RE: GUI for bind

2011-03-28 Thread Baird, Josh
We have used the commercial Men & Mice suite for 3 years now and have had great success with it. It meets all of your requirements listed below. It has an intuitive Windows based console as well as a web application that can be used to manage DNS, IPAM and DHCP. It works directly on top of BIND

Re: notify-source-v6 and transfer-source-v6 for BIND 9.8

2011-03-28 Thread Anand Buddhdev
On 29/03/2011 00:37, Ivan R. Sy wrote: Hi Ivan, > its been a while since my last config of BIND and I was just > wondering if notify-source-v6 transfer-source-v6 are still there for BIND > 9.8.0? > > the ARM says so. > > when i do notify-source-v6 on a zone statement and reload it... > >

GUI for bind

2011-03-28 Thread Jorg B.
Hello, I'm looking for a GUI for bind that meets the following requirements: (1) Must still be under development (and supported, either commercially or via community support) (2) Supports "accounts/groups" that will allow me to create user accounts that are able to modify only zone reco

Re: notify-source-v6 and transfer-source-v6 for BIND 9.8

2011-03-28 Thread Lyle Giese
On 03/28/11 17:37, Ivan R. Sy wrote: Hi bind-users, its been a while since my last config of BIND and I was just wondering if notify-source-v6 transfer-source-v6 are still there for BIND 9.8.0? the ARM says so. when i do notify-source-v6 on a zone statement and reload it... no

notify-source-v6 and transfer-source-v6 for BIND 9.8

2011-03-28 Thread Ivan R. Sy
Hi bind-users, its been a while since my last config of BIND and I was just wondering if notify-source-v6 transfer-source-v6 are still there for BIND 9.8.0? the ARM says so. when i do notify-source-v6 on a zone statement and reload it... notify-source-v6 { 2001:470:1f05:1ae0::1;

ISC BIND 9.6-ESV-R4 is now available

2011-03-28 Thread Evan Hunt
BIND 9.6-ESV-R4 is now available. Introduction BIND 9.6-ESV-R4 is a maintenance release for BIND 9.6-ESV. It is critical for those using DNSSEC validation, and strongly recommended otherwise. There was a defect in 9.6-ESV-R3 which affects DNSSEC validating reso

Logging the answers to queries

2011-03-28 Thread gsad26...@gmail.com
What is the logging option to log the answers? Example, in my bind logs, I can see these type of entries: 28-Mar-2011 09:54:20.034 queries: info: client 127.0.0.1#56237: query: www.isc.org IN A + But I can't find anything in the logs what the answer to the query was. I've searched the bind docume

SV: ip6.arpa help

2011-03-28 Thread mattias.o.andersson
Great slides, thanks! Still looks like there is a long way to go until there is a standard implementation for reverse DNS ipv6 for large subnets. My problem is that before you put too much effort into it you want to see how other solved this problem or maybe get a standard of some kind. So my ap

RE: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Timothe Litt
No. But you can use a public (commercial or non-commerical) secondary DNS service. Google "secondary dns" or "free secondary dns". You will find a number of services and reviews. Be careful in selecting - many charge or limit you based on the number of queries and/or zones. QOS and reliablity

Re: problem for validate the script dnssec to isc dlv

2011-03-28 Thread fakessh @
it is, I'm coming I do not understand the need to recreate and validate the file keyset-en ... I then recreate a good record with the key in this file and my past signatures are good. I did not understand correctly the operation of dlv keyset files and I recreated downgrade bind to the stable

Re: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Joseph S D Yao
On Mon, Mar 28, 2011 at 11:35:06PM +1100, Mark Andrews wrote: ... > No. A cache is NOT authoritative for the zone. ... Of course right. I concentrated on the form and missed the substance. I was thinking of a service that will serve your DNS for you - which a caching server is not. -- /**

Re: is notify message going with UDP or TCP?

2011-03-28 Thread Joseph S D Yao
On Mon, Mar 28, 2011 at 08:30:00PM +0800, terry wrote: > BIND master sends the notify message with TCP or UDP protocal? RFC 1996: 3.4. The transport protocol used for a NOTIFY transaction will be UDP unless the master has reason to believe that TCP is necessary; for example, if a firewa

Re: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Eivind Olsen
> Hello, > I have only one nameserver for a domain. > Can I set the second nameserver for this domain to a public dns cache? > for example: > abc.com. IN NS ns1.abc.com. > abc.com. IN NS ns2.abc.com. > ns2.abc.com. IN A 8.8.8.8 # 8.8.8.8 is google's public dns server No. Don't do that. A

Re: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Joseph S D Yao
On Mon, Mar 28, 2011 at 08:25:46PM +0800, terry wrote: > Hello, > > I have only one nameserver for a domain. > Can I set the second nameserver for this domain to a public dns cache? > for example: > > > abc.com. IN NS ns1.abc.com. > abc.com. IN NS ns2.abc.com. > > ns2.abc.com. IN A 8.8

Re: is notify message going with UDP or TCP?

2011-03-28 Thread Mark Andrews
In message , terr y writes: > BIND master sends the notify message with TCP or UDP protocal? UDP. > Thanks. > ___ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour

Re: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Mark Andrews
In message , terr y writes: > Hello, > > I have only one nameserver for a domain. > Can I set the second nameserver for this domain to a public dns cache? > for example: No. A cache is NOT authoritative for the zone. > abc.com. IN NS ns1.abc.com. > abc.com. IN NS ns2.abc.com. > > ns2.a

is notify message going with UDP or TCP?

2011-03-28 Thread terry
BIND master sends the notify message with TCP or UDP protocal? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

can I set the second nameserver to a public dns cache?

2011-03-28 Thread terry
Hello, I have only one nameserver for a domain. Can I set the second nameserver for this domain to a public dns cache? for example: abc.com. IN NS ns1.abc.com. abc.com. IN NS ns2.abc.com. ns2.abc.com. IN A 8.8.8.8 # 8.8.8.8 is google's public dns server Since DNS cache does a rec-re

Re: problem for validate the script dnssec to isc dlv

2011-03-28 Thread Eivind Olsen
> dns appear as my syncro. > yet I'm still at the same point > missing keys Your delegation for the domain fakessh.eu doesn't seem to be 100% correct yet though. If I ask the nameservers for .eu (like p.nic.eu) it tells me your domain belongs to 4 nameservers: ns0.xname.org ns1.xname.org ns1.nov