Re: [Non-DoD Source] BIND Masters and slaves

2020-06-15 Thread bind-lists
I have been teaching informal DNS classes at work for decades, and I used to be very careful to use “master” and “slave” and would include a section where I pointed out that using “primary” and “secondary” instead was not correct. Then about 10 years ago one person in class pointed out to me

Re: Can we provide recursion for forward zones in response to iterative queries?

2020-04-07 Thread bind-lists
Thanks. I have opened a ticket with AWS support asking them to allow us to pull slave copies of our VPC-internal zones. If they don’t do that, then making the zones slaves will not fix our problem, because the AWS endpoints refuse to answer iterative queries. Thanks, Maria > On Apr 7, 2020,

Re: Can we provide recursion for forward zones in response to iterative queries?

2020-04-07 Thread bind-lists
I had been told they tried that twice and in both cases the domain controller would not let them add the conditional forwarder. On the strength of your having said it worked in your situation, they tried again and now it is working. Thank you! Maria > On Apr 6, 2020, at 11:37 AM, Chris Buxton

Re: Can we provide recursion for forward zones in response to iterative queries?

2020-04-07 Thread bind-lists
Currently our linux caching resolvers have a forwarding rule for 10.in-addr.arpa back to a small subset of our approximately 200 AD domain controllers. We made it a stub zone at one point in the past, but ran into intermittent resolution problems, although I don’t recall the details. We’ve

Can we provide recursion for forward zones in response to iterative queries?

2020-04-03 Thread bind-lists
Hi, In summary, my question is whether there is a way to configure a bind caching server to provide recursion in response to iterative queries for records in a forward type zone. The background is that we have: - AD domain controllers that are authoritative for all of 10.in-addr.arpa. in our

Re: one domain not resolving via response-policy zone

2018-01-22 Thread lists
Hey Kai, > If I do a nslookup for one of the otto.de domains I reveive "** server > can't find somehost.ov.otto.de: SERVFAIL" The guideline behind the response-policy is that only an actual response gets rewritten. This is usually an answer from a recursive lookup. If you don't get an answer,

Re: stumped on sub domain addition

2015-07-23 Thread lists - euca
P: 678-486-3516 C: 678-772-0018 F: 678-460-3603 E: jlight...@dsservices.com -Original Message- From: lists - euca [mailto:li...@euca.us] Sent: Thursday, July 23, 2015 2:23 PM To: Lightner, Jeff Cc: Bind Users Mailing List Subject: Re: stumped on sub domain addition Thanks

stumped on sub domain addition

2015-07-23 Thread lists - euca
Hello, I added a sub domain to my zone file euca.us yesterday. “onqsolutions”. It first was added as a CNAME, then I couldn’t get it to work.. so now it is an A record. Still not working. Can someone help troubleshoot? onqsolutions.euca.us TIA, Donovan

Re: MS AD 2008R2 and bind

2012-01-03 Thread Will Lists
On Tue, Jan 3, 2012 at 4:00 AM, Melbinger Christian christian.melbin...@wienit.at wrote: Hi ** ** My company moved to a 2008R2 Domain Controller environment. Now I see the following message in the windows log: ** ** *Title*: This domain controller must register its correct IP

Re: Not able to resolve a domain

2011-11-18 Thread Will Lists
Maybe a network/firewall issue? My results below. dig +trace thisisgame.com ; DiG 9.8.0-P2 +trace thisisgame.com ;; global options: +cmd . 432154 IN NS b.root-servers.net. . 432154 IN NS l.root-servers.net. .

Re: Not able to resolve a domain

2011-11-18 Thread Will Lists
IN A 1.234.35.120 thisisgame.com. 1800IN NS ns1.thisisgame.com. ;; Received 82 bytes from 1.234.35.141#53(ns1.thisisgame.com) in 187 ms -Will On Fri, Nov 18, 2011 at 9:27 AM, Will Lists listsw...@gmail.com wrote: Maybe a network/firewall issue? My results

Re: Not able to resolve a domain

2011-11-18 Thread Will Lists
Site is based in Korea based on the IP and whois, so it does sound like some sort of access controls are in place on one end or the other. I was able to access the site. -Will On Fri, Nov 18, 2011 at 9:30 AM, Jan-Piet Mens jpmens@gmail.com wrote: I have found that www.thisisgame.com

Switching from forwarding to recursion

2011-11-01 Thread Will Lists
We recently tried a test to see how our internal servers would react to a loss of their external peers, with the goal being that the internal servers would switch from forwarding to doing recursive queries for clients. Normally, the internal servers forward to the external servers. To simulate

Re: Switching from forwarding to recursion

2011-11-01 Thread Will Lists
records. Forward only will only use forwarders. The delay you are seeing is likely the delay in exhausting the forwarders before attempting the roots. -Ben Croswell On Nov 1, 2011 9:23 AM, Will Lists listsw...@gmail.com wrote: We recently tried a test to see how our internal servers would

Re: Switching from forwarding to recursion

2011-11-01 Thread Will Lists
of the forwarders may be the quickest way to restore service. -Ben Croswell On Nov 1, 2011 10:03 AM, Will Lists listsw...@gmail.com wrote: Ben, I seem to recall reading at some point in the past that after X amount of time, BIND would stop trying to contact servers it figured to be dead

RE: BIND master , Windows 2008 stub zone not transferring

2011-10-20 Thread Will lists
I had a very similar issue recently, but it was with secondaries on Windows Server 2008 R2 and not stub zones. We actually went to stub zones afterwards to prevent the issue from happening again, hopefully. The issue was that a machine had done DCHP and gotten the DDNS created A/TXT/PTR

Re: File System Choice

2009-11-26 Thread Andy Shellam (Mailing Lists)
On 26 November2009, at 07:00, Fajar A. Nugraha wrote: Also, you could organize the zone files (manually) so that they spread over many directories instead of one. I've heard that compiling the zones first (named-compilezone?) is a big help in this situation; I can't vouch for it though.

RE: Trouble configuring forwarders for reverse zones.

2009-04-08 Thread M-lists
Thanks Chris. I had actually tried that, but it turned out Windows wasn't answering reverse queries properly so I didn't notice when I had got it right. Once your post pointed out that was the way to go, I got Wireshark on it and quickly noticed Windows was also at fault. One further thing,