Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Kevin Darcy
On 4/4/2010 2:24 PM, Sten Carlsen wrote: On 04/04/10 17:41, Kevin Darcy wrote: On 4/1/2010 9:19 PM, Barry Margolin wrote: In articlemailman.1048.1270148466.21153.bind-us...@lists.isc.org, Kevin Darcyk...@chrysler.com wrote: Re-use of source ports for DNS queries is a bad security

Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Kevin Darcy
On 4/4/2010 3:33 PM, Barry Margolin wrote: In articlemailman.1058.1270395730.21153.bind-us...@lists.isc.org, Kevin Darcyk...@chrysler.com wrote: On 4/1/2010 9:19 PM, Barry Margolin wrote: In articlemailman.1048.1270148466.21153.bind-us...@lists.isc.org, Kevin

Re: Same source port queries dropped by ServerIron load balancer

2010-04-05 Thread Barry Margolin
In article mailman.1074.1270505464.21153.bind-us...@lists.isc.org, Kevin Darcy k...@chrysler.com wrote: On 4/4/2010 3:33 PM, Barry Margolin wrote: In articlemailman.1058.1270395730.21153.bind-us...@lists.isc.org, Kevin Darcyk...@chrysler.com wrote: On 4/1/2010 9:19 PM, Barry

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Kevin Darcy
On 4/1/2010 9:19 PM, Barry Margolin wrote: In articlemailman.1048.1270148466.21153.bind-us...@lists.isc.org, Kevin Darcyk...@chrysler.com wrote: Re-use of source ports for DNS queries is a bad security practice. I cast my vote in favor of penalizing it, in the default configuration of

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Sten Carlsen
On 04/04/10 17:41, Kevin Darcy wrote: On 4/1/2010 9:19 PM, Barry Margolin wrote: In articlemailman.1048.1270148466.21153.bind-us...@lists.isc.org, Kevin Darcyk...@chrysler.com wrote: Re-use of source ports for DNS queries is a bad security practice. I cast my vote in favor of

Re: Same source port queries dropped by ServerIron load balancer

2010-04-04 Thread Mark Andrews
In message 4bb8b33b.4070...@chrysler.com, Kevin Darcy writes: On 4/1/2010 9:19 PM, Barry Margolin wrote: In articlemailman.1048.1270148466.21153.bind-us...@lists.isc.org, Kevin Darcyk...@chrysler.com wrote: Re-use of source ports for DNS queries is a bad security practice. I

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Kevin Darcy
On 4/1/2010 12:37 AM, Mark Andrews wrote: In message4bb1c63b.30...@ies.etisalat.ae, Abdulla Bushlaibi writes: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Kevin Darcy
On 3/30/2010 5:36 AM, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per the load balancer vendor feed back, this is

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Mark Andrews
In message 4bb4ed5a.20...@chrysler.com, Kevin Darcy writes: On 4/1/2010 12:37 AM, Mark Andrews wrote: In message4bb1c63b.30...@ies.etisalat.ae, Abdulla Bushlaibi writes: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Barry Margolin
In article mailman.1048.1270148466.21153.bind-us...@lists.isc.org, Kevin Darcy k...@chrysler.com wrote: Re-use of source ports for DNS queries is a bad security practice. I cast my vote in favor of penalizing it, in the default configuration of any device that responds to DNS requests.

Re: Same source port queries dropped by ServerIron load balancer

2010-03-31 Thread Abdulla Bushlaibi
The tool queryperf is a useful tool and it gives you details about a DNS server performance. However, it would be useful to have an option in queryperf to use random source ports to test real life scenarios. -- Abdulla Ahmad Bushlaibi On 3/31/2010 12:07 AM, Kevin Darcy wrote: On 3/30/2010

Re: Same source port queries dropped by ServerIron load balancer

2010-03-30 Thread Tony Finch
On Tue, 30 Mar 2010, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per the load balancer vendor feed back, this is

Re: Same source port queries dropped by ServerIron load balancer

2010-03-30 Thread Kevin Darcy
On 3/30/2010 8:00 AM, Tony Finch wrote: On Tue, 30 Mar 2010, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per