Re: Too many connections on the same IP

2015-03-03 Thread Matus UHLAR - fantomas
tests, i noticed that if from clients i used an ip alias of Bind server, it worked perfectly! Only on main ip there were congestion problems, but resolving on ip aliases worked fastly! do you have any firewall in front of your DNS server? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: have a question of using bind9 for local proxy server

2015-03-02 Thread Matus UHLAR - fantomas
avoid this issue, it would then be simply useless to do this. My recommendation: don't redirect DNS traffic. Either allow it or block it. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: bad zone not loaded

2015-02-03 Thread Matus UHLAR - fantomas
in order that BIND starts. check_names master ignore; will make BIND ignore loading errors. Note that it's much better to fix provisioning... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: Allowing recursive queries of 'static-stub' zones

2015-01-29 Thread Matus UHLAR - fantomas
clients? In the latter case the allow-recursion should help you for both cases, you don't need to specify allow-query. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: reject invalid dns queries

2015-01-20 Thread Matus UHLAR - fantomas
you allow DNS access from remote clients? (allow-query statement) Perhaps denying remote clients from even accessing your caching server would help you with this problem. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: reject invalid dns queries

2015-01-19 Thread Matus UHLAR - fantomas
recursion for remote clients? (recursion and allow-recursion statemends) Do you allow DNS access from remote clients? (allow-query statement) Perhaps denying remote clients from even accessing your caching server would help you with this problem. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: can't-resolve

2015-01-04 Thread Matus UHLAR - fantomas
On 04.01.15 08:43, Mohammed Ejaz wrote: now everything is fine once the port 1024 opened from the network firewall. so it means not only 53 port requires to be open. BIND (and other DNS servers) uses random port for outgoing requests. som you really had firewall on the path... -- Matus UHLAR

Re: bind-users Digest, Vol 2011, Issue 1

2015-01-04 Thread Matus UHLAR - fantomas
only the differing zone(s), and one view to contain all other zones. Other views would use the default view as forwarder (and share the cache for effectivity) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: BIND9 Return different IP address based on subnet

2015-01-03 Thread Matus UHLAR - fantomas
On 03.01.15 19:24, Christian Kette wrote: I have found a workaround. I defined a different zone for every network I repeat: you don't need views when having different zones. You would need views if you had the same zone with different content. -- Matus UHLAR - fantomas, uh...@fantomas.sk

Re: BIND9 Return different IP address based on subnet

2014-12-29 Thread Matus UHLAR - fantomas
example you could use single view with all of the zones. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I wonder how much deeper the ocean

Re: can't-resolve

2014-12-26 Thread Matus UHLAR - fantomas
to: makksab.com.172800 IN NS ns2.cyberia.net.sa. ns2.cyberia.net.sa. 600 IN A 212.119.64.3 is this any of your nameservers? when I query your IPS above, 212.119.64.12 does not answer, the others do. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: can't-resolve

2014-12-26 Thread Matus UHLAR - fantomas
your server and the world? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 42.7 percent of all statistics are made up on the spot

Re: can't-resolve

2014-12-25 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fighting for peace is like fucking for virginity

Re: Question about how forwarders work

2014-12-16 Thread Matus UHLAR - fantomas
UHLAR - fantomas Sent: 11 December 2014 16:39 To: bind-users@lists.isc.org Subject: Re: Question about how forwarders work On 11.12.14 16:28, Richard Thomas wrote: Please could I have some advice about how the below example configuration would work: forwarders { A.B.C.D; E.F.G.H; }; What I wanted

Re: rndc flushname not working

2014-12-11 Thread Matus UHLAR - fantomas
work? On Wed, Dec 10, 2014 at 3:36 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: I'm afraid we can't tell you without precise information. However, the institution should get at least one backup DNS server... On 11.12.14 09:35, Bob Harold wrote: If a DNS server does not respond, I

Re: Question about how forwarders work

2014-12-11 Thread Matus UHLAR - fantomas
of using forwarders. Especially for mail servers with anti-spam measures, where your forwarders may be ignored by some blacklists, because they send too much queries. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: rndc flushname not working

2014-12-10 Thread Matus UHLAR - fantomas
work? I'm afraid we can't tell you without precise information. However, the institution should get at least one backup DNS server... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: How to debug BIND

2014-11-30 Thread Matus UHLAR - fantomas
On 30.11.14 11:24, Kaouthar Chetioui wrote: I have already use +trace it gives me the following answer, like this: no, it doeas not: global options: +cmd you clearly did not use +trace here. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: forwarding zone to another DNS server problem

2014-11-03 Thread Matus UHLAR - fantomas
or static-stub to forward to an authoritative server. the same applies here. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. LSD will make your

Re: forwarding zone to another DNS server problem

2014-11-03 Thread Matus UHLAR - fantomas
On 02.11.14 23:09, Frank Pikelner wrote: What is the advantage of using a stub or static-stub to using a slave? you should use them when it's not possible or viable to use slave, e.g. windows AD domain, RBL domain, domain that can't be transferred etc... -- Matus UHLAR - fantomas, uh

Re: Diagnostic help

2014-09-30 Thread Matus UHLAR - fantomas
know if I've got that right, or how to correct it if I don't. correct. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Due to unexpected

Re: How does bind 9.x chooses root servers?

2014-09-19 Thread Matus UHLAR - fantomas
On 19.09.14 15:57, Jittinan Suwanruengsri wrote: How does bind 9.x chooses root servers? based on RTT, with ocasional re-tries of other servers try googling for bind server selection -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: A record of domain name must be name server ?

2014-09-12 Thread Matus UHLAR - fantomas
, only everything (CNAME). Is there already and RFC for this? I'm not sure whether this kind of RR should be introduced. Maybe redirect that defines types to be redirected... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: A record of domain name must be name server ?

2014-09-11 Thread Matus UHLAR - fantomas
for all other RRs for exmaple.com Alan named crap. And that's why I also think it's better to define 'www' as A record, not as CNAME -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: A record of domain name must be name server ?

2014-09-11 Thread Matus UHLAR - fantomas
On 9/11/2014 3:47 AM, Matus UHLAR - fantomas wrote: On 10.09.14 18:13, Kevin Darcy wrote: No, what I'm saying is that if example.com owns an A record 203.0.113.48, and www.example.com owns an A record 203.0.113.48, then where does 48.113.0.203.in-addr.arpa point? Completely your decision

Re: A record of domain name must be name server ?

2014-09-11 Thread Matus UHLAR - fantomas
On 9/11/2014 12:08 PM, Matus UHLAR - fantomas wrote: we both also said it's personal preference. On 11.09.14 12:53, Kevin Darcy wrote: And I'm saying that's a cop-out. It should be a recommended practice encouraging consistent forward/reverse mappings is something that all DNS admins have

Re: A record of domain name must be name server ?

2014-09-10 Thread Matus UHLAR - fantomas
crap associated with the WWW address. Keeping track of one extra A record (and associated record if you go in that direction) isn't a bad thing. simply said: don't CNAME to @. (Personal preferences, of course) yes, but still... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: A record of domain name must be name server ?

2014-09-08 Thread Matus UHLAR - fantomas
address ? yes. ... it's completely irelevant where does example.com A record point to. It could only issue a problem if you pointed example.com. NS example.com. or similar MX etc recods. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e

Re: DNS reverse sub delegation NXDOMAIN problem, Class C

2014-08-19 Thread Matus UHLAR - fantomas
technically correct, it should be: 220/24 NS ns2.sub.test.com. 0.220 CNAME 0.220/24 but that's an overkill as Phil correctly pointed out. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie

Re: DNS reverse sub delegation NXDOMAIN problem, Class C

2014-08-19 Thread Matus UHLAR - fantomas
.sub.test.com. this belongs to the 20.172.IN-ADDR.ARPA domain on your recursive nameserver - the one your resolv.conf points to. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: Metazones or Something Else?

2014-08-05 Thread Matus UHLAR - fantomas
On 05.08.14 11:43, Brian Cuttler wrote: The slave trusts the master, for zone files, but creating a new zone? hmmm, when a meta-zone is signed by trusted key, why not? :-) using notifies and IXFR would be even more great... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: php-library added - Re: rndc (and now nsupdate too)

2014-08-02 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. A day without sunshine is like, night. ___ Please visit https

Re: bind-users Digest, Vol 1902, Issue 2

2014-08-01 Thread Matus UHLAR - fantomas
-clients parameter. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fighting for peace is like fucking for virginity

Re: One question about 'Stealth servers'

2014-07-24 Thread Matus UHLAR - fantomas
the zones on your recursive nameservers, they will use it locally. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. REALITY.SYS corrupted. Press any

Re: test bind before moving to production

2014-07-04 Thread Matus UHLAR - fantomas
, no A (or ) there is just ns.tst.com pointing to 127.0.0.1 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Your mouse has moved. Windows

Re: daemon warning

2014-07-01 Thread Matus UHLAR - fantomas
if there's a way to leave these (dropping privileges) to other programs, so BIND and similar apps won't have to implement this on their own? ... on Linux or other OSes? (taking care about security of a small program should be easier) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: stub zones

2014-06-06 Thread Matus UHLAR - fantomas
, no matter how much do ISC people discourage it... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fighting for peace is like fucking

Re: slave: WARNING: recursion requested but not available

2014-06-06 Thread Matus UHLAR - fantomas
recursion. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. A day without sunshine is like, night

Re: Architecture Questions

2014-05-28 Thread Matus UHLAR - fantomas
... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Posli tento mail 100 svojim znamim - nech vidia aky si idiot Send this email to 100 your

Re: Split DNS(view configuration)

2014-05-20 Thread Matus UHLAR - fantomas
On 19.05.14 17:26, Tony Finch wrote: You must not share slave zone files between zones. ...I don't see point in having files for domains fetched from different view. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: AIX and 9.9.5 compiling

2014-05-09 Thread Matus UHLAR - fantomas
will be added... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. On the other hand, you have different fingers

Re: Forwarding request to another DNS server but the same domain

2014-05-01 Thread Matus UHLAR - fantomas
already got your recommendations how to fix the issue... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Christian Science Programming: Let

Re: How to setup a backup NameServer?

2014-04-30 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. LSD will make your ECS screen display 16.7 million colors

Re: CNAME to an external domain

2014-03-25 Thread Matus UHLAR - fantomas
server isn't resolving it. It just returns a list of root nameservers. Your server apparently does not provide recursive DNS service, which is usually good. Servers people query directly should do that. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: localhoast A record?

2014-03-23 Thread Matus UHLAR - fantomas
list caused me troubles until I found that parent domain contains wildcrd (which is another bad thing to do) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

bind tools on windows wait forever

2014-03-19 Thread Matus UHLAR - fantomas
Hello, I have installed bind 9.9.5 on windows (tools only) and when I execute dig, host or even nslookup, they return output but don't exit so I must break (Ctrl-C) them. Did anyone notice such behaviour? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: Re: bind tools on windows wait forever

2014-03-19 Thread Matus UHLAR - fantomas
Use BIND 9.9.5-W1. On 19.03.14 18:27, Gaurav Kansal wrote: Shd I upgrade bind on dns servers also ??? only if they are running windows.. I have noticed the -W1 windows release, but forgot about that... (Thanks Mark) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: About the conflict between named and pdnsd.

2014-03-03 Thread Matus UHLAR - fantomas
by default. But the issue for my case is as follows: Bothe the named from bind9 and the pdnsd installed by myself will use the local 53 port. So the will be conflict and cann't start at the same time. How should I solve this issue? only use one DNS server. -- Matus UHLAR - fantomas, uh

Re: static hosts in bind

2014-02-11 Thread Matus UHLAR - fantomas
have all data for those zones available locally. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty

Re: Dynamic update the ip addresses list defined within acl clause

2014-01-29 Thread Matus UHLAR - fantomas
. However, you should be able to configure signature-based updates (I think SIG(0) does that). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Variable SOAs in negative responses

2014-01-28 Thread Matus UHLAR - fantomas
... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. LSD will make your ECS screen display 16.7 million colors

Re: Forwarders Timeout

2014-01-28 Thread Matus UHLAR - fantomas
On 28.01.14 10:08, Phil Fagan wrote: Is it possible to configure the forward (only|first) timeout? AFAIK not (yet). The forwarder selection is done in the same way as the server selection by RTT meassuring. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: classless ptr setup

2014-01-21 Thread Matus UHLAR - fantomas
, but if you're going to host it all on the same server you get a lot of extra complexity for no real benefit. he apparently wants to be a slave for those /25's so they work when any of primaries fail. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e

Re: Is this scenario possible?

2014-01-13 Thread Matus UHLAR - fantomas
and resolving DNS has authoritative NS cached, it won't query ns1.example.com. until the authoritative NS expires. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Sites that points their A Record to localhost

2014-01-13 Thread Matus UHLAR - fantomas
). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The only substitute for good manners is fast reflexes

Re: Generic reasons for recursive performance not to peg CPU?

2014-01-13 Thread Matus UHLAR - fantomas
way ? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Support bacteria - they're the only culture some people have

Re: DNS with several ip adessess

2014-01-03 Thread Matus UHLAR - fantomas
problem. I agree that views are often problematic because people often don't understand them properly... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: Query regardign CNAME

2014-01-01 Thread Matus UHLAR - fantomas
records in both domains, good when you want transition from one domain to another. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I wonder

Re: Query regardign CNAME

2014-01-01 Thread Matus UHLAR - fantomas
easier than playing with $INCLUDE. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Depression is merely anger without enthusiasm

Re: bad owner name - Unable to add forward map from Nintendo Wii U ... REFUSED

2013-12-27 Thread Matus UHLAR - fantomas
a release... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. On the other hand, you have different fingers

Re: bad owner name - Unable to add forward map from Nintendo Wii U ... REFUSED

2013-12-27 Thread Matus UHLAR - fantomas
On 27/12/13 11:16, Matus UHLAR - fantomas wrote: I would ask nintendo to produce a release... On 27.12.13 14:56, Phil Mayers wrote: Ha ha ;o) No, the only realistic option here is to override the client DDNS hostname option with something sanitised. Since the client-supplied hostname isn't

Re: Unable to transfer IPv4 reverse zone

2013-12-21 Thread Matus UHLAR - fantomas
SERVFAIL... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They say when you play that M$ CD backward you can hear satanic messages. That's

Re: Unable to transfer IPv4 reverse zone

2013-12-20 Thread Matus UHLAR - fantomas
192.168.5.1#53: failed while receiving responses: SERVFAIL Dec 19 17:51:48 server2 named[7866]: transfer of '5.168.192.in-addr.arpa/IN' from 192.168.5.1#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.001 secs (0 bytes/sec) what's in logs on master? -- Matus UHLAR - fantomas, uh

Re: Unable to transfer IPv4 reverse zone

2013-12-20 Thread Matus UHLAR - fantomas
; print-severity yes; print-time yes; }; category xfer-out { xfer; }; }; that's why I prefer logging everything somewhere... maybe it's in other category... -- Matus UHLAR - fantomas, uh...@fantomas.sk

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Matus UHLAR - fantomas
with SERVFAIL. Out of 5 zones (3 forward, 1 IPv6 reverse, 1 IPv4 Reverse) the IPv4 reverse zone is the only one which fails. Does the master answer SOA requests for all requests correctly? Does it answer AXFR requests from slave correctly? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Windows DNS question

2013-12-18 Thread Matus UHLAR - fantomas
question... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Chernobyl was an Windows 95 beta test site

Re: CNAME and TTL

2013-12-09 Thread Matus UHLAR - fantomas
-live.bbc.net.uk.140 IN CNAME emp.bbci.co.uk.edgesuite.net. emp.bbci.co.uk.edgesuite.net. 2576 IN CNAME a336.g.akamai.net. a336.g.akamai.net. 20 IN A 80.239.149.26 a336.g.akamai.net. 20 IN A 80.239.247.14 -- Matus UHLAR - fantomas, uh

Re: CNAME and TTL

2013-12-06 Thread Matus UHLAR - fantomas
IN A 58.27.124.225 a336.g.akamai.net. 6 IN A 58.27.124.200 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Quantum mechanics: The dreams stuff is made

Re: script - automatic change A record

2013-11-26 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I feel like I'm diagonally parked in a parallel universe

Re: RHEL 6 CPU load

2013-11-20 Thread Matus UHLAR - fantomas
the directory and/or made it writable by that user, CPU consumption fell down to reasonable values -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Allow recursion for esternal resources in a authoritative zone on a not open dns server

2013-11-18 Thread Matus UHLAR - fantomas
(recursive) DNS servers that would (or, at least should) not trust what it says in ADDITIONAL section of its responses (where the CNAME content in non-authoritative cases belongs to). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: Message parser reports malformed message packet

2013-11-05 Thread Matus UHLAR - fantomas
. . 518400 IN NS m.root-servers.net. ;; Received 520 bytes from 201.76.40.2#53(201.76.40.2) in 235 ms I would expect root NS referrals to be in additional section, therefore not causing truncation. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: Message parser reports malformed message packet

2013-11-05 Thread Matus UHLAR - fantomas
sizes or disable EDNS for that domain? Could you also, please, share the tcpdump line you used to get that package details? seems their nameservers are working correctly now, with or without TCP (even with EDNS0) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: Message parser reports malformed message packet

2013-11-05 Thread Matus UHLAR - fantomas
, unless your firewall blocks those too... I'm trying to reach the my client's network team and check if their DNS servers are allowed to make outbound connections to port 53. Which seems it is not the case. I'll reply to this thread once I contact the firewall's owner. -- Matus UHLAR - fantomas

Re: Reverse look-up returns root servers?

2013-10-28 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. If Barbie is so popular, why do you have to buy her friends

Re: Refreshing cache in other DNS servers

2013-10-15 Thread Matus UHLAR - fantomas
to sane standard value (e.g. 43200). You may ask for access to win2003 servers to manipulate their caches, or configure your zone as slave on them and send notifies to them, so they notice as soon as possible. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: Refreshing cache in other DNS servers

2013-10-15 Thread Matus UHLAR - fantomas
On 15.10.13 22:53, babu dheen wrote: To: Matus UHLAR - fantomas uh...@fantomas.sk, bind-users@lists.isc.org bind-users@lists.isc.org Hi Matus, you don't need to send me private copies - we are using a mailing list for a purpose... thank you.  If I change the TTL value on the particular zone

Re: NS record TTL versus nameserver's A record TTL

2013-10-08 Thread Matus UHLAR - fantomas
: -Is this addressed by a standard? E.g., the nameserver's A record have the same TTL as NS records pointing at it. It should be the same, when the server is in the domain. I met exactly those issues when NS record had longer ttl then the A record in the same domain. -- Matus UHLAR - fantomas, uh

Re: weird perfmonce BIND version 9.6

2013-10-04 Thread Matus UHLAR - fantomas
includes (I recommend you not goind more than one level of inclusion) were are the view definitions. you said Check their match-* directives, post them here if possible. check all used files and view definitions for match- directives. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: weird perfmonce BIND version 9.6

2013-09-26 Thread Matus UHLAR - fantomas
this issue. you apparently have not configured views properly. only clients that are supposed to get internal private addresses should be in internal view. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: weird perfmonce BIND version 9.6

2013-09-26 Thread Matus UHLAR - fantomas
NOT mention both IPs in any view. hosts from internal view should get internal IP and hosts from external view should get external IP. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: Weird dig behavior when querying ANY

2013-09-10 Thread Matus UHLAR - fantomas
the remaining TTL. If you do it again, you will see TTL has either decreased in the time difference, or the records were fetched again. the discussion a few days ago has revealed that BIND does not recursively fetch records when you send ANY query. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: nxdomain

2013-08-28 Thread Matus UHLAR - fantomas
? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I'm not interested in your website anymore. If you need cookies, bake them yourself

Re: nxdomain not caching for configured reverse lookup

2013-08-20 Thread Matus UHLAR - fantomas
7.7.7.7, which is in the configured zone for DNS 10.212.24.11, i am not able to get the responses cached. what is the TTL of those NXDOMAIN answers? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: nxdomain not caching for configured reverse lookup

2013-08-20 Thread Matus UHLAR - fantomas
, 7.7.in-addr.arpa or 7.in-addr.arpa, depending on what is configured on 10.212.24.11. BTW, are you aware that 7.7.7.7 is used by DoD and 9.9.9.9 by IBM? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: bind not getting out of my LAN?

2013-08-18 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I just got lost in thought. It was unfamiliar territory

Re: Reverse Records on a leash?

2013-08-11 Thread Matus UHLAR - fantomas
On 8/10/13 3:37 AM, Matus UHLAR - fantomas wrote: however, reverse DNS records must not be zero-filled (those won't be taken into account) On 10.08.13 10:26, Eduardo Bonsi wrote: I put zeros just as an example. it can be 111.111.111.111 where 1= (any ipv4 number) or 000.000.000.000. where 0

Re: Reverse Records on a leash?

2013-08-10 Thread Matus UHLAR - fantomas
for it. ... and please, do not tell me that is to keep the spammers out because that so far has not proven to be true. The bad guys have an unlimited number of domains to do their dirt work everyday. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: New warning message...

2013-07-23 Thread Matus UHLAR - fantomas
In article mailman.881.1374508134.20661.bind-us...@lists.isc.org, Matus UHLAR - fantomas uh...@fantomas.sk wrote: No, it does not. If a mail gets delivered to address, which is sending it further (forwarding it), the envelope sender has to be changed, because it's not the original sender who

Re: New warning message...

2013-07-22 Thread Matus UHLAR - fantomas
A point 4. This was discussed here already, and imho this is anti-spf bullshit like all those spf breaks forwarding FUD. The SPF RR is already here and is preferred over TXT that is generik RR type, unlike SPF. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: IPv4 not working reverse on /24 cidr

2013-07-22 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease

Re: Slave not creating/updating zones

2013-07-15 Thread Matus UHLAR - fantomas
https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Reverse Lookups with Forwarders

2013-07-09 Thread Matus UHLAR - fantomas
to zone 110.252.173.in-addr.arpa IN { All the requests for 173.252.110.0-173.252.110.255 is forwarded to 10.10.96.1. Use 110.252.173.in-addr.arpa then. You should be aware that the IP range belongs to facebook, as already noted. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Bind unable to get MX reocrd from Parrent name server

2013-07-05 Thread Matus UHLAR - fantomas
. ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: REFUSED, id: 52980 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Reverse address entries

2013-07-03 Thread Matus UHLAR - fantomas
should get NXDOMAIN answer. in such case there's nothing to wait for any longer. Are you sure that was not a case of unreachable servers? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto

Re: configure syslog prefix

2013-07-03 Thread Matus UHLAR - fantomas
#id2576269 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows 2000: 640 MB ought to be enough for anybody

Re: BIND Service Hung

2013-07-03 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They say when you play that M$ CD backward you can hear satanic messages. That's nothing. If you play

Re: Reverse address entries

2013-07-01 Thread Matus UHLAR - fantomas
, Matus UHLAR - fantomas uh...@fantomas.sk wrote: He apparently meant exactly the same. Also calles FcRDNS - forward confirmed or full circle reverse DNS. On 01.07.13 14:11, Sam Wilson wrote: OK. So what Mr. Swiger refers to is not relevant - it's no reason to add PTR records. Yes

Re: How to suppress ADDITIONAL SECTION per zone

2013-07-01 Thread Matus UHLAR - fantomas
limiting - a patch was discussed here a few days/weeks ago. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. (R)etry, (A)bort, (C)ancer

Re: servfail response message question

2013-06-27 Thread Matus UHLAR - fantomas
load balancers... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95

<    1   2   3   4   5   6   7   8   9   10   >