Re: MNAME not a listed NS record

2013-01-17 Thread Barry Margolin
In article mailman.1089.1358406835.11945.bind-us...@lists.isc.org, Dave Warren li...@hireahit.com wrote: Because it is actually the master, and from what I can tell, the slaves will check against the MNAME to confirm whether they're up to date or not. No, slaves check against the IPs listed

Re: DNSSEC DS vs DNSKEY record publication order question (wrt key algorithm rollover)

2013-01-17 Thread Tony Finch
Brian Kroth bpkr...@gmail.com wrote: RFC 4035 sec 2.2 says There MUST be an RRSIG for each RRset using at least one DNSKEY of each algorithm in the zone apex DNSKEY RRset. The apex DNSKEY RRset itself MUST be signed by each algorithm appearing in the DS RRset located at the

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-17 Thread Daniele
I'm going crazy. This is my named.conf logging { channel default_logfile { file /var/cache/bind/logs/default.log; severity info; print-category yes; print-severity yes; print-time yes; };

Re: DNSSEC DS vs DNSKEY record publication order question (wrt key algorithm rollover)

2013-01-17 Thread Brian Kroth
Tony Finch d...@dotat.at 2013-01-17 12:02: Brian Kroth bpkr...@gmail.com wrote: RFC 4035 sec 2.2 says There MUST be an RRSIG for each RRset using at least one DNSKEY of each algorithm in the zone apex DNSKEY RRset. The apex DNSKEY RRset itself MUST be signed by each algorithm appearing in

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-17 Thread Warren Kumari
On Jan 17, 2013, at 9:04 AM, Daniele d.imbrog...@gmail.com wrote: I'm going crazy. This is my named.conf logging { channel default_logfile { file /var/cache/bind/logs/default.log; severity info; print-category yes;

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-17 Thread Daniele
Output for `dig NS .` ; DiG 9.8.1-P1 @127.0.0.1 NS . ; (1 server found) ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: SERVFAIL, id: 37032 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;.INNS ;; Query

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-17 Thread Daniele
For example, also a `dig a.root-servers.net` fails with SERVFAIL, but in Wireshark I can see the packet with the correct response that arrives at my network interface. 2013/1/17 Daniele d.imbrog...@gmail.com Output for `dig NS .` ; DiG 9.8.1-P1 @127.0.0.1 NS . ; (1 server found) ;; global

Re: Define an internal zone with only a couple of A records, then forward to an external dns server

2013-01-17 Thread WBrown
Alberto wrote on 01/17/2013 10:09:00 AM: - I want to define in my dns server a zone external_partner.com, which is the domain of our partner who manages it with his dns public server dns.external_partner.com. - I need to define into this zone a couple of servers

Re: Define an internal zone with only a couple of A records, then forward to an external dns server

2013-01-17 Thread Ben Croswell
If you load the zone your server will believe it knows everything about the zone and not forward anything below it. If you load foo.com with two records, nothing but those two records will ever resolve on that server for foo.com. One way to make it work would be to load two zones. Vpn1.foo.com

Re: Define an internal zone with only a couple of A records, then forward to an external dns server

2013-01-17 Thread Cathy Almond
On 17/01/13 15:16, wbr...@e1b.org wrote: Alberto wrote on 01/17/2013 10:09:00 AM: - I want to define in my dns server a zone external_partner.com, which is the domain of our partner who manages it with his dns public server dns.external_partner.com. - I need to define into this zone a

Re: Define an internal zone with only a couple of A records, then forward to an external dns server

2013-01-17 Thread Alberto Zanon
Thank you for all your replies! I'll try to implement your suggestions using a subdomain. Best regards. Alberto Zanon - Messaggio originale - Da: Ben Croswell ben.crosw...@gmail.com A: Alberto Zanon alberto.za...@edistar.com Cc: bind-users@lists.isc.org Inviato: Giovedì, 17

what do you use for logging?

2013-01-17 Thread Jeremy C. Reed
BIND 9 by default has logging using syslog, using its daemon facility, and logging of info or higher. Is using syslog a sane default for new installations or when using official vendor packages with their startup scripts? Do any packagers provide a configuration with different-than-default

Re: what do you use for logging?

2013-01-17 Thread Jan-Piet Mens
Is using syslog a sane default for new installations or when using official vendor packages with their startup scripts? I for one would not want to miss BIND9's logging to auto-rotated files: file /var/named/log/named.log versions 10 size 5m; Other than that, I'd say logging via

Re: what do you use for logging?

2013-01-17 Thread Mike Hoskins (michoski)
-Original Message- From: Alan Batie a...@peak.org Date: Thursday, January 17, 2013 1:52 PM To: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: what do you use for logging? On 1/17/13 10:48 AM, Jan-Piet Mens wrote: By the way, all of the BIND10 logging messages are

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-17 Thread Mark Andrews
What are the answers to the following queries starting with the very basic plain DNS query dig ns . +norec +noedns @198.41.0.4 Now add in EDNS support dig ns . +norec +edns @198.41.0.4 Now add in DNSEC support dig ns . +norec +dnssec @198.41.0.4 Please post the