Re: resolv.conf question / timeout behaviour

2021-03-31 Thread Grant Taylor via bind-users
On 3/31/21 10:00 AM, Tony Finch wrote: Because of this, if it's important for you to avoid multi-second DNS lookup times ... you need to design your system so that the libc resolver never tries to talk to a DNS server that isn't available. I've seen various client OSs fail in really weird

Re: Local resolution first and then public resolution for "google.com" domain (Roberto Carna)

2021-03-31 Thread Bob McDonald
You could use RPZ for the entry "www.google.com" and then the rest of the domain would resolve from the internet. Regards, Bob ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 13:57, Roberto Carna wrote: But if I want to resolve: foo.google.com that doesn't exist in my google.com private zone, I don't obtain any result. do NOT define private zone "google.com". configure private zone "www.google.com" that will NOT contain anything other than

Can you share some real-world queries with ISC?

2021-03-31 Thread Victoria Risk
Hello again BIND-users, Sorry for asking for help twice in one day. We are setting up a new resolver performance test bed, one that we hope will be a better simulation of real-world deployment. Once we have this working, we should be able to profile BIND performance using DoH and DoT as well

Plan to remove ISC custom SPEGNO from BIND

2021-03-31 Thread Victoria Risk
Hey there BIND Users- We have removed the ISC custom SPEGNO implementation from the development branch (9.17.x). We intend to also remove it from BIND 9.16 and 9.11. This is very old and fragile code and it is provides extra risk for everyone, while being useful for (we think) almost nobody.

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Roberto Carna
But if I want to resolve: foo.google.com that doesn't exist in my google.com private zone, I don't obtain any result. I need to tell my private BIND to forward to 8.8.8.8 all the received *.google.com queries, except www.google.com that is the one locally resolved. Thanks again !!! El mié, 31

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 13:07, Roberto Carna wrote: Dear Matus, maybe I have not understood very well... I can setup a master zone as you said: zone "www.google.com" { type master; file "..."; }; But what are the needed clauses from Bind's named.conf.options file in order to tell "if foo.google.com is

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Roberto Carna
Dear Matus, maybe I have not understood very well... I can setup a master zone as you said: zone "www.google.com" { type master; file "..."; }; But what are the needed clauses from Bind's named.conf.options file in order to tell "if foo.google.com is not present in the google.com private zone,

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Tony Finch
Matus UHLAR - fantomas wrote: > > note that for this kind setup, using dnsmasq with two forwarders and > www.google.com > overriden through /etc/hosts would be easier solution. Or a response policy zone, if you don't want to switch software

Re: resolv.conf question / timeout behaviour

2021-03-31 Thread Tony Finch
Tom Preissler wrote: > > at my work place we have a three resolver setup in /etc/resolv.conf. > > We had sometimes, though rarely, response times for DNS like 14000ms, > due to the fact that the *first* listed resolver is down for maintenance > reasons. Sadly the traditional unix stub resolver

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 12:49, Roberto Carna wrote: Dear, I have a BIND private DNS server which has two forwarders for public resolution. I need to create a private zone "google.com" with just one A record as follow: www.google.com IN A 192.168.0.100 All the local clients will resolve www.google.com to

Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Roberto Carna
Dear, I have a BIND private DNS server which has two forwarders for public resolution. I need to create a private zone "google.com" with just one A record as follow: www.google.com IN A 192.168.0.100 All the local clients will resolve www.google.com to a private address from our company. And

Re: replication time for dynamic records from primary to secondary servers

2021-03-31 Thread Tony Finch
Cuttler, Brian R (HEALTH) via bind-users wrote: > > We are seeing a delay in the primary DNS server updating the secondary > and would like to shorten that interval. This is probably due to NOTIFY messages not working. NOTIFY is the mechanism that allows primary servers to tell secondaries to

Re: 9.16.13 overwrote master files

2021-03-31 Thread Ondřej Surý
Hi Carl, at this point, I am going to ask you to open an issue in our GitLab instance: https://gitlab.isc.org/isc-projects/bind9/issues Thanks, Ondrej -- Ondřej Surý (He/Him) ond...@isc.org > On 30. 3. 2021, at 22:24, Carl Byington via bind-users > wrote: > > Signed PGP part > On Tue,

RE: replication time for dynamic records from primary to secondary servers

2021-03-31 Thread Cuttler, Brian R (HEALTH) via bind-users
Sorry, crisis (not named related) I will post sections of the named.conf later if needed, but will answer the simple questions now. I don't know what the propagation delay is, notifications are enabled, when the primary reloads a zone the secondary gets notified and requests a zone xfer.

Re: Maximum limit in a NAPTR RR

2021-03-31 Thread Mark Andrews
The flags, services and regexp are each limited to 255 characters. https://tools.ietf.org/html/rfc2915 8. DNS Packet Format The packet format for the NAPTR record is: 1 1 1 1 1 1 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5

Re: resolv.conf question / timeout behaviour

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 10:56, Tom Preissler via bind-users wrote: at my work place we have a three resolver setup in /etc/resolv.conf. resolv.conf is not a BIND thing, it's configuration of system libraries. We had sometimes, though rarely, response times for DNS like 14000ms, due to the fact that the

resolv.conf question / timeout behaviour

2021-03-31 Thread Tom Preissler via bind-users
Hi, at my work place we have a three resolver setup in /etc/resolv.conf. We had sometimes, though rarely, response times for DNS like 14000ms, due to the fact that the *first* listed resolver is down for maintenance reasons. The application we test this with is Oracle/TNSPing. As a mitigation we

Maximum limit in a NAPTR RR

2021-03-31 Thread Harshith Mulky
Hello Experts, Need a help, How do I know what is the maximum limit in a NAPTR RR which I am trying to configure? If I configure as below 5.4.7.7.7.0.1.telus.com. IN NAPTR 8 0 "u" "sip+E2U"