Nice new logging feature

2021-12-16 Thread Borja Marcos
Hi, I am trying 9.17 at home and I just noticed a very useful new lame-servers log message: 2021-12-16T08:08:20.505Z lame-servers: timed out resolving ’stupiddomain.com/ANY/IN': X.Y.Z.T#53 I haven’t seen this on 9.16. Are there any plans to include it? It would _really_ be useful. Our setup

Re: Nice new logging feature

2021-12-16 Thread Borja Marcos
> On 16 Dec 2021, at 10:02, Borja Marcos wrote: > > > Hi, > > I am trying 9.17 at home and I just noticed a very useful new lame-servers > log message: > > 2021-12-16T08:08:20.505Z lame-servers: timed out resolving > ’stupiddomain.com/ANY/IN': X.Y.Z.T#53 > > I haven’t seen this on 9.16.

Change records in DNS slave if master is offline

2021-12-16 Thread Roberto Carna
Dear all, I have one BIND9 server as master and 3 as slaves. The master and one slave are in a given site #1, and the other two slaves are in a geographical different site #2. In case site #1 goes offline, I need to edit records in both slaves from site #2, in order to point some services to

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 14:04 schrieb Andrew P.: So you're claiming that legitimate resolvers would still be pointing at the wrong IP address for a public DNS server after over 16 years? besides that i don't know why you are answering off-list nowhere did i say anything about 16 years but it can

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Andrew P .
Sorry about forgetting to post the list. I hit Reply instead of Reply All. Annoying inconsistent list servers You don't understand what kind of blacklist I want; I want to blacklist the domain name being asked for, so I don't answer for it. I'm not looking to blacklist forged IP addresses

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Matus UHLAR - fantomas
You don't understand what kind of blacklist I want; I want to blacklist the domain name being asked for, so I don't answer for it. I'm not looking to blacklist forged IP addresses of requestors (since we all know criminals don't use their own identities; they use the identities of innocent

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 15:29 schrieb Andrew P.: Reindl Harald writes: Am 16.12.21 um 14:56 schrieb Andrew P.: Reindl Harald writes: Am 16.12.21 um 14:22 schrieb Andrew P.: You don't understand what kind of blacklist I want; I want to blacklist the domain name being asked for, so I don't answer

Re: Nice new logging feature

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 14:49 schrieb Borja Marcos: On 16 Dec 2021, at 13:15, Reindl Harald wrote: Am 16.12.21 um 10:02 schrieb Borja Marcos: Hi, I am trying 9.17 at home and I just noticed a very useful new lame-servers log message: 2021-12-16T08:08:20.505Z lame-servers: timed out resolving

Re: Nice new logging feature

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 10:02 schrieb Borja Marcos: Hi, I am trying 9.17 at home and I just noticed a very useful new lame-servers log message: 2021-12-16T08:08:20.505Z lame-servers: timed out resolving ’stupiddomain.com/ANY/IN': X.Y.Z.T#53 I haven’t seen this on 9.16. Are there any plans to

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 14:22 schrieb Andrew P.: Sorry about forgetting to post the list. I hit Reply instead of Reply All. Annoying inconsistent list servers blame your mail-client for not support "reply-list" buttons and "reply-all" is breaking this for me :-) You don't understand what

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Ondřej Surý
FTR RRL will not help on this case. There’s no difference between response with TC and response with REFUSED. It would make a difference only if there was NOERROR response with data. Ondřej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 14:35 schrieb Ondřej Surý: FTR RRL will not help on this case. There’s no difference between response with TC and response with REFUSED. It would make a difference only if there was NOERROR response with data. that's true but in case it's a reflection attack it would help

Re: Nice new logging feature

2021-12-16 Thread Borja Marcos
> On 16 Dec 2021, at 13:15, Reindl Harald wrote: > > > > Am 16.12.21 um 10:02 schrieb Borja Marcos: >> Hi, >> I am trying 9.17 at home and I just noticed a very useful new lame-servers >> log message: >> 2021-12-16T08:08:20.505Z lame-servers: timed out resolving >>

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Andrew P .
Reindl Harald writes: Am 16.12.21 um 14:22 schrieb Andrew P.: >> You don't understand what kind of blacklist I want; I want to blacklist the >> domain name >> being asked for, so I don't answer for it. I'm not looking to blacklist >> forged IP addresses >> of requestors (since we all know

Re: Nice new logging feature

2021-12-16 Thread Borja Marcos
> On 16 Dec 2021, at 14:55, Reindl Harald wrote: > > > > Am 16.12.21 um 14:49 schrieb Borja Marcos: >>> >>> bind-9.16.23-1.fc34.x86_64 >>> >>> 16-Dec-2021 13:08:10.598 lame-servers: connection refused resolving >>> 'ns2.serverion.eu/A/IN': 94.228.210.122#53 >>> 16-Dec-2021 13:11:29.269

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Reindl Harald
Am 16.12.21 um 14:56 schrieb Andrew P.: Reindl Harald writes: Am 16.12.21 um 14:22 schrieb Andrew P.: You don't understand what kind of blacklist I want; I want to blacklist the domain name being asked for, so I don't answer for it. I'm not looking to blacklist forged IP addresses of

Re: Millions of './ANY/IN' queries denied

2021-12-16 Thread Andrew P .
Reindl Harald writes: >Am 16.12.21 um 14:56 schrieb Andrew P.: >> Reindl Harald writes: >> Am 16.12.21 um 14:22 schrieb Andrew P.: You don't understand what kind of blacklist I want; I want to blacklist the domain name being asked for, so I don't answer for it. I'm not looking to

Re: Change records in DNS slave if master is offline

2021-12-16 Thread Warren Kumari
On Thu, Dec 16, 2021 at 10:37 AM Roberto Carna wrote: > Dear all, I have one BIND9 server as master and 3 as slaves. > > The master and one slave are in a given site #1, and the other two > slaves are in a geographical different site #2. > > In case site #1 goes offline, I need to edit records