Re: Round robin DNS query response

2010-09-29 Thread Eivind Olsen
Is there a way to make BIND respond DNS query in sequence? Someone else can probably give a more authoritative answer. My understanding is that BIND will rotate the answers it gives out when there's more than one similar record in a rrset. And yes, this can help spread the load a bit. Whether

How does BIND 9 scale with multithreading?

2010-09-29 Thread Eivind Olsen
Does anyone know if there are any benchmarks out in the public, which could give some insight into how well BIND 9 scales with multithreading? I've tried looking on this list, and googling, but haven't found anything yet. To be a bit more specific - I'm not sure what a good option for server

bind-dlz don't work

2010-09-29 Thread ShanyiWan
Bind-dlz(the latest Berkeley DB as a back-end),Services can start correctly, but DNS is not returned to the correct value. Related data: dbsql .tables dns_client dns_datadns_xfr dns_zone dbsql select * from dns_client; test.com|192.168.146.155 test.com|127.0.0.1 dbsql select * from

Re: How does BIND 9 scale with multithreading?

2010-09-29 Thread Jonathan Petersson
I did some benchmarking on this about 1.5 yrs ago, here's a graph representing the results: http://sedoss.com/bind.png On Wed, Sep 29, 2010 at 10:37 AM, philippe.simo...@swisscom.com wrote: Hi i read that 'old' bind version where better when threading was disabled. Load balancing between 2

Re: Multiple masters and multiple TSIG keys

2010-09-29 Thread Niall O'Reilly
On 29 Sep 2010, at 09:34, Anand Buddhdev wrote: Now, I have been given 2 keys, t1 and t2, to use for transferring z1 and z2 respectively. [Wandering off topic, perhaps] That seems to me a back-to-front way to do things. If the organization running the master is

Re: How does BIND 9 scale with multithreading?

2010-09-29 Thread Fabien Seisen
2010/9/29 Eivind Olsen eiv...@aminor.no Does anyone know if there are any benchmarks out in the public, which could give some insight into how well BIND 9 scales with multithreading? I've tried looking on this list, and googling, but haven't found anything yet. To be a bit more specific -

forward only not

2010-09-29 Thread Len Conrad
FreeBSD 7.2-RELEASE BIND 9.6.0-P1 resolv.conf: nameserver 127.0.0.1 machine is postfix MX relay-only gateway on a separate machines, zen.dnsbld.domain.net on IPs 10.1.60.1 10.1.60.2, rbldnsd is running a local copy of zen.spamhaus nmap shows 10.1.60.1 and 10.1.60.2 with port 53 UDP open.

Re: forward only not

2010-09-29 Thread Len Conrad
-- Original Message -- From: Len Conrad lcon...@go2france.com Reply-To: lcon...@go2france.com Date: Wed, 29 Sep 2010 15:58:13 +0200 FreeBSD 7.2-RELEASE BIND 9.6.0-P1 resolv.conf: nameserver 127.0.0.1 machine is postfix MX relay-only gateway on a

Re: Multiple masters and multiple TSIG keys

2010-09-29 Thread Anand Buddhdev
On 29/09/2010 12:09, Niall O'Reilly wrote: On 29 Sep 2010, at 09:34, Anand Buddhdev wrote: Now, I have been given 2 keys, t1 and t2, to use for transferring z1 and z2 respectively. [Wandering off topic, perhaps] That seems to me a back-to-front way to do things. If

Re: Multiple masters and multiple TSIG keys

2010-09-29 Thread Niall O'Reilly
On 29 Sep 2010, at 15:53, Anand Buddhdev wrote: Anyway, I discussed this with my colleague here, and we came up with a solution that works. We have created 2 views of the master name servers: Nice one, and useful to have in the mailing-list archive! /Niall

Bind named 9.7.2-P2 segfault and core dump when in debug mode

2010-09-29 Thread Dennis Clarke
I am trying to track down a bit of strange behavior. Not sure if anyone else sees this. I tend to run named in the foreground and in debug level 2 for a while after I compile it. If all looks good then I can run it as a service daemon in the usual way. This means I run it like so : bash-3.00#

dig +trace unexpected behaviour

2010-09-29 Thread David Peall
Hi What I have found is that while dig +trace gets and displays the information directly from the name servers along the way the resolver is also queried and the resolver's result overrides the trace result. This can cause great frustration as you see the trace looks correct but if the cache

Re: tkey-gssapi-credential

2010-09-29 Thread Nicholas F Miller
Do you need anything other than libgssapi installed for GSS-TSIG to work. Are any of these required as well: cyrus-sasl-gssapi.i386 2.1.22-5.el5_4.3 rhel-x86_64-client-5 cyrus-sasl-gssapi.x86_64 2.1.22-5.el5_4.3 rhel-x86_64-client-5 libgssapi.i386

When does BIND send queries with DO flag enabled?

2010-09-29 Thread Taylor, Gord
We recently ran into an intermittent problem sending queries to a business partner. Turns out they had CheckPoint firewalls with SmartDefense turned of for DNS traffic. This was blocking traffic going to them with DO flag enabled. I could duplicate the problem from a command line by issuing dig

Re: Round robin DNS query response

2010-09-29 Thread Kevin Darcy
On 9/29/2010 12:37 AM, SW wrote: Hi everyone... I am rather new to the world of DNS so I'm hoping to get some of your expertise... Is there a way to make BIND respond DNS query in sequence? For example, if I assign 2 IP addresses to an A record, is it possible to have it respond like...

Re: When does BIND send queries with DO flag enabled?

2010-09-29 Thread Kevin Oberman
Date: Wed, 29 Sep 2010 15:51:55 -0400 From: Taylor, Gord gord.tay...@rbc.com Sender: bind-users-bounces+oberman=es@lists.isc.org We recently ran into an intermittent problem sending queries to a business partner. Turns out they had CheckPoint firewalls with SmartDefense turned of for

Re: When does BIND send queries with DO flag enabled?

2010-09-29 Thread Kalman Feher
On 29/09/10 10:30 PM, Kevin Oberman ober...@es.net wrote: Date: Wed, 29 Sep 2010 15:51:55 -0400 From: Taylor, Gord gord.tay...@rbc.com Sender: bind-users-bounces+oberman=es@lists.isc.org We recently ran into an intermittent problem sending queries to a business partner. Turns out

Re: When does BIND send queries with DO flag enabled?

2010-09-29 Thread Evan Hunt
Can someone explain when BIND sets DO flag and when it won't? Most of my client workstations are XPSP3, and NONE of the queries coming from those clients have DO flag set. The DO bit is part of the EDNS option record, and some servers (and more to the point, some firewalls) are broken and

Re: Bind named 9.7.2-P2 segfault and core dump when in debug mode

2010-09-29 Thread Mark Andrews
In message 62426.10.0.66.17.1285784847.squir...@interact.purplecow.org, Denni s Clarke writes: I am trying to track down a bit of strange behavior. Not sure if anyone else sees this. I tend to run named in the foreground and in debug level 2 for a while after I compile it. If all looks

dig domain ns fails when local name servers misconfigured

2010-09-29 Thread Tristan Goguen
Hi all, We have been using dig to retrieve a domain's name servers for years. Unfortunately, the dig syntax we normally use does not work when name servers are misconfigured. Currently, dig is returning an empty name server list for domain ilap.ca: dig +short ilap.ca ns

Re: dig domain ns fails when local name servers misconfigured

2010-09-29 Thread Karl Auer
On Wed, 2010-09-29 at 19:51 -0400, Tristan Goguen wrote: We would like to take some action when domain authority transfers take place. Can we configure dig to return the name server list based exclusively on a query to the root / TLD servers? Can local name servers be ignored? dig

Re: bind 9.7.1-P2 startup: unable to set effective gid to 0

2010-09-29 Thread Takashi Mizuno
We are also facing the same issue that AJ wrote previously. We are trying to upgrade from bind version 9.4.3-P3 to 9.7.2-P2 using with chroot environment on a Solaris 9. It never see the following warning message when bind 9.4.3-P3 running on a our solaris 9 server, but 9.7.1-P2, 9.7.2rc1 and