Re: PTR files

2013-06-17 Thread Narcis Garcia
I think a workaround is to replace the router's DNS server or DHCP
server by another one in the LAN, and avoid the "dlinkrouter" name
existence.


Al 18/06/13 01:04, En/na Norman Fournier ha escrit:
> On 2013-06-17, at 4:11 PM, Charles Swiger wrote:
> 
>> On Jun 17, 2013, at 3:00 PM, Norman Fournier  
>> wrote:
>>> [ ... ]
>>> (...Members of the httpd-users list says the same thing - its not an httpd 
>>> problem.
>>
>> From what you've said below, they're quite right.
>>
>>> I am just trying to take possibilities off my list of potential errors, 
>>> sorry if I am annoying you, it's unintentional and symptomatic of my 
>>> ignorance, so I'm asking questions. I think that is a legitimate use of my 
>>> subscription to this list, and the list's raison d'être. Surely the list is 
>>> not exclusively for individuals who know what they're talking about?..)
>>
>> This list is for discussion of ISC's BIND.
> 
> For me, the list is called bind-users, not bind-discussion. BIND discussion 
> would be a higher echelon than a user list. I'm a bind user and I have a 
> Domain Name Server problem, somewhere, that I have been trying to solve for a 
> long time and am going over my steps once again. I need to get my webserver 
> online and there is a problem with the name or lookup or the router. I have 
> not found any errors in httpd, bind or the router configuration that have 
> solved it. The latest hint I got was an ostensible missing in-addr.arpa PTR 
> record, which, to me, made it relevant to BIND.
> 
>> Let's assume that you've got a D-Link router which has a single public IP 
>> from your provider, and provides NAT translation for a private RFC-1918 
>> subnet, and you've placed your webserver on a VM which lives behind that 
>> D-Link router.  If so, you will need to enable static port forwarding for 
>> 80/tcp to the VM running the webserver, or perhaps place that IP in the 
>> router's "Enable DMZ Host" section of the firewall config.
>>
>> This is basic networking; it doesn't have any close relationship to either 
>> DNS or webservers.
> 
> The ports forwarded to the 192.168.0.101 webserver are unchanged since 2005; 
> dns, http and ssh to appropriate ports. The router did change, the static ips 
> changed, as well as the physical location of the network and servers. I don't 
> know what the issue is, that's why I asked about including explicit PTR files 
> to the domain name, as well as the localhost in-addr.arpa, which is the 
> latest in a list of "possible irregularities" I have turned up so far that I 
> need to confirm one way or the other.
> 
> I do appreciate you taking valuable time to answer. I have to wade into it 
> all again. I hope I am still welcome to ask questions here as I have seen 
> others do, since I subscribed to this list in an effort to learn about BIND 
> and DNS, a number of years ago.
> 
> Norman
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> 
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: SPF record with include:

2013-06-17 Thread Jason Hellenthal
Really I can't see as it would hurt in either SPF/SPF or SPF/TXT

To me it looks to just be a referring URL for those that get a reject based on 
the SPF rule. Kinda like a comment judging by < & >.

I've not seen it in the wild this far besides this case. Not even in the google 
for business app references.

Personally I would just drop the http URL and angles.

Thus far I've only really had to use ip4 and 'a' and 'redirect' with no 
complaints.

-- 
 Jason Hellenthal
 Inbox: jhellent...@dataix.net
 Voice: +1 (616) 953-0176
 JJH48-ARIN


On Jun 18, 2013, at 1:56, Julie Xu  wrote:

> Hi
>  
> I be asked to add:
> include:otheremailsrv.otherdomain 
>  so the TXT records will be looked like:
> TXT "v=spf1 mx  
> include:otheremailsrv.otherdomain  ~all"
>  
> Question, from my limited research, I have not found any example to put http 
> part into TXT records, and a little bit worried.
>  
> Could any one advice me if I can put http in spf record like above?
>  
> If so, is my statement right?
>  
> Any comments will be appreciated
>  
> Thanks in advance
>  
> julie
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users


smime.p7s
Description: S/MIME cryptographic signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: SPF record with include:

2013-06-17 Thread Steven Carr
Remove the part... "", whatever
mailer agent you use has screwed with the information that you were
sent, it is not required. So your finished TXT record will be...

TXT "v=spf1 mx include:otheremailsrv.otherdomain ~all"

Steve


On 18 June 2013 06:56, Julie Xu  wrote:
> Hi
>
>
>
> I be asked to add:
>
> include:otheremailsrv.otherdomain
>
>  so the TXT records will be looked like:
>
> TXT "v=spf1 mx
> include:otheremailsrv.otherdomain  ~all"
>
>
>
> Question, from my limited research, I have not found any example to put http
> part into TXT records, and a little bit worried.
>
>
>
> Could any one advice me if I can put http in spf record like above?
>
>
>
> If so, is my statement right?
>
>
>
> Any comments will be appreciated
>
>
>
> Thanks in advance
>
>
>
> julie
>
>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: PTR files

2013-06-17 Thread Roel Wagenaar
Norman Fournier  wrote:

> 
> On 2013-06-17, at 3:29 PM, Charles Swiger wrote:
> 
> > On Jun 17, 2013, at 2:21 PM, Norman Fournier 
wrote:
> >> I am working on bringing a virtual webserver behind a router online and
am encountering problems.
> > 
> > OK.  The odds are very good that you should ask about this on an
Apache/nginx/etc forum, as it's unlikely to be related to DNS or BIND.
> > 
> >> In my named.conf, this is my in-addr.arpa entry:
> >> 
> >> zone "0.0.127.in-addr.arpa" IN {
> >>type master;
> >>file "named.local";
> >>allow-update { none; };
> >> };
> >> 
> >> Should I explicitly define the reverse lookup for my ip or does this
entry accomplish the same thing, as it seem to have done so in the past.
> > 
> > It provides a PTR record for 127.0.0.1; equivalent to the standard
/etc/hosts entry of:
> > 
> > 127.0.0.1   localhost
> > 
> > There's nothing you should change here.
> > 
> > Regards,
> > -- 
> > -Chuck
> 
> Thank you for your response
> 
> (...Members of the httpd-users list says the same thing - its not an httpd
problem. I am just trying to take possibilities off my list of potential errors,
sorry if I am annoying you, it's unintentional and symptomatic of my ignorance,
so I'm asking questions. I think that is a legitimate use of my subscription to
this list, and the list's raison d'être. Surely the list is not exclusively for
individuals who know what they're talking about?..)
> 
> This is the error message my browser returns:
> 
> > The server at dlinkrouter can't be found, because the DNS lookup failed.
DNS is the network service that translates a website's name to its Internet
address. This error is most often caused by having no connection to the Internet
or a misconfigured network. It can also be caused by an unresponsive DNS server
or a firewall...
> 
> 
> Instead of "The server at mydomain.com can't be found", etc., - the error
message states my router brand name. My router config seems fine. How would my
router name get swapped for my domain name? And where might that error be
located? In my httpd.conf? named.conf seemed a more likely place, although it
looks okay to me.
> 
> What question might I ask the httpd list that might be enlightening?
> 
> Thanks again.
> 
> Norman
> 

This sounds rather familiar to me, most likely your browswer ask for the outside
address of your web-page and your router is not allowing management from
outside, my router does not allow this and throws me this kind of errors too.

Does connecting to the local address work?

Indeed OT for this list.

-- 
Roel Wagenaar,

Linux-User #469851 with the Linux Counter; http://linuxcounter.net/

Antw.: Omdat het de volgorde verstoord waarin mensen tekst lezen.
Vraag: Waarom is top-posting een slechte gewoonte?
Antw.: Top-posting.
Vraag: Wat is het meest ergerlijke in e-mail?

We are born naked, wet and hungry. Then things get worse.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


SPF record with include:

2013-06-17 Thread Julie Xu
Hi

I be asked to add:
include:otheremailsrv.otherdomain
 so the TXT records will be looked like:
TXT "v=spf1 mx  
include:otheremailsrv.otherdomain  ~all"

Question, from my limited research, I have not found any example to put http 
part into TXT records, and a little bit worried.

Could any one advice me if I can put http in spf record like above?

If so, is my statement right?

Any comments will be appreciated

Thanks in advance

julie
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: PTR files

2013-06-17 Thread John Miller
Norman,

Everyone who's posted has probably been correct--this doesn't look like
_either_ an httpd or BIND problem, but rather in general name resolution
and perhaps in how you've configured things.  Happy to assist off-list (see
separate cover), but let's leave it there until it's clear that your issue
is with BIND and how you've configured it.

John





On Mon, Jun 17, 2013 at 11:37 PM, Doug Barton  wrote:

> Norman,
>
> It's virtually certain that the error you're seeing is not related to
> BIND. You would almost certainly get your problem solved faster by posting
> on a list related to the web server software that you are using and walking
> through your complete configuration with them.
>
> Good luck,
>
> Doug
>
> __**_
> Please visit 
> https://lists.isc.org/mailman/**listinfo/bind-usersto
>  unsubscribe from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/**listinfo/bind-users
>



-- 
John Miller
Systems Engineer
Brandeis University
johnm...@brandeis.edu
(781) 736-4619
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: PTR files

2013-06-17 Thread Doug Barton

Norman,

It's virtually certain that the error you're seeing is not related to 
BIND. You would almost certainly get your problem solved faster by 
posting on a list related to the web server software that you are using 
and walking through your complete configuration with them.


Good luck,

Doug
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Health Check feature in BIND ?

2013-06-17 Thread Mark Andrews

The real problem is that there are a lot of clients out there that
do not failover to second address in a timely manner.  There is
NOTHING that says you cannot attempt multiple connections at once
or after a short delay.  You do NOT have to wait for connect() to
fail before attempting a second connection.

Clients that implement Happy Eyeballs (RFC 6555) fast fail between
IPv4 and IPv6.  There is no reason not to do this whenever you have
multiple addresses of the same family rather than when you have a
mixture of IPv4 and IPv6 address.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: PTR files

2013-06-17 Thread SM

Hi Norman,

If I recall correctly the initial message you posted mentioned a 
network connectivity problem.  I suggest verifying whether one end 
can ping the other end.  See whether you can ping by IP address and 
by host name.


Regards,
-sm

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: PTR files

2013-06-17 Thread Sten Carlsen
For what its worth, I run a web server behind a Dlink router(DIR-825). I
have done that for about 6 years, the same box. I have not seen that
type of messages.

It does not need a PTR record, it can run without any DNS , except it is
non-practical.

What it does need is to be included in the virtual servers list in the
D-link router.

I guess you will have to be more specific about exactly which situation
creates the message and if possible which SW-module is responsible
before it is possible to help.



On 18/06/13 1:04, Norman Fournier wrote:
> On 2013-06-17, at 4:11 PM, Charles Swiger wrote:
>
>> On Jun 17, 2013, at 3:00 PM, Norman Fournier  
>> wrote:
>>> [ ... ]
>>> (...Members of the httpd-users list says the same thing - its not an httpd 
>>> problem.
>> From what you've said below, they're quite right.
>>
>>> I am just trying to take possibilities off my list of potential errors, 
>>> sorry if I am annoying you, it's unintentional and symptomatic of my 
>>> ignorance, so I'm asking questions. I think that is a legitimate use of my 
>>> subscription to this list, and the list's raison d'être. Surely the list is 
>>> not exclusively for individuals who know what they're talking about?..)
>> This list is for discussion of ISC's BIND.
> For me, the list is called bind-users, not bind-discussion. BIND discussion 
> would be a higher echelon than a user list. I'm a bind user and I have a 
> Domain Name Server problem, somewhere, that I have been trying to solve for a 
> long time and am going over my steps once again. I need to get my webserver 
> online and there is a problem with the name or lookup or the router. I have 
> not found any errors in httpd, bind or the router configuration that have 
> solved it. The latest hint I got was an ostensible missing in-addr.arpa PTR 
> record, which, to me, made it relevant to BIND.
>
>> Let's assume that you've got a D-Link router which has a single public IP 
>> from your provider, and provides NAT translation for a private RFC-1918 
>> subnet, and you've placed your webserver on a VM which lives behind that 
>> D-Link router.  If so, you will need to enable static port forwarding for 
>> 80/tcp to the VM running the webserver, or perhaps place that IP in the 
>> router's "Enable DMZ Host" section of the firewall config.
>>
>> This is basic networking; it doesn't have any close relationship to either 
>> DNS or webservers.
> The ports forwarded to the 192.168.0.101 webserver are unchanged since 2005; 
> dns, http and ssh to appropriate ports. The router did change, the static ips 
> changed, as well as the physical location of the network and servers. I don't 
> know what the issue is, that's why I asked about including explicit PTR files 
> to the domain name, as well as the localhost in-addr.arpa, which is the 
> latest in a list of "possible irregularities" I have turned up so far that I 
> need to confirm one way or the other.
>
> I do appreciate you taking valuable time to answer. I have to wade into it 
> all again. I hope I am still welcome to ask questions here as I have seen 
> others do, since I subscribed to this list in an effort to learn about BIND 
> and DNS, a number of years ago.
>
> Norman
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Best regards

Sten Carlsen

No improvements come from shouting:
   "MALE BOVINE MANURE!!!"

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: PTR files

2013-06-17 Thread Norman Fournier
On 2013-06-17, at 4:11 PM, Charles Swiger wrote:

> On Jun 17, 2013, at 3:00 PM, Norman Fournier  
> wrote:
>> [ ... ]
>> (...Members of the httpd-users list says the same thing - its not an httpd 
>> problem.
> 
> From what you've said below, they're quite right.
> 
>> I am just trying to take possibilities off my list of potential errors, 
>> sorry if I am annoying you, it's unintentional and symptomatic of my 
>> ignorance, so I'm asking questions. I think that is a legitimate use of my 
>> subscription to this list, and the list's raison d'être. Surely the list is 
>> not exclusively for individuals who know what they're talking about?..)
> 
> This list is for discussion of ISC's BIND.

For me, the list is called bind-users, not bind-discussion. BIND discussion 
would be a higher echelon than a user list. I'm a bind user and I have a Domain 
Name Server problem, somewhere, that I have been trying to solve for a long 
time and am going over my steps once again. I need to get my webserver online 
and there is a problem with the name or lookup or the router. I have not found 
any errors in httpd, bind or the router configuration that have solved it. The 
latest hint I got was an ostensible missing in-addr.arpa PTR record, which, to 
me, made it relevant to BIND.

> Let's assume that you've got a D-Link router which has a single public IP 
> from your provider, and provides NAT translation for a private RFC-1918 
> subnet, and you've placed your webserver on a VM which lives behind that 
> D-Link router.  If so, you will need to enable static port forwarding for 
> 80/tcp to the VM running the webserver, or perhaps place that IP in the 
> router's "Enable DMZ Host" section of the firewall config.
> 
> This is basic networking; it doesn't have any close relationship to either 
> DNS or webservers.

The ports forwarded to the 192.168.0.101 webserver are unchanged since 2005; 
dns, http and ssh to appropriate ports. The router did change, the static ips 
changed, as well as the physical location of the network and servers. I don't 
know what the issue is, that's why I asked about including explicit PTR files 
to the domain name, as well as the localhost in-addr.arpa, which is the latest 
in a list of "possible irregularities" I have turned up so far that I need to 
confirm one way or the other.

I do appreciate you taking valuable time to answer. I have to wade into it all 
again. I hope I am still welcome to ask questions here as I have seen others 
do, since I subscribed to this list in an effort to learn about BIND and DNS, a 
number of years ago.

Norman
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: PTR files

2013-06-17 Thread Leonard Mills
Hi Norman,

>This is the error message my browser returns:
>    The server at dlinkrouter can't be found, because the DNS lookup failed. 
>    DNS is the network service that ...


This is my best guess on your incomplete information.

Some process or person somehow managed to convince the router 
(which appears to be running DHCP for your system) that it has the name
    dlinkrouter
instead of the more normal setting like

    myrouter.mydomain.com.

It's likely that DHCP taught your system to use "dlinkrouter" as the 
DHCP-assigned name server.

Hth,

Len




>
> From: Norman Fournier 
>To: bind-users@lists.isc.org 
>Sent: Monday, June 17, 2013 3:00 PM
>Subject: Re: PTR files
> 
>
>
>
>
>On 2013-06-17, at 3:29 PM, Charles Swiger wrote:
>
>On Jun 17, 2013, at 2:21 PM, Norman Fournier  wrote:
>>
>>I am working on bringing a virtual webserver behind a router online and am 
>>encountering problems.
>>>
>>OK.  The odds are very good that you should ask about this on an 
>>Apache/nginx/etc forum, as it's unlikely to be related to DNS or BIND.
>>
>>
>>In my named.conf, this is my in-addr.arpa entry:
>>>
>>
>>>
>>zone "0.0.127.in-addr.arpa" IN {
>>>
>>type master;
>>>
>>file "named.local";
>>>
>>allow-update { none; };
>>>
>>};
>>>
>>
>>>
>>Should I explicitly define the reverse lookup for my ip or does this entry 
>>accomplish the same thing, as it seem to have done so in the past.
>>>
>>It provides a PTR record for 127.0.0.1; equivalent to the standard /etc/hosts 
>>entry of:
>>
>>127.0.0.1localhost
>>
>>There's nothing you should change here.
>>
>>Regards,
>>-- 
>>-Chuck
>>
>
>Thank you for your response
>
>
>(...Members of the httpd-users list says the same thing - its not an httpd 
>problem. I am just trying to take possibilities off my list of potential 
>errors, sorry if I am annoying you, it's unintentional and symptomatic of my 
>ignorance, so I'm asking questions. I think that is a legitimate use of my 
>subscription to this list, and the list's raison d'être. Surely the list is 
>not exclusively for individuals who know what they're talking about?..)
>
>
>This is the error message my browser returns:
>
>
>The server at dlinkrouter can't be found, because the DNS lookup failed. DNS 
>is the network service that translates a website's name to its Internet 
>address. This error is most often caused by having no connection to the 
>Internet or a misconfigured network. It can also be caused by an unresponsive 
>DNS server or a firewall...
>
>
>Instead of "The server at mydomain.com can't be found", etc., - the error 
>message states my router brand name. My router config seems fine. How would my 
>router name get swapped for my domain name? And where might that error be 
>located? In my httpd.conf? named.conf seemed a more likely place, although it 
>looks okay to me.
>
>
>What question might I ask the httpd list that might be enlightening?
>
>
>Thanks again.
>
>
>Norman
>___
>Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
>from this list
>
>bind-users mailing list
>bind-users@lists.isc.org
>https://lists.isc.org/mailman/listinfo/bind-users
>
>___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: PTR files

2013-06-17 Thread Charles Swiger
On Jun 17, 2013, at 3:00 PM, Norman Fournier  wrote:
> [ ... ]
> (...Members of the httpd-users list says the same thing - its not an httpd 
> problem.

>From what you've said below, they're quite right.

> I am just trying to take possibilities off my list of potential errors, sorry 
> if I am annoying you, it's unintentional and symptomatic of my ignorance, so 
> I'm asking questions. I think that is a legitimate use of my subscription to 
> this list, and the list's raison d'être. Surely the list is not exclusively 
> for individuals who know what they're talking about?..)

This list is for discussion of ISC's BIND.

> This is the error message my browser returns:
> 
>> The server at dlinkrouter can't be found, because the DNS lookup failed. DNS 
>> is the network service that translates a website's name to its Internet 
>> address. This error is most often caused by having no connection to the 
>> Internet or a misconfigured network. It can also be caused by an 
>> unresponsive DNS server or a firewall...
> 
> Instead of "The server at mydomain.com can't be found", etc., - the error 
> message states my router brand name. My router config seems fine. How would 
> my router name get swapped for my domain name? And where might that error be 
> located? In my httpd.conf? named.conf seemed a more likely place, although it 
> looks okay to me.
> 
> What question might I ask the httpd list that might be enlightening?

Let's assume that you've got a D-Link router which has a single public IP from 
your provider, and provides NAT translation for a private RFC-1918 subnet, and 
you've placed your webserver on a VM which lives behind that D-Link router.  If 
so, you will need to enable static port forwarding for 80/tcp to the VM running 
the webserver, or perhaps place that IP in the router's "Enable DMZ Host" 
section of the firewall config.

This is basic networking; it doesn't have any close relationship to either DNS 
or webservers.

Regards,
-- 
-Chuck

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: PTR files

2013-06-17 Thread Norman Fournier

On 2013-06-17, at 3:29 PM, Charles Swiger wrote:

> On Jun 17, 2013, at 2:21 PM, Norman Fournier  
> wrote:
>> I am working on bringing a virtual webserver behind a router online and am 
>> encountering problems.
> 
> OK.  The odds are very good that you should ask about this on an 
> Apache/nginx/etc forum, as it's unlikely to be related to DNS or BIND.
> 
>> In my named.conf, this is my in-addr.arpa entry:
>> 
>> zone "0.0.127.in-addr.arpa" IN {
>>  type master;
>>  file "named.local";
>>  allow-update { none; };
>> };
>> 
>> Should I explicitly define the reverse lookup for my ip or does this entry 
>> accomplish the same thing, as it seem to have done so in the past.
> 
> It provides a PTR record for 127.0.0.1; equivalent to the standard /etc/hosts 
> entry of:
> 
> 127.0.0.1 localhost
> 
> There's nothing you should change here.
> 
> Regards,
> -- 
> -Chuck

Thank you for your response

(...Members of the httpd-users list says the same thing - its not an httpd 
problem. I am just trying to take possibilities off my list of potential 
errors, sorry if I am annoying you, it's unintentional and symptomatic of my 
ignorance, so I'm asking questions. I think that is a legitimate use of my 
subscription to this list, and the list's raison d'être. Surely the list is not 
exclusively for individuals who know what they're talking about?..)

This is the error message my browser returns:

> The server at dlinkrouter can't be found, because the DNS lookup failed. DNS 
> is the network service that translates a website's name to its Internet 
> address. This error is most often caused by having no connection to the 
> Internet or a misconfigured network. It can also be caused by an unresponsive 
> DNS server or a firewall...


Instead of "The server at mydomain.com can't be found", etc., - the error 
message states my router brand name. My router config seems fine. How would my 
router name get swapped for my domain name? And where might that error be 
located? In my httpd.conf? named.conf seemed a more likely place, although it 
looks okay to me.

What question might I ask the httpd list that might be enlightening?

Thanks again.

Norman___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: PTR files

2013-06-17 Thread Charles Swiger
On Jun 17, 2013, at 2:21 PM, Norman Fournier  wrote:
> I am working on bringing a virtual webserver behind a router online and am 
> encountering problems.

OK.  The odds are very good that you should ask about this on an 
Apache/nginx/etc forum, as it's unlikely to be related to DNS or BIND.

> In my named.conf, this is my in-addr.arpa entry:
> 
> zone "0.0.127.in-addr.arpa" IN {
>   type master;
>   file "named.local";
>   allow-update { none; };
> };
> 
> Should I explicitly define the reverse lookup for my ip or does this entry 
> accomplish the same thing, as it seem to have done so in the past.

It provides a PTR record for 127.0.0.1; equivalent to the standard /etc/hosts 
entry of:

127.0.0.1   localhost

There's nothing you should change here.

Regards,
-- 
-Chuck

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


PTR files

2013-06-17 Thread Norman Fournier
Hello,

I am working on bringing a virtual webserver behind a router online and am 
encountering problems.

In my named.conf, this is my in-addr.arpa entry:

zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};

Should I explicitly define the reverse lookup for my ip or does this entry 
accomplish the same thing, as it seem to have done so in the past.

Thank you.

Norman
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Health Check feature in BIND ?

2013-06-17 Thread Mike Hoskins (michoski)
-Original Message-

From: "", "P.Eng." 
Date: Monday, June 17, 2013 2:55 PM
To: Gaurav Kansal 
Cc: "bind-users@lists.isc.org" 
Subject: Re: Health Check feature in BIND ?

>- Original Message -
>> Dear All,
>> 
>> I was just thinking whether it is possible to have a some type of
>> health checking of servers through BIND DNS Server and DNS Server
>> should replied to clients based on that only.
>> 
>> 
>> 
>> i.e., Suppose I have two entries of www record for domain xyz.in
>> having ip address 10.1.1.10 and 10.2.2.10.
>> 
>> Now I want that my DNS Server should check whether the server is up
>> or not before replying to clients.
>> 
>> If one is down, then DNS server should reply the IP address of the
>> second one.
>> 
>> 
>> 
>> Although this is not a DNS Job and we should use Load-Balancer for
>> this.
>> 
>> But I just wanna to check whether this feature is available in Bind
>> or in any Open-Source Program which in turn can be combined with
>> BIND to achieve the desired result.
>> 
>
>Well, doesn't DNS kind of already do this...if the first DNS server isn'
>up, then the user's resolver will timeout and try the next resolver

For DNS/MX yes, but I didn't read that as a limitation of the original
request (e.g. how would you do the same auto-redirect with web or other
server types -- round robin alone can be particularly problematic).

You could certainly handle the more generic case with commercial
appliances, or a bit of tinkering on a budget.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Health Check feature in BIND ?

2013-06-17 Thread Lawrence K. Chen, P.Eng.


- Original Message -
> Dear All,
> 
> I was just thinking whether it is possible to have a some type of
> health checking of servers through BIND DNS Server and DNS Server
> should replied to clients based on that only.
> 
> 
> 
> i.e., Suppose I have two entries of www record for domain xyz.in
> having ip address 10.1.1.10 and 10.2.2.10.
> 
> Now I want that my DNS Server should check whether the server is up
> or not before replying to clients.
> 
> If one is down, then DNS server should reply the IP address of the
> second one.
> 
> 
> 
> Although this is not a DNS Job and we should use Load-Balancer for
> this.
> 
> But I just wanna to check whether this feature is available in Bind
> or in any Open-Source Program which in turn can be combined with
> BIND to achieve the desired result.
> 

Well, doesn't DNS kind of already do this...if the first DNS server isn' up, 
then the user's resolver will timeout and try the next resolver

OTOH, for Load-Balancer we use a BigIP LTM, where I have a pool with two 
DNS servers and use the DNS_Monitor script F5 (which basically does a 'dig 
@  | grep  >/dev/null' )

Works pretty well, one of the nodes is usually the first one I do when there's 
a bind update.

Additionally I hit all my DNS servers from nagios with the check_dns plugin.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Health Check feature in BIND ?

2013-06-17 Thread Mike Hoskins (michoski)
-Original Message-

From: Gaurav Kansal 
Date: Monday, June 17, 2013 3:27 AM
To: "bind-users@lists.isc.org" 
Subject: Health Check feature in BIND ?

>Dear All,
> 
>I was just thinking whether it is possible to have a some type of health
>checking of servers through BIND DNS Server and DNS Server should replied
>to clients based on that only.
> 
>i.e., Suppose I have two entries of www record for domain
>xyz.in having ip address 10.1.1.10 and 10.2.2.10.
>Now I want that my DNS Server should check whether the server is up or
>not before replying to clients.
>If one is down, then DNS server should reply the IP address of the second
>one.
> 
>Although this is not a DNS Job and we should use Load-Balancer for this.
>But I just wanna to check whether this feature is available in Bind or in
>any Open-Source Program which in turn can be combined with BIND to
>achieve the desired result.

You are right, this is not the job of DNS alone...  A load balancer or
GSLB would be ideal.

There have been threads on similar things in the past.  One I recall
involved DDNS and local glue.  Scripts doing pings, port checks, etc
combined with low TTLs and dynamic updates to "route" around potential
problems.

Such an approach can have pitfalls, but does have a place and is
relatively easy to implement.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Health Check feature in BIND ?

2013-06-17 Thread Gaurav Kansal
Dear All,

 

I was just thinking whether it is possible to have a some type of health
checking of servers through BIND DNS Server and DNS Server should replied to
clients based on that only.

 

i.e., Suppose I have two entries of www record for domain xyz.in having ip
address 10.1.1.10 and 10.2.2.10.

Now I want that my DNS Server should check whether the server is up or not
before replying to clients.

If one is down, then DNS server should reply the IP address of the second
one.

 

Although this is not a DNS Job and we should use Load-Balancer for this.

But I just wanna to check whether this feature is available in Bind or in
any Open-Source Program which in turn can be combined with BIND to achieve
the desired result.

 

 

Thanks and Regards,

Gaurav Kansal

Emp Code - 6274

Mob - 9910118448

 

Have you enabled IPv6 on something today...?

 

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users