Re: Configuring CNAME for nosslsearch.google.com

2012-05-09 Thread Tobias Krais
Hi together, thanks for these many hints. Wow! So many mistakes in a few lines. Here ist now my config file: -%- @ IN SOA localhost. root.localhost. ( 2012050900 7200

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Tobias Krais
Hi Phil, 4. Create a zone for www.google.com and instead of CNAME, put an A record at the apex with the same IP as nosslsearch.google.com. Run a script FREQUENTLY to re-resolve the host, as Google do short-TTL DNS-based loadbalancing. For unbound has no solution Inow want to try your

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Barry Margolin
In article mailman.713.1336489020.63724.bind-us...@lists.isc.org, Tobias Krais tux-s...@design-to-use.de wrote: Hi Phil, 4. Create a zone for www.google.com and instead of CNAME, put an A record at the apex with the same IP as nosslsearch.google.com. Run a script FREQUENTLY to

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Jan-Piet Mens
-%- @ IN SOA localhost root@localhost. ( 2012041100 7200 1800 1209600

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Chris Thompson
On May 8 2012, Barry Margolin wrote: In article mailman.713.1336489020.63724.bind-us...@lists.isc.org, Tobias Krais tux-s...@design-to-use.de wrote: Hi Phil, 4. Create a zone for www.google.com and instead of CNAME, put an A record at the apex with the same IP as nosslsearch.google.com.

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread /dev/rob0
Sundry nitpicks. Not much of interest here, sorry. On Tue, May 08, 2012 at 05:38:55PM +0200, Jan-Piet Mens wrote: -%- @ IN SOA localhost root@localhost. ( 2012041100 7200

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Joseph S D Yao
On Tue, Apr 17, 2012 at 02:24:48PM +0200, Tobias Krais wrote: Hi all together, very interesting this discussion. For I am a newbie I understood only half. Thus I detected 2 ways to continue: I believe you can use response policy (RPZ) to achieve this. Or you can use just about any

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Tobias Krais
Hi Jan-Piet, What's the hash doing there? ...^ That's not a comment. Thanks. I continue learning... Replace that whole line by nosslsearch.google.com. IN A 216.239.32.20 Zone is www.google.com. That won't work here Assuming you've configured the zone

Re: Configuring CNAME for nosslsearch.google.com

2012-04-17 Thread Tobias Krais
Hi all together, very interesting this discussion. For I am a newbie I understood only half. Thus I detected 2 ways to continue: I believe you can use response policy (RPZ) to achieve this. Or you can use just about any non-BIND resolver (e.g. unbound) to achieve this. 1. Don't use bind but

Re: Configuring CNAME for nosslsearch.google.com

2012-04-17 Thread Phil Mayers
On 17/04/12 13:24, Tobias Krais wrote: Hi all together, very interesting this discussion. For I am a newbie I understood only half. Thus I detected 2 ways to continue: I believe you can use response policy (RPZ) to achieve this. Or you can use just about any non-BIND resolver (e.g. unbound)

Re: Configuring CNAME for nosslsearch.google.com

2012-04-17 Thread Tobias Krais
Hi Phil, 1. Don't use bind but e.g. unbound instead. First: here the link to follow on the unbound mailing list: http://unbound.nlnetlabs.nl/pipermail/unbound-users/2012-April/002329.html Any other ideas I missed? 3. Use RPZ, as per Chris' suggestion 4. Create a zone for www.google.com

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Phil Mayers
On 04/15/2012 11:40 PM, Tobias Krais wrote: Hi Ben, hmm. How can I manage what google suggests: Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for www.google.com to be a CNAME for

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Lyle Giese
On 4/16/2012 3:30 AM, Phil Mayers wrote: On 04/15/2012 11:40 PM, Tobias Krais wrote: Hi Ben, hmm. How can I manage what google suggests: Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Matthew Huff
[mailto:bind-users- bounces+mhuff=ox@lists.isc.org] On Behalf Of Lyle Giese Sent: Monday, April 16, 2012 8:50 AM To: bind-users@lists.isc.org Subject: Re: Configuring CNAME for nosslsearch.google.com On 4/16/2012 3:30 AM, Phil Mayers wrote: On 04/15/2012 11:40 PM, Tobias Krais wrote

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Alan Clegg
On 4/16/2012 9:40 AM, Matthew Huff wrote: Actually, this can be done. Create a zone file for www.google.com, not google.com. The zone file should like this (replace THIS_HOSTNAME with the name of your nameserver: @ IN SOA localhost root@localhost. (

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Ben Croswell
AM To: bind-users@lists.isc.org Subject: Re: Configuring CNAME for nosslsearch.google.com On 4/16/2012 3:30 AM, Phil Mayers wrote: On 04/15/2012 11:40 PM, Tobias Krais wrote: Hi Ben, hmm. How can I manage what google suggests: Information for school network administrators about

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread /dev/rob0
On Mon, Apr 16, 2012 at 09:40:16AM -0400, Matthew Huff wrote: Actually, this can be done. Create a zone file for www.google.com, not google.com. The zone file should like this (replace THIS_HOSTNAME with the name of your nameserver: @ IN SOA localhost

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Chris Buxton
On Apr 15, 2012, at 3:40 PM, Tobias Krais wrote: Hi Ben, hmm. How can I manage what google suggests: Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for www.google.com to be a CNAME for

Configuring CNAME for nosslsearch.google.com

2012-04-15 Thread Tobias Krais
Hi together, I am a newbie to bind and wasted hours to create my first bind configuration. My target is simply creating a configuration with a CNAME for www.google.com to nosslsearch.google.com. First: I use Ubuntu Precise Pangolin with bind 9.8.1. I have a transparent proxy (Dansguardian +

Re: Configuring CNAME for nosslsearch.google.com

2012-04-15 Thread Ben Croswell
What you are asking for can't be done. If you load the google.com zone everything you don't load in the zone will be black holed and not resolve. If you try to load WWW.Google.com you will not be able to make WWW a cname due to the no cname and other data rule. On Apr 15, 2012 5:39 PM, Tobias

Re: Configuring CNAME for nosslsearch.google.com

2012-04-15 Thread Tobias Krais
Hi Ben, hmm. How can I manage what google suggests: Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for www.google.com to be a CNAME for nosslsearch.google.com. Source: