Re: Problem with ACL in named.conf

2012-08-30 Thread Cathy Almond
On 30/08/12 03:19, GS Bryan wrote: My BIND version, as shown by 'named -v' is BIND 9.9.1-P1-RedHat-9.9.1-2.P1.el6. 'named-checkconf /etc/named.conf' doesn't throw any error messages whatsoever. -- Bryan S.G. You're correct - named-checkconf doesn't see the problem, but named errors

Re: Problem with ACL in named.conf

2012-08-30 Thread Cathy Almond
On 30/08/12 03:17, GS Bryan wrote: hmm... that explains it. Damn, DNSMadeEasy needs to have notify notices sent to a different IP set than their nameserver service. This means that I have to hardcode this myself. Another question then, if zone 'example.net' has the NS records of

ho to filter hundeds of domains ?

2012-08-30 Thread fddi
Hello, I need to implement a bind filter for many hundreds of domains which are considered outlaw and illegal by italian government about gamble games. If I create a named zone for each illegal domain and configure my nameserver as authoritative for those zones, I can catch the DNS

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Niall O'Reilly
On 30 Aug 2012, at 13:14, fddi wrote: I need to implement a bind filter for many hundreds of domains which are considered outlaw and illegal by italian government about gamble games. If I create a named zone for each illegal domain and configure my nameserver as authoritative for those

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Stephane Bortzmeyer
On Thu, Aug 30, 2012 at 01:34:07PM +0100, Niall O'Reilly niall.orei...@ucd.ie wrote a message of 32 lines which said: Don't waste your time. This approach is superficial. http://www.bortzmeyer.org/images/please-close-gate.jpg :-)

Re: ho to filter hundeds of domains ?

2012-08-30 Thread fddi
On 8/30/12 2:32 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 02:14:38PM +0200, fddi f...@gmx.it wrote a message of 23 lines which said: I need to implement a bind filter for many hundreds of domains which are considered outlaw and illegal See http://pwd.io/guide/. Very good

Re: ho to filter hundeds of domains ?

2012-08-30 Thread fddi
On 8/30/12 3:14 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 01:34:07PM +0100, Niall O'Reilly niall.orei...@ucd.ie wrote a message of 32 lines which said: Don't waste your time. This approach is superficial. http://www.bortzmeyer.org/images/please-close-gate.jpg

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Stephane Bortzmeyer
On Thu, Aug 30, 2012 at 03:16:32PM +0200, fddi f...@gmx.it wrote a message of 15 lines which said: Actually many telephone companies in the world are doing this, They're wrong politically (censorship) and they're wrong technically (see O'Reilly's answer). Copying telephone companies is not

Re: ho to filter hundeds of domains ?

2012-08-30 Thread fddi
On 8/30/12 3:19 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 03:16:32PM +0200, fddi f...@gmx.it wrote a message of 15 lines which said: Actually many telephone companies in the world are doing this, They're wrong politically (censorship) and they're wrong technically (see

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Russell Jones
Normal web filtering software that auto updates is a better approach. Using Bind with a manual list of domains to try to achieve this is like trying to kill an ant hill 1 ant at a time -- Sent from my Android phone with K-9 Mail. fddi f...@gmx.it wrote: On 8/30/12 3:19 PM, Stephane

Re: ho to filter hundeds of domains ?

2012-08-30 Thread WBrown
Russell Jones wrote on 08/30/2012 09:39:17 AM: Normal web filtering software that auto updates is a better approach. Using Bind with a manual list of domains to try to achieve this is like trying to kill an ant hill 1 ant at a time There are several sources of RPZ data such as Spamhaus and

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Russell Jones
On 8/30/2012 8:46 AM, wbr...@e1b.org wrote: Russell Jones wrote on 08/30/2012 09:39:17 AM: Normal web filtering software that auto updates is a better approach. Using Bind with a manual list of domains to try to achieve this is like trying to kill an ant hill 1 ant at a time There are

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Rick Coloccia
add this line to /etc/named.conf include locallyblockeddomains.zones; contents of locallyblockeddomains.zones: // This bind zone is intended to be included in a running dns server for a local net // // It will return a 127.0.0.1 for the domains listed as malware // // This is for locally

dhcp error messages

2012-08-30 Thread Dwayne Hottinger
I have started getting error sending response: not enough free resources on my dhcp server during random times during the day. Google isnt providing much other than it could be an issue with the switch, or a network card issue. top on the server doesnt show it using hardly any resources at

Re: ho to filter hundeds of domains ?

2012-08-30 Thread WBrown
Russell Jones russ...@jonesmail.me wrote on 08/30/2012 10:28:07 AM: Oh I know, I use spamhaus myself for spam filtering - catches a ridiculous amount of spam. It is my understanding though the OP wants to filter domains for NSFW web browsing, not spam - specifically gambling sites.

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Emanuele Balla (aka Skull)
On 8/30/12 3:19 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 03:16:32PM +0200, fddi f...@gmx.it wrote a message of 15 lines which said: Actually many telephone companies in the world are doing this, They're wrong politically (censorship) and they're wrong technically (see

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Mark Elkins
On Thu, 2012-08-30 at 17:25 +0200, Emanuele Balla (aka Skull) wrote: On 8/30/12 3:19 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 03:16:32PM +0200, fddi f...@gmx.it wrote a message of 15 lines which said: Actually many telephone companies in the world are doing this,

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Barry S. Finkel
Rick Colocciacoloc...@geneseo.edu wrote: add this line to /etc/named.conf include locallyblockeddomains.zones; contents of locallyblockeddomains.zones: // This bind zone is intended to be included in a running dns server f a local net // // It will return a 127.0.0.1 for the domains listed

Re: ho to filter hundeds of domains ?

2012-08-30 Thread /dev/rob0
On Thu, Aug 30, 2012 at 03:18:25PM +0200, fddi wrote: On 8/30/12 3:14 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 01:34:07PM +0100, Niall O'Reilly niall.orei...@ucd.ie wrote a message of 32 lines which said: Don't waste your time. This approach is superficial.

Re: dhcp error messages

2012-08-30 Thread sthaug
I have started getting error sending response: not enough free resources on my dhcp server during random times during the day. Google isnt providing much other than it could be an issue with the switch, or a network card issue. top on the server doesnt show it using hardly any resources

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Kevin Darcy
On 8/30/2012 10:33 AM, Rick Coloccia wrote: add this line to /etc/named.conf include locallyblockeddomains.zones; contents of locallyblockeddomains.zones: // This bind zone is intended to be included in a running dns server for a local net // // It will return a 127.0.0.1 for the domains

Re: ho to filter hundeds of domains ?

2012-08-30 Thread Mark Andrews
In message 1346342946.14282.32.ca...@mjelap.posix.co.za, Mark Elkins writes: On Thu, 2012-08-30 at 17:25 +0200, Emanuele Balla (aka Skull) wrote: On 8/30/12 3:19 PM, Stephane Bortzmeyer wrote: On Thu, Aug 30, 2012 at 03:16:32PM +0200, fddi f...@gmx.it wrote=20 a message of 15 lines