Re: zone files in bind-9.9

2013-01-06 Thread Feng He
于 2013-1-6 21:53, Carsten Strotmann 写道: you can use named-compilezone to convert from RAW-Format to Text-Format. Or you can use dig with axfr to get a zone-transfer from the server (dig @server axfr zone.tld). You can change the format for writing zone files in the named.conf if you

Re: zone files in bind-9.9

2013-01-06 Thread Feng He
Another question, since the zone files are raw format now, how can we edit the zones? I use nsupdate only so it's not a problem, but for editting by hand, how to? Thanks. 于 2013-1-6 21:53, Carsten Strotmann 写道: you can use named-compilezone to convert from RAW-Format to Text-Format. Or you

Re: zone files in bind-9.9

2013-01-06 Thread Feng He
于 2013-1-7 10:44, Mark Andrews 写道: Master zones still use text format by default. Slave zones use raw format by default. You are not expected to edit slave zones. OK I see. that's right. ___ Please visit

Re: Distribute named.conf

2013-01-03 Thread Feng He
于 2013-1-3 19:06, Joerg Stephan 写道: So we are seeking a way to distribute the named.conf.x for the several zonfiles. Currently this is solved by powerdns via mysql replication. Is there any tool in bind we could use. Generating the conf file and syncing via ssh/rsync is discussed on our side,

nsupdate for default TTL

2012-12-26 Thread Feng He
Hi Is there a way to dynamic update the zone's default TTL by nsupdate? Thanks and Merry Xmas! ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: nsupdate for default TTL

2012-12-26 Thread Feng He
于 2012-12-26 22:12, Carsten Strotmann 写道: Because there is no concept of a default TTL in a loaded zone, you can only change the dedicated TTLs on each individual resource record using the nsupdate tool. Thanks Carsten. Happy new year! ___ Please

Re: Just wondering if BIND can do GLB -Global Load Balancing Stuff?

2012-12-17 Thread Feng He
I once maintained two F5-BIGIP-GTM boxes a coupe of years ago, at that time they called as F5 3DNS. GTM does have a BIND installed, but that means nothing. Its GSLB DNS module is not BIND, but a customized module in Linux kernel. Among with this module there are some scheduler methods to balance

Re: Can we load balance trafgic for CNAME records?

2012-12-14 Thread Feng He
于 2012-12-14 13:27, Manish Rane 写道: Like say i need to play with mail services and I have 2 ISPs.say ISP A and ISP B. MX 10 mail.example.com http://mail.example.com 20.20.20.20 (from isp A) Mx 20 mail01.example.com http://mail01.example.com 30.30.30.30 (from isp B) CNAME cas.example.com

Re: Can we load balance traf[f]ic for CNAME records?

2012-12-14 Thread Feng He
于 2012-12-14 17:14, Manish Rane 写道: I understand that Mail Delivery load balance can be achieved by usingMX priorities. My concern is not that, rather I am more worries about users who will be using A record to configure their mail clients like IMAP or POP. I am thinking on load balancing their

Re: How can I migrate my Domain from ISP hosted to my own BIND server?

2012-12-14 Thread Feng He
于 2012-12-14 17:55, Manish Rane 写道: I need to migrate my domain which is hosted at my ISP on to my own internal BIND server and have my own NS record. Does anyone steps I need to take care of or complete procedure? you'd better pick up a book to read for the begin :)

Re: is there a also-allow-transfer

2012-12-13 Thread Feng He
2012-12-13 15:23, Mark Andrews 写道: In message 50c9818e.2060...@nsbeta.info, Feng He writes: Hello, I have the allow-transfer{} section in the global options{} block. But for a special zone, I want to include another IP to allow transfer besides the global IPs. Is there a also-allow

Re: is there a also-allow-transfer

2012-12-13 Thread Feng He
Thanks. So how to handle the case described as below? We already have the also-notify{} section in the global options{} block. But for a special zone, just want to include another IP to also-notify besides the global IPs. 于 2012-12-13 17:00, Sten Carlsen 写道: On 13/12/12 9:46, Feng He

Re: is there a also-allow-transfer

2012-12-13 Thread Feng He
This would be easy by hand, but not by programming, since I have lots of zones for updates :) 于 2012-12-13 17:35, Sten Carlsen 写道: also-notify { 74.81.81.82; 74.81.81.81; }; ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to

is there a also-allow-transfer

2012-12-12 Thread Feng He
Hello, I have the allow-transfer{} section in the global options{} block. But for a special zone, I want to include another IP to allow transfer besides the global IPs. Is there a also-allow-transfer option in BIND? If not how to control this? Thanks.

Re: is there a also-allow-transfer

2012-12-12 Thread Feng He
于 2012-12-13 15:23, Mark Andrews 写道: acl xxx { }; options { allow-transfer { xxx; }; }; zone yyy { allow-transfer { xxx; extra; }; } cool. thanks! ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe

Re: dns master-slave transfer

2012-10-28 Thread Feng He
于 2012-10-29 9:58, kavin 写道: Now,I want transfer the zone data from the master dns serverto slave dns server ,the master dns use bind-dlz+mysql and the slave dns server use bind+file. AFAIK, BIND DLZ doesn't send a notify message to slave, so both your master and slave should be able to use

Re: client ... query (cache) './NS/IN' denied:

2011-08-18 Thread Feng He
On Fri, Aug 19, 2011 at 3:24 AM, Shawn Bakhtiar shashan...@hotmail.com wrote: Hi all, For the first time my primary name server is not reporting any more client XXX.XXX.XXX.XXX query (cache) './NS/IN' denied: 1 Time(s) This is a DNS attacking. Many DNS Servers are meeting this kind of

Re: stub zone

2011-07-26 Thread Feng He
On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo juwu...@yahoo.com wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support to stub zone in the future, is that true? ___ Hi, what's the use of stub zone? I

Re: stub zone

2011-07-26 Thread Feng He
On Wed, Jul 27, 2011 at 8:51 AM, Chris Buxton chris.p.bux...@gmail.com wrote: On Jul 25, 2011, at 10:33 PM, Feng He wrote: On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo juwu...@yahoo.com wrote: Would like to use the BIND stub zone function, however, heard that ISC considers stopping support

Re: DNS update on host down

2011-07-26 Thread Feng He
I did the same stuff using a script. When the host is down, run dynamic update to modify the records. Some BIND based GSLB such as F5 BIG-IP GTM has this feature. Regards. On Tue, Jul 26, 2011 at 10:23 PM, Paul Reilly parei...@tcd.ie wrote: Is there a simple utility, which can ICMP ping or HTTP

Re: howto know if a query was delegated to cache

2011-07-25 Thread Feng He
There is a rr flag in the response which indicates the answer is not from a cache. On Mon, Jul 25, 2011 at 6:14 PM, harish badrinath harishbadrin...@gmail.com wrote: (Originally sent to bind-workers, sorry if this is considered cross posting. Slightly modified from the original message)

Re: howto know if a query was delegated to cache

2011-07-25 Thread Feng He
You may have been confused about what should be cached and what should not be cached. This is an answer which is coming from the authoritative server and which is not a cached response: $ dig www.google.com @ns1.google.com ; DiG 9.6-ESV-R4 www.google.com @ns1.google.com ;; global options:

MX choosing

2011-07-22 Thread Feng He
Given the MX hosts for sympatico.ca domain: $ dig sympatico.ca mx +short 5 mxmta.sympatico.ca. $ dig mxmta.sympatico.ca +short 67.69.240.17 67.69.240.24 67.69.240.22 67.69.240.23 67.69.240.21 67.69.240.20 67.69.240.19 67.69.240.18 when the peer MTA fail to talk to one of these hosts,will it

Re: MX choosing

2011-07-22 Thread Feng He
, 2011 at 5:11 PM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 22.07.11 16:50, Feng He wrote: Given the MX hosts for sympatico.ca domain: $ dig sympatico.ca mx +short 5 mxmta.sympatico.ca. $ dig mxmta.sympatico.ca +short 67.69.240.17 67.69.240.24 67.69.240.22 67.69.240.23

Re: MX choosing

2011-07-22 Thread Feng He
On Fri, Jul 22, 2011 at 5:58 PM, Tony Finch d...@dotat.at wrote:  The question of whether a sender should attempt retries using the  different addresses of a multihomed host has been controversial. The  main argument for using the multiple addresses is that it maximizes the  probability of

BIND and DNS protocol

2011-07-20 Thread Feng He
I saw this statement: BIND (Berkeley Internet Name Domain) is an Open Source implementation of the Domain Name System protocols originally developed by the University of California, Berkeley. I'm not sure, is it BIND or DNS protocols or both developed by University of California, Berkeley?

Re: about the dig

2011-07-19 Thread Feng He
or 3) No @... argument used at all ? In cases 1 3, dig will need data from /etc/resolv.conf. Only in case 2 dig can do without. Kind regards, Marc Lampo -Original Message- From: Feng He [mailto:short...@gmail.com] Sent: 19 July 2011 07:33 AM To: bind-users@lists.isc.org

Re: about the dig

2011-07-19 Thread Feng He
On Tue, Jul 19, 2011 at 1:50 PM, Marc Lampo marc.la...@eurid.eu wrote: the list cannot be built-in, because some organisations work with an internal  root.  The local caching name server is the only one to know those new root's.) I don't think so. BIND 9 has the built-in root list.

Re: about the dig

2011-07-19 Thread Feng He
On Tue, Jul 19, 2011 at 2:47 PM, G.W. Haywood b...@jubileegroup.co.uk wrote: man resolv.conf If  this file doesn't exist the only name server to be queried will be on the local machine; the domain name is determined from the       hostname and the domain search path is constructed from

Re: Patching bind for additional stats - any tips?

2011-07-18 Thread Feng He
Sounds a great project. I wish google's improved BIND is as well as gmail. Regards. On Tue, Jul 19, 2011 at 9:13 AM, Alex Kolchinski kolchin...@google.com wrote: Hi everyone - I'm at Google and currently starting on a mini-project to get some more insight into how our BIND servers are

about the dig

2011-07-18 Thread Feng He
Hi list, When I deleted all the entries in /etc/resolv.conf (I am using Linux), dig can't work. I was thinking since dig is a standard resolver, it should have the capibility to follow the referrel from root, thus it will work fine even there is no system dns resolving. Am I right? Thanks.

Re: master slave different site different resolution

2011-07-14 Thread Feng He
2011/7/14 Gabriele Gabriele d_gabri...@hotmail.it: Dear lists, I have an issue to resolve about 2 dns server Master/Slave. The Master is positioned in a site with public ip 1.1.1.1 and all the public dns resolutions point to 1.1.1.1 the Slave is positioned in a site whit public ip 2.2.2.2 

questions on the dig info

2011-07-08 Thread Feng He
Hello list, $ dig www.qq.com ns @ns1.qq.com ; DiG 9.4.2-P2.1 www.qq.com ns @ns1.qq.com ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 50734 ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 0 ;; WARNING: recursion requested but not

Re: questions on the dig info

2011-07-08 Thread Feng He
2011/7/9 Lyle Giese l...@lcrcomputer.net: qq.com zone is the parent to the subdomain www.qq.com, so it has to have knowledge of the name servers for the www.qq.com subdomain.  That is how a recursive name server finds www.qq.com. Do you mean the reference? I don't think the first case is

Re: about AUTHORITY SECTION

2011-07-07 Thread Feng He
2011/7/8 Kevin Darcy k...@chrysler.com: I think it's worth emphasizing that in the first case, the contents of the Authority Section were *mandatory* (see RFC 2308, Negative Caching), whereas in the second case the authoritative nameserver was *optionally* providing NS records in the

a death loop with DNS query

2011-07-06 Thread Feng He
When I dig this: dig s1.mytest.blogchina.org +trace I got many these info: mytest.blogchina.org. 600 IN NS ns1.dnsv5.com. mytest.blogchina.org. 600 IN NS ns2.dnsv5.com. ;; BAD (HORIZONTAL) REFERRAL ;; Received 95 bytes from 183.60.59.217#53(ns1.dnsv5.com) in 6 ms

Re: Difference between netstat rndc status

2011-07-03 Thread Feng He
2011/7/3 Bind b...@dci.ir: Hello Admins When i run : #netstat -an |grep udp |wc it returns a number which is lower than the output of rndc status recursive clients. what is the difference between netstat -an |grep udp |wc(open udp ports to dns server) and amount of recursice clients in the