Re: chroot/etc/named/ directory?

2013-02-18 Thread Adam Tkac
On Wed, Feb 13, 2013 at 02:18:20PM -0500, Robert Moskowitz wrote: On 02/13/2013 01:44 PM, Lightner, Jeff wrote: Haven't done it on RHEL/CentOS 6.x yet but in RHEL5 with the bind-chroot installed I've always had: /var/named/chroot as the jail for BIND. /var/named/chroot/etc = Location of

Registrar that supports self-run domains and provides DNSSEC support

2013-02-18 Thread Robert Moskowitz
Delving further into my challenges. Right now I use Network Solutions as my registrar. Just never changes as they were the only show in town back then. But they don't seem to support DNSSEC protected domains, and even IPv6 glue records are special requests, it seems. My registration is up

Re: Registrar that supports self-run domains and provides DNSSEC support

2013-02-18 Thread Chuck Anderson
On Mon, Feb 18, 2013 at 03:32:53PM -0500, Robert Moskowitz wrote: My registration is up for renewal; it expires 4/6/13 so this is a good time to move. But of course my domain is locked and I can't see on NS account page how to change that. Dyn can probably help you with how do get NetSol to

Re: Registrar that supports self-run domains and provides DNSSEC support

2013-02-18 Thread Novosielski, Ryan
I personally like NameCheap. Cheap, and good documentation (that you can use even if you go with someone else). - Original Message - From: Robert Moskowitz [mailto:r...@htt-consult.com] Sent: Monday, February 18, 2013 03:32 PM To: bind-users@lists.isc.org bind-users@lists.isc.org

broken ISP in china

2013-02-18 Thread Lyle Giese
I am cross posting this as it might be a dns issue, but it effects email directly. And I am quite aware of the 'Great Chinese Firewall' and realized that may be a large part of the issue. LCR's mail filter and mail servers are all in the lcrcomputer.net domain. Recently I moved this

Re: broken ISP in china

2013-02-18 Thread Chuck Swiger
Hi-- On Feb 18, 2013, at 2:07 PM, Lyle Giese wrote: Recently I moved this domain(lcrcomputer.net) to a registrar that suports DNSSEC and inserted the DS record for this domain. I checked DNSSEC via http://dnsviz.net and http://dnssec-debugger.verisignlabs.com. Both show DNSSEC is

Re: broken ISP in china

2013-02-18 Thread Noel Butler
On Mon, 2013-02-18 at 16:07 -0600, Lyle Giese wrote: Recently I moved this domain(lcrcomputer.net) to a registrar that suports DNSSEC and inserted the DS record for this domain. I checked DNSSEC via http://dnsviz.net and http://dnssec-debugger.verisignlabs.com. Both show DNSSEC is

Re: broken ISP in china

2013-02-18 Thread David Forrest
On Mon, 18 Feb 2013, Lyle Giese wrote: I am cross posting this as it might be a dns issue, but it effects email directly. And I am quite aware of the 'Great Chinese Firewall' and realized that may be a large part of the issue. LCR's mail filter and mail servers are all in the

Re: Registrar that supports self-run domains and provides DNSSEC support

2013-02-18 Thread Tony Finch
Robert Moskowitz r...@htt-consult.com wrote: Right now I use Network Solutions as my registrar. Just never changes as they were the only show in town back then. But they don't seem to support DNSSEC protected domains, and even IPv6 glue records are special requests, it seems. Have a look

Re: broken ISP in china

2013-02-18 Thread Tony Finch
Lyle Giese l...@lcrcomputer.net wrote: Recently I moved this domain(lcrcomputer.net) to a registrar that suports DNSSEC and inserted the DS record for this domain. Was it signed before this point? I am wondering if this is a DNS response size problem - was the cause the addition of the DS

Re: [mailop] broken ISP in china

2013-02-18 Thread Lyle Giese
On 02/18/13 19:02, Tony Finch wrote: Lyle Giese l...@lcrcomputer.net wrote: Recently I moved this domain(lcrcomputer.net) to a registrar that suports DNSSEC and inserted the DS record for this domain. Was it signed before this point? I am wondering if this is a DNS response size problem - was

Re: broken ISP in china

2013-02-18 Thread Vernon Schryver
I see no problem with your SPF IP records though so long as you dont try use ns1. Ignoring most of Vernons anti SPF rhetoric, which BTW this list is NOT the place for (go cry a river on mailop list), he is correct that you shouldn't really be using PTR, or A for that mater, just have your

Re: Registrar that supports self-run domains and provides DNSSEC support

2013-02-18 Thread btb
On Feb 18, 2013, at 15.32, Robert Moskowitz r...@htt-consult.com wrote: Delving further into my challenges. Right now I use Network Solutions as my registrar. Just never changes as they were the only show in town back then. But they don't seem to support DNSSEC protected domains, and

OFF TOPIC Re: broken ISP in china

2013-02-18 Thread Noel Butler
apparently you have no comprehension of OFF TOPIC I stopped reading at about the half dozen words because you once again went off on your OFF TOPIC rants. But each to our own, you hate it, many stand by it, its only fools like you who cant accept that, thats your problem not mine. Given that

Re: Registrar that supports self-run domains and provides DNSSEC support

2013-02-18 Thread Leonard Mills
Moving registration away from NetSol is documented at http://www.networksolutions.com/support/preparing-a-domain-name-for-a-transfer-out-of-network-solutions/ If you have a good number of domains, and that number changes frequently, you might want to consider CSC

Re: broken ISP in china

2013-02-18 Thread Matus UHLAR - fantomas
On 19.02.13 10:25, Noel Butler wrote: One thing I need to point out, your SOA timings seem extreme... refresh 86400 drop that to 3h retry 3600, drop to 900 I don't see the reason for doing these, unless NOTIFY does not work, but in such case it's the NOTIFY that should be fixed... expire