FW: Pls help me for bind9

2008-12-03 Thread Sun, Rui (IT Operation Director)
Hi dear Pls help me for bind9 孙睿 / Rui Sun -Original Message- From: Sue Graves [mailto:[EMAIL PROTECTED] Sent: Friday, November 21, 2008 12:48 AM To: Sun, Rui (IT Operation Director) Cc: [EMAIL PROTECTED] Subject: Re: Pls help me for bind9 As BIND is Open Source

Re: Just to make sure I have TTL's understood.

2008-12-03 Thread D. Stussy
Scott Haneda [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Before I go out on a limb, I wanted to ask those who know more about this than I do. I added a zone change to my primary server, in this case, setting the TTL's pretty low, as things were going to move around a bit in the

Re: forward reverse lookups

2008-12-03 Thread JINMEI Tatuya / 神明達哉
At Fri, 7 Nov 2008 07:18:27 -0800 (PST), paulpsmith [EMAIL PROTECTED] wrote: I'm fairly new to BIND, but have a pretty good understanding of DNS and other protocols. I have been trying to make something work for about a week now and can't figure it out. Is it possible to have a cache only

Re: rfc1918 ns records coming from internet are queried?

2008-12-03 Thread Gregory Hicks
Date: Wed, 26 Nov 2008 21:09:53 +0100 (CET) To: [EMAIL PROTECTED] Subject: Re: rfc1918 ns records coming from internet are queried? From: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] A border router knows what is inside and outside your network, while a DNS server does not. Important

Moderators note

2008-12-03 Thread Alan Clegg
Due to technical difficulties, a number of messages were being held in the moderation queue. These postings have now been cleared out (some may be duplicates, for which I apologize). We are still working out a couple of minor kinks in the move to the new mailing list system. Thanks for your

Re: logging query results

2008-12-03 Thread Sam Wilson
In article [EMAIL PROTECTED], Mark Andrews [EMAIL PROTECTED] wrote: Disk i/o is just glacially slow when compared to network i/o. To get disk logging up to network speeds you need to throw away a lots of it. Which suggests that having filtering built into the logging might

check Availability before sending response

2008-12-03 Thread Ken DBA
Hello, Is there any way to make Bind check the server's availability before send back responses to clients? ie, given the domain name www.site.com was pointed to 1.1.1.1 and 2.2.2.2 in Bind. When a client query for www.site.com, Bind will check the health status for these two servers. If one

Re: check Availability before sending response

2008-12-03 Thread Stephane Bortzmeyer
On Wed, Dec 03, 2008 at 10:53:43PM +0800, Ken DBA [EMAIL PROTECTED] wrote a message of 21 lines which said: ie, given the domain name www.site.com was pointed to 1.1.1.1 and 2.2.2.2 in Bind. When a client query for www.site.com, Bind will check the health status for these two servers. If

Re: FW: Pls help me for bind9

2008-12-03 Thread Gregory Hicks
Subject: FW: Pls help me for bind9 Date: Fri, 21 Nov 2008 10:25:49 +0800 From: Sun, Rui \(IT Operation Director\) [EMAIL PROTECTED] To: bind-users@lists.isc.org Hi dear Pls help me for bind9 What problem are you having? What does your named.conf look like? your zone files?

Re: Dropping external recursive requests

2008-12-03 Thread Chris Buxton
That ought to work, and work well. This will not impact outside name servers that query your name server, because they send iterative queries. If they're sending recursive queries, they're abusing your server. I can't see any problems with this approach. If you have authoritative data in the

Re: How to modify A records on the slave when master is down?

2008-12-03 Thread Chris Buxton
On Fri, 2008-11-21 at 21:10 -0800, [EMAIL PROTECTED] wrote: Hello. I have two geographically different datacenters. Each datacenter has two instances of BIND. There is one master out of these four. The zones will have multiple A records (pointing to the two datacenters to provide some

Re: socket: too many open file descriptors

2008-12-03 Thread JINMEI Tatuya / 神明達哉
At Tue, 2 Dec 2008 05:17:17 -0800 (PST), pollex [EMAIL PROTECTED] wrote: Hi Jinmei I have followed your advice and I have installed and compiled the Bind 9.3.6 with the following command: STD_CDEFINES=-ISC_SOCKET_FDSETSIZE=4096 ./configure --prefix=/usr/ local/bind9.3.6 --enable-threads But

Re: Binding DNS server to a particular IP address

2008-12-03 Thread Jonathan Petersson
Shouldn't the server statement in options/view do the trick? /Jonathan On Wed, Dec 3, 2008 at 12:04 PM, Todd Snyder [EMAIL PROTECTED] wrote: Try the listen-on directive. Read more here: http://books.google.com.hk/books?id=zkZN52WhG8sCprintsec=frontcoverdq=

RE: How to modify A records on the slave when master is down?

2008-12-03 Thread Mike Bernhardt
What we used to do is we had 2 masters. After an update was done on one of them, we ran a perl script that would scp the db files to the other and then send rndc reload to itself and the other master. That way both were always up to date. It seems like if you had one master and one slave at each

Re: Dropping external recursive requests

2008-12-03 Thread Mark Andrews
In message [EMAIL PROTECTED] t, Alberto Colosi/SI/RM/GSI/it writes: why not? beter handled by isc and done in a clean way then 1.000.000 of dirty ways as these ;) Please go read RFC 5358. No where in there does it say to drop responses. If we though that dropping queries was

RE: How to modify A records on the slave when master is down?

2008-12-03 Thread Alberto Colosi/SI/RM/GSI/it
better to use an ftps then an sftp. use vsftpd with SSL compile option GNU lftp lftp is really simple and can be configured to bypass RSA CA verify sso to allow selfsigned and many other settings. The difference is that if you lose RSA keys or in all cases, using the RSA keys to allow SCP,

Re: Binding DNS server to a particular IP address

2008-12-03 Thread Kevin Darcy
Not really. The server statement modifies how named talks to other nameservers, it doesn't affect what addresses are listened on. - Kevin Jonathan Petersson wrote: Shouldn't the server

Re: check Availability before sending response

2008-12-03 Thread Kevin Darcy
Ken DBA wrote: Hello, Is there any way to make Bind check the server's availability before send back responses to clients? ie, given the domain name www.site.com was pointed to 1.1.1.1 and 2.2.2.2 in Bind. When a client query for www.site.com, Bind will check the health status for these two

Re: Dropping external recursive requests

2008-12-03 Thread john
On Dec 3, 6:26 pm, Mark Andrews [EMAIL PROTECTED] wrote: If it is a forged packet it should be dropped regardless of the setting of RD. True, however not something that's easily determined from a distance. Ideally ingress filtering would render this a non-issue, however there obviously holes