Re: Glue Record Error

2010-06-01 Thread itservices88
Thanks. Now got the hint. -dani On Tue, Jun 1, 2010 at 11:21 PM, Mark Andrews wrote: > > In message , > itservices88 writes: > > --===7275078350313162311== > > Content-Type: multipart/alternative; > boundary=000e0cd47bf05bcb27048805d6bd > > > > --000e0cd47bf05bcb27048805d6bd > > Con

Re: Glue Record Error

2010-06-01 Thread Mark Andrews
In message , itservices88 writes: > --===7275078350313162311== > Content-Type: multipart/alternative; boundary=000e0cd47bf05bcb27048805d6bd > > --000e0cd47bf05bcb27048805d6bd > Content-Type: text/plain; charset=ISO-8859-1 > > Hi, > > Can someone suggest why i am having Glue Record

Re: Glue Record Error

2010-06-01 Thread Doug Barton
On 06/01/10 23:02, itservices88 wrote: Hi, Can someone suggest why i am having Glue Record Error ? And how i can resolve it. Well the tool tells you the problem, click the link and you'll see: The address of a name server differed from the child and the parent. This is a configuration error a

Glue Record Error

2010-06-01 Thread itservices88
Hi, Can someone suggest why i am having Glue Record Error ? And how i can resolve it. http://dnscheck.iis.se/?time=1275458333&id=764597&view=basic&lang=&test=standard Thanks -dani ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.o

probleme with dk dkim and dlv for miltiple domain for dkimproxy and bind dnssec

2010-06-01 Thread fakessh
hello all hello bind network I am having problems with my dk and dkim signature of my emails I have successfully made the process of verification of signatures dnssec all my domains are correct and good displays on dlv.isc.org the reason for my problem just the reason that I have updated my pos

Re: DNSSEC Status...

2010-06-01 Thread Mark Andrews
In message <573607.58516...@web114302.mail.gq1.yahoo.com>, Heavy Man writes: > A few questions about DNSSEC... > > I understand the root zones are currently getting signed. Just for sanit= > y sake, should I be able to DIG +dnssec a.gtld-servers.net and be able to s= > ee a RRSIG record (assume

Re: max-cache-size query

2010-06-01 Thread Warren Kumari
One obvious solution to keeping the firewall guys happy would just be to make them not burn state entries for the nameserver at all Firewalls in front of nameservers cause an ungodly amount of issues for no real benefit... Just sayin'... W On Jun 1, 2010, at 8:35 AM, Techi wrote:

question about bind bug fixed in 9.6.2-P2

2010-06-01 Thread Jack Tavares
>From the release notes: --- 9.6.2-P2 released --- 2876. [bug] Named could return SERVFAIL for negative responses from unsigned zones. [RT #21131] Question: Does this bug only occur if dnssec is enabled? or only if dnssec validation is turned on? or will it (p

Re: DNSSEC Status...

2010-06-01 Thread Casey Deccio
On Tue, Jun 1, 2010 at 6:55 AM, Heavy Man wrote: > A few questions about DNSSEC... > > I understand the root zones are currently getting signed. The root zone is currently signed with a DURZ (deliberately unvalidatable root zone) as part of its deployment. See the following site for more infor

Re: DNSSEC Status...

2010-06-01 Thread Stephane Bortzmeyer
On Tue, Jun 01, 2010 at 06:55:14AM -0700, Heavy Man wrote a message of 61 lines which said: > I understand the root zones are currently getting signed There is only one root zone... > Just for sanity sake, should I be able to DIG +dnssec > a.gtld-servers.net and be able to see a RRSIG record

DNSSEC Status...

2010-06-01 Thread Heavy Man
A few questions about DNSSEC... I understand the root zones are currently getting signed.  Just for sanity sake, should I be able to DIG +dnssec a.gtld-servers.net and be able to see a RRSIG record (assume I have a valid dnssec recursive name server with a valid trust anchor configured).  Check

Re: max-cache-size query

2010-06-01 Thread Adam Tkac
On Tue, Jun 01, 2010 at 03:52:56PM +0300, Techi wrote: > On Tue 01 of Jun 2010 15:43:54 you wrote: > > What version of BIND are you running? If you're getting FD limits, I'd > > think it's an older version with a bug, and your problems might also be > > alleviated by upgrading. > Version: bind-9

Re: max-cache-size query

2010-06-01 Thread Techi
On Tue 01 of Jun 2010 15:43:54 you wrote: > What version of BIND are you running? If you're getting FD limits, I'd > think it's an older version with a bug, and your problems might also be > alleviated by upgrading. Version: bind-9.3.6-4.P1.el5_4.2 I cannot upgrade. Company's policy is to use o

RE: max-cache-size query

2010-06-01 Thread Todd Snyder
What version of BIND are you running? If you're getting FD limits, I'd think it's an older version with a bug, and your problems might also be alleviated by upgrading. Todd. -Original Message- From: bind-users-bounces+tsnyder=rim@lists.isc.org [mailto:bind-users-bounces+tsnyder=ri

max-cache-size query

2010-06-01 Thread Techi
Hallo, Recently, I faced huge problems with my DNS servers (bind crashed with no apparent reason). Some of the symptons were: * Huge number of connections on our firewalls (>15). * A lot of errors in syslog about max file descriptors limits reached (currently on system, the FD limit is 4096,

Re: Clarification on bind result

2010-06-01 Thread Matus UHLAR - fantomas
On 31.05.10 14:16, rams wrote: > I have the following zone file: > > $ORIGIN td3497.com. > > @ IN SOA udns1.ultradns.net. ppk.yahoo.com. ( > 2010052610 ; serial > 10800 ; refresh > 3600 ; retry > 2592000 ; expire > 86400 ; minimum > ) > > cname.chain.td3497.com. 86400 IN CNAME mx.chain.td3497.co

Re: Bind response

2010-06-01 Thread David Forrest
On Tue, 1 Jun 2010, Matus UHLAR - fantomas wrote: On 01.06.10 14:16, rams wrote: I queried for cname domain against bind 9.6.X and got the following response C:\Documents and Settings\rameshb>dig @localhost cname.td3497.com mx ; <<>> DiG 9.6.1-P1 <<>> @localhost cname.td3497.com mx ; (1 server

Re: Bind response

2010-06-01 Thread Matus UHLAR - fantomas
On 01.06.10 14:16, rams wrote: > I queried for cname domain against bind 9.6.X and got the following response > C:\Documents and Settings\rameshb>dig @localhost cname.td3497.com mx > ; <<>> DiG 9.6.1-P1 <<>> @localhost cname.td3497.com mx > ; (1 server found) > ;; global options: +cmd > ;; Got answ

Bind response

2010-06-01 Thread rams
Hi , I have the following zone file: $ORIGIN td3497.com. @ IN SOA udns1.ultradns.net. ppk.yahoo.com. ( 2010052610 ; serial 10800 ; refresh 3600 ; retry 2592000 ; expire 86400 ; minimum ) cname.chain.td3497.com. 86400 IN CNAME mx.chain.td3497.com. mx.chain.td3497.com. 86400 IN MX 34 mx1.chain.td349

Re: Clarification on bind result

2010-06-01 Thread rams
Is there any update on the following issue. On Mon, May 31, 2010 at 2:16 PM, rams wrote: > Hi , > > I have the following zone file: > > $ORIGIN td3497.com. > > @ IN SOA udns1.ultradns.net. ppk.yahoo.com. ( > > 2010052610 ; serial > > 10800 ; refresh > > 3600 ; retry > > 2592000 ; expire > > 8640