Re: Custom DNS error with BIND?

2010-10-06 Thread Matus UHLAR - fantomas
--On 5. oktober 2010 22.25.17 +0700 Phan Quoc Hien phanquoch...@gmail.com wrote: I'm find the way to custom DNS error with BIND. Below I explained it: It A record not exist = return to one IP to redirect custom error page with apache! Like OpenDNS? Please let me know how to solve

Re: BIND 9.7.2-P2 is now available.

2010-10-06 Thread Cathy Almond
Hi Florian, It's this one which is also in 9.6-ESV-R2: 2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call. RT #20877] Regards, Cathy On 03/10/10 11:06, Florian Weimer wrote: * Mark Andrews: * If BIND, acting as a DNSSEC validating server, has two or more trust

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Darcy
On 10/5/2010 3:49 PM, Dotan Cohen wrote: On Tue, Oct 5, 2010 at 20:30, Eivind Olseneiv...@aminor.no wrote: However, another site that _does_ work (with both nameservers on this host, not just ns1) shows the same thing: # nslookup ns1.sharingserver.eu 178.63.65.136 Server:

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Oberman
Date: Wed, 06 Oct 2010 10:35:32 -0400 From: Kevin Darcy k...@chrysler.com Sender: bind-users-bounces+oberman=es@lists.isc.org On 10/5/2010 3:49 PM, Dotan Cohen wrote: On Tue, Oct 5, 2010 at 20:30, Eivind Olseneiv...@aminor.no wrote: However, another site that _does_ work (with

Re: Unable to query the nameserver

2010-10-06 Thread Ben McGinnes
On 7/10/10 1:47 AM, Kevin Oberman wrote: I keep hoping for a BIND distro that upgrades nslookup(1) to: print STDERR, nslookup(1) has been replaced by host(1)\n; exit 0; Wasn't nslookup already deprecated about ten years or so ago? Regards, Ben signature.asc Description: OpenPGP digital

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Oberman
Date: Thu, 07 Oct 2010 01:53:29 +1100 From: Ben McGinnes b...@adversary.org On 7/10/10 1:47 AM, Kevin Oberman wrote: I keep hoping for a BIND distro that upgrades nslookup(1) to: print STDERR, nslookup(1) has been replaced by host(1)\n; exit 0; Wasn't nslookup already deprecated

Re: Unable to query the nameserver

2010-10-06 Thread Ben McGinnes
On 7/10/10 2:09 AM, Kevin Oberman wrote: I can find nothing in the documentation that states such. If I missed it, I'd appreciate someone pointing me at it. I have some vague memory of seeing messages to that effect when using it on a Solaris system in around 1999. I stopped using it around

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Darcy
On 10/6/2010 11:44 AM, Ben McGinnes wrote: On 7/10/10 2:09 AM, Kevin Oberman wrote: I can find nothing in the documentation that states such. If I missed it, I'd appreciate someone pointing me at it. I have some vague memory of seeing messages to that effect when using it on a

Re: Unable to query the nameserver

2010-10-06 Thread Andrey G. Sergeev (AKA Andris)
Hello Kevin, Wed, 06 Oct 2010 07:47:41 -0700 Kevin Oberman wrote: I keep hoping for a BIND distro that upgrades nslookup(1) to: print STDERR, nslookup(1) has been replaced by host(1)\n; exit 0; Short answer: never. I've been wishing that nslookup would go away since back in BIND-v4

Re: Unable to query the nameserver

2010-10-06 Thread Ben McGinnes
On 7/10/10 4:42 AM, Kevin Darcy wrote: ISC has tried to kill it, but the beast is resilient and won't die. Maybe we should call it a wombat then ... Invocations of nslookup are embedded in thousands of legacy scripts and some folks are unable or unwilling to change them. Nothing quite

Re: Unable to query the nameserver

2010-10-06 Thread Andrey G. Sergeev (AKA Andris)
Hello Kevin, Wed, 06 Oct 2010 13:42:35 -0400 Kevin Darcy wrote: ISC has tried to kill it, but the beast is resilient and won't die. Invocations of nslookup are embedded in thousands of legacy scripts and some folks are unable or unwilling to change them. Well said, Kevin! Just have sent

RE: Unable to query the nameserver

2010-10-06 Thread Lightner, Jeff
Of course some versions of nslookup arent' standard even for nslookup. The one on HP-UX actually interrogates local /etc/hosts file if nsswitch.conf says to use files first. I got so used to doing that for years that when I tried to use nslookup on Linux back in 2005 I was miffed because it was

non-24 bit subnets

2010-10-06 Thread Alex McKenzie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greetings, I'm setting up a new DNS server for internal use in the two departments I support. Up until very recently, all our subnets have had 24 bit masks, which has made configuring bind very easy. However, we now have three sizes, and may have

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Oberman
Date: Wed, 6 Oct 2010 14:03:56 -0400 From: Lightner, Jeff jlight...@water.com Sender: bind-users-bounces+oberman=es@lists.isc.org Of course some versions of nslookup arent' standard even for nslookup. The one on HP-UX actually interrogates local /etc/hosts file if nsswitch.conf says to

Re: non-24 bit subnets

2010-10-06 Thread Matt Baxter
For larger subnets just use multiple zones as necessary. For 10.20.30.0/23 you have 30.20.10.in-addr.arpa and 31.20.10.in-addr.arpa. For smaller than a /24 look at RFC 2317. That's only necessary if you want to delegate authority to a different DNS server. If you have multiple networks in

Re: non-24 bit subnets

2010-10-06 Thread Alex McKenzie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks for the quick reply, Matt. Unfortunately, we do have need -- or at least a use -- to have smaller subnets in multiple files, but without delegating authority. The problem is that some of those small subnets should have a shorter TTL, or other

Re: non-24 bit subnets

2010-10-06 Thread Jay Ford
On Wed, 6 Oct 2010, Alex McKenzie wrote: Unfortunately, we do have need -- or at least a use -- to have smaller subnets in multiple files, but without delegating authority. The problem is that some of those small subnets should have a shorter TTL, or other settings changed. If there's a way to

Re: non-24 bit subnets

2010-10-06 Thread David Miller
On 10/6/2010 3:21 PM, Jay Ford wrote: On Wed, 6 Oct 2010, Alex McKenzie wrote: Unfortunately, we do have need -- or at least a use -- to have smaller subnets in multiple files, but without delegating authority. The problem is that some of those small subnets should have a shorter TTL, or

Re: non-24 bit subnets

2010-10-06 Thread Alex McKenzie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Miller wrote: On 10/6/2010 3:21 PM, Jay Ford wrote: On Wed, 6 Oct 2010, Alex McKenzie wrote: Unfortunately, we do have need -- or at least a use -- to have smaller subnets in multiple files, but without delegating authority. The problem

Re: non-24 bit subnets

2010-10-06 Thread Jay Ford
On Wed, 6 Oct 2010, Alex McKenzie wrote: Out of curiosity: what if it's a /16 or /8 network? Do those also get built as 24 bit files, or can they be built differently? I seem to recall seeing an option for a reverse lookup file with hosts declared as: x.y PTR host.domain.tld. Does

Re: non-24 bit subnets

2010-10-06 Thread Alex McKenzie
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Ford wrote: On Wed, 6 Oct 2010, Alex McKenzie wrote: Out of curiosity: what if it's a /16 or /8 network? Do those also get built as 24 bit files, or can they be built differently? I seem to recall seeing an option for a reverse lookup

Re: non-24 bit subnets

2010-10-06 Thread Mark Andrews
In message 4cacdf3c.9040...@chem.umass.edu, Alex McKenzie writes: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Ford wrote: On Wed, 6 Oct 2010, Alex McKenzie wrote: Out of curiosity: what if it's a /16 or /8 network? Do those also get built as 24 bit files, or can they be

Re: minimum cache times?

2010-10-06 Thread Christoph Weber-Fahr
Hello, On 06.10.2010 01:16, Doug Barton wrote: If you would like to create a new thread your best bet is to store the list address in your e-mail address book and then create a new message to the list. By replying to someone else's message and changing the subject you cause your message to

Re: minimum cache times?

2010-10-06 Thread Mark Andrews
In message 4cad0856.9010...@arcor.de, Christoph Weber-Fahr writes: On 05.10.2010 16:45, Nicholas Wheeler wrote: At Tue, 5 Oct 2010 09:19:49 -0400, Atkins, Brian (GD/VA-NSOC) wrote: From what I've read, everyone seems to frown on over-riding cache times, but I haven't seen any

Response Times on Different Virtual Interfaces

2010-10-06 Thread Jiann-Ming Su
I'm running BIND 9.6.1_P1. The server has multiple virtual interfaces that BIND listens on: listen-on { 127.0.0.1; 172.30.0.213; 192.168.43.98; }; Sometimes I can get quite a huge difference in response time depending on which virtual interface I query against. For example, most of our