want to return RFC1918 to the Internet? Not the end of the world, but some consider it unnecessary information disclosure. :-) I've seen this on various WAN/fw/router used at home over the years (arris, cisco, linksys, etc) and unlike the commands Reindal shared which are geared

Re: What is the use of having a chroot path during installation of Bind

Yes you can run without the chroot. Years ago it was considered best practice to chroot and most power users would have said you were insane not to do so. Now there are increasingly many who say it's not worth the effort (fairly easy to get around in many cases) -- do a bit of google

Re: Bind9 on VMWare

On 1/13/16, 10:28 AM, "bind-users-boun...@lists.isc.org on behalf of Reindl Harald" wrote: > > >Am 13.01.2016 um 16:19 schrieb Lightner, Jeff: >> We chose to do BIND on physical for our externally authoritative >>servers. >>

Re: Bind9 on VMWare

On 1/13/16, 4:02 PM, "bind-users-boun...@lists.isc.org on behalf of Reindl Harald" <bind-users-boun...@lists.isc.org on behalf of h.rei...@thelounge.net> wrote: >Am 13.01.2016 um 19:54 schrieb Mike Hoskins (michoski): >> I've ran several large DNS infras over the

Re: Query on ignoring additional section returned in replies

On 11/18/15, 10:47 AM, "bind-users-boun...@lists.isc.org on behalf of Barry Margolin" wrote: >In article , > Reindl Harald wrote: > >> when a

Re: Query on ignoring additional section returned in replies

On 11/18/15, 1:19 PM, "bind-users-boun...@lists.isc.org on behalf of Carl Byington" wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >On Wed, 2015-11-18 at 10:47 -0500, Barry Margolin wrote: >> While that's the

Re: Installing bind is not very clear for me

On 9/4/15, 1:12 PM, "bind-users-boun...@lists.isc.org on behalf of /dev/rob0" wrote: >On Thu, Sep 03, 2015 at 11:02:23PM +0200, Reindl Harald wrote: >> Am 03.09.2015 um 22:59 schrieb Robert Moskowitz: >> >On 09/03/2015 04:35 PM,

Re: Installing bind is not very clear for me

On 9/4/15, 9:29 PM, "bind-users-boun...@lists.isc.org on behalf of Noel Butler" wrote: >On 05/09/2015 04:49, Reindl Harald wrote: > >> mostly people who are throwing as much as possible appliances and >> firewalls in front of

Re: Installing bind is not very clear for me

Few points for clarification: With rhel/centos you're not getting the major version as reported. You need to look at the changlog for the package to see what fixes/features have been backported. That effort including associated QA is part of what you're paying for with rhel or getting for free

Re: file descriptor exceeds limit

On 6/19/15, 4:07 PM, bind-users-boun...@lists.isc.org on behalf of /dev/rob0 bind-users-boun...@lists.isc.org on behalf of r...@gmx.co.uk wrote: On Fri, Jun 19, 2015 at 02:55:23PM -0500, I wrote: On Thu, Jun 18, 2015 at 11:11:16PM +, Mike Hoskins (michoski) wrote: snip Note

Re: file descriptor exceeds limit

On 6/19/15, 1:16 PM, bind-users-boun...@lists.isc.org on behalf of Reindl Harald bind-users-boun...@lists.isc.org on behalf of h.rei...@thelounge.net wrote: Am 19.06.2015 um 18:44 schrieb Mike Hoskins (michoski): I suppose the only way to avoid any intermediate firewalls would be to place

Re: file descriptor exceeds limit

On 6/18/15, 7:09 PM, Stuart Browne stuart.bro...@bomboratech.com.au wrote: Just wondering. You mention you're using RHEL6; are you also getting messages in 'dmesg' about connection tracking tables being full? You may need some 'NOTRACK' rules in your iptables. Just following along, for the

Re: file descriptor exceeds limit

Inline... On 6/18/15, 9:22 AM, Cathy Almond cat...@isc.org wrote: On 18/06/2015 12:00, Matus UHLAR - fantomas wrote: On 17.06.15 22:39, Shawn Zhou wrote: BIND on my resolvers reaches the max open file limit and I am getting lots of SERVFAILs http://pastebin.com/SxRsHLff After I

Re: timeouts and negative caching

I'm not sure if BIND has a separate tunable for the timeout vs true negative answer scenario you seem to describe, but have you tried setting max-ncache-ttl very low to see if it affects this? On 6/11/15, 9:27 AM, Gerd v. Egidy li...@egidy.de wrote: Hi, I've got a bind running as recursive

RRL settings that work for you

Hi folks, I've read about RRL with interest since its inception, but just now getting around to rolling it out. That is partially because we run a very small authoritative infrastructure serving mostly as Akamai EDNS origins. However, since it is exposed externally, used by a few tenants and RRL

Re: random latency in named

FWIW as another data point we've seen the same in the wild across RHEL/CentOS 5.x and 6.x on large (32 core) Xeon based servers (E5-2650's), including 6.6 with the 2.6.32-504.16.2.el6.x86_64 kernel. Observed while debugging other things, and haven't had time to follow up. -Original

Re: shutting up logs

Another option might be changing 'file' to 'syslog' then using stuff like :msg, contains, 'skipping nameserver' stop (or whatever pattern you want to match) in your rsyslog configuration. http://www.rsyslog.com/doc/rsyslog_conf_filter.html -Original Message- From: Reindl Harald

Re: incoming tcp query

The answer is BIND does accept TCP queries by default (it's required to be RFC compliant), but a lot of times upstream firewalls/ACLs/etc block TCP, munge UDP packet size, etc... Just firing up BIND with basic configuration and checking netstat will show you TCP 53 listening. If it's not working

Re: SRV records etc

-Original Message- From: John j...@klam.ca Date: Tuesday, February 10, 2015 at 7:29 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: SRV records etc How useful are SRV records? Are they worth installing? What are their benefits, and pitfalls? Similar question about HINFO.

Re: Mentor Required

The other thing is, you mention having tried and failed (agreed that isn't a bad thing, we've all failed countless times and it's how we learn)...how have you failed? What I think you'll find is you have a list (many lists and other resources really) of mentors. BIND much like many other

Re: Problem with BIND 9.10.1-P1 recursion limits

Thanks for digging in so fast. Our mitigation will be sticking to 9.9.6-P1, since we like ESV anyway. Wanted to point out that (perhaps sadly) this isn't so crazypants...or at least not uncommon. The *edge* and *aka* references speak Akamai DNS+CDN. From my last overview, this has gotten

Re: Again question about edns (like swupdl.adobe.com)

For what little it's worth, I've seen this somewhat even on 9.8 (it's not new), though increasingly on 9.9...not saying it's BIND specific, just that I've hit these kind of annoyances with remote servers awhile now. I've tried explaining this on numerous internal email threads, tickets, webex

Re: Diagnostic help part 2

-Original Message- From: Dave Sparro dspa...@gmail.com Date: Friday, October 3, 2014 at 1:04 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Diagnostic help part 2 On 10/1/2014 3:45 PM, Tony Finch wrote: (Sorry for straying off topic. I have less experience of Cisco

Re: Diagnostic help part 2

-Original Message- From: Doug Barton do...@dougbarton.us Date: Wednesday, October 1, 2014 at 2:07 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Diagnostic help part 2 On 10/1/14 8:17 AM, Barry Margolin wrote: In article

Re: bind-9.10.0-P2 memory leak?

-Original Message- From: Thomas Schulz sch...@adi.com Date: Friday, September 12, 2014 at 11:47 AM To: bind-us...@isc.org bind-us...@isc.org Subject: Re: bind-9.10.0-P2 memory leak? Mike Hoskins wrote: Do you guys have max-cache-size set? I didn't see it in the borderworlds

Re: bind-9.10.0-P2 memory leak?

-Original Message- From: Doug Barton do...@dougbarton.us Date: Friday, September 12, 2014 at 2:15 PM To: Mike Hoskins micho...@cisco.com, Thomas Schulz sch...@adi.com, bind-us...@isc.org bind-us...@isc.org Subject: Re: bind-9.10.0-P2 memory leak? On 9/12/14 11:07 AM, Mike Hoskins

Re: bind-9.10.0-P2 memory leak?

Do you guys have max-cache-size set? I didn't see it in the borderworlds named.conf. I've seen similar growth problems when testing 9.x before setting that (experiment at the time just to see what would happen, and confirmed this behavior). Set sensible resource limits based on available

Re: Logs problem with Bind 9.9.4

-Original Message- From: Reindl Harald h.rei...@thelounge.net Organization: the lounge interactive design Date: Friday, August 8, 2014 at 6:33 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Logs problem with Bind 9.9.4 so if you have nothing to say go back from

Re: Metazones or Something Else?

-Original Message- From: Evan Hunt e...@isc.org Date: Monday, August 4, 2014 at 1:26 PM To: John Anderson jo...@ccbill.com Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Metazones or Something Else? So to the best of your knowledge this functionality is still on

Re: rndc (and now nsupdate too)

-Original Message- From: Tony Finch d...@dotat.at Date: Friday, August 1, 2014 at 5:31 AM To: Reindl Harald h.rei...@thelounge.net Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: rndc (and now nsupdate too) Reindl Harald h.rei...@thelounge.net wrote: Am 31.07.2014 um

Re: rndc (and now nsupdate too)

-Original Message- From: Reindl Harald h.rei...@thelounge.net Organization: the lounge interactive design Date: Friday, August 1, 2014 at 9:23 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: rndc (and now nsupdate too) Am 01.08.2014 um 15:14 schrieb Mike Hoskins

Re: Tools to automatically test the resolution speed ...

I haven't used those, but not sure if smokeping's DNS plugin would do what you want. -Original Message- From: Barry Greene bgre...@senki.org Date: Monday, July 21, 2014 at 11:59 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Tools to automatically test the resolution

Re: initial lookup fails every time

-Original Message- From: Matus UHLAR - fantomas uh...@fantomas.sk Date: Sunday, July 13, 2014 at 6:24 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: initial lookup fails every time On 12.07.14 01:19, Tony Publiski wrote: I'm hoping someone has seen this before. I'm

Re: Caching Nameserver and BIND RPM Compatibility

-Original Message- From: Asai a...@globalchangemusic.org Date: Friday, July 11, 2014 at 12:56 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Caching Nameserver and BIND RPM Compatibility Greetings, We're setting up caching-nameserver on an existing BIND instance. The

Re: Caching Nameserver and BIND RPM Compatibility

-Original Message- From: Mark Andrews ma...@isc.org Date: Friday, July 11, 2014 at 8:41 PM To: Mike Hoskins micho...@cisco.com Cc: bind-users@lists.isc.org bind-us...@isc.org Subject: Re: Caching Nameserver and BIND RPM Compatibility Not every *important* fix is a *security* fix. OS

Re: In BIND 8.2 running on Solaris 8, how to start logging

-Original Message- From: Samad Agha samad.agha2...@gmail.com Date: Friday, June 27, 2014 at 1:07 PM To: bind-users@lists.isc.org bind-users@lists.isc.org, DNS BIND bind-us...@isc.org Subject: In BIND 8.2 running on Solaris 8, how to start logging Hi All, I have two Solaris 8 servers

Re: SPF RR type

-Original Message- From: Nicholas F Miller nicholas.mil...@colorado.edu Date: Thursday, June 5, 2014 at 10:25 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: SPF RR type Are SPF RR types finally dead or not? I¹ve read through rfc7208 it appears that they are: SPF

Re: Enterprise IPAM/DNS Solutions

Cisco (apply liberal amounts of salt considering my FROM) has a product suite called Prime, one piece of which is CNR (unless it's been renamed again this week) -- Cisco Network Registrar, which handles the IPAM piece and has DHCP and DNS components as well. CNR can integrate with BIND (as well

Re: Delegation of part of a zone to a global server load balancer

In the past when doing this with Cisco GSS I followed Akamai's example, and had success with stuff like (gdns* were the CSS): ; delegation of gslb.domain.com $TTL 172800 ; 2 days gdns1.domain.com. A a.b.c.d gdns2.domain.com. A e.f.g.h gdns3.domain.com. A i.j.k.l

Re: High recursive client counts

Hi Jason, I've experienced similar things in the past on 9.8. Since then we've moved to the latest 9.9, but don't think this is at all version specific (that said, you could obviously try upgrading). I don't have an exact solution for you, but some ideas of things to check and personal

Re: Difference between BIND 9.8 and 9.9

From: BONNET, Frank frank.bon...@esiee.fr Date: Wednesday, February 19, 2014 at 12:41 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Difference between BIND 9.8 and 9.9 Hello is there a link to a documentation that lists the main differences between BIND 9.8 and 9.9 ? I

Re: Upgrading from 9.8.3 to 9.9.4

-Original Message- From: Thomas Schulz sch...@adi.com Date: Thursday, January 23, 2014 at 9:50 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: RE: Upgrading from 9.8.3 to 9.9.4 I just remembered there was also the change to the db file having a default raw format on

Re: Upgrading from 9.8.3 to 9.9.4

-Original Message- From: Mike Bernhardt bernha...@bart.gov Date: Wednesday, January 22, 2014 at 3:25 PM To: 'Lawrence K. Chen, P.Eng.' lkc...@ksu.edu, bind-users@lists.isc.org bind-users@lists.isc.org Subject: RE: Upgrading from 9.8.3 to 9.9.4 Thanks for that. I just remembered there was

Re: Upgrading from 9.8.3 to 9.9.4

-Original Message- From: Mike Bernhardt bernha...@bart.gov Date: Thursday, January 16, 2014 4:09 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: RE: Upgrading from 9.8.3 to 9.9.4 Sorry for the double post, but I forgot to ask this: And if it is indeed enabled regardless

Re: Upgrading from 9.8.3 to 9.9.4

Good call out. I'd always enabled empty-zones so didn't get bit by that, but do think the move to 9.9 is when masterfile-format bit some. Not a big deal if you're aware of it.Other than that the upgrade as quick and painless. I would suggest testing the upgrade on a VM or somewhere

Re: Adding DS records

-Original Message- From: Warren Kumari war...@kumari.net Date: Friday, December 20, 2013 12:15 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Adding DS records On Dec 20, 2013, at 10:38 AM, /dev/rob0 r...@gmx.co.uk wrote: On Fri, Dec 20, 2013 at 10:04:59AM -0500,

Re: Delegation and Forwarding

-Original Message- From: Bob McDonald bmcdonal...@gmail.com Date: Wednesday, December 11, 2013 7:10 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Delegation and Forwarding I'm a bit confused on the need for a blank forwarders statement inside of a zone statement in the

Re: RHEL 6 CPU load

-Original Message- From: Blake Hudson bl...@ispn.net Date: Wednesday, November 20, 2013 11:03 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: RHEL 6 CPU load Daniel, what do you see the load as? I see 4.6% CPU usage (100% possible - 95.4% idle). Wondering the same.

Re: Size boundaries for zones of IPv6 rDNS

-Original Message- From: Listas lis...@adminlinux.com.br Date: Thursday, November 14, 2013 12:57 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Size boundaries for zones of IPv6 rDNS Hi! Are there size limits for zones of IPv6 reverse DNS ? For example, is this a

Re: logging query time

-Original Message- From: Birta Levente blevi.li...@gmail.com Date: Wednesday, November 13, 2013 3:29 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: logging query time Hi I have a caching nameserver (bind 9.8.2) and I curious if I can log the duration of queries to the

xml stats question

Hi folks, Quick question on xml stats... I've used the new style statistics for monitoring, etc. and find it really useful as I'm sure many do. One of the things I'm working on is moving to collectd vs remote polling, and the bind plugin seems to require v2 vs v3 xml schema (my first guess,

Re: xml stats question

-Original Message- From: Mike Hoskins micho...@cisco.com Date: Saturday, November 2, 2013 1:31 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: xml stats question Hi folks, Quick question on xml stats... I've used the new style statistics for monitoring, etc. and find

Re: Performance Tuning RHEL 5 and Bind

-Original Message- From: Alan Clegg a...@clegg.com Date: Tuesday, October 22, 2013 7:44 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Performance Tuning RHEL 5 and Bind On Oct 21, 2013, at 9:47 AM, wbr...@e1b.org wrote: From: Alan Clegg a...@clegg.com Fix

Re: Install DNS Server

While I mostly agree, simply doing a 'yum update' against the CentOS repos will pull you up to 5.9...which isn't really old, it was released around the same time as 6.4. Then at least your base OS is up to date, and you don't have to use the community RPMs. You can build from source, generate

Re: filter-aaaa-on-v4

-Original Message- From: Lawrence K. Chen, P.Eng. lkc...@ksu.edu Date: Wednesday, September 18, 2013 10:08 AM To: bind-users bind-users@lists.isc.org Subject: filter--on-v4 I finally turned this feature on when I built bind-9.9.3-P2 Had only gotten the occasional user complaints

Re: detect if zone/s is frozen

-Original Message- From: Tony Finch d...@dotat.at Date: Wednesday, September 4, 2013 4:50 AM To: Mike Hoskins micho...@cisco.com Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: detect if zone/s is frozen Mike Hoskins (michoski) micho...@cisco.com wrote: /dev/rob0 r

Re: detect if zone/s is frozen

-Original Message- From: /dev/rob0 r...@gmx.co.uk Organization: RTFM Reply-To: bind-users@lists.isc.org bind-users@lists.isc.org Date: Tuesday, September 3, 2013 5:17 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: detect if zone/s is frozen On Tue, Sep 03, 2013 at

Re: the location of dig and named

-Original Message- From: Nidal Shater ngiw2...@hotmail.com Date: Wednesday, August 28, 2013 5:35 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: the location of dig and named when I typed dig or named ,,, what is the location of the executable program dig and named is

Re: /etc/named.conf won't be installed !!

-Original Message- From: Nidal Shater ngiw2...@hotmail.com Date: Tuesday, August 27, 2013 12:02 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: /etc/named.conf won't be installed !! hi when I install BIND,,,BIND won't install the /etc/named.conf file why ??? I think

Re: The Path of source code

-Original Message- From: Nidal Shater ngiw2...@hotmail.com Date: Wednesday, August 21, 2013 4:27 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: The Path of source code I have installed BIND by using the command yum install bind in centos6.3,what is the location(path)

Re: configure syslog prefix

-Original Message- From: Shawn Bakhtiar shashan...@hotmail.com Date: Wednesday, July 3, 2013 12:15 PM To: bind-us...@isc.org bind-us...@isc.org Subject: RE: configure syslog prefix hhhmmm I have not run multiple binds on the same box, but according to the man pages for named.conf

Re: BIND Service Hung

-Original Message- From: Novosielski, Ryan novos...@ca.rutgers.edu Date: Wednesday, July 3, 2013 12:38 PM To: Matus UHLAR - fantomas uh...@fantomas.sk Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: BIND Service Hung -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On

Re: sockmgr 1005a1080: unexpected POLL timeout

-Original Message- From: Dennis Clarke dcla...@blastwave.org Date: Friday, June 28, 2013 11:43 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: sockmgr 1005a1080: unexpected POLL timeout I have a recent build of BIND 9.9.3-P1 and after bringing up the service on a

9.9.3-P2

i'm probably the last to notice, but first...good work on the site redesign. nice and clean. generating a new internal package for 9.9.3, and going through the site/request form i get directed here: http://www.isc.org/wp-content/plugins/email-before-download/download.php?dl

Re: 9.9.3-P2

fwd to spare the list further responses :-) -Original Message- From: Mike Hoskins micho...@cisco.com Date: Monday, June 24, 2013 4:59 PM To: sgra...@isc.org sgra...@isc.org Subject: Re: 9.9.3-P2 -Original Message- From: Sue Graves sgra...@isc.org Organization: Internet Systems

Re: Health Check feature in BIND ?

-Original Message- From: Lawrence K. Chen, P.Eng. lkc...@ksu.edu Date: Monday, June 17, 2013 2:55 PM To: Gaurav Kansal gaurav.kan...@nic.in Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Health Check feature in BIND ? - Original Message - Dear All, I was

Re: This list's prefix

-Original Message- From: Elmar K. Bins e...@4ever.de Organization: unorganized since 1789 Date: Thursday, June 6, 2013 6:18 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: This list's prefix s...@resistor.net (SM) wrote: And the 100-dollar-question is: How do you

Re: This list's prefix

-Original Message- From: Narcis Garcia informat...@actiu.net Date: Wednesday, June 5, 2013 12:43 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: This list's prefix It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for

Re: This list's prefix

-Original Message- From: Narcis Garcia informat...@actiu.net Date: Wednesday, June 5, 2013 1:02 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: This list's prefix Somebody has answered me privately and didn't realized until I've checked all details of each message.

Re: This list's prefix

-Original Message- From: Warren Kumari war...@kumari.net Date: Wednesday, June 5, 2013 1:46 PM To: Narcis Garcia informat...@actiu.net Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: This list's prefix -- Curse the dark, or light a match. You decide, it's your dark.

Re: architecture question

-Original Message- From: Tony Finch d...@dotat.at Date: Thursday, May 9, 2013 11:01 AM To: Matus UHLAR - fantomas uh...@fantomas.sk Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: architecture question Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 09.05.13 10:21,

Re: architecture question

-Original Message- From: Jeremy P jpcra...@gmail.com Date: Wednesday, May 8, 2013 1:33 PM To: Steven Carr sjc...@gmail.com Cc: bind-users bind-users@lists.isc.org Subject: Re: architecture question I understand letter of the law, spirit of the law and playing it safe to avoid headaches.

Re: architecture question

-Original Message- From: Jonathan Reed cronst...@gmail.com Date: Wednesday, May 8, 2013 4:38 PM To: Jeremy P jpcra...@gmail.com Cc: bind-users bind-users@lists.isc.org Subject: Re: architecture question It would be a waste of money as their systems never leave the local network, except

Re: ANNOUNCEMENT: New BIND versions are available.

-Original Message- From: Doug Barton do...@dougbarton.us Date: Saturday, April 13, 2013 12:34 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: ANNOUNCEMENT: New BIND versions are available. Michael, Thanks for this announcement, and a welcome change. Given the

Re: Simple question about zone and CNAME

-Original Message- From: Chris Thompson c...@cam.ac.uk Date: Friday, April 5, 2013 3:10 PM To: Bind Users Mailing List bind-users@lists.isc.org Subject: Re: Simple question about zone and CNAME On Apr 5 2013, John Wobus wrote: DNAME? runs away, gigglingŠ Or SRV records. Surely

Re: Forward First on Master Zone (bypass SOA)

-Original Message- From: Kevin Darcy k...@chrysler.com Date: Monday, April 1, 2013 2:46 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Forward First on Master Zone (bypass SOA) On 3/29/2013 12:09 AM, Doug Barton wrote: On 03/28/2013 12:28 PM, Ben-Eliezer, Tal

Re: Registrar that supports self-run domains and provides DNSSEC support

-Original Message- From: Shawn Bakhtiar shashan...@hotmail.com Date: Friday, February 22, 2013 12:06 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: RE: Registrar that supports self-run domains and provides DNSSEC support 2) We don't buy or maintain street addresses

Re: allow-query and views

-Original Message- From: Robert Moskowitz r...@htt-consult.com Date: Thursday, February 21, 2013 12:53 PM To: Vernon Schryver v...@rhyolite.com Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: allow-query and views Whow... This is news. A hidden view? Where is this

Re: BIND master , Windows 2008 stub zone not transferring

-Original Message- From: Sowmya Manjanatha sowmy...@gmail.com Date: Thursday, February 21, 2013 1:11 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: BIND master , Windows 2008 stub zone not transferring Well, I have a stub zone on Windows 2008 server set-up to use

Re: Cannot create A record issue

-Original Message- From: Jsilliman jsilli...@gmail.com Date: Wednesday, February 20, 2013 1:57 PM To: Alan Clegg a...@clegg.com Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Cannot create A record issue Ubuntu does not use that: root@:/etc/bind# cat

Re: BIND9 statistics-server: JSON?

-Original Message- From: Jan-Piet Mens jpmens@gmail.com Date: Friday, February 15, 2013 12:57 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: BIND9 statistics-server: JSON? As a fan of BIND's statistics-server I was tempted to see if I could reduce the size of the

Re: Randoming ports and firewall rules

-Original Message- From: Robert Moskowitz r...@htt-consult.com Date: Friday, February 15, 2013 1:33 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Randoming ports and firewall rules So it is past time for me to only use port 53 and support port randomization. But I do

Re: chroot/etc/named/ directory?

-Original Message- From: Robert Moskowitz r...@htt-consult.com Date: Wednesday, February 13, 2013 10:53 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: chroot/etc/named/ directory? I am upgrading my server from bind-9.3.6 via Centos 5.5 to 9.8.2 in Centos 6.3. I have

Re: chroot/etc/named/ directory?

-Original Message- From: Robert Moskowitz r...@htt-consult.com Date: Wednesday, February 13, 2013 2:15 PM To: Mike Hoskins micho...@cisco.com Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: chroot/etc/named/ directory? Having said all that, you might search the

Re: Slaving from DNS masters behind LVS

Note: Removing cross-post, but feel free to forward. -Original Message- From: Nick Urbanik nick.urba...@optusnet.com.au Date: Tuesday, February 12, 2013 10:00 PM To: keepalived-de...@lists.sourceforge.net keepalived-de...@lists.sourceforge.net, bind-users@lists.isc.org

Re: BIND 9.9.3b1 is now available

-Original Message- From: Timothe Litt l...@acm.org Date: Friday, January 25, 2013 6:13 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: BIND 9.9.3b1 is now available On 25-Jan-13 17:32, Michael McNally wrote: BIND 9.9.3b1 is the first beta release of BIND 9.9.3.

Re: what do you use for logging?

-Original Message- From: Alan Batie a...@peak.org Date: Thursday, January 17, 2013 1:52 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: what do you use for logging? On 1/17/13 10:48 AM, Jan-Piet Mens wrote: By the way, all of the BIND10 logging messages are

Re: MNAME not a listed NS record

-Original Message- From: Vernon Schryver v...@rhyolite.com Date: Wednesday, January 16, 2013 5:05 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: MNAME not a listed NS record From: Dave Warren li...@hireahit.com Various online DNS diagnostic tools throw warnings,

Re: Name resolution fails if not forwarding

-Original Message- From: Daniele d.imbrog...@gmail.com Date: Wednesday, January 9, 2013 9:17 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Name resolution fails if not forwarding This is the scenario. I installed BIND9 via `apt-get` on a newly installed UBUNTU

Re: query about EDNS UDP Packet

-Original Message- From: Gaurav Kansal gaurav.kan...@nic.in Date: Wednesday, January 9, 2013 12:34 AM To: Sten Carlsen st...@s-carlsen.dk, bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: query about EDNS UDP Packet Thanks for help. My Firewall was dropping packet size

Re: gitnamed, a project to manage name server by git

-Original Message- From: Jan-Piet Mens jpmens@gmail.com Date: Tuesday, January 8, 2013 4:35 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: gitnamed, a project to manage name server by git GitNamed is a project that manage name server by git. you can clone the

Re: Distribute named.conf

-Original Message- From: Phil Mayers p.may...@imperial.ac.uk Date: Thursday, January 3, 2013 9:44 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Distribute named.conf On 03/01/13 14:36, Warren Kumari wrote: Yup, have a look at Puppet. For the first while it

Re: open-source tool for filter out stats from dns logs

-Original Message- From: Jeff Wright jwri...@isc.org Date: Thursday, January 3, 2013 8:41 AM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: open-source tool for filter out stats from dns logs There might be some tools already out there (like Splunk) that do this for

Re: Distribute named.conf

-Original Message- From: wbr...@e1b.org wbr...@e1b.org Date: Thursday, January 3, 2013 2:29 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: Distribute named.conf How does Puppet compare to Ansible? http://ansible.cc/ Thanks for sharing, first I'd heard of it...

Re: Distribute named.conf

-Original Message- From: wbr...@e1b.org wbr...@e1b.org Date: Thursday, January 3, 2013 3:15 PM To: Mike Hoskins micho...@cisco.com Cc: bind-users@lists.isc.org bind-users@lists.isc.org, bind-users-bounces+wbrown=e1b@lists.isc.org bind-users-bounces+wbrown=e1b@lists.isc.org

Re: another performance tuning question

-Original Message- From: Jeremy C. Reed jr...@isc.org Date: Friday, November 30, 2012 4:18 PM To: Adamiec, Lawrence ladam...@kentlaw.iit.edu Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: another performance tuning question On Fri, 30 Nov 2012, Adamiec, Lawrence

Re: truncated responses vs. minimal-responses?

-Original Message- From: Matus UHLAR - fantomas uh...@fantomas.sk Date: Tuesday, November 27, 2012 12:28 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: truncated responses vs. minimal-responses? Hello, last few weeks I have seen many discussions over UDP truncating