Re: Clarification on bind result

2010-06-01 Thread rams
Is there any update on the following issue. On Mon, May 31, 2010 at 2:16 PM, rams brames...@gmail.com wrote: Hi , I have the following zone file: $ORIGIN td3497.com. @ IN SOA udns1.ultradns.net. ppk.yahoo.com. ( 2010052610 ; serial 10800 ; refresh 3600 ; retry 2592000 ; expire

Bind response

2010-06-01 Thread rams
Hi , I have the following zone file: $ORIGIN td3497.com. @ IN SOA udns1.ultradns.net. ppk.yahoo.com. ( 2010052610 ; serial 10800 ; refresh 3600 ; retry 2592000 ; expire 86400 ; minimum ) cname.chain.td3497.com. 86400 IN CNAME mx.chain.td3497.com. mx.chain.td3497.com. 86400 IN MX 34

Re: Bind response

2010-06-01 Thread Matus UHLAR - fantomas
On 01.06.10 14:16, rams wrote: I queried for cname domain against bind 9.6.X and got the following response C:\Documents and Settings\rameshbdig @localhost cname.td3497.com mx ; DiG 9.6.1-P1 @localhost cname.td3497.com mx ; (1 server found) ;; global options: +cmd ;; Got answer: ;;

Re: Bind response

2010-06-01 Thread David Forrest
On Tue, 1 Jun 2010, Matus UHLAR - fantomas wrote: On 01.06.10 14:16, rams wrote: I queried for cname domain against bind 9.6.X and got the following response C:\Documents and Settings\rameshbdig @localhost cname.td3497.com mx ; DiG 9.6.1-P1 @localhost cname.td3497.com mx ; (1 server found)

max-cache-size query

2010-06-01 Thread Techi
Hallo, Recently, I faced huge problems with my DNS servers (bind crashed with no apparent reason). Some of the symptons were: * Huge number of connections on our firewalls (15). * A lot of errors in syslog about max file descriptors limits reached (currently on system, the FD limit is 4096,

RE: max-cache-size query

2010-06-01 Thread Todd Snyder
What version of BIND are you running? If you're getting FD limits, I'd think it's an older version with a bug, and your problems might also be alleviated by upgrading. Todd. -Original Message- From: bind-users-bounces+tsnyder=rim@lists.isc.org

Re: max-cache-size query

2010-06-01 Thread Techi
On Tue 01 of Jun 2010 15:43:54 you wrote: What version of BIND are you running? If you're getting FD limits, I'd think it's an older version with a bug, and your problems might also be alleviated by upgrading. Version: bind-9.3.6-4.P1.el5_4.2 I cannot upgrade. Company's policy is to use

Re: max-cache-size query

2010-06-01 Thread Adam Tkac
On Tue, Jun 01, 2010 at 03:52:56PM +0300, Techi wrote: On Tue 01 of Jun 2010 15:43:54 you wrote: What version of BIND are you running? If you're getting FD limits, I'd think it's an older version with a bug, and your problems might also be alleviated by upgrading. Version:

DNSSEC Status...

2010-06-01 Thread Heavy Man
A few questions about DNSSEC... I understand the root zones are currently getting signed.  Just for sanity sake, should I be able to DIG +dnssec a.gtld-servers.net and be able to see a RRSIG record (assume I have a valid dnssec recursive name server with a valid trust anchor configured). 

Re: DNSSEC Status...

2010-06-01 Thread Casey Deccio
On Tue, Jun 1, 2010 at 6:55 AM, Heavy Man heavyma...@yahoo.com wrote: A few questions about DNSSEC... I understand the root zones are currently getting signed. The root zone is currently signed with a DURZ (deliberately unvalidatable root zone) as part of its deployment. See the following

question about bind bug fixed in 9.6.2-P2

2010-06-01 Thread Jack Tavares
From the release notes: --- 9.6.2-P2 released --- 2876. [bug] Named could return SERVFAIL for negative responses from unsigned zones. [RT #21131] Question: Does this bug only occur if dnssec is enabled? or only if dnssec validation is turned on? or will it

Re: max-cache-size query

2010-06-01 Thread Warren Kumari
One obvious solution to keeping the firewall guys happy would just be to make them not burn state entries for the nameserver at all Firewalls in front of nameservers cause an ungodly amount of issues for no real benefit... Just sayin'... W On Jun 1, 2010, at 8:35 AM, Techi wrote:

Re: DNSSEC Status...

2010-06-01 Thread Mark Andrews
In message 573607.58516...@web114302.mail.gq1.yahoo.com, Heavy Man writes: A few questions about DNSSEC... I understand the root zones are currently getting signed. Just for sanit= y sake, should I be able to DIG +dnssec a.gtld-servers.net and be able to s= ee a RRSIG record (assume I have

probleme with dk dkim and dlv for miltiple domain for dkimproxy and bind dnssec

2010-06-01 Thread fakessh
hello all hello bind network I am having problems with my dk and dkim signature of my emails I have successfully made the process of verification of signatures dnssec all my domains are correct and good displays on dlv.isc.org the reason for my problem just the reason that I have updated my