Re: BIND 9.10.4 may have a fatal crash defect.

2016-05-12 Thread Peter van Dijk
Hello, On 12 May 2016, at 15:44, Peter van Dijk wrote: I’ve heard two proposals: (1) brew fakes up a version number X that sorts 9.10.4 < X < Y, where Y is whatever ISC is going to release next (2) ISC ‘clones’ 9.10.3-P4 into 9.10.5 (or 9.10.4-P1 but that seems wrong) so the highest v

Re: BIND 9.10.4 may have a fatal crash defect.

2016-05-12 Thread Peter van Dijk
othing increases the odds of somebody running into the crash but one might argue that this is helpful! I think all three options are a bit ugly, to be fair. I don’t have any preference. Thoughts? Kind regards, -- Peter van Dijk PowerDNS.COM BV - https://www.powerd

Moving dynamic zones to new master+slave pair without interruptions

2016-01-06 Thread Peter Rathlev
25.P1.el5_11.5). So the setup is really in need of a refresh. :-) Thank you in advance! --  Peter Rathlev ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Moving dynamic zones to new master+slave pair without interruptions

2016-01-06 Thread Peter Rathlev
xtra recursing server. Keeping things simple, even if that means running more servers, helps me sleep at night. It helps my colleagues handling things without having to call me. :-) --  Peter Rathlev ___ Please visit https://lists.isc.org/mailman/listinf

Re: Moving dynamic zones to new master+slave pair without interruptions

2016-01-06 Thread Peter Rathlev
far as I can see this should Just Work™. > My program nsdiff (http://dotat.at/prog/nsdiff) is useful for copying > dynamic zones from from an existing master to a new master without > faffing around with `rndc freeze`. Nice. :-) Perfect for copying changes without touching the files.

Re: Is it possible to have separate query logs for different views?

2015-03-12 Thread Peter Olsson
-inside; next} / view outside / {print $0 named-queries-outside; next} {print $0 named-queries-other}' (not tested, but have used similar before) Ok, I'm officially blind... Should have seen this myself. This will solve my problem. Thanks! Peter Olsson -- Bob Harold hostmaster

Is it possible to have separate query logs for different views?

2015-03-09 Thread Peter Olsson
; print-time yes; severity debug; }; }; Thanks! -- Peter Olsson ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users

Re: Multi-master (HA)

2014-05-07 Thread Peter Andreev
Well, we use two masters in different locations, w/o DLZ. Files for signed zones are being generated from databases and uploaded to servers. What we need here - is propagating of DDNS plus periodical synchronizing of zones, journals etc. Regarding zone templates - I'm using it with NSD4 and I'm

Re: All client resolvers support DNSSEC compatible queries ???

2014-04-24 Thread Peter Andreev
2014-04-24 13:46 GMT+04:00 Carsten Strotmann c...@strotmann.de: Hello Jeronimo, Jeronimo L. Cabral jelocab...@gmail.com writes: Dear, we have several hosts in our LAN that ask our BIND DNS: Debian, Windows 7, Red Hat and CentOS. If we implement DNSSEV validation support in our BIND9

Re: How to create a fake root server?

2014-03-13 Thread Peter
useful examples at the web yet. It's for a school project. Regards, Peter On 12/03/14 19:56, Kevin Darcy wrote: First of all, don't use .loc as an internal TLD. There are *many* proposals in process with ICANN for establishing new TLDs, and for all you know, .loc might be one of them. If .loc gets

Re: How to create a fake root server?

2014-03-13 Thread Peter
server for lookups. All servers are on the same 172.16.0.x network. What am I doing wrong here? Sincerely, Peter On 13/03/14 11:10, Mark Andrews wrote: In message 53216b43.8040...@gmail.com, Peter writes: Hi Kevin, Thanks for your reply. It's just for a closed internal network with no access

How to create a fake root server?

2014-03-12 Thread Peter
, yyy.loc, zzz.loc. 1 server for the .loc root 3 servers for xxx.loc (server1), yyy.loc (server2), zzz.loc (server3) Running BIND 9 at every server. Any suggestions or good links are highly appreciated. Best regards, Peter ___ Please visit https

Re: Bind vs flood

2014-02-28 Thread Peter Andreev
Well, at first glance it looks like malicious activity, so the best action is to call all users, suspected in sending such requests, and warn them. The fast and very (very-very-very) dirty solution is to set up zone 84822258.com http://niqcs.www.84822258.com on your resolver. This should supress

Re: Bind vs flood

2014-02-28 Thread Peter Andreev
However, if you choose the second action, then your tech support should be ready. 2014-02-28 13:36 GMT+04:00 Peter Andreev andreev.pe...@gmail.com: Well, at first glance it looks like malicious activity, so the best action is to call all users, suspected in sending such requests, and warn

Re: Bind vs flood

2014-02-26 Thread Peter Andreev
Hi Dmitry, If your problem is a lot of strange queries, then there is two ways: 1. You operate an open resolver. If you can - restrict it to a limited scope of clients, otherwise the only way you can lower number of incoming queries is DPI; 2. You operate a non-open resolver. Then you can find

Forwarding requests when DNS name doesn't exist?

2013-10-10 Thread Peter Olsson
. Thanks! Peter Olsson ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: listen-to clusterIP address

2013-06-05 Thread Peter Andreev
2013/6/5 Phil Mayers p.may...@imperial.ac.uk On 06/05/2013 07:37 PM, paul wrote: Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because You don't have to restart it. rndc reconfig will re-check the IPs

Re: high volume from outside our networks question

2013-01-31 Thread Peter, Oliver
-- Oliver PETERoli...@peter.de.com 0x456D688F signature.asc Description: OpenPGP digital signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind

Re: Wildcard CNAME record?

2013-01-16 Thread Oliver Peter
On Wed, Jan 16, 2013 at 10:33:03AM -0500, Barry Margolin wrote: In article mailman.1072.1358349671.11945.bind-us...@lists.isc.org, Oliver Peter li...@peter.de.com wrote: On Wed, Jan 16, 2013 at 02:57:48PM +, Baird, Josh wrote: Is it acceptable to have a wildcard CNAME? Example

Re: reverse zone of type forward when /28 subnet

2012-12-29 Thread Peter Andreev
Actually, Mark's advice is much better. 2012/12/29 Dmitri Tarkhov tark...@dionaholding.ru: Hi, this finally works: view reverse1 IN { recursion yes; zone z.y.x.in-addr.arpa IN { type forward; forward only; forwarders { A; B; }; }; zone localhost IN {

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Peter Andreev
, there is no problem with reverse resolving in general but I cannot achieve this directly at my dns, that is to receive a response from it no matter wherever it forwards the request or from where it gets the PTR records. Peter Andreev wrote: Please correct me if I'm wrong: you'd like to edit PTR records

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Peter Andreev
circumventions. 4. That's possible to not bother about the issue but for now I am not ready to fold hands. I just meant that fencing your resolver without really good reasons is a bad idea. If you do it just for fun in production environment, you should think twice. Peter Andreev wrote

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Peter Andreev
signed all russian TLDs you could implement it. Peter Andreev wrote: 2012/12/27 Dmitri Tarkhov tark...@dionaholding.ru: Hi, thanks a lot for the information. Contains key reason and sounds interesting. 1. Do you mean I can isolate zone z.y.x.in-addr.arpa into a separate view where

Re: Strange issue with signed zone

2012-11-09 Thread Peter Andreev
2012/11/9 Tony Finch d...@dotat.at: Peter Andreev andreev.pe...@gmail.com wrote: We signed another zone and met the same problem again. The only difference is algorithm - now it is RSASHA256. We have ~30 servers running BIND (9.8, 9.7, 9.6). A week ago we signed first of our zones

Re: Strange issue with signed zone

2012-11-09 Thread Peter Andreev
2012/11/9 Peter Andreev andreev.pe...@gmail.com: 2012/11/9 Tony Finch d...@dotat.at: Peter Andreev andreev.pe...@gmail.com wrote: We signed another zone and met the same problem again. The only difference is algorithm - now it is RSASHA256. We have ~30 servers running BIND (9.8, 9.7, 9.6

Re: Strange issue with signed zone

2012-11-08 Thread Peter Andreev
Hi everybody! We signed another zone and met the same problem again. The only difference is algorithm - now it is RSASHA256. We have ~30 servers running BIND (9.8, 9.7, 9.6). A week ago we signed first of our zones with RSA/SHA1 + NSEC3 + OPT-OUT. Recently we realised that our servers don't

Lots of RSA_verify failed after upgrade to 9.7.7

2012-11-05 Thread Peter Olsson
/crypto/rsa/rsa_sign.c:263: I have never seen these before. I tried Google but got no recent results. Anyone know what this means and how to get rid of these errors? Thanks! Peter Olsson ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: Using BIND-DLZ for a hidden master [was: Re: dns master-slave transfer]

2012-11-01 Thread Peter Andreev
2012/11/1 Chris Thompson c...@cam.ac.uk: On Oct 29 2012, Feng He wrote: 于 2012-10-29 9:58, kavin 写道: Now,I want transfer the zone data from the master dns serverto slave dns server ,the master dns use bind-dlz+mysql and the slave dns server use bind+file. AFAIK, BIND DLZ doesn't send a

Re: What does deleted from unreachable cache mean?

2012-08-03 Thread Peter Olsson
On Fri, Aug 03, 2012 at 09:13:50AM +0100, Cathy Almond wrote: On 02/08/12 19:00, Michael Hoskins (michoski) wrote: -Original Message- From: Peter Olsson p...@leissner.se Date: Thursday, August 2, 2012 10:25 AM To: Cathy Almond cat...@isc.org Cc: bind-users@lists.isc.org bind

Re: What does deleted from unreachable cache mean?

2012-08-02 Thread Peter Olsson
On Thu, Aug 02, 2012 at 03:26:08PM +0100, Cathy Almond wrote: On 19/07/12 00:49, Peter Olsson wrote: Hello! After my latest bind upgrade our slave server started occasionally writing these messages to the log: master 2a02:::::2#53 (source ::#0) deleted from unreachable

What does deleted from unreachable cache mean?

2012-07-18 Thread Peter Olsson
, running port bind97-9.7.6.1. Thanks! -- Peter Olssonp...@leissner.se ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https

Re: TTL for name servers

2012-06-06 Thread Peter Andreev
2012/6/6 Mark Andrews ma...@isc.org In message CABUciRkVT6mBS0ZS3WL4tS7uTPgYNVBkOr890fsB9OoqP= c...@mail.gmail.com , Alexander Gurvitz writes: Hi. TTL returned by YOUR zone authoritative server will (at least should) be preferred by caches. Matt Larson from verisign explained on

Re: TTL for name servers

2012-06-05 Thread Peter Andreev
Just to clarify, let's assume that you maintain zone example.be. Let's also say that in .be zone TTL for your NS'es is 86400 and TTL for NS'es in your zone is 345600. In such scenario the latter will be cached by resolver because it is the authoritative data. For some resolver implementations

Re: Can I build a new DNS/BIND system parallel to our existing DNS production system?

2012-05-03 Thread Peter Andreev
Hello, Samad, Another way to estimate you query rate is using system's udp counters. Not as precise as query logging, but doesn't cause performance drop in case of high query rates and accurate enough for estimation. 2012/5/4 Samad Agha samad.agha2...@gmail.com Thanks Daniel, I really

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
Hi, First of all, nslookup isn't a good tool for debug DNS problems. Use dig instead. Could you show the output of dig @freebsdbox sokol.msk.united-networks.ru. NS +norec run from freebsd box itself? 2012/4/19 Ellad G. Yatsko eyat...@ngs.ru Hello! I have FreeBSD 7.2 x64 installed.

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
2012/4/19 Ellad G. Yatsko eyat...@ngs.ru Hello! Here is output: /etc/namedb dig @172.16.0.1 sokol.msk.united-networks.ru. NS +norec ; DiG 9.4.3-P2 @172.16.0.1 sokol.msk.united-networks.ru. NS +norec ; (1 server found) ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode:

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
2012/4/19 Ellad G. Yatsko eyat...@ngs.ru Nope. FreeBSD is not the master for sokol.msk.united-networks.ru. It delegates zone sokol.msk only. Not more.Master for sokol.msk.united-networks.ru is srvgate.sokol.msk.united-networks.ru (Ubuntu server). Indeed, now when I try nslookup

Re: slave not updating or creating ofd zone files

2012-03-29 Thread Peter Andreev
2012/3/29 RYAN M. vAN GINNEKEN r...@computerking.ca Hello all i have what is to me a very strange bind 9 master slave transfer issue. When i update a zone file on the master the file updates correctly the notifies are sent and every thing seems to work perfectly except it transfers 0 bytes

Re: slave not updating or creating ofd zone files

2012-03-29 Thread Peter Andreev
2012/3/29 Peter Andreev andreev.pe...@gmail.com 2012/3/29 RYAN M. vAN GINNEKEN r...@computerking.ca Hello all i have what is to me a very strange bind 9 master slave transfer issue. When i update a zone file on the master the file updates correctly the notifies are sent and every thing

Re: reverse dns for IPV6 ranges

2012-03-20 Thread Peter Andreev
2012/3/20 michoski micho...@cisco.com On 3/19/12 11:58 AM, Peter Andreev andreev.pe...@gmail.com wrote: 2012/3/19 hugo hugoo hugo...@hotmail.com Jay, - Can you give me an example of such configuration? As anyone else some examples of IPV6 reverse configuration used in production

Re: reverse dns for IPV6 ranges

2012-03-19 Thread Peter Andreev
2012/3/19 hugo hugoo hugo...@hotmail.com Jay, - Can you give me an example of such configuration? As anyone else some examples of IPV6 reverse configuration used in production environment? Thanks for sharing your experience... Hugo, We use IPv6 in production environment. It was a

Re: Detailed Log Analysis based on rndc stats!!

2012-01-30 Thread Peter Andreev
Sorry, Shiva I have confused you. Mark is absolutely right and I was wrong. Another way is to capture responses with tcpdump or dnscap. 2012/1/30 Mark Andrews ma...@isc.org In message canbtt6nxwb4fqygev4x8_jl+m5ho7wfenirxzg3pgvc-kzc...@mail.gmail.com , Shiva Raman writes: Hi Peter

Re: Defense against a client?

2012-01-16 Thread Peter Andreev
2012/1/16 Tom Schmitt tomschm...@gmx.de Hi, I have a problem with the load on my Bind. Normally it's fine, but from time to time there are clients which causes through a misconfiguration or a failed local service (not intentionally) a very high amount of queries. After finding and informing

Re: Is bind support conditionally resolution?

2012-01-10 Thread Peter Andreev
2012/1/10 Drunkard Zhang gongfan...@gmail.com I am designing a big deploy system, which will implement via DNS. The demond is misc, one of them is conditionally resolve, which means that if one CDN node near unavailable, or latency increased significantly, no matter why, I want bind to give

Re: About root zones

2012-01-03 Thread Peter Andreev
2012/1/2 Matus UHLAR - fantomas uh...@fantomas.sk: On 21.12.11 19:21, Peter Andreev wrote: I think that if server is authoritative - and - slave-only it should use system resolver rather than querying by itself. 2012/1/2 Matus UHLAR - fantomas uh...@fantomas.sk: BIND will not use system

Re: About root zones

2012-01-03 Thread Peter Andreev
it by configuring BIND (so it will not need them) or firewall such packets so they will not get outside (which may break its functionality). On 03.01.12 16:53, Peter Andreev wrote: My point: I need my servers to answer with authoritative data only. I need them to not perform anything else. Only get query

Re: About root zones

2012-01-03 Thread Peter Andreev
2012/1/3 Chuck Swiger cswi...@mac.com: On Jan 3, 2012, at 11:13 AM, Peter Andreev wrote: Unfortunately as I learning BIND more, I understand that it is not very suitable for my requirements. Which are?  I've been trying to understand what the actual problem you are trying to solve might

Re: About root zones

2012-01-03 Thread Peter Andreev
2012/1/4 Mark Andrews ma...@isc.org: If you want named to be authoritative only set recursion no; or allow-recursion { none; } or allow-query-cache { none; }; and no data will be returned from the cache.  allow-recursion and allow-query-cache cross inherit from each other. If you only want

Re: About root zones

2012-01-02 Thread Peter Andreev
2012/1/2 Matus UHLAR - fantomas uh...@fantomas.sk: On 21.12.11 19:21, Peter Andreev wrote: All these servers are slaves. They don't send notifies. 2011/12/21 Matus UHLAR - fantomas uh...@fantomas.sk: they do, unless you have turned it off... On 22.12.11 11:54, Peter Andreev wrote

Re: About root zones

2011-12-21 Thread Peter Andreev
2011/12/20 Matus UHLAR - fantomas uh...@fantomas.sk: 2011/12/20 Mark Andrews ma...@isc.org:        Named has a compiled in set of root hints.  It is used if        a root zone is not defined in named.conf. On 20.12.11 17:37, Peter Andreev wrote: Whether it means that without hint zone

Re: About root zones

2011-12-21 Thread Peter Andreev
2011/12/21 Matus UHLAR - fantomas uh...@fantomas.sk: 2011/12/20 Mark Andrews ma...@isc.org:        Named has a compiled in set of root hints.  It is used if        a root zone is not defined in named.conf. On 20.12.11 17:37, Peter Andreev wrote: Whether it means that without hint zone

Re: About root zones

2011-12-21 Thread Peter Andreev
2011/12/21 Matus UHLAR - fantomas uh...@fantomas.sk: On 20.12.11 17:37, Peter Andreev wrote: Whether it means that without hint zone named still can perform iterative lookups for its internal purposes? On 21.12.11 13:05, Peter Andreev wrote: Well, we run a bunch of authoritative-only

Re: About root zones

2011-12-21 Thread Peter Andreev
. On 21.12.11 19:21, Peter Andreev wrote: No, it is enabled by default. server needs to resolve names if it's supposed to send NOTIFY messages. All these servers are slaves. They don't send notifies. they do, unless you have turned it off... Of course I turned it off, it's normal practice

Re: About root zones

2011-12-20 Thread Peter Andreev
2011/12/20 Mark Andrews ma...@isc.org:        Named has a compiled in set of root hints.  It is used if        a root zone is not defined in named.conf.        Mark Whether it means that without hint zone named still can perform iterative lookups for its internal purposes? -- Mark

zone before delegation?

2011-10-28 Thread Laws, Peter C.
, this is on RHEL's BIND9 and no, the master has yet to have the RHEL bind97 RPMs installed, and yes, I am a bad admin for not doing that. -- Peter Laws / N5UWY ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

RE: zone before delegation?

2011-10-28 Thread Laws, Peter C.
On Fri, Oct 28, 2011 at 04:48:10PM +, Laws, Peter C. wrote: It seems like there are two ways I could delegate a zone. I could, in the zone file for the parent, simply list the name of the zone and a number of NS records to which the zone has been delegated. Or, I could create a zone

Re: CNAME record for the root of the domain

2011-10-12 Thread H. Peter Anvin
are DNAMEs supported? -hpa -- H. Peter Anvin, Intel Open Source Technology Center I work for Intel. I don't speak on their behalf. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: CNAME or A record?

2011-09-28 Thread Peter Pauly
If you use two A records, your web server needs to be setup to handle both names. If you use a CNAME, you only need to handle the single A record name in the server. On Wed, Sep 28, 2011 at 10:36 AM, feralert feral...@gmail.com wrote: Thanks Jeff, But I really only wrote that as an example :)

Re: updating Bind made it slower

2011-09-27 Thread Peter Andreev
2011/9/27 Tom Schmitt tomschm...@gmx.de: I just updated a couple of my DNS-servers from the rather old version 9.4.1 to a newer version 9.8.0-P4. After this I have problem with outages. Looking into it, I found that the time for a rndc reload has nearly doubled! This has been pointed

Re: updating Bind made it slower

2011-09-27 Thread Peter Andreev
2011/9/27 Tom Schmitt tomschm...@gmx.de: It is not clear in your question, are you use rndc reload or rndc reload zone.name? Latter will be faster in case if you change one or few zones in one pass of your updating-script. I generate from my database the complete named.conf, especially

Re: DNSSEC and MS AD

2011-08-10 Thread Peter Andreev
2011/8/9 Chris Buxton chris.p.bux...@gmail.com: On Aug 9, 2011, at 10:07 AM, John Williams wrote: --- On Tue, 8/9/11, Chris Buxton chris.p.bux...@gmail.com wrote: With a private version of a domain, you should not need to worry about a DS record in the parent. Just make sure your internal

Re: Breaking up RFC 1918 reverse space

2011-07-26 Thread Peter Laws
.in-addr.arpa. IN NS ns1.edu. 64-127.10.in-addr.arpa. IN NS ns2.edu. etc Where I'm confused (or have confused myself) is the part about wanting to actually break the zone up (I want to break it up for the usual reasons - size and limiting damage) -- Peter Laws / N5UWY National

Re: Forward only zones.

2011-07-26 Thread Peter Andreev
2011/7/25 Vbvbrj vbv...@gmail.com: On 25.07.2011 10:15, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND

Breaking up RFC 1918 reverse space

2011-07-23 Thread Laws, Peter C.
, though now that we found the bind97 packages in the supported repo, we may go with that. -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu (Remote) ___ Please visit

Re: Patching bind for additional stats - any tips?

2011-07-18 Thread Peter Yardley
___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- ._--_|\ Peter Yardley

link-local glue AAAA

2011-06-05 Thread Peter Andreev
Hi I'm puzzled a little - i see in my zone glue records with link-local addresses. I think it is not good, but no rfc mentions about link-local in glue. Could someone tell me best practices for link-local in glue? Thanks for advance. -- -- AP

Re: link-local glue AAAA

2011-06-05 Thread Peter Andreev
Thank you, Matus, that's all i wanted to know. 2011/6/5 Matus UHLAR - fantomas uh...@fantomas.sk: On 05.06.11 17:07, Peter Andreev wrote: I'm puzzled a little - i see in my zone glue records with link-local addresses. I think it is not good, but no rfc mentions about link-local in glue

Bind 9.8 with dlz and dnssec

2011-03-10 Thread Peter Andreev
Hello, List Now DLZ supports dynamic updates and theoretically it is possible to make such tricks: rndc freeze example.com put some new records in database rndc thaw example.com rndc sign example.com rndc freeze example.com That is zone isn't really dynamic, but it is dynamically loadable and

Re: Bind 9.8 with dlz and dnssec

2011-03-10 Thread Peter Andreev
2011/3/10 Evan Hunt e...@isc.org Now DLZ supports dynamic updates and theoretically it is possible to make such tricks: rndc freeze example.com put some new records in database rndc thaw example.com rndc sign example.com rndc freeze example.com That is zone isn't really

Re: rndc addzone and file name

2011-01-14 Thread Peter Andreev
2011/1/13 Alan Clegg acl...@isc.org: On 1/13/2011 11:08 AM, Peter Andreev wrote: I've executed rndc addzone test.test '{ type master; file /etc/namedb/master/test.1; };' and have got the file /etc/namedb/3bf305731dd26307.nzf: zone test.test { type master; file /etc/namedb/master/test.1

Re: Multiple masters expected behavior?

2010-07-27 Thread Peter Laws
\On 07/26/10 23:02, Barry Margolin wrote: In articlemailman.100.1280077153.15649.bind-us...@lists.isc.org, Laws, Peter C.pl...@ou.edu wrote: Understood, but what I'm asking about is that the slave does not appear to be losing contact with the first-listed master. In fact, from the logs

RE: Multiple masters expected behavior?

2010-07-25 Thread Laws, Peter C.
to the different interfaces so, while I'm not protecting against failure of the master, I am protecting against network path failure. -- Peter Laws / N5UWY National Weather Center / Network Operations Center / Web University of Oklahoma Information Technology pl...@ou.edu

RE: Multiple masters expected behavior?

2010-07-25 Thread Laws, Peter C.
Well aware of that, but we have RedHat support so we're stuck with that given that the alternatives are self-supporting BIND (which you could argue I'm doing right now!) or going with a 3rd party. Given the economy, I'm pleased we're keeping RH support. -- Peter Laws / N5UWY National Weather

Re: Multiple masters expected behavior?

2010-07-23 Thread Peter Laws
On 07/22/10 19:57, Barry Margolin wrote: In articlemailman.65.1279835965.15649.bind-us...@lists.isc.org, Peter Lawspl...@ou.edu wrote: I have multiple interfaces on my master and multiple interfaces on most of my slaves. Is that expected behavior? Yes. What if the first server

Multiple masters expected behavior?

2010-07-22 Thread Peter Laws
. In fact, in a few cases I've seen it seems to use both, though not round-robinning that I can see from the logs. Is that expected behavior? BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information

Re: Can't get hints or outside resolution.

2010-07-09 Thread Peter Laws
On 07/09/10 02:23, Matus UHLAR - fantomas wrote: On 08.07.10 14:42, Peter Laws wrote: BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 From the host itself, a slave for all my zones, I can resolve all my zones. I cannot, however, resolve anything else. For example, if I dig google.com I get

Re: Can't get hints or outside resolution.

2010-07-09 Thread Peter Laws
Hey! A firewall setting was wrong! Imagine that! Thanks, all. :-) On 07/09/10 14:18, Peter Laws wrote: On 07/09/10 02:23, Matus UHLAR - fantomas wrote: On 08.07.10 14:42, Peter Laws wrote: BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 From the host itself, a slave for all my zones, I can

Re: Split view - differing SOA serial number

2010-07-08 Thread Peter Andreev
2010/7/8 John Horne john.ho...@plymouth.ac.uk [..] Both views use the same zone file (which currently contains 3330257 as the serial number), and the zone is configured to use a single master. If I use rndc to reload the zone in both views, then nothing changes. If I stop and restart the

Re: Can't get hints or outside resolution.

2010-07-08 Thread Peter Laws
Yep, zone for hint is right. No interesting messages service named checkconfig (which RH has helpfully set up to run named-checkconf and named-checkzone) shows that all is well. :-( On 07/08/10 15:55, Warren Kumari wrote: On Jul 8, 2010, at 3:42 PM, Peter Laws wrote: BIND 9.3.6-P1-RedHat

Re: FW: BIND 9 errors

2010-07-01 Thread Peter Andreev
2010/7/1 Y z yan...@hotmail.com (bind version 9.7.0-P1) A DNS slave server has two IPs: an internal RFC1918 number to talk to the internal net, and an external one to talk to the rest of the world. If I *don't* put the external IP in a master: zone example.com { type slave; file

How can I fake a part of domain?

2010-06-23 Thread Peter Macko
How can I fake a part of domain? Explanation of what I mean: - There is example.com domain somewhere on internet (not under my control) that contains: www.example.com IP: 1.2.3.4www2.example.com ... IP: 11.22.33.44 - I have local DNS; and for my local network I fake to

Re: +, -, -E

2010-06-21 Thread Peter Laws
On 06/21/10 14:06, Justin T Pryzby wrote: On Mon, Jun 21, 2010 at 01:46:55PM -0500, Peter Laws wrote: What do they mean? I can't find them and yes, I've googled and also grepped the docs on isc.org ... Googling for symbols isn't easy.. http://www.isc.org/files/arm96.html#the_category_phrase

Re: Running both a cache-only and an authoritative server on the same server

2010-06-17 Thread Peter Laws
don't work inside of view statements. Why not just have named run on as many interfaces as needed and let views sort it out? Views don't need to care which physical interface traffic is on. -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma

Re: using TXT fields

2010-05-18 Thread Peter Laws
are great, but they often fall off the monitor. This is a superior solution and has the benefit of being remotely accessible. Thanks for the pro tip! -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu

Dig 9.7 DNSSEC output

2010-05-09 Thread Peter Janssen
: Sun May 9 17:23:51 2010 ;; MSG SIZE rcvd: 153 Am I missing something? Or is this already reported? If so, what would be the correct channel? R. --Pj. Peter Janssen Technical Manager Join us in June! EURid hosts ICANN’s 38th meeting in Brussels.  Find out more at brussels38.icann.org

RE: Dig 9.7 DNSSEC output

2010-05-09 Thread Peter Janssen
Hi Rick, as per the header of Dig output… ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9 a part from that, I'm glad that my counting is still up to par :-) R. --Pj. Peter Janssen Technical Manager Join us in June! EURid hosts ICANN’s 38th meeting in Brussels.  Find out

RE: Dig 9.7 DNSSEC output

2010-05-09 Thread Peter Janssen
to the EDNS0 stuff? --Pj. Peter Janssen Technical Manager Join us in June! EURid hosts ICANN’s 38th meeting in Brussels.  Find out more at brussels38.icann.org.     EURid     Woluwelaan 150     1831 Diegem - Belgium     TEL.: +32 (0) 2 401 2750     peter.jans...@eurid.eu     http

Re: Master server offline

2010-05-07 Thread Peter Laws
need review. If the OP serves his organization's DNS, it's pretty darn critical that customers be able to resolv their DNS info. -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu

Re: [OT] MSDN use google apps for email hosting

2010-05-07 Thread Peter Laws
, yes, but whois doesn't seem to point to M$ in any way. Independent? -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu --- Feedback? Contact my

Re: ftp.isc.org back up

2010-05-06 Thread Peter Laws
On 05/06/10 13:27, Lightner, Jeff wrote: They can't fool us - we know it was caused by the J server DNSSEC issue. Damn that DNSSEC!!! :-D -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu

RE: Preparing for upcoming DNSSEC changes on 5/5

2010-05-04 Thread Laws, Peter C.
our packet size to what the test reported which just didn't make sense. OK, so, bring on the End Of The Internet tomorrow! Peter ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Preparing for upcoming DNSSEC changes on 5/5

2010-05-03 Thread Peter Laws
come up (directly) during the Educause webinar about DNSSEC last week (.edu will be signed in July). -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu

Re: Preparing for upcoming DNSSEC changes on 5/5

2010-05-03 Thread Peter Laws
beyond my control (and the other 4 only marginally :-). Besides, we've seen one example where setting it smaller results in yet a smaller result. -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu

RE: Preparing for upcoming DNSSEC changes on 5/5

2010-05-03 Thread Laws, Peter C.
faulty network equipment. -- Peter Laws / N5UWY National Weather Center / Network Operations Center / Web University of Oklahoma Information Technology pl...@ou.edu From: ma...@isc.org [ma...@isc.org] Sent: Monday, May 03, 2010 20:19 To: Laws, Peter C. Cc

shut down: operation canceled on zone transfer

2010-04-18 Thread Peter Skipworth
two weeks ago, and this hasn't helped. Anyone have any clues ? Bind version bind-9.2.4 under CentOS on both servers. Ta, P -- peter skipworth argo open solutions mob 0413 962 064 ph 03 9820 0536 fax 03 8610 0379 em p...@argoinf.com ___ bind

Re: shut down: operation canceled on zone transfer

2010-04-18 Thread Peter Skipworth
Mark Andrews wrote: In message 4bcbb36f.6040...@argoinf.com, Peter Skipworth writes: Hello, I have a primary and secondary nameserver which host a number of domains. Recently, the secondary has started failing to sync one of the domains, and comes up with the following... Apr 19 10:46

Re: Re: Delegation - what needs to be there?

2010-03-29 Thread Peter Laws
-and-egg problem. This is what I thought but thought I'd make doubly certain. Thanks! Peter -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu

Delegation - what needs to be there?

2010-03-26 Thread Peter Laws
if it matters. Peter -- Peter Laws / N5UWY National Weather Center / Network Operations Center University of Oklahoma Information Technology pl...@ou.edu --- Feedback? Contact my director, Craig Cochell, cra...@ou.edu. Thank you

Re: Using bind to provide a dns redirector

2010-03-05 Thread Peter Andreev
Have you tried to add to your . zone something like this: microsoft.com NS ns1.msft.net NS ns3.msft.net NS ns5.msft.net etc? Just an assumption - RFC 4592 http://tools.ietf.org/html/rfc4592 describes processing of asterisk as any non-existent in

Modifying a response

2010-02-24 Thread Peter Andreev
Hello, everybody. Is it possible to modify responses on caching server side? For example: if user asks for non-existent domain, caching server replies with some address and no-error rcode. ___ bind-users mailing list bind-users@lists.isc.org

<    1   2   3   >