Re: Overriding Included Zone File Entries

2013-03-05 Thread Barry Margolin
to do a similar setup? Instead of one include file for everything, use separate include files: $INCLUDE db.common.mail.inc $INCLUDE db.common.www.inc $INCLUDE db.common.spf.inc Then you can omit some $INCLUDE directives in the zones that have more specific records. -- Barry Margolin Arlington, MA

Re: 3rd party CNAMEs and open recursion

2013-03-04 Thread Barry Margolin
own lookup of that. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: question about dns query distribution

2013-02-08 Thread Barry Margolin
servers listed in NS records. So the distribution is dependent on how client resolvers behave, not how other BIND servers operate. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: MNAME not a listed NS record

2013-01-17 Thread Barry Margolin
in the master clause in their named.conf. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: Wildcard CNAME record?

2013-01-16 Thread Barry Margolin
, the conflicts will never occur. They're the DNS equivalent of trees falling in a forest. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: MNAME not a listed NS record

2013-01-16 Thread Barry Margolin
from the RFCs, this is a valid configuration. Is it valid? Are there any operational gotchas to be aware of or can I ignore the warnings? Consider this a sanity check, in case you intended to list one of the NS records but made a typo, not a validity check. -- Barry Margolin Arlington, MA

Re: MNAME not a listed NS record

2013-01-16 Thread Barry Margolin
In article mailman.1080.1358373225.11945.bind-us...@lists.isc.org, Chuck Swiger cswi...@mac.com wrote: On Jan 16, 2013, at 1:42 PM, Barry Margolin wrote: In article mailman.1077.1358370123.11945.bind-us...@lists.isc.org, Chuck Swiger cswi...@mac.com wrote: On Jan 16, 2013, at 12:40 PM

Re: MNAME not a listed NS record

2013-01-16 Thread Barry Margolin
In article mailman.1085.1358384707.11945.bind-us...@lists.isc.org, Chuck Swiger cswi...@mac.com wrote: On Jan 16, 2013, at 4:30 PM, Barry Margolin wrote: [ ... ] On Jan 16, 2013, at 12:40 PM, Dave Warren wrote: Is there anything technically wrong with having a SOA MNAME field that isn't

Re: Short domains...

2012-12-17 Thread Barry Margolin
or authoritative server? You could configure the server as a slave for the selfservice zone. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: Can we load balance traf[f]ic for CNAME records?

2012-12-14 Thread Barry Margolin
In article mailman.885.1355477939.11945.bind-us...@lists.isc.org, SM s...@resistor.net wrote: See RFC 6186. Verify whether the mail clients support that specification. Are there any mail clients that support this yet? -- Barry Margolin Arlington, MA

Re: Can we load balance traf[f]ic for CNAME records?

2012-12-14 Thread Barry Margolin
In article mailman.897.1355501135.11945.bind-us...@lists.isc.org, Novosielski, Ryan novos...@umdnj.edu wrote: Won't the DNS server randomly report the the defined IP addresses? RFC 6186 is about using SRV records, not round-robin DNS. - Original Message - From: Barry Margolin

Re: SPF records in reverse zones?

2012-12-05 Thread Barry Margolin
from servers with no reverse DNS, so it seems pointless to have SPF records to support them. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind

Re: Need to improve named performance

2012-11-12 Thread Barry Margolin
messages. It doesn't control the applications that send log messages in the first place, that's controlled by the application's own configuration. named doesn't log queries unless you tell it to. -- Barry Margolin Arlington, MA ___ Please visit https

Re: Spotty Lookups on One of Our Networks

2012-10-31 Thread Barry Margolin
the organization has them geographically distributed, as NOAA.GOV does), but dig +trace doesn't. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

Re: Spotty Lookups on One of Our Networks

2012-10-30 Thread Barry Margolin
Group -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: forwarder is ignored when authoritative zone is added

2012-10-26 Thread Barry Margolin
what it has (in this case the record synthesized from the wildcard). Why not configure your resolvers as slaves or stubs for the internal subdomain? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: about DNS RRL

2012-10-17 Thread Barry Margolin
to that server. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Dynamically Reducing TTL of few selected ResourceRecords

2012-09-30 Thread Barry Margolin
of the www record to 300 seconds. $TTL is just the default for records with no explicit TTL (which in most zone files is all of them). -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: Dynamically Reducing TTL of few selected ResourceRecords

2012-09-30 Thread Barry Margolin
know for sure that that works on a removed entry though. That's not correct. If you ask a caching server for ANY records, it will just return the types that happen to be in its cache. -- Barry Margolin Arlington, MA ___ Please visit https

Re: cache does truely in local and doesn't work in remote

2012-09-02 Thread Barry Margolin
. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: cache does truely in local and doesn't work in remote

2012-09-02 Thread Barry Margolin
when you tried your outside query. The error said No servers could be reached, that's why I thought it was a communication problem. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: ho to filter hundeds of domains ?

2012-08-31 Thread Barry Margolin
. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: dig: Transfer failed

2012-07-24 Thread Barry Margolin
outputs OK. sudo named-checkzone three-octets.in-addr.arpa. /etc/bind/db.first-octet outputs OK too. What should I check? Cheers Check the 'allow-transfer' option in your named.conf. -- Barry Margolin Arlington, MA ___ Please visit https

Re: Weird stuff with one host... :-S

2012-07-15 Thread Barry Margolin
In article mailman.1349.1342397875.63724.bind-us...@lists.isc.org, Michelle Konzack linux4miche...@tamay-dogan.net wrote: ANY hosts are working from any workstations/servers except onlinestore on work1. Views? -- Barry Margolin Arlington, MA

Re: Survey - how many people running ISP nameservers define minimal-responses - was Re: What is the deal on missing Authority Section and additional section from google's DNS servers?

2012-07-12 Thread Barry Margolin
In article mailman.1319.1342048311.63724.bind-us...@lists.isc.org, Mark Andrews ma...@isc.org wrote: In message barmar-fdfdc6.18551211072...@news.eternal-september.org, Barry Margolin writes: In article mailman.1317.1342033147.63724.bind-us...@lists.isc.org, Michael Hoskins (michoski

Re: Survey - how many people running ISP nameservers define minimal-responses - was Re: What is the deal on missing Authority Section and additional section from google's DNS servers?

2012-07-11 Thread Barry Margolin
what they can. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Articles not getting gatewayed to news

2012-07-09 Thread Barry Margolin
those intermediate messages. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: Understanding cause of DNS format error (FORMERR)

2012-06-26 Thread Barry Margolin
. This type of inconsistency often suggests a DNS-based load balancer is involved. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Duplicates in newsgroup gateway

2012-06-25 Thread Barry Margolin
I read bind-users through the comp.protocols.dns.bind newsgroup. I'm seeing lots of duplicate posts. Most of the replies in the CNAME Rules thread showed up twice. Is there a problem with the gateway? -- Barry Margolin Arlington, MA ___ Please visit

Re: Moving DNS out of non-cooperative provider

2012-06-19 Thread Barry Margolin
additional-from-auth no; additional-from-cache no; to reduce problems of this kind. Good ideas, but if you're a customer there's not much you can do about this. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind

Re: Moving DNS out of non-cooperative provider

2012-06-18 Thread Barry Margolin
didn't remove the zone from their servers. Are recent versions of BIND better about this? What about other caching DNS implementations? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from

Re: How to handle zones that need to be the same in all views?

2012-06-13 Thread Barry Margolin
the master. I think his problem is that the master only has one view, while the slave has multiple views. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: How to handle zones that need to be the same in all views?

2012-06-11 Thread Barry Margolin
suggestions for how to structure a setup like this? About the only possibility I can come up with is to run two different sets of nameservers, one for the zones that need to be different across views, and one for the zones that need to be global. -- Barry Margolin Arlington, MA

Re: forwarders

2012-05-28 Thread Barry Margolin
to delegate the reverse DNS to your servers. This should have been necessary all along. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: different between views and having multiple instances

2012-05-25 Thread Barry Margolin
instance. Seems like overkill if BIND is the only thing you're running on one of the instances, since each VM will have to run the full OS and background processes. But if you want to have a general testbed, it seems like a good fit. -- Barry Margolin Arlington, MA

Re: different between views and having multiple instances

2012-05-24 Thread Barry Margolin
of the commands can be ran in a manner that only affects specified views. Even if you don't have to stop the server, you might want to run separate instances so that there's less danger of breaking the named.conf used by the production server during testing. -- Barry Margolin Arlington, MA

Re: Checking for zone expiration?

2012-05-21 Thread Barry Margolin
server, that's when it was last refreshed. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: bind multiple instances

2012-05-18 Thread Barry Margolin
are you trying to do that views doesn't accommodate? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org

Re: Reverse zone delegation for 172.16.16.0/20 - HOW TO?

2012-05-18 Thread Barry Margolin
delegations. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Secondary Master

2012-05-11 Thread Barry Margolin
slave -- nothing to do with turning that slave into a replacement master. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: DNSSEC

2012-05-10 Thread Barry Margolin
In article mailman.748.1336659466.63724.bind-us...@lists.isc.org, Tony Finch d...@dotat.at wrote: Barry Margolin bar...@alum.mit.edu wrote: [Validation is] only untroublesome until someone screws things up on their auth server. When one of your users can't access something.gov, they'll

Re: DNSSEC

2012-05-09 Thread Barry Margolin
. But DNSSEC is new enough that there tend to be more failures of this kind, even by organizations that until now have seemed to know what they're doing. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: DNSSEC

2012-05-09 Thread Barry Margolin
doesn't have DNSSEC enabled, there's nothing for the resolver to check. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Barry Margolin
whats wrong? Greetings, Tobias # isn't the comment character in DNS zond files, ; is. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind

Re: New to BIND - Setting up slaveserver

2012-05-07 Thread Barry Margolin
the slave to only accept transfers from the ip address supplied (Master). allow-notify is a list of additional addresses to notify about zone changes other than those listed as NS records in your zone files. Isn't that ALSO-notify? -- Barry Margolin Arlington, MA

Re: Host command timing out sporadically

2012-05-02 Thread Barry Margolin
and does a PTR lookup. Does it also have a similar heuristic for IPv6 addresses? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Barry Margolin
provide. Thank you, Ralph F. Bischof, Jr. NASA Agency IPAM/DNS/DHCP SAIC/NICS 256-544-3982 -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind

Re: Bind doesn't make zone delegation.

2012-04-20 Thread Barry Margolin
; }; }; ... }; ... -- -- --- Kind regards, Ellad -- Barry Margolin Arlington, MA ___ Please visit https

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Barry Margolin
; 172.31.18.0; }; }; ... }; ... --- Kind regards, Ellad -- Barry Margolin Arlington, MA

Re: merging cache and Authoriative

2012-04-17 Thread Barry Margolin
to merge them with together? A server will be authoritative for all zones listed as master or slave in named.conf, and caching for all other zones. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND Lameness

2012-04-03 Thread Barry Margolin
this symptom. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND Lameness

2012-04-03 Thread Barry Margolin
In article mailman.421.1333467523.63724.bind-us...@lists.isc.org, Keith Burgoyne ke...@silverorange.com wrote: On 04/03/2012 11:14 AM, Barry Margolin wrote: In articlemailman.419.1333434497.63724.bind-us...@lists.isc.org, Chuck Swigercswi...@mac.com wrote: On 4/2/2012 10:37 PM, Keith

Re: Master/slave configuration

2012-03-08 Thread Barry Margolin
was to avoid SPOF -- if the master dies, who cares with a reasonable expire time. :-) Master/slave also predated VIPs. It goes back to the early days of TCP/IP, many years before anyone had ever implemented load balancers, anycast, and other HA solutions. -- Barry Margolin Arlington, MA

Re: Master/slave configuration

2012-03-07 Thread Barry Margolin
to the backup server. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: RFC 6303 and bind 9.9.0

2012-03-02 Thread Barry Margolin
. 360 IN 2001:7fe::53 -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

Re: RFC 6303 and bind 9.9.0

2012-03-01 Thread Barry Margolin
answer. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Anycast DNS

2012-02-29 Thread Barry Margolin
, and announcing two /24's facilitates this. Level(3) is only concerned with routing within their network, and their OSPF routing can achieve diversity at the /32 level. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman

Re: More than 4k TXT entries

2012-02-29 Thread Barry Margolin
for a single name, or across all names in the zone? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: More than 4k TXT entries

2012-02-29 Thread Barry Margolin
: ;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 59810 NXDOMAIN means the name doesn't exist. Have you checked the log to see if it's getting an error trying to load the zone fie? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org

Re: load balance of DNS

2012-01-16 Thread Barry Margolin
In article mailman.884.1326738053.68562.bind-us...@lists.isc.org, Warren Kumari war...@kumari.net wrote: On Jan 13, 2012, at 2:30 PM, Barry Margolin wrote: In article mailman.826.1326465946.68562.bind-us...@lists.isc.org, Simon si...@bk.it.cx wrote: Hi, sure it is. Here

Re: load balance of DNS

2012-01-13 Thread Barry Margolin
and that they will send their requests to different servers. In fact, most of clients take first server and will communicate with it. Since caching servers usually do their own sorting or round robin, anything you do on the authoritative servers is not likely to be preserved. -- Barry Margolin

Re: load balance of DNS

2012-01-13 Thread Barry Margolin
. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Barry Margolin Arlington, MA

Re: About root zones

2012-01-03 Thread Barry Margolin
In article mailman.665.1325598835.68562.bind-us...@lists.isc.org, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Jan 2, 2012, at 2:16 PM, Barry Margolin wrote: If the system resolver is good enough for every other application running on the system, it should be good enough for BIND

Re: About root zones

2012-01-03 Thread Barry Margolin
server -- it should truly be authoritative-only. If other servers on the machine need to do lookups, it will use a caching server for this. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: About root zones

2012-01-02 Thread Barry Margolin
If the system resolver is good enough for every other application running on the system, it should be good enough for BIND. Why not at least allow this as an option? -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind

Re: About root zones

2012-01-02 Thread Barry Margolin
In article mailman.656.1325532888.68562.bind-us...@lists.isc.org, Chuck Swiger cswi...@mac.com wrote: On Jan 2, 2012, at 2:16 PM, Barry Margolin wrote: If the system resolver is good enough for every other application running on the system, it should be good enough for BIND. Why

Re: Reg:Domain Redirection

2011-12-25 Thread Barry Margolin
. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: added new name server to zone are missing from the slave

2011-12-19 Thread Barry Margolin
.mydom.com. ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Dec 20 15:06:29 2011 ;; MSG SIZE rcvd: 83 Any suggestions what would cause this ? Thanks G -- Barry Margolin Arlington, MA ___ Please visit https

Re: dig to a nameserver from a host in particular subnet fails

2011-12-14 Thread Barry Margolin
be looking? Do packet captures on both networks, and see where the DNS request and response packets are getting lost. That won't explain the cause, but it will narrow down where you should be looking for the problem. -- Barry Margolin Arlington, MA

Re: CNAME only zone?

2011-12-10 Thread Barry Margolin
never see the CNAME record. Instead, when the auth server receives the query for the A record of the apex, it performs its own query for the CNAME, and returns the result of this. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org

Re: CNAME only zone?

2011-12-10 Thread Barry Margolin
In article mailman.510.1323563868.68562.bind-us...@lists.isc.org, Ken Peng short...@gmail.com wrote: 2011/12/11 Barry Margolin bar...@alum.mit.edu: If CloudFlare is similar to Akamai's solution, recursive servers never see the CNAME record.  Instead, when the auth server receives

Re: slave nags that master is not authoritative

2011-11-23 Thread Barry Margolin
. Checking for this has long been one of my standard troubleshooting suggestions. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-14 Thread Barry Margolin
___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Barry Margolin Arlington, MA

Re: Syncing DNS zones with different names

2011-11-14 Thread Barry Margolin
that you use unqualified names everywhere in the zone file that you're not referencing outside the zone. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: several master ip's for a slave zone

2011-11-07 Thread Barry Margolin
the expire time really high. -- Barry Margolin Arlington, MA ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: process of updating slave servers

2011-02-14 Thread Barry Margolin
? -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: named_dump - record where answer came from?

2011-02-11 Thread Barry Margolin
in BIND 9. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: syntax/format of zone on slave $ORIGIN/paragraph - sorted?

2011-02-09 Thread Barry Margolin
on a slave, BIND uses $ORIGIN so that all records just have a single label. So instead of writing: foo.bar IN A 1.2.3.4 it will write: $ORIGIN bar foo IN A 1.2.3.4 If you have a zone with lots of levels of subdomain, the file will have lots of $ORIGIN statements as a result. -- Barry Margolin

Re: Delegation question

2011-02-04 Thread Barry Margolin
forwarders clause in here disables forwarders, so it follows delegations. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org

Re: bind-9.7.2-P3 linux how to debug/troubleshoot query failures?

2011-02-03 Thread Barry Margolin
if you're sending to the primary in the first place and what the responses look like. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users

Re: Akadns and Bind

2011-02-03 Thread Barry Margolin
. Your log message above indicates an issue just with the yahoo.com domain, not resolution of the CNAME target. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users

Re: dotted hostname is bad IMO

2011-02-01 Thread Barry Margolin
to worry about. DNS servers organize their cache data structures to make steps 1-4 easy to perform all at once. Time to pull out your copy of Knuth Sorting and Searching. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group

Re: what's a valid domain name?

2011-01-31 Thread Barry Margolin
thought at some point periods were allowed in hostnames, and they do work without escaping them. I think you're confusing subdomain and subzone. You can have subdomains without having subzones. E.g. in the company.com zone file, you can put: te1-2.routername IN A 1.2.3.4 -- Barry Margolin

Re: what's a valid domain name?

2011-01-30 Thread Barry Margolin
, paving the way for 1-800-FLOWERS.COM years later. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman

Re: what's a valid domain name?

2011-01-30 Thread Barry Margolin
common. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: cache server with authoritative answer

2011-01-29 Thread Barry Margolin
cache, the response is nonauthoritative. So this means even for a cache only server it can answer with authoritative response? I have been thinking the cache only server shouldn't do this. BIND 4 worked this way, but I think it was changed in BIND 8. -- Barry Margolin, bar...@alum.mit.edu

Re: NS Cache

2011-01-25 Thread Barry Margolin
records for the zone www.marketing.example.com, if not, then to check the NS for marketing.example.com. Am I right? Regards. You're correct. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group

Re: get a domain's dns records

2011-01-21 Thread Barry Margolin
transfers. So if you know the names in the zone you can look them up, but how did the site list the names in his zone? -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users

Re: when one view doesn't have the zone

2011-01-21 Thread Barry Margolin
. Each view is like a totally separate server (which is actually what we did before views were added to BIND). -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing

Re: query cache denied

2011-01-19 Thread Barry Margolin
the response in the Rejected queries for mx???.emailfiltering.com thread. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https

Re: stale cache in alternate views?

2011-01-10 Thread Barry Margolin
to change this behavior? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them

Re: Question on ADDITIONAL SECTION

2011-01-08 Thread Barry Margolin
? but the first doesn't? It's an option that the server implementors or operators can select. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind

Re: Last transfer time?

2010-12-03 Thread Barry Margolin
server. You can see the last successful refresh, whether it involved a zone transfer or not, by looking at the datestamp on the file. It's unclear whether the OP is trying to determine this on the slave or the master. The above solution works on the slave. -- Barry Margolin, bar

Re: Split Delegation IP Reverse

2010-11-23 Thread Barry Margolin
In article mailman.860.1290550595.555.bind-us...@lists.isc.org, Wilbert J. Rojas O. wro...@ideay.net.ni wrote: Jonathan Thanks for responding, but I don't understand your idea. See RFC 2317 for the mechanism to delegate subnets of a /24. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA

Re: Nslookup not working for external domain

2010-11-18 Thread Barry Margolin
to all for your assistance. I thought BIND now has a compiled-in set of root hints, to use as an ultimate default. I guess this isn't used if the hints are configured but unreadable. Perhaps you should submit this as a bug report. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE

Re: Nslookup not working for external domain

2010-11-17 Thread Barry Margolin
: www.cnn.com Address: 157.166.255.18 Name: www.cnn.com Address: 157.166.255.19 Name: www.cnn.com Address: 157.166.224.25 Name: www.cnn.com Address: 157.166.224.26 Name: www.cnn.com Address: 157.166.226.25 Mark -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me

Re: RES: BIND View Option

2010-11-11 Thread Barry Margolin
an internal view that uses myzone.internal.db, and an external view that uses myzone.external.db. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users

Re: BIND View Option

2010-11-10 Thread Barry Margolin
didn’t find a entry in a view 1 (internal view) it will search this entry on the view 2 (external view) ? This is a perfect use for $INCLUDE. Put all the common entries in one file, and put $INCLUDE myzone.common.db in the internal and external zone files. Memory is cheap. -- Barry Margolin

Re: out of place mx records.

2010-10-28 Thread Barry Margolin
and cl.cam.ac.uk). But configuring MX records won't necessarily accomplish this. It will cause mail for all these hosts to be delivered to mcvpemr01 or mcvpemr02. -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group

Re: non-improving referral

2010-10-27 Thread Barry Margolin
@bl1a.example.com +norec? -- Barry Margolin, bar...@alum.mit.edu Arlington, MA *** PLEASE don't copy me on replies, I'll read them in the group *** ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

<    1   2   3   4   5   >