Re: zone syntax question

2010-07-20 Thread Sam Wilson
In article mailman.2120.1279397548.21153.bind-us...@lists.isc.org, Doug Barton do...@dougbarton.us wrote: On Wed, 14 Jul 2010, Lyle Giese wrote: I would replace example.com in the SOA with @ I generally recommend against doing this unless you are explicitly planning to use the same

Re: Validating the root: translation of ICANN XML file

2010-07-20 Thread Hauke Lampe
On 07/18/2010 12:01 AM, Stephane Bortzmeyer wrote: you should add the -o option to wget, otherwise you may have asecurity risk That should be -O. In older versions of wget (1.10.2/Debian Etch), this option does not works together with -nc. The empty output file is created first, therefore -nc

Issue with recursion in a view

2010-07-20 Thread James Chase
Hi, I have two views, one for a specific range of 8 IP's on the internet and one view for any inluding internal servers. In my main named.conf I have allowed recursion to specific hosts, including all of the hosts in both views (which are specific using ACL's). I can use recursion on this server

odbc.ucas.com lookup problem

2010-07-20 Thread Chris Thompson
We're having some local reports about delays resolving odbc.ucas.com. The problem is undoubtedly the response of ns-lp.ucas.com, which seems to be some sort of load balancer, to queries. I get log entries from BIND like Jul 20 14:35:12 koala.csi.cam.ac.uk named[4539]: [ID 873579

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Phil Mayers
On 20/07/10 15:10, Chris Thompson wrote: We're having some local reports about delays resolving odbc.ucas.com. The problem is undoubtedly the response of ns-lp.ucas.com, which seems to be some sort of load balancer, to queries. I get log entries from BIND like Jul 20 14:35:12

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Tony Finch
On Tue, 20 Jul 2010, Chris Thompson wrote: However, I haven't yet been able to work out exactly *what* is wrong with the response, as demonstrated by dig (say). Any ideas? Could it be complaining about the lack of compression? Tony. -- f.anthony.n.finch d...@dotat.at http://dotat.at/ NORTH

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Sten Carlsen
No problems here. It does look a bit odd that the timeout is 0 actually on all accesses it is 0 ~ silver3:~ carlsen$ dig odbc.ucas.com ; DiG 9.6.0-APPLE-P2 odbc.ucas.com ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 11175 ;;

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Kevin Darcy
On 7/20/2010 11:15 AM, Phil Mayers wrote: On 20/07/10 15:10, Chris Thompson wrote: We're having some local reports about delays resolving odbc.ucas.com. The problem is undoubtedly the response of ns-lp.ucas.com, which seems to be some sort of load balancer, to queries. I get log entries

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Tony Finch
On Tue, 20 Jul 2010, Chris Thompson wrote: However, I haven't yet been able to work out exactly *what* is wrong with the response, as demonstrated by dig (say). Any ideas? Got it. The nameservers for ucas.com give a referral for odbc.ucas.com. That means the zone for odbc.ucas.com is

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Tony Finch
On Tue, 20 Jul 2010, Kevin Darcy wrote: It seems that UCAS is just proxying non-A queries from its load-balancers back to its regular nameservers. No, the load balancers are simply braindamaged. Try SOA or NS or TXT queries and you get a timeout. Tony. -- f.anthony.n.finch d...@dotat.at

Re: Bind hang out when named reach to 5-600 Mb

2010-07-20 Thread JINMEI Tatuya / 神明達哉
At Tue, 20 Jul 2010 01:18:54 -0700 (PDT), khanh rua duonghoahoc_k4...@yahoo.com wrote: I mean hang is bind still running but it cannot response query from user. I suspect it still responds to queries that don't require recursion, e.g. version.bind txt ch. Is that correct? --- JINMEI, Tatuya

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Kevin Darcy
On 7/20/2010 1:41 PM, Tony Finch wrote: On Tue, 20 Jul 2010, Kevin Darcy wrote: It seems that UCAS is just proxying non-A queries from its load-balancers back to its regular nameservers. No, the load balancers are simply braindamaged. Try SOA or NS or TXT queries and you get a

Re: Question about recursion queries

2010-07-20 Thread Kevin Darcy
On 7/19/2010 5:12 AM, Zhang Meng wrote: The question is given that When I ask the bind server, what's the A record of google.com http://google.com? for the ROOT name server, there're several NS record /.// //60493// //IN// //NS// //g.root-servers.net http://g.root-servers.net./ /.//

Re: recursing stop at about 1000 clients

2010-07-20 Thread Robert Mibus
Check that your underlying OS/environment is not limiting you - eg., you may be getting limited to 1024 file descriptors via ulimit. Robert. On 15/07/2010, at 7:48 PM, Kebba Foon wrote: i did i set my recursive-clients to 1 but it does not help. On Thu, 2010-07-15 at 20:21 +1000, Noel

Re: Issue with recursion in a view

2010-07-20 Thread Barry Margolin
In article mailman.19.1279633805.15649.bind-us...@lists.isc.org, James Chase chase1...@gmail.com wrote: Hi, I have two views, one for a specific range of 8 IP's on the internet and one view for any inluding internal servers. In my main named.conf I have allowed recursion to specific hosts,

Re: odbc.ucas.com lookup problem

2010-07-20 Thread Mark Andrews
In message prayer.1.3.3.1007201510560.10...@hermes-2.csi.cam.ac.uk, Chris Tho mpson writes: We're having some local reports about delays resolving odbc.ucas.com. The problem is undoubtedly the response of ns-lp.ucas.com, which seems to be some sort of load balancer, to queries. I get log