Re: Allow-Query=any

2016-01-07 Thread Matus UHLAR - fantomas
On 07.01.16 09:56, Ejaz wrote: How to control from the DNS bind "Query type Any" such as. If someone does look up with query type =any, results will display the SOA section, mail and Name server information, which I don't want display all info.. only specific information so, instead of

Re: Moving dynamic zones to new master+slave pair without interruptions

2016-01-07 Thread Tony Finch
Peter Rathlev wrote: > On Wed, 2016-01-06 at 16:05 +, Tony Finch wrote: > > * Set up a new hidden master, with copies of your zones. (See below) > > > > * Change your existing servers to slave from the new hidden master > > instead of the old master. Reconfigure the old

Re: Allow-Query=any

2016-01-07 Thread Reindl Harald
Am 07.01.2016 um 07:56 schrieb Ejaz: How to control from the DNS bind “Query type Any” such as. If someone does look up with query type =any, results will display the SOA section, mail and Name server information, which I don’t want display all info.. only specific information while what you

RE: v 9.10.3 max-cache-size not recognised

2016-01-07 Thread MAYER Hans
Hi Phil Many thanks for your reply. > Try accessing the statistics XML channel over HTTP with a browser With this statistics XML channel I have my pain. Based on the documentation at ftp://ftp.isc.org/isc/bind9/cur/9.10/doc/arm/Bv9ARM.pdf I tried different URL's. But I always get only some

Re: Allow-Query=any

2016-01-07 Thread G.W. Haywood
Hi there, On Thu, 7 Jan 2016, Reindl Harald wrote: ... when somebody wants a information which exists in the DNS he can ask for that information - unconditionally laptop3:~$ >>> dig -t any lloyds.co.uk ; <<>> DiG 9.9.5-9+deb8u4-Debian <<>> -t any lloyds.co.uk ;; global options: +cmd ;; Got

Re: Allow-Query=any

2016-01-07 Thread Reindl Harald
Am 07.01.2016 um 21:18 schrieb G.W. Haywood: Hi there, On Thu, 7 Jan 2016, Reindl Harald wrote: ... when somebody wants a information which exists in the DNS he can ask for that information - unconditionally you don't get it if i want to ask for your SOA or NS-records then i ask for them

Re: Allow-Query=any

2016-01-07 Thread Robert Edmonds
Warren Kumari wrote: > Olafur and Joe (the authors of this) are far from clueless idiots. +1 > In addition, please try to moderate your tone - people come to the BIND > Users list for assistance - your argumentative (and often insulting) posts > are not helpful to building a community. +1 --

RE: Allow-Query=any

2016-01-07 Thread Darcy Kevin (FCA)
I do find it a little ironic that the HINFO RDATA shown earlier in the thread, references the "refuse-any" draft, yet, in the selfsame RDATA, violates one of the "SHOULD"s of the draft: "The OS field of the HINFO RDATA SHOULD be set to the null string to minimise the size of the response."

Re: Allow-Query=any

2016-01-07 Thread Warren Kumari
Yah, I guess it does kinda :-) I seem to remember Olafur or Marek admitted that including the text was an ugly, temporary kludge, and provided some "cover" so that is was more clear that this was the intended behavior, and not that e.g they had just not fully implemented ANY (as many DNS

Re: Allow-Query=any

2016-01-07 Thread Reindl Harald
Am 07.01.2016 um 22:31 schrieb Warren Kumari: Reindl, did you read the draft referred to in the HINFO? ( https://datatracker.ietf.org/doc/draft-ietf-dnsop-refuse-any/ ). It clearly outlines the reasons that cloudfare is doing this. This document was discussed in the DNSOP WG, and was presented

Re: Allow-Query=any

2016-01-07 Thread Warren Kumari
On Thu, Jan 7, 2016 at 3:25 PM Reindl Harald wrote: > > > Am 07.01.2016 um 21:18 schrieb G.W. Haywood: > > Hi there, > > > > On Thu, 7 Jan 2016, Reindl Harald wrote: > > > >> ... when somebody wants a information which exists in > >> the DNS he can ask for that