Re: DNSSEC and upgrading/restoring

2014-01-28 Thread Alan Clegg
On Jan 27, 2014, at 7:32 PM, David Newman dnew...@networktest.com wrote: Asking again, in a different and more generic form: When rebuilding a bind 9.9.4 server running DNSSEC with auto maintain, are there any steps I need to take beyond just backing up /var/named/etc/namedb (this is on

Re: DNSSEC and upgrading/restoring

2014-01-28 Thread Thomas Schulz
Asking again, in a different and more generic form: When rebuilding a bind 9.9.4 server running DNSSEC with auto maintain, are there any steps I need to take beyond just backing up /var/named/etc/namedb (this is on FreeBSD) and restoring? This server is authoritative and primary, and has

Forwarders Timeout

2014-01-28 Thread Phil Fagan
Is it possible to configure the forward (only|first) timeout? So, first query a server listed in the forwarders statement and upon receiving no resolution answer [ in ?configurable? seconds ] query another server (e.g., based on cached information or hints file configuration) (forward first).

Re: Variable SOAs in negative responses

2014-01-28 Thread Matus UHLAR - fantomas
On 27.01.14 18:23, John Levine wrote: A friend (really) asks this question: they have some DNSBLs, which get a lot of queries. Sometimes the answer has A or TXT records, meaning the corresponding address is listed in the DNSBL, sometimes it's NXDOMAIN which means the address isn't. For

Re: Forwarders Timeout

2014-01-28 Thread Matus UHLAR - fantomas
On 28.01.14 10:08, Phil Fagan wrote: Is it possible to configure the forward (only|first) timeout? AFAIK not (yet). The forwarder selection is done in the same way as the server selection by RTT meassuring. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: Forwarders Timeout

2014-01-28 Thread Phil Fagan
That's kinda what I'm gleaning as well. On Tue, Jan 28, 2014 at 12:43 PM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 28.01.14 10:08, Phil Fagan wrote: Is it possible to configure the forward (only|first) timeout? AFAIK not (yet). The forwarder selection is done in the same way as

Re: Variable SOAs in negative responses

2014-01-28 Thread Dave Warren
On 2014-01-28 11:28, Matus UHLAR - fantomas wrote: On 27.01.14 18:23, John Levine wrote: A friend (really) asks this question: they have some DNSBLs, which get a lot of queries. Sometimes the answer has A or TXT records, meaning the corresponding address is listed in the DNSBL, sometimes it's

Re: Variable SOAs in negative responses

2014-01-28 Thread John Levine
For addresses that aren't listed, some of the NXDOMAINs are a lot less likely to change than others, e.g, the address of an outbound mail server at a large mail provider is unlikely ever to be listed, but a random host at a hosting provider in India, who knows. So he'd like to have the TTLs on

Re: Variable SOAs in negative responses

2014-01-28 Thread Mark Andrews
In message 52e8258e.3060...@hireahit.com, Dave Warren writes: On 2014-01-28 11:28, Matus UHLAR - fantomas wrote: On 27.01.14 18:23, John Levine wrote: A friend (really) asks this question: they have some DNSBLs, which get a lot of queries. Sometimes the answer has A or TXT records,

Dynamic update the ip addresses list defined within acl clause

2014-01-28 Thread Pika.Aman
Hi there, I would like to ask if there exists any way to dynamic update the ip addresses in the list of the ACL clause without reload or re-start the bind server? Hoping someone can help me! Thank you!! -- Pika Aman Sent with Sparrow (http://www.sparrowmailapp.com/?sig)