Re: DNS update on host down

2011-07-26 Thread Feng He
I did the same stuff using a script. When the host is down, run "dynamic update" to modify the records. Some BIND based GSLB such as F5 BIG-IP GTM has this feature. Regards. On Tue, Jul 26, 2011 at 10:23 PM, Paul Reilly wrote: > Is there a simple utility, which can ICMP ping or HTTP ping a host,

Re: stub zone

2011-07-26 Thread Feng He
On Wed, Jul 27, 2011 at 8:51 AM, Chris Buxton wrote: > > On Jul 25, 2011, at 10:33 PM, Feng He wrote: > >> On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: >>> Would like to use the BIND stub zone function, however, heard that ISC >>> considers stopping support to stub zone in the future, is that

Re: howto know if a query was delegated to cache

2011-07-26 Thread harish badrinath
Hello, I have posted a "patch" at https://lists.isc.org/pipermail/bind-workers/2011-July/003061.html. It might be a hack but it does the job and passed some simple tests that i did to verify the functionality that i wanted. The patch is against BIND 9.7.1-P2 Regards, Harish _

Re: Forward only zones.

2011-07-26 Thread Peter Andreev
2011/7/25 Vbvbrj : > On 25.07.2011 10:15, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIN

Re: DNS Caching Issue

2011-07-26 Thread Torsten Segner
Am Mon, 25 Jul 2011 08:22:00 -0600 schrieb "Sathyan Arjunan (sarjunan) [CONTRACTOR]" : > Recent days, I am facing frequent caching issues with my DNS servers > which are responsible for recursive lookup to external queries. As a > temporary solution, we used to refresh the named daemon to clear th

Re: Breaking up RFC 1918 reverse space

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 2:53 PM, Peter Laws wrote: > On 07/23/11 22:08, Karl Auer wrote: > > >> Maybe this is an overly naive approach, but can't you set up one zone >> for 10.0.0.0/8 and delegate as necessary from that single zone file? >> Anything that you don't have an answer for will get NXDOMA

Re: Forward only zones.

2011-07-26 Thread Vbvbrj
On 26.07.2011 00:48, Kevin Darcy wrote: Correct. That's the distinction which is typically made between a DNS *forwarder* (which caches) and a DNS *proxy* (which doesn't). As far as I know, BIND cannot be configured to be a DNS proxy. But I don't want BIND as a proxy. ) Answers from its cache,

Re: Forward only zones.

2011-07-26 Thread harish badrinath
On Mon, Jul 25, 2011 at 7:53 PM, Vbvbrj wrote: > > I just can't for now move active directory's dns database to BIND. > You could use something much simpler like dnsmasq (http://thekelleys.org.uk/dnsmasq/doc.html). Setting it up as a DNS forwarder is a breeze, while you migrate DNS data away from

Re: howto know if a query was delegated to cache

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 5:33 AM, Feng He wrote: > There is a "rr" flag in the response which indicates the answer is not > from a cache. There is no 'rr' flag. Perhaps you mean one of the following: - 'aa' means that the server queried is authoritative for the answer. Not applicable to the OP's c

Re: stub zone

2011-07-26 Thread Cathy Almond
On 25/07/11 20:55, ju wusuo wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? I think we may have confused some people in the past about support for this because of what's written in the ARM abou

Re: Forward only zones.

2011-07-26 Thread Matus UHLAR - fantomas
On 24.07.2011 18:40, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND but that would be useless server. On

Re: stub zone

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 12:55 PM, ju wusuo wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? I've heard that rumor from my customers, too. But I haven't heard anything from ISC about not supporting

Re: stub zone

2011-07-26 Thread ju wusuo
need to use it to send out iterative queries, instead of recursive ones (if using forwarding). From: Feng He To: ju wusuo Cc: "bind-users@lists.isc.org" Sent: Tuesday, July 26, 2011 1:33 AM Subje

Re: DNS Caching Issue

2011-07-26 Thread TCPWave Customer Care
lame-ttl is an option in named.conf which defines the number of seconds to cache lame delegations or lame servers i.e servers which are marked as authoitative but do not respond as authoritative. Set that option to 0 so that you will never cache a bad delegation. max-ncache-ttl sets the maximum t

Strange SERVFAIL issue

2011-07-26 Thread Stuart Gall
Hello, I have a caching nameserver setup it has been working for ages. Today I have a problem resolving a particular domain and I just cant see why there is a problem. (BIND 9.5.0-P2) It appears that ONLY I have a problem resolving this single domain ! [root@felix etc]# dig mx streetlightfilms

DNS update on host down

2011-07-26 Thread Paul Reilly
Is there a simple utility, which can ICMP ping or HTTP ping a host, and update the hosts DNS entry if the host is down? I'm thinking I could have 2 include files, and swap between then if the host is down or not. Any pointers ? Paul ___ Please visit htt

Re: stub zone

2011-07-26 Thread Chris Buxton
On Jul 25, 2011, at 10:33 PM, Feng He wrote: > On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: >> Would like to use the BIND stub zone function, however, heard that ISC >> considers stopping support to stub zone in the future, is that true? >> ___ >

Re: Breaking up RFC 1918 reverse space

2011-07-26 Thread Mark Andrews
Just delegate the /16's that make up the /10's. I don't understand why people want to make this more complicated than it needs to be. Similarly of /17-/23 you just delegate the /24's. Using CNAMES only make sense for /25-/32. Mark In message <4e2de5f0.9050...@ou.edu>, Peter Laws writes: > On 0

Re: stub zone

2011-07-26 Thread ju wusuo
Thanks Mark .. I think that probably is the misunderstanding of the "delegation" usage part. From: Mark Andrews To: ju wusuo Cc: "bind-users@lists.isc.org" Sent: Monday, July 25, 2011 9:57 PM Subject: Re: stub zone In message <1311623708.59385.yahoomail...@w

Re: stub zone

2011-07-26 Thread Feng He
On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? > ___ Hi, what's the use of stub zone? I never used it, tha

Re: howto know if a query was delegated to cache

2011-07-26 Thread harish badrinath
> Whatever you're trying to accomplish, it's would not appear to be consistent > with the founding RFCs for DNS: I am not trying to modify when/how/which "upstream name server" is contacted, i am not invalidating cached data at my will. I am not trying to modify requests/responses. Basically i am

Re: stub zone

2011-07-26 Thread Mark Andrews
In message <1311623708.59385.yahoomail...@web44803.mail.sp1.yahoo.com>, ju wusuo writes: > > Would like to use the BIND stub zone function, however, heard that ISC cons= > iders stopping support to stub zone in the future, is that true?=A0 No. There are no plans to remove support for stub zone

Re: DNS Caching Issue

2011-07-26 Thread Mark Andrews
The zone is badly configured so that all queries end up going to a dead server after a sucessful query. nameserver1.gpi-g.com says the NS RRset is just nameserver2.gpi-g.com. nameserver2.gpi-g.com returns SERVFAIL. Both nameservers should be listed in the zone rather than just one and the broken

Re: DNS Caching Issue

2011-07-26 Thread Lyle Giese
On 07/25/11 09:22, Sathyan Arjunan (sarjunan) [CONTRACTOR] wrote: Recent days, I am facing frequent caching issues with my DNS servers which are responsible for recursive lookup to external queries. As a temporary solution, we used to refresh the named daemon to clear the cache. To isolate this i

Re: howto know if a query was delegated to cache

2011-07-26 Thread Mark Andrews
To answer the original question. There isn't a flag for the query or the client as answers are made up of data from multiple sources. 'is_zone' is set to ISC_TRUE or ISC_FALSE depend apon whether the current db is a zone data base or not. "aa" is only applicable to the first rrset in a DNAME/CN

Re: DNS Caching Issue

2011-07-26 Thread Kevin Darcy
On 7/25/2011 10:22 AM, Sathyan Arjunan (sarjunan) [CONTRACTOR] wrote: Recent days, I am facing frequent caching issues with my DNS servers which are responsible for recursive lookup to external queries. As a temporary solution, we used to refresh the named daemon to clear the cache. To isolat

Re: Forward only zones.

2011-07-26 Thread Mark Andrews
In message <4e2de4bb.6050...@chrysler.com>, Kevin Darcy writes: > On 7/24/2011 2:15 AM, Vbvbrj wrote: > > options { > > allow-transfer { none; }; > > recursion yes; > > forward first; > > forwarders { a.b.c.d; }; // Forward to providers dns. > > }; > > zone "my_domain.com" IN { > > type forwa

Views and no answers ...

2011-07-26 Thread Thomas Schweikle
Hi! I have set up a view for one site. It is bound to change answers as necessary for different IP-ranges. It works as far as I could see. But with one ip-range there is a problem ... I can query internal addresses: !user@kvm2~# host intweb.example.de !web.example.de has address 192.168.180.46 B

Re: Forward only zones.

2011-07-26 Thread Vbvbrj
On 25.07.2011 10:15, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND but that would be useless server. I can

DNS Caching Issue

2011-07-26 Thread Sathyan Arjunan (sarjunan) [CONTRACTOR]
Recent days, I am facing frequent caching issues with my DNS servers which are responsible for recursive lookup to external queries. As a temporary solution, we used to refresh the named daemon to clear the cache. To isolate this issue we upgraded the BIND to "BIND 9.7.3" but even after the upgrade