Re: Digging to the final IP

2014-10-22 Thread Dave Knight
On Oct 22, 2014, at 5:56, Niall O'Reilly niall.orei...@ucd.ie wrote: At Tue, 21 Oct 2014 22:31:28 -0500, Frank Bulk wrote: Dave, Thanks for the input, but what I was looking for was a dig command that returns the IP(s) or a fail. It looks like the host command is the right solution in

Re: Digging to the final IP

2014-10-21 Thread Dave Knight
On Oct 19, 2014, at 1:26, Frank Bulk frnk...@iname.com wrote: Is there a dig option that will list out the final (IPs) or query result?? By default, even with +short, it can list intermediate CNAME(s) and not what IP(s) that CNAME may have. For example, root@nagios:/tmp# dig

Re: monitoring BIND

2011-07-13 Thread Dave Knight
Sorry for contributing another non-answer, just wanted to comment that I have done something very similar once upon a time... The case was a DNS authority service anycast node with: 2 Internet Facing Routers -- 2 Load Balancing Switches -- Big Stack of Servers We had seen degraded performance

Re: RRSIG Expired

2011-04-03 Thread Dave Knight
On 2011-04-03, at 9:48 PM, SM wrote: At 17:23 03-04-2011, Paul Ooi Cong Jen wrote: Yea, this was default via FreeBSD :) Some versions of FreeBSD have commented out directives to slave the root zone, the arpa zone and the in-addr.arpa zone from f.root-servers.net. The root servers no

Re: get a domain's dns records

2011-01-21 Thread Dave Knight
On 2011-01-21, at 8:50 AM, Barry Margolin wrote: In article mailman.1415.1295616325.555.bind-us...@lists.isc.org, Joseph S D Yao j...@tux.org wrote: On Fri, Jan 21, 2011 at 02:19:45PM +0800, p...@mail.nsbeta.info wrote: I'm jsut curious, how does who.is know the dns records in my domain

Re: GSS-TSIG and Active Directory

2010-09-30 Thread Dave Knight
On 2010-09-30, at 11:24 AM, Nicholas F Miller wrote: Does anyone actually have GSS-TSIG working with an Active Directory? I see plenty of posts from people trying to get it to work. I have yet to see anyone who claims to actually have it working. Did MS change something in 2008r2 since

Re: dns-sec and Maintaining Human Sanity

2010-08-08 Thread Dave Knight
On 2010-08-06, at 6:36 PM, Tony Finch wrote: OpenDNSSEC predates BIND's auto-signing functionality, so it has become partly obsolete - but not completely. OpenDNSSEC is far from obsolete, it's in active development [1] and is being used for some important zones [2]. dave [1]

Re: GeoIP and maintaining high availability

2010-07-09 Thread Dave Knight
Hi Tomasz, On 2010-07-09, at 10:26 AM, Tomasz Chmielewski wrote: Hi, I'm about to set up bind with GeoIP patches. What I'm not sure, is how do you guys handle high availability? Suppose I have zones for Americas and Europe, and a destination server in Europe dies - how do you handle

Fwd: GeoIP and maintaining high availability

2010-07-09 Thread Dave Knight
Sending again, this time from an account actually subscribed to the list, doh :) From: Dave Knight dave.kni...@icann.org Date: July 9, 2010 4:39:38 PM EDT To: Tomasz Chmielewski man...@wpkg.org Cc: bind-users@lists.isc.org bind-users@lists.isc.org Subject: Re: GeoIP and maintaining high

Re: call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-21 Thread Dave Knight
On 2009-10-21, at 6:50 PM, JINMEI Tatuya / 神明達哉 wrote: Dear beta testers, At Tue, 20 Oct 2009 20:29:20 +, Evan Hunt e...@isc.org wrote: BIND 9.7.0b1 is now available. [snip] - On some platforms, named and other binaries can now print out a

Re: call for testers (Re: ISC BIND 9.7.0b1 is now available)

2009-10-21 Thread Dave Knight
On 2009-10-21, at 8:19 PM, Dave Knight wrote: x86_64 / Mac OS X 10.6.1 / Darwin dhcp4.sanxion.org 10.0.0 Darwin Kernel Version 10.0.0: Fri Jul 31 22:47:34 PDT 2009; root:xnu-1456.1.25~1/RELEASE_I386 i386 i686-apple-darwin10-gcc-4.2.1 (GCC) 4.2.1 (Apple Inc. build 5646) x86 / Ubuntu 9.04