named web statistics

2011-07-06 Thread King, Harold Clyde (Hal)
Hi; I know there is a web front end to DNS stats, but I can not remember the option in the named.conf that defines the port. I'm running 9.8.0-P4 (just now being able to upgrade to a version that supports the statistics) Does anyone remember this? -- Hal King - h...@utk.edumailto:h...@utk.edu

Re: named web statistics

2011-07-06 Thread King, Harold Clyde (Hal)
wrote: On Wed, 6 Jul 2011, King, Harold Clyde (Hal) wrote: I know there is a web front end to DNS stats, but I can not remember the option in the named.conf that defines the port. I'm running 9.8.0-P4 (just now being able to upgrade to a version that supports the statistics) statistics-channels

Can't compile bind 9.8.1-P1 on Solaris

2011-11-16 Thread King, Harold Clyde (Hal)
I get an error compiling Bind at: make[4]: Entering directory `/usr/local/src/bind-9.8.1-P1/bin/tests/system/dlzexternal' ld -G -z text -o driver.so driver.o ld: invalid number `-z' Giving –G a number makes –z unrecognized. I'm in Solaris 10, Sparc, GCC 3.4.6 -- Hal King -

Re: Can't compile bind 9.8.1-P1 on Solaris

2011-11-16 Thread King, Harold Clyde (Hal)
Is anyone else having problems with the compile? -- Hal King - h...@utk.edumailto:h...@utk.edu Systems Administrator Office of Information Technology Systems: Business Information Systems The University of Tennessee 135D Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone:

Re: Can't compile bind 9.8.1-P1 on Solaris

2011-11-16 Thread King, Harold Clyde (Hal)
Thanks! -- Hal King - h...@utk.edu Systems Administrator Office of Information Technology Systems: Business Information Systems The University of Tennessee 135D Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone: 974-1599 On 11/16/11 4:44 PM, Dennis Clarke

Re: Can't compile bind 9.8.1-P1 on Solaris

2011-11-16 Thread King, Harold Clyde (Hal)
I compiled 9.8.1 on the same server with the same setup. So it is not in 9.8.1. -- Hal King - h...@utk.edu Systems Administrator Office of Information Technology Systems: Business Information Systems The University of Tennessee 135D Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996

Re: Can't compile bind 9.8.1-P1 on Solaris

2011-11-17 Thread King, Harold Clyde (Hal)
Technology Systems: Business Information Systems The University of Tennessee 135D Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone: 974-1599 On 11/17/11 12:40 PM, Cathy Almond cat...@isc.org wrote: On 17/11/11 05:33, King, Harold Clyde (Hal) wrote: With great help I got

Re: Can't compile bind 9.8.1-P1 on Solaris

2011-11-17 Thread King, Harold Clyde (Hal)
. Knoxville, TN 37996 Phone: 974-1599 On 11/17/11 2:26 PM, King, Harold Clyde (Hal) h...@utk.edu wrote: That's just the thing. I compile on my test box and it works. Move it to production and it fails with the error stated. Bind-9.8.1 worked with the same environment settings. No chroot on my

Not able to resolve a domain

2011-11-18 Thread King, Harold Clyde (Hal)
I have found that www.thisisgame.com does not resolve on our DNS servers. Google DNS works fine. According to dns.14x.org the top level domain com is w. I do not see a w server. I have the most recent named.root file from June. What have I done wrong? Thanks for looking during this busy time.

Re: Not able to resolve a domain

2011-11-18 Thread King, Harold Clyde (Hal)
This is the trace I get trying to resolve the domain. dig +trace thisisgame.com ; DiG 9.8.1-P1 +trace thisisgame.com ;; global options: +cmd . 456080 IN NS d.root-servers.net. . 456080 IN NS h.root-servers.net. .

Re: Not able to resolve a domain

2011-11-18 Thread King, Harold Clyde (Hal)
Kingston Pk. Knoxville, TN 37996 Phone: 974-1599 On 11/18/11 10:49 AM, /dev/rob0 r...@gmx.co.uk wrote: On Friday 18 November 2011 09:19:18 King, Harold Clyde (Hal) wrote: I have found that www.thisisgame.com does not resolve on our DNS servers. Google DNS works fine. Looks fine from here

NS record outside of our name space

2012-03-13 Thread King, Harold Clyde (Hal)
How can I make a record that will allow outside DNS to control a subdomain in our space. We own example.com We have a zone call wordpress.example.com If I make an NS record in the zone nothing seems to happen? ORIGIN wordpress.example.com NS wordpress.outside.com -- Hal King -

Re: NS record outside of our name space

2012-03-13 Thread King, Harold Clyde (Hal)
Here's an example of my zone record: $ORIGIN . $TTL 1800 ; 30 minutes Wordpress.example.com. IN SOA hiddenmaster.example.com. ipmgr.example.com. ( 2012020601 ; serial 10800 ; refresh (3 hours)

Re: NS record outside of our name space

2012-03-13 Thread King, Harold Clyde (Hal)
Office of Information Technology Systems: Business Information Systems The University of Tennessee 135D Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone: 974-1599 On 3/13/12 11:04 AM, Alan Clegg a...@clegg.com wrote: On 3/13/2012 9:49 AM, King, Harold Clyde (Hal) wrote: Here's

User wanting to use a .local domain to host DNS

2012-11-14 Thread King, Harold Clyde (Hal)
I'm a bit confused by a user request. I think he is trying to keep some hosts on the private side of DNS, but he wants to use a DNS name like host.sub.local. I do not know of the use of the .local TLD except in bonjure. Can anyone shed some light on the use of the .local TLD? -- Hal King -

Blocking private addresses with a optionq

2013-03-08 Thread King, Harold Clyde (Hal)
Is there an option for bind like the allow-recursion { network-acl } For blocking out going records of 10.0.0.0/8 and 192.168.0.0/16 so I could do a view like: View outsiders { block-private { other-networks }; … } Thanks! -- Hal King - h...@utk.edumailto:h...@utk.edu Systems Administrator

Re: Sites that points their A Record to localhost

2014-01-10 Thread King, Harold Clyde (Hal)
-Original Message- From: Dave Warren da...@hireahit.com Date: Friday, January 10, 2014 at 15:47 To: Bind Users bind-users@lists.isc.org Subject: Re: Sites that points their A Record to localhost On 2014-01-10 12:36, wbr...@e1b.org wrote: From: Alan Clegg a...@clegg.com Yes, it seems

How to block part of a zone

2014-09-16 Thread King, Harold Clyde (Hal)
I need to block a host in an exterior domain. Resolve all traffic for example.com from example.com¹s dns servers, but stop badhost.example.com. I guess I could become authoritative for badhost.example.com and point the host to 127.0.0.1. Does that sound like bad things would happen? Zone

Can anyone tell me a good DNS server testing program

2016-06-22 Thread King, Harold Clyde (Hal)
I have a new DNS BIND setup that I need to stress test. There are many test for hitting a web server to simulate traffic, but I can’t find a one for doing the same thing to a DNS server. Does anyone have any recommendations? -- Hal King - h...@utk.edu Systems Administrator Office of

Re: Can anyone tell me a good DNS server testing program

2016-06-27 Thread King, Harold Clyde (Hal)
t; discussed here recently so you can search the archives. > > Emil > > On Wed, Jun 22, 2016 at 3:34 PM, King, Harold Clyde (Hal) <h...@utk.edu> > wrote: >> >> I have a new DNS BIND setup that I need to stress test. There are many >> test for hitting a web serv

Re: Can bind works without defining root servers

2017-08-15 Thread King, Harold Clyde (Hal)
How does Bind update the root servers? Does it go out and check, or is a release made for each change? -- Hal King - h...@utk.edu Systems Administrator Office of Information Technology Shared Systems Services The University of Tennessee 103C5 Kingston Pike Building 2309 Kingston Pk.

Transition from BIND 9.9 to 9.10

2017-07-27 Thread King, Harold Clyde (Hal)
I have not found any problems so far on my test machines, but I was wondering what changes there are to look forward to in moving from 9.9 to 9.10? -- Hal King - h...@utk.edu Systems Administrator Office of Information Technology Shared Systems Services The University of Tennessee 103C5

Removing an NS server

2018-08-07 Thread King, Harold Clyde (Hal)
I don't think I made my point. I need to pull/remove a DNS nameserver from my set of nameservers. My plan was to put the reference to it from our domain name provider. Then pull it from the list of NS records. I am not changing my SOA record. Just the nameserver. Did I make a mistake? Did you

Need to move an NS server out of service

2018-08-06 Thread King, Harold Clyde (Hal)
I have ns2.example.com one of my DNS servers. The building, and the reason for the NS server, is ending. Should I remove the host from our domain name provider then my actual NS record in DNS, or NS record then provider? I'd appreciate any help I could get. -- Hal King

Re: Removing an NS server

2018-08-08 Thread King, Harold Clyde (Hal)
ferral, only your actual NS records. If you're at all concerned, you can always set a low TTL ahead of time on your NS records, so everyone will pull the updated records relatively quickly once you make your changes. John On Tue, Aug 7, 2018 at 4:46 PM, King, Harold Clyde (Hal) mailto:h...@utk.edu&

Perfomance tuning CPUs

2018-08-23 Thread King, Harold Clyde (Hal)
It looks like our named process is getting inturrupted when too many queries come in. What I think I see is the main named process sitting on one CPU and child processes on the others. We have 16 CPUs and 19 named processes. Looks like everything is fine if the main process stays on a CPU, but

Separate DNS slaves as internal and external

2018-03-19 Thread King, Harold Clyde (Hal)
I have DNS slaves for internal and external entities. I don't know how to work the NS records so that outside users would only get the external slave and internal would only get the internal slave. How can I do this? If I put only the internal slaves with NS records external users query the

Re: How to create an SRV record for the CSTA service

2018-09-13 Thread King, Harold Clyde (Hal)
Shared Systems Services The University of Tennessee 103C5 Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone : 974-1599 Helpdesk 24/7 : 974-9900 On 9/13/18, 12:30, "Reindl Harald" wrote: Am 13.09.18 um 18:03 schrieb King, Harold Clyde (Hal): > You

How to create an SRV record for the CSTA service

2018-09-13 Thread King, Harold Clyde (Hal)
I'm kinda stuck. I am tasked with creating an SRV record for the CSTA service. But I must be doing it wrong. Here's what I thought it should be: _csta_tcp.csta-example.com. 3600 IN SRV hostname.example.com. Am I even close? -- Hal King - h...@utk.edu Systems Administrator Office of

Re: How to create an SRV record for the CSTA service

2018-09-13 Thread King, Harold Clyde (Hal)
37996 Phone : 974-1599 Helpdesk 24/7 : 974-9900 On 9/13/18, 11:39, "bind-users on behalf of King, Harold Clyde (Hal)" wrote: I'm kinda stuck. I am tasked with creating an SRV record for the CSTA service. But I must be doing it wrong. Here's what I thought

Re: How to create an SRV record for the CSTA service

2018-09-13 Thread King, Harold Clyde (Hal)
ort target On 09/13/2018 09:40 AM, King, Harold Clyde (Hal) wrote: > There's a typo in my record. It's _csta._tcp.csta-example.com. 3600 IN SRV hostname.example.com. > > -- Gary O'Brien Secure64 Software Corporation 970.372.0009 gary.

Re: Combining forward with master zone.

2019-02-22 Thread King, Harold Clyde (Hal)
Thank you all for your help with this. -- Hal On 2/21/19, 4:04 AM, "bind-users on behalf of Matus UHLAR - fantomas" wrote: >On Wed, Feb 20, 2019 at 3:40 PM King, Harold Clyde (Hal) >wrote: >> Could I just define needs.example.com as a zone

Combining forward with master zone.

2019-02-20 Thread King, Harold Clyde (Hal)
We have a URL phishing setup that causes URLs we detect to redirect to a warning page. We have run into a problem. One of our clients has scripts that he calls from a host in that domain. Needs.example.com when we block example.com. Can I create a root zone to define a wildcard pointing to our

Re: Combining forward with master zone.

2019-02-20 Thread King, Harold Clyde (Hal)
Could I just define needs.example.com as a zone in a separate file so: zone "example.com" { type master; notify no; file "static/antiphish.db"; }; zone "needs.example.com" { type forward; forwards{8.8.8.8;}; -- Hal

Re: Reading secondary PTR files

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
] From: Larry Rosenman Sent: Wednesday, April 20, 2022 9:56 AM To: King, Harold Clyde (Hal) Cc: bind-users Subject: Re: Reading secondary PTR files You don't often get email from l...@lerctr.org. Learn why this is important<http://aka.ms/LearnAboutSenderIdentificat

Reading secondary PTR files

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
I need to read the reverse zone in txt and I'm not sure how to decode the file with named-compilezone. Does anyone know the part I'm missing? named-compilezone -f raw -F text -o /etc/named/secondary/9.249.192.in-addr.arpa.db 9.249.192 /etc/named/secondary/9.249.192.in-addr.arpa.db -- Hal

Re: How can I tell if a quiry is answered or denied

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
-9a66-0e3522260ce4] From: Jeff Sumner Sent: Wednesday, April 20, 2022 4:25 PM To: King, Harold Clyde (Hal) ; bind-users Subject: Re: How can I tell if a quiry is answered or denied You don't often get email from kc4...@gmail.com. Learn why this is important<h

How can I tell if a quiry is answered or denied

2022-04-20 Thread King, Harold Clyde (Hal) via bind-users
I'm trying to find bad actors stretching out my load on my main DNS server I can't tell from the query log if a host is denied an answer, or given an answer. Also, can I get the answer in my logs? I got one great answer today, maybe I'm pushing my luck, but I do feel lucky. -- Hal King -

Re: getting answers from DNS queries

2022-04-25 Thread King, Harold Clyde (Hal) via bind-users
[cid:f96c691b-14fb-43c3-81bb-27c0801dd170] From: Ondřej Surý Sent: Monday, April 25, 2022 10:37 AM To: King, Harold Clyde (Hal) Cc: bind-users Subject: Re: getting answers from DNS queries > I asked this last week, but I didn't an answer. Probably because I still don’t k

getting answers from DNS queries

2022-04-25 Thread King, Harold Clyde (Hal) via bind-users
I asked this last week, but I didn't an answer. Who can I tell if a DNS query is refused or answered? Is it in the log files? Can a compile-time option help me access it? Sorry to repeat but I really need to know this. Thank in advance. -- Hal King - h...@utk.edu Systems Administrator

Re: I need to find statistics on a running server.

2023-01-12 Thread King, Harold Clyde (Hal) via bind-users
] From: Jeff Sumner Sent: Thursday, January 12, 2023 1:22 PM To: King, Harold Clyde (Hal) ; bind-users Subject: Re: I need to find statistics on a running server. You don't often get email from kc4...@gmail.com. Learn why this is important<https://aka

Re: I need to find statistics on a running server.

2023-01-12 Thread King, Harold Clyde (Hal) via bind-users
-048bab50a21f] From: Howard, Christopher Sent: Thursday, January 12, 2023 1:42 PM To: bind-users@lists.isc.org ; King, Harold Clyde (Hal) Subject: Re: I need to find statistics on a running server. You can use "rndc stats" to have bind dump a file

I need to find statistics on a running server.

2023-01-12 Thread King, Harold Clyde (Hal) via bind-users
I need to find some answers like queries per second. Any fast ideas folks? -- Hal King - h...@utk.edu Systems Administrator Office of Information Technology Shared Services The University of Tennessee 103c5 Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone: 974-1599

Re: DNS DDoS protection

2023-02-24 Thread King, Harold Clyde (Hal) via bind-users
I would like to hear the latest configurations for BIND to help with DDoS. -- Hal King - h...@utk.edu Systems Administrator Office of Information Technology Shared Services The University of Tennessee 103c5 Kingston Pike Building 2309 Kingston Pk. Knoxville, TN 37996 Phone: 974-1599