Re: How to setup a backup NameServer?

2014-05-05 Thread houguanghua
@lists.isc.org Subject: Re: How to setup a backup NameServer? Message-ID: 5366819f.7030...@chrysler.com Content-Type: text/plain; charset=iso-8859-1; Format=flowed Forwarder selection has been based on RTTs for quite a while now. So, if what you're trying to protect against is your primary forwarders

Re: How to setup a backup NameServer?

2014-05-04 Thread Steven Carr
On 4 May 2014 02:15, houguanghua houguang...@hotmail.com wrote: These zones are not owned by ISP, such as: yahoo.com, facebook.com... If such backup dns server is ready, ISP will talk to these WEB sites to keep synchronization with their authority NSs. It's maybe a huge project. It's an

Re: How to setup a backup NameServer?

2014-05-04 Thread Kevin Darcy
...@hireahit.com To: bind-users@lists.isc.org Subject: Re: How to setup a backup NameServer? Message-ID: 53608546.4050...@hireahit.com Content-Type: text/plain; charset=iso-8859-1; Format=flowed On 2014-04-29 18:50, houguanghua wrote: A lot of zones will be supported. All popular zones in the ISP

RE: How to setup a backup NameServer?

2014-05-04 Thread houguanghua
Steve, Thanks a lot for your advice. Guanghua Date: Sun, 4 May 2014 09:26:00 +0100 Subject: Re: How to setup a backup NameServer? From: sjc...@gmail.com To: houguang...@hotmail.com CC: bind-users@lists.isc.org On 4 May 2014 02:15, houguanghua houguang...@hotmail.com wrote

Re: How to setup a backup NameServer?

2014-05-03 Thread houguanghua
Date: Tue, 29 Apr 2014 22:08:22 -0700 From: Dave Warren da...@hireahit.com To: bind-users@lists.isc.org Subject: Re: How to setup a backup NameServer? Message-ID: 53608546.4050...@hireahit.com Content-Type: text/plain; charset=iso-8859-1; Format=flowed On 2014-04-29 18:50, houguanghua wrote

Re: How to setup a backup NameServer?

2014-05-03 Thread Dave Warren
On 2014-05-03 18:15, houguanghua wrote: These zones are not owned by ISP, such as: yahoo.com, facebook.com... If such backup dns server is ready, ISP will talk to these WEB sites to keep synchronization with their authority NSs. It's maybe a huge project. Do you actually expect to get a zone

Re: How to setup a backup NameServer?

2014-04-30 Thread Matus UHLAR - fantomas
On 29.04.14 10:24, houguanghua wrote: I'm designing how to protect DNS for an ISP. The zones are not owned by the ISP. The ISP wants to proect the DNS query during attacking. So it's not standard DNS solution. During the attacking, the backup server will provide the DNS query and it works

Re: How to setup a backup NameServer?

2014-04-29 Thread houguanghua
Apr 2014 12:08:29 -0400 From: Kevin Darcy k...@chrysler.com To: bind-users@lists.isc.org Subject: Re: How to setup a backup NameServer? Message-ID: 535e7cfd.2010...@chrysler.com Content-Type: text/plain; charset=iso-8859-1; Format=flowed I'm not sure this makes sense from an architectural

Re: How to setup a backup NameServer?

2014-04-29 Thread Steven Carr
On 29 April 2014 07:06, houguanghua houguang...@hotmail.com wrote: hi kevin, Stealth slaves can't be used as backup NS server. This backup server can't be accessed by all internet users. It can only be accessed by users from one ISP. It's used when all authority NSs are down, especially in

RE: How to setup a backup NameServer?

2014-04-29 Thread houguanghua
query and it works even if it can't refresh zones from primary NS. Backup server is configured the private IP of this ISP. All local DNS servers of this ISP knows where is the backup server. thanks, Guanghua Date: Tue, 29 Apr 2014 08:19:34 +0100 Subject: Re: How to setup a backup NameServer

Re: How to setup a backup NameServer?

2014-04-29 Thread Niall O'Reilly
At Tue, 29 Apr 2014 10:24:58 +, houguanghua wrote: Yes, I had asked the same question months ago. I'm designing how to protect DNS for an ISP. The zones are not owned by the ISP. The ISP wants to proect the DNS query during attacking. So it's not standard DNS solution. During the

Re: How to setup a backup NameServer?

2014-04-29 Thread /dev/rob0
On Tue, Apr 29, 2014 at 11:49:49AM +0100, Niall O'Reilly wrote: At Tue, 29 Apr 2014 10:24:58 +, houguanghua wrote: Yes, I had asked the same question months ago. I'm designing how to protect DNS for an ISP. The zones are not owned by the ISP. The ISP wants to proect the DNS query

Re: How to setup a backup NameServer?

2014-04-29 Thread houguanghua
a backup NameServer? (Steven Carr) 2. RE: How to setup a backup NameServer? (houguanghua) 3. Re: How to setup a backup NameServer? (Niall O'Reilly) 4. Re: How to setup a backup NameServer? (/dev/rob0) -- Message: 1

Re: How to setup a backup NameServer?

2014-04-29 Thread Dave Warren
On 2014-04-29 18:50, houguanghua wrote: A lot of zones will be supported. All popular zones in the ISP. Maybe the best solution is to hire some custom programming to develop private system. How will you obtain copies of all popular zones? Are you just talking about zones you host, or things

Re: How to setup a backup NameServer?

2014-04-29 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/29/2014 07:48 AM, /dev/rob0 wrote: On Tue, Apr 29, 2014 at 11:49:49AM +0100, Niall O'Reilly wrote: At Tue, 29 Apr 2014 10:24:58 +, houguanghua wrote: Yes, I had asked the same question months ago. I'm designing how to protect DNS for an

Re: How to setup a backup NameServer?

2014-04-28 Thread /dev/rob0
On Mon, Apr 28, 2014 at 03:30:40AM +, houguanghua wrote: Does bind support backup nameserver? This nameserver isn't regeristered and not accessed in normal situation. Only when all authority NSs is down, this backup nameserver will be accessed by Local DNS server. I guess what you want

Re: How to setup a backup NameServer?

2014-04-28 Thread Kevin Darcy
I'm not sure this makes sense from an architectural standpoint. If all of the authoritative NSes are down, where is this backup nameserver getting its data from, and how current is that data? If slightly *stale* data is acceptable, in the absence of all authoritative NSes, then why not just

How to setup a backup NameServer?

2014-04-27 Thread houguanghua
Dear all, Does bind support backup nameserver? This nameserver isn't regeristered and not accessed in normal situation. Only when all authority NSs is down, this backup nameserver will be accessed by Local DNS server. How to configure this backup NS and how to configure in the local DNS