Clarification on delegated NS

2010-09-29 Thread rams
Hi , When I created delegated NS record. Bind 9.7.1 p3 is giving SERVFAIL , when i queried for NS delegated record with NS. Could you please clarify me or is it bug in 9.7? Thanks & Regards, Ramesh ___ bind-users mailing list bind-users@lists.isc.org h

Re: bind 9.7.1-P2 startup: unable to set effective gid to 0

2010-09-29 Thread Takashi Mizuno
We are also facing the same issue that AJ wrote previously. We are trying to upgrade from bind version 9.4.3-P3 to 9.7.2-P2 using with chroot environment on a Solaris 9. It never see the following warning message when bind 9.4.3-P3 running on a our solaris 9 server, but 9.7.1-P2, 9.7.2rc1 and 9

Re: dig ns fails when local name servers misconfigured

2010-09-29 Thread Mark Andrews
In message <1285805733.5799.857.ca...@karl>, Karl Auer writes: > On Wed, 2010-09-29 at 19:51 -0400, Tristan Goguen wrote: > > We would like to take some action when domain authority transfers take =20 > > place. Can we configure dig to return the name server list based =20 > > exclusively on a que

Re: dig ns fails when local name servers misconfigured

2010-09-29 Thread Karl Auer
On Wed, 2010-09-29 at 19:51 -0400, Tristan Goguen wrote: > We would like to take some action when domain authority transfers take > place. Can we configure dig to return the name server list based > exclusively on a query to the root / TLD servers? Can local name > servers be ignored? dig

Re: dig ns fails when local name servers misconfigured

2010-09-29 Thread Mark Andrews
In message , Tristan Goguen writ es: > > Hi all, > > We have been using dig to retrieve a domain's name servers for years. > Unfortunately, the dig syntax we normally use does not work when name > servers are misconfigured. Currently, dig is returning an empty name > server list for domain

dig ns fails when local name servers misconfigured

2010-09-29 Thread Tristan Goguen
Hi all, We have been using dig to retrieve a domain's name servers for years. Unfortunately, the dig syntax we normally use does not work when name servers are misconfigured. Currently, dig is returning an empty name server list for domain ilap.ca: dig +short ilap.ca ns < emp

Re: Bind named 9.7.2-P2 segfault and core dump when in debug mode

2010-09-29 Thread Mark Andrews
In message <62426.10.0.66.17.1285784847.squir...@interact.purplecow.org>, Denni s Clarke writes: > > I am trying to track down a bit of strange behavior. Not sure if anyone > else sees this. > > I tend to run named in the foreground and in debug level 2 for a while > after I compile it. If all l

Re: When does BIND send queries with DO flag enabled?

2010-09-29 Thread Evan Hunt
> Can someone explain when BIND sets DO flag and when it won't? Most of my > client workstations are XPSP3, and NONE of the queries coming from those > clients have DO flag set. The DO bit is part of the EDNS option record, and some servers (and more to the point, some firewalls) are broken and do

Re: When does BIND send queries with DO flag enabled?

2010-09-29 Thread Kalman Feher
On 29/09/10 10:30 PM, "Kevin Oberman" wrote: >> Date: Wed, 29 Sep 2010 15:51:55 -0400 >> From: "Taylor, Gord" >> Sender: bind-users-bounces+oberman=es@lists.isc.org >> >> >> We recently ran into an intermittent problem sending queries to a >> business partner. Turns out they had CheckPo

Re: When does BIND send queries with DO flag enabled?

2010-09-29 Thread Kevin Oberman
> Date: Wed, 29 Sep 2010 15:51:55 -0400 > From: "Taylor, Gord" > Sender: bind-users-bounces+oberman=es@lists.isc.org > > > We recently ran into an intermittent problem sending queries to a > business partner. Turns out they had CheckPoint firewalls with > SmartDefense turned of for DNS traff

Re: Round robin DNS query response

2010-09-29 Thread Kevin Darcy
On 9/29/2010 12:37 AM, SW wrote: Hi everyone... I am rather new to the world of DNS so I'm hoping to get some of your expertise... Is there a way to make BIND respond DNS query in sequence? For example, if I assign 2 IP addresses to an A record, is it possible to have it respond like...

When does BIND send queries with DO flag enabled?

2010-09-29 Thread Taylor, Gord
We recently ran into an intermittent problem sending queries to a business partner. Turns out they had CheckPoint firewalls with SmartDefense turned of for DNS traffic. This was blocking traffic going to them with DO flag enabled. I could duplicate the problem from a command line by issuing "dig @

Re: tkey-gssapi-credential

2010-09-29 Thread Nicholas F Miller
Do you need anything other than libgssapi installed for GSS-TSIG to work. Are any of these required as well: cyrus-sasl-gssapi.i386 2.1.22-5.el5_4.3 rhel-x86_64-client-5 cyrus-sasl-gssapi.x86_64 2.1.22-5.el5_4.3 rhel-x86_64-client-5 libgssapi.i386

dig +trace unexpected behaviour

2010-09-29 Thread David Peall
Hi What I have found is that while dig +trace gets and displays the information directly from the name servers along the way the resolver is also queried and the resolver's result overrides the trace result. This can cause great frustration as you see the trace looks correct but if the cache i

Bind named 9.7.2-P2 segfault and core dump when in debug mode

2010-09-29 Thread Dennis Clarke
I am trying to track down a bit of strange behavior. Not sure if anyone else sees this. I tend to run named in the foreground and in debug level 2 for a while after I compile it. If all looks good then I can run it as a service daemon in the usual way. This means I run it like so : bash-3.00# /

Re: Multiple masters and multiple TSIG keys

2010-09-29 Thread Niall O'Reilly
On 29 Sep 2010, at 15:53, Anand Buddhdev wrote: > Anyway, I discussed this with my colleague here, and we came up with a > solution that works. We have created 2 views of the master name servers: Nice one, and useful to have in the mailing-list archive! /Niall __

Re: Multiple masters and multiple TSIG keys

2010-09-29 Thread Anand Buddhdev
On 29/09/2010 12:09, Niall O'Reilly wrote: > On 29 Sep 2010, at 09:34, Anand Buddhdev wrote: > >> Now, I have been given 2 keys, t1 and t2, to use for transferring z1 and >> z2 respectively. > > [Wandering off topic, perhaps] > > That seems to me a back-to-front way to do things. >

Re: forward only not

2010-09-29 Thread Len Conrad
-- Original Message -- From: "Len Conrad" Reply-To: lcon...@go2france.com Date: Wed, 29 Sep 2010 15:58:13 +0200 >FreeBSD 7.2-RELEASE > >BIND 9.6.0-P1 > >resolv.conf: >nameserver 127.0.0.1 > > >machine is postfix MX relay-only gateway > >on a separate mach

forward only not

2010-09-29 Thread Len Conrad
FreeBSD 7.2-RELEASE BIND 9.6.0-P1 resolv.conf: nameserver 127.0.0.1 machine is postfix MX relay-only gateway on a separate machines, zen.dnsbld.domain.net on IPs 10.1.60.1 & 10.1.60.2, rbldnsd is running a local copy of zen.spamhaus nmap shows 10.1.60.1 and 10.1.60.2 with port 53 UDP open.

Re: How does BIND 9 scale with multithreading?

2010-09-29 Thread Fabien Seisen
2010/9/29 Eivind Olsen > Does anyone know if there are any benchmarks out in the public, which > could give some insight into how well BIND 9 scales with multithreading? > I've tried looking on this list, and googling, but haven't found anything > yet. > > To be a bit more specific - I'm not sure

Re: Multiple masters and multiple TSIG keys

2010-09-29 Thread Niall O'Reilly
On 29 Sep 2010, at 09:34, Anand Buddhdev wrote: > Now, I have been given 2 keys, t1 and t2, to use for transferring z1 and > z2 respectively. [Wandering off topic, perhaps] That seems to me a back-to-front way to do things. If the organization running the master is conc

Re: How does BIND 9 scale with multithreading?

2010-09-29 Thread Jonathan Petersson
I did some benchmarking on this about 1.5 yrs ago, here's a graph representing the results: http://sedoss.com/bind.png On Wed, Sep 29, 2010 at 10:37 AM, wrote: > Hi > > i read that 'old' bind version where better when threading was disabled. Load > balancing > between 2 processe was better.  Is

RE: How does BIND 9 scale with multithreading?

2010-09-29 Thread Philippe.Simonet
Hi i read that 'old' bind version where better when threading was disabled. Load balancing between 2 processe was better. Is this always the case ? http://zaphods.net/~zaphodb/high-performance-bind9.html some interesting links for DNS performance : http://kb.linuxvirtualserver.org/wiki/Build

Multiple masters and multiple TSIG keys

2010-09-29 Thread Anand Buddhdev
Hello BIND users, I'm using BIND 9.7.1-P2. I have the following configuration in my named.conf: masters "m" { ip1; ip2; ip3; ip4; }; zone "z1" { type slave; file "z1"; masters { m; }; }; zone "z2" { type slave; file "z2"; masters { m; }; }; Now,

bind-dlz don't work

2010-09-29 Thread ShanyiWan
Bind-dlz(the latest Berkeley DB as a back-end),Services can start correctly, but DNS is not returned to the correct value. Related data: dbsql> .tables dns_client dns_datadns_xfr dns_zone dbsql> select * from dns_client; test.com|192.168.146.155 test.com|127.0.0.1 dbsql> select * from

How does BIND 9 scale with multithreading?

2010-09-29 Thread Eivind Olsen
Does anyone know if there are any benchmarks out in the public, which could give some insight into how well BIND 9 scales with multithreading? I've tried looking on this list, and googling, but haven't found anything yet. To be a bit more specific - I'm not sure what a good option for server hardw

Re: Round robin DNS query response

2010-09-29 Thread Eivind Olsen
> Is there a way to make BIND respond DNS query in sequence? Someone else can probably give a more authoritative answer. My understanding is that BIND will rotate the answers it gives out when there's more than one similar record in a rrset. And yes, this can help spread the load a bit. Whether t