Re: better performance with 32 bit ! why?

2011-06-28 Thread David Sparro
On 6/28/2011 11:15 AM, iharrathi@orange-ftgroup.com wrote: Hi all, I'm testing the same version of bind 9.4-ESV-R4-P1 on two server, one is a 32 bit (on which i have a redhat 32 bit) and the second a 64 bit server on which i have a redhat 64 bit. on the 32 bit i reach 7 qps but on the 64

Re: bind restart needed to reflect changes to dynamic zone in multiple views

2011-06-24 Thread David Sparro
On 6/24/2011 2:51 PM, Brian J. Murrell wrote: The data really does need to be quite in sync though. I'm not sure a period of less than a second or two is going to be acceptable.:-( Do you have control of the update process. You could potentially send and update to both views (in other words,

Re: forward name resolution OK, but reverse doesn't work ...

2011-06-18 Thread David Sparro
On 6/17/2011 12:44 PM, Thomas Schweikle wrote: !zone "in-addr.arpa" { ! type slave; ! file "/var/cache/named/root/in-addr.arpa.slave"; ! masters { 192.5.5.241; }; ! notify no; !}; You're configuring you server to be authoritative for the reverse DNS zone. It's only going to have the rever

Re: question about thehartford.com domain

2011-06-16 Thread David Sparro
On 6/15/2011 7:41 PM, M. Meadows wrote: The DNS admins at thehartford.com seem to feel that this nameserver mismatch is working as expected. So I'm just wondering if anyone still feels that the nameserver mismatch seen with the digs in earlier parts of this email thread may present a problem to

Re: How to improve bind caching dns server performance

2011-06-10 Thread David Sparro
On 6/10/2011 5:04 AM, kshitij mali wrote: HI All, I am repeated facing SERVFAIL error with respond to dig command . but when i dig to known domian like yahoo,gmail.orkut etc then no problem . i think there is some perfomance issue with mycaching dns server how to check the reson lookup failure an

Re: Bug in bind 9.7.3?

2011-05-26 Thread David Sparro
On 5/26/2011 2:33 PM, Frank Kloeker wrote: Hi, I using bind 9.7.3 as resolver in a slightly larger server farm with some mail servers that use domain key validation. If a try # host -t TXT _adsp._domainkey.federalreserve.gov bind dies with May 26 19:59:02 resolv04 named[8237]: buffer.c:285: R

Re: forward first: iterative or recursive query

2011-05-06 Thread David Sparro
On 5/6/2011 6:40 AM, iharrathi@orange-ftgroup.com wrote: Thanks for the answer but: You say "Don't use forwarding from a recursive server to a non-recursive server" but when my server1 is recursive (and the firewall allow it to contact the outside), and server2 don't

Re: slave timers

2011-04-19 Thread David Sparro
On 4/19/2011 11:42 AM, hugo hugoo wrote: Hello, I have in fact the following problem: The AXFR is not triggered by a “rndc reload”, neither a stop/start of bind9. ènothing is seen in the logs The AXFR is triggered by a “rndc reload zonename”. => logs of the master pr 19 17:32:03 dnscustmast

Re: Reliability and performance on a simple caching BIND9 server for uncached queries

2011-03-14 Thread David Sparro
On 3/11/2011 8:59 PM, Khoury Brazil wrote: Hi, Doing a simple test using nslookup doing uncached external lookups (on ubuntu and one windows client): No delay using nslookup or dig directly from my bind boxes to the external name servers. This indicates to me that the bottle neck doesn't exist

Re: Help with unresolvable domain (subdomain, actually)

2011-03-02 Thread David Sparro
On 3/2/2011 1:20 PM, Kevin Darcy wrote: I'm not saying I agree with this perspective, only that I've dealt with load-balancer vendors enough (Cisco in particular) to understand that this is where they're coming from. Besides, what alternative is there? If the load-balancer returns an address th

Re: Help with unresolvable domain (subdomain, actually)

2011-03-02 Thread David Sparro
On 3/1/2011 5:27 PM, Kevin Darcy wrote: See my other post. This is designed-in behavior for Cisco GSSes, since there is no "service unavailable, try again later" RCODE. - Kevin When the question is "what is the ip address of 'foo'" an answer of "the web server is down" in nonsensical. --

Re: mx selection order

2011-02-23 Thread David Sparro
On 2/23/2011 4:56 AM, Stephane Bortzmeyer wrote: On Tue, Feb 22, 2011 at 04:37:03PM -0500, David Sparro wrote a message of 24 lines which said: it is up to the application how it will use the data. MX records are only used by MTA and, no, it is NOT up to the MTA to decide how to handle

Re: How to allow set Host file dns query priorities in BIND

2011-02-23 Thread David Sparro
On 2/23/2011 12:19 PM, Kevin Darcy wrote: On 2/23/2011 4:57 AM, Eivind Olsen wrote: reason. And if your Internet connection goes down, does it really matter whether you can do lookups, if you can't make the connections anyway? I hear that reasoning a lot, but it's actually a fallacy. Some appli

Re: mx selection order

2011-02-22 Thread David Sparro
On 2/22/2011 7:29 AM, Terry. wrote: Hello, Given I have these MX records: example.com.3600IN MX 10 m1.example.com. example.com.3600IN MX 10 m2.example.com. example.com.3600IN MX 20 m3.example.com. My question is, when m1.exa

Re: multi-master with mysql backend

2011-02-11 Thread David Sparro
On 2/9/2011 7:12 PM, fddi wrote: I could succesfully setup bind with mysql backend and it works using bind-mysql driver. everything works except that nsupdate will no longer work. is this normal ?? requests sent for adding a RR using nsupdate are ignored by named when using mysqldb backend w

Re: host unreachable. -- a bit more info

2011-01-10 Thread David Sparro
On 1/10/2011 2:04 PM, Jay G. Scott wrote: On Mon, Jan 10, 2011 at 12:41:48PM -0600, Jay G. Scott wrote: hi, thanks for the replies. however, i didn't learn much. i'm more of a network newbie than i thought. but what i can say is this: (repeating the problem) i get zillions of these msgs: J

Re: Question on ADDITIONAL SECTION

2010-12-30 Thread David Sparro
On 12/30/2010 6:12 AM, p...@mail.nsbeta.info wrote: $ dig www.cnn.com @202.96.128.166 ; <<>> DiG 9.4.2-P2 <<>> www.cnn.com @202.96.128.166 ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65353 ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, AD

Re: ignoring incorrect nameservers in authority section

2010-12-28 Thread David Sparro
On 12/24/2010 2:51 AM, Sunil Shetye wrote: Here, I can see that the nameserver is giving the right replies to all queries except the NS queries. How can an authoritative server give "wrong" answers? I was hoping that either bind should catch such cases automatically or allow some workaround

Re: Does anyone know where to find the ISC signing keys for source packages?

2010-12-28 Thread David Sparro
On 12/23/2010 4:09 PM, Casey Deccio wrote: On Thu, Dec 23, 2010 at 12:49 PM, Oisin McGuinness wrote: But I can't find any reference to current PGP or other signing keys; does anyone know where to find them on the www.isc.org web site or where to obtain them otherwise? http://www.isc.org/abou