Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
dig +dnssec +cd soa com -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
On Tue, 10 May 2011 15:17 +1000, Mark Andrews ma...@isc.org wrote: dig +dnssec +cd soa com dig +dnssec +cd soa com ; DiG 9.8.0-P1 +dnssec +cd soa com ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 55492 ;; flags:

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
date -u on the nameserver. It is Tue 10 May 2011 05:32:13 UTC as I send this. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
On Tue, 10 May 2011 15:32 +1000, Mark Andrews ma...@isc.org wrote: date -u on the nameserver. It is Tue 10 May 2011 05:32:13 UTC as I send this. here, date -u Mon May 9 22:34:59 UTC 2011 hrm? not good :-/ switch time server daemon to a known signed domain (clock.isc.org) service ntp

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
In message 1305006478.3040.1450174...@webmail.messagingengine.com, writes: On Tue, 10 May 2011 15:32 +1000, Mark Andrews ma...@isc.org wrote: date -u on the nameserver. It is Tue 10 May 2011 05:32:13 UTC as I send this. here, date -u Mon May 9 22:34:59 UTC 2011 hrm? not

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
On Tue, 10 May 2011 16:15 +1000, Mark Andrews ma...@isc.org wrote: looks good, right? yes. MANY thanks! i wouldn't have easily found this ... DNSSEC only needs wristwatch time accuracy however it is easy to get the time wrong if the server is configured in the wrong timezone. The

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
In message 1305008349.11252.1450182...@webmail.messagingengine.com, writes : On Tue, 10 May 2011 16:15 +1000, Mark Andrews ma...@isc.org wrote: looks good, right? yes. MANY thanks! i wouldn't have easily found this ... DNSSEC only needs wristwatch time accuracy however it is

Looking For Some Help In Configuring BIND On Win32

2011-05-10 Thread James Carlock
Hello, I am looking for help in configuring BIND on Win32, hosting multiple domains and subdomains for each domain, as well as SMTP, POP3 and possibly some of those NNTP servers in the near future. Once I get the .conf files figured out for one simple domain, I hope the rest falls into place. I

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Phil Mayers
On 05/10/2011 07:58 AM, Mark Andrews wrote: date -u may now be correct but is plain date? If it isn't you should correct timezone for the server so that both date and date -u are correct. Otherwise you leave the server open to the accidental misconfiguration that probably caused this problem

Re: Problems in views in a zone transfer

2011-05-10 Thread Luis Silva
Many thanks for the answer. Btw, If I want to notify the slaves that a zone is updated, which parameter (ip:port) needs to be configured in the slave to differenciate the view? Is the transfer-source also used for listening for the notify requests? On Fri, May 6, 2011 at 6:04 AM, Jeff Pang

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
hi, not sure how to read that. now that my time's correct again, can/should I leave the server as is? or is there a specific recommendation for time setup on a DNS server? On Tue, 10 May 2011 16:58 +1000, Mark Andrews ma...@isc.org wrote: date -u may now be correct but is plain date?

Re: Problems in views in a zone transfer

2011-05-10 Thread Luis Silva
Let me refrase my question. How can I notify a slave that suports different views for the zone? How can the master distinguish? Thanks in advance, Luis On Tue, May 10, 2011 at 2:50 PM, Luis Silva luisfilsi...@gmail.com wrote: Many thanks for the answer. Btw, If I want to notify the slaves that

Re: Problems in views in a zone transfer

2011-05-10 Thread Luis Silva
the same zone* On Tue, May 10, 2011 at 3:39 PM, Luis Silva luisfilsi...@gmail.com wrote: Let me refrase my question. How can I notify a slave that suports different views for the zone? How can the master distinguish? Thanks in advance, Luis On Tue, May 10, 2011 at 2:50 PM, Luis Silva

Re: Problems in views in a zone transfer

2011-05-10 Thread Matus UHLAR - fantomas
On Tue, May 10, 2011 at 2:50 PM, Luis Silva luisfilsi...@gmail.com wrote: Many thanks for the answer. Btw, If I want to notify the slaves that a zone is updated, which parameter (ip:port) needs to be configured in the slave to differenciate the view? Is the transfer-source also used for

no free leases

2011-05-10 Thread Steven Stromer
Hi. I see that there was some discussion in distant past of the no free leases reply when defining a range within a pool, especially when a reservation has been defined within that range. I am experiencing this error, and would appreciate any help locating the solution. Would prefer not to

Re: no free leases

2011-05-10 Thread Phil Mayers
On 05/10/2011 05:20 PM, Steven Stromer wrote: Hi. I see that there was some discussion in distant past of the no free leases reply when defining a range within a pool, especially I think you've posted to the wrong list... this is the BIND (DNS server) list, not the dhcpd list.

Re: Problems in views in a zone transfer

2011-05-10 Thread Steve Arntzen
I've been using multiple views and servers successfully for a while now. I hope the following helps... To transfer zones to and from specific views, you can use keys, match-clients and server declarations to control access and transfers. Setup keys for each view. Disallow clients (and servers)