Re: 9.18 BIND not iterated over all authoritative nameservers

2023-10-27 Thread Lyle Giese
tive nameserver and responsible party records are not resolvable. Maybe someone with more knowledge of DNS and the use of .local. domain name can shed some light on this. Lyle Giese On 10/27/23 10:36, Michael Martinell via bind-users wrote: Hello, At this point I am hoping that somebody m

Re: Reverse lookups not working when Internet connection failed.

2022-11-04 Thread Lyle Giese
pires or is not there, a recursive only server will fail to give you the answer you seek. That is very dependent on your internal dns setup and the type of dns server you are querying. Lyle Giese On 11/4/22 11:07, David Carvalho via bind-users wrote: Thanks for the replies. My reverse zone

Re: Stopping ddos

2022-08-04 Thread Lyle Giese
Just my opinion. Don't rate limit tcp.  The RRL feature in Bind only rate limits UDP.  UDP is connection-less and the source address can be forged, generating DDOS traffic to a 3rd party. Proper DNS software will fall back to TCP.  Because TCP is connection based, much harder to forge source

Re: Need Help with BIND9

2021-06-15 Thread Lyle Giese
ns1.keiththewebguy.com. ..." the ns1.keiththewebguy.com. should be the FQDN?  That is the box host name plus the domain correct? Thanks!! On 2021-06-15 07:35, Matus UHLAR - fantomas wrote: On 15.06.21 09:14, Lyle Giese wrote: I think I stumbled upon a problem with the zone records for keiththewebgu

Re: Need Help with BIND9

2021-06-15 Thread Lyle Giese
.keiththewebguy.com not ns1. ). Lyle Giese LCR Computer Services, Inc. On 6/15/21 9:04 AM, techli...@phpcoderusa.com wrote: On 2021-06-15 01:38, Reindl Harald wrote: Am 15.06.21 um 10:31 schrieb Reindl Harald: Am 14.06.21 um 22:37 schrieb techli...@phpcoderusa.com: keiththewebguy.com [1

Re: Bind 9.10 recursion issues

2020-12-04 Thread Lyle Giese
Why are you using forwarders?  These cloudflare servers are not authoritive for cat.com and don't seem to be open resolvers either. Lyle Giese LCR Computer Services, Inc. On 12/4/20 12:48 PM, Wade Blackwell wrote: Good morning from the West Coast,                 It’s been a while

Re: RRL outcome on legitimate traffic...

2020-12-01 Thread Lyle Giese
Probably best to ask Paul Vixie for confirmation. I had implemented RRL when it was still an addon and that was what was documented back then. On 12/1/20 10:15 AM, Karl Pielorz wrote: --On 1 December 2020 at 08:24:50 -0600 Lyle Giese wrote: You need to look at the reply named sends

Re: RRL outcome on legitimate traffic...

2020-12-01 Thread Lyle Giese
not blindly just drop traffic. Lyle Giese LCR Computer Services, Inc. On 12/1/20 4:58 AM, Karl Pielorz wrote: Hi all, So there's been quite a thread - that originally started as "Bind stats - denied queries" - and morphed into a whole discussion on spoofed UDP, logging, R

Re: Bind stats - denied queries?

2020-11-30 Thread Lyle Giese
Be careful 'rejecting' these outright.  These queries are UDP traffic(not TCP) and the source address is easily forged.  RRL is the correct way to limit these. Lyle Giese LCR Computer Services, Inc. On 11/30/20 4:12 AM, Marc Roos wrote: Are newer version of bind still logging

Re: conflicting subdomain delegation

2018-11-13 Thread Lyle Giese
recursive only server(other than host1), I would expect the same behavior as the +trace result. so I think the answer is dependant on how your bind9 resolver is configured. Lyle Giese ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users

Re: [SOLVED] My Exchange server is now able to send email to httpd.apache.org domain after I added SPF TXT record to my DNS server

2018-08-14 Thread Lyle Giese
The reverse lookup for 118.189.211.120 does not match your HELO greeting and does not match the A record for exchange.teo-en-ming.com.  Get your upstream ISP to fix that. Lyle Giese LCR Computer Services, Inc. On 8/13/2018 8:28 PM, Turritopsis Dohrnii Teo En Ming wrote: Good morning from

Re: How to Fix Reverse DNS?

2015-09-22 Thread Lyle Giese
o set the reverse lookup for you. Lyle Giese LCR Computer Services, Inc. On 9/22/2015 2:08 PM, Ron Wingfield wrote: RE: BIND v9.10.2 I have recently converted from a "legacy" DSL service to AT&T's U-verse . . .has been a painful experience. Heretofore, the following

Re: Installing bind is not very clear for me

2015-09-03 Thread Lyle Giese
ical Internet facing applications. Lyle Giese ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DIG Info Request

2015-02-03 Thread Lyle Giese
gt;. . 518400 IN NS G.ROOT-SERVERS.NET <http://G.ROOT-SERVERS.NET>. . 518400 IN NS H.ROOT-SERVERS.NET <http://H.ROOT-SERVERS.NET>. On Tue, Feb 3, 2015 at 2:02 PM, Lyle Giese mailto:l...@lcrcomputer.net>> wrote: If

Re: DIG Info Request

2015-02-03 Thread Lyle Giese
If I remember right, DIG does not know the root servers and asks the local host to retrieve that information and a server at 172.27.254.11(which is RFC 1918 address space) gave you that answer. Is your machine/shop setup with private root servers? Lyle On 2/3/2015 12:50 PM, Linux Addict wrote

Re: Why the heck my NS are not working

2014-07-20 Thread Lyle Giese
post the domain name so we can look from out here. Is the name server on a public ip address and your firewall allowing udp & tcp port 53 access to talk to named? Lyle On 07/20/14 02:21, Blason R wrote: Hi Guys, Though it may not relevant with BIND but I need help with NS servers which are

Re: Zone transfer doesn't work when I set allow-update statement

2014-04-25 Thread Lyle Giese
How are you checking for updated info from the master? I recommend dig @ test.company.com.ar Lyle Giese LCR Computer Services, Inc. On 04/25/14 15:29, Jeronimo L. Cabral wrote: Thanks a lot, but using the allow-update statement, I use nsupdate in order to add a new record: # nsupdate

Re: Zone transfer doesn't work when I set allow-update statement

2014-04-25 Thread Lyle Giese
Allow-update makes the zone a dynamic update zone. You have to stop hand editing the zone file. Use nsupdate to make changes to the zone. Lyle Giese LCR Computer Services, Inc. On 04/25/14 15:03, Jeronimo L. Cabral wrote: Dear, I'm using Bind 9.8.4 with a master / slave scenario.

Re: d root server

2013-08-20 Thread Lyle Giese
0 b.root-servers.net. 360 IN A 192.228.79.201 a.root-servers.net. 360 IN A 198.41.0.4 a.root-servers.net. 360 IN 2001:503:ba3e::2:30 Regards, Rohan On Tue, 20 Aug 2013 15:59:41 -0500 Lyle Giese wrote: Your bind code is old and has the

Re: d root server

2013-08-20 Thread Lyle Giese
Your bind code is old and has the old info in it. D root changed it's ip address. Bind has a built-in hints file, in case you don't setup one and it probably has the old ip address for the D root. http://blog.icann.org/2012/12/d-root/ Lyle Giese LCR Computer Services, Inc. On 0

Re: NS geo-distribution

2013-05-01 Thread Lyle Giese
zone. Email is handled more politely in that respect especially. Plus I remember that the Internet is a best effort network. There is no guarantied connectivity on the Internet. Lyle Giese LCR Computer Services, Inc. P.S. Maybe you would like to use that box I have for a tertiary serve

Re: [mailop] broken ISP in china

2013-02-18 Thread Lyle Giese
On 02/18/13 19:02, Tony Finch wrote: Lyle Giese wrote: Recently I moved this domain(lcrcomputer.net) to a registrar that suports DNSSEC and inserted the DS record for this domain. Was it signed before this point? I am wondering if this is a DNS response size problem - was the cause the

broken ISP in china

2013-02-18 Thread Lyle Giese
s lookaside for a long time and published the necessary DNSSEC records and had no problem. This started right after I moved the domain registration and published a DS record for the domain. I had already been publishing DNSSEC records and they checked out against ISC's lookaside stuff for quit

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-11 Thread Lyle Giese
On 01/11/13 03:05, Daniele wrote: Port 53 is open, I can also telnet it from another box in the same network. Now I think the problem can be on the packets size, because I'm trying every solution but nothing works. 2013/1/9 Lyle Giese mailto:l...@lcrcomputer.net>> On 01/

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-09 Thread Lyle Giese
ueries that a recursive name server does. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: First usage of BIND9

2012-11-24 Thread Lyle Giese
d even running? See the ARM for a sample for a caching-only name server, which is what you are asking for. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-u

Re: query (cache) 'domain.com/AAAA/IN' denied

2012-10-10 Thread Lyle Giese
NAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;domain.com.INA ;; Query t i actually have another machine that has bind 9.4.2 and it works as desired without all this options. both machines a meant to be authoritative for domain.com... anythin

Re: query (cache) 'domain.com/AAAA/IN' denied

2012-10-10 Thread Lyle Giese
e recursion and you have that turned off. If you don't want a publicly abused dns server, turn recursion on and restrict recursion to your LAN addresses(Allow-recursion). Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/ma

Re: Root hints updates

2012-09-06 Thread Lyle Giese
http://www.internic.net/domain/named.root indicates the named.root file should be available at ftp.internic.net or rs.internic.net. It's only at ftp.internic.net. This page has a pointer to root hints file(via FTP) that does not work either. The http version shows the above mistake.

Re: Corrupt zone transfer

2012-06-29 Thread Lyle Giese
bly in raw format. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

No valid trust anchors for '.' - solved

2012-06-10 Thread Lyle Giese
discovered the date/time issue, I did not go back to the logs and look at the first boot error messages and focused on the last restart of named set of messages. Lyle Giese LCR Computer Services, Inc. Related error messages: Jun 9 22:29:21 ns1a named[6252]: zone 78.0.10.in-addr.arpa/IN/chase:

Re: forwarders

2012-05-28 Thread Lyle Giese
ord also has a TTL of 300 seconds for msrv.cairosource.com. This low TTL makes it look like you have a dynamic ip address. Most RBL's require a minimium of 12 hrs and recommend 24 hour TTL on these two records. Lyle Giese LCR Computer Services, Inc.

Re: Host command timing out sporadically

2012-05-02 Thread Lyle Giese
the name server in my "forwarders" section of the named options. On May 2, 2012, at 3:48 PM, Lyle Giese wrote: Using dig +trace, dig is trying to accomplish the recursion that named would do for you. This tells us your local copy of named is answering requests as that is where

Re: Host command timing out sporadically

2012-05-02 Thread Lyle Giese
point, dig gives up trying. But the use of dig +trace shows much more diagnostic information which points us to the real issue you have. Lyle Giese LCR Computer Services, Inc. On 05/02/12 16:36, Paul Marais wrote: Thanks Lyle, You're right - I started using the host command because i

Re: Host command timing out sporadically

2012-05-02 Thread Lyle Giese
e mx example.com or dig +trace mail.example.com And see if you can catch the failure and then we can do more for you. The other side of this may be that your Internet connection is overloaded and you are dropping packets or it's taking too long for the query to get out and get the

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Lyle Giese
verride for "www.google.com". ___ Or did they really mean, create a hosts file on the local machine that contains... Or in your proxy server redirect www.google.com to nosslsearch.google.com

Re: Recursive queries fail after bind has been running for a few hours

2012-03-12 Thread Lyle Giese
s there 20 seconds of preceeding logs missing when the query started? Lyle Giese LCR Computer Services, Inc. On 03/12/12 15:05, Mr X wrote: Hey there I'm having a bizarre issue with 9.7.3-P3-RedHat-9.7.3-8.P3.el6_2.2 - recursive queries stop functioning after bind has been running for a fe

Re: Master/slave configuration

2012-03-07 Thread Lyle Giese
On linux boxes, adding options rotate to the /etc/resolv.conf helps. Lyle Giese LCR Computer Services, Inc. On 03/07/12 06:54, Bostjan Skufca wrote: Problem is, most of client resolvers (not resolving nameservers, but resolvers on workstations etc) query first specified nameserver first

Re: CVE-2012-1033 (Ghost domain names) mitigation

2012-02-09 Thread Lyle Giese
rified via DNSSEC), why would my server recheck the DNSSEC records until the TTL has elapsed? My thinking(and I could be quite wrong here) is that my server will cache a good verified answer and DNSSEC does not seem to help here. Please let me know where I am wrong here if I am. Lyle Gi

Re: Name resolution issue on one domain

2012-01-12 Thread Lyle Giese
3 ]$ nslookup > fpdns.googlecode.com Server: 127.0.0.1 Address:127.0.0.1#53 ** server can't find fpdns.googlecode.com: NXDOMAIN > exit --- On *Thu, 12/1/12, Lyle Giese //* wrote: From: Lyle Giese Subject: Re: Name resolution issue on one domain To:

Re: Name resolution issue on one domain

2012-01-12 Thread Lyle Giese
enough to time out the query. Lyle Giese LCR Computer Services, Inc. On 01/12/12 08:11, babu dheen wrote: Hi, I can see only below line in the logs which is no more useful. Actully i would like to find out where exactly DNS query is blocked during query process /*client 127.0.

Re: About root zones

2012-01-03 Thread Lyle Giese
to do lookups as needed. You are asking for a specific use case and ISC is not into generating special builds for special or specific use cases unless you contract with them to build and maintain your special build of BIND. Lyle Giese LCR Computer Services, Inc. __

Re: Subdomain Issue

2011-11-10 Thread Lyle Giese
On 11/10/11 12:24, trm asn wrote: On Thu, Nov 10, 2011 at 8:28 PM, Lyle Giese mailto:l...@lcrcomputer.net>> wrote: On 11/09/11 15:59, trm asn wrote: On Wed, Nov 9, 2011 at 3:15 PM, Matus UHLAR - fantomas mailto:uh...@fantomas.sk> <mailto:uh...

Re: Subdomain Issue

2011-11-10 Thread Lyle Giese
INCNAME example.com aINA203.39.45.20 bINA203.39.45.21 /\ *Tarak* * Where are your A records for your name servers, ns1.example.com, ns2,example.com and ns4.example.com? And please answer the question above, what does the named's log say when starti

Re: several master ip's for a slave zone

2011-11-05 Thread Lyle Giese
slaves. The slaves actually ask for the SOA record from each Master when refreshing. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users

Re: DNSSEC and forward zones

2011-11-01 Thread Lyle Giese
ecords to mess with at all. Again, this has a disadvantage if they ever decide to make .internal a real internet domain name and some people frown upon this practice. Be sure you know what can go wrong. Lyle Giese LCR Computer Services, Inc. ___

Re: DNSSEC and forward zones

2011-11-01 Thread Lyle Giese
On 11/1/2011 3:00 PM, Phil Mayers wrote: On 11/01/2011 06:24 PM, Lyle Giese wrote: A work-around (and it has some side effects and could be undesirable, just be aware of the side effects of doing this) is to declare .internal as a master zone in your DNS servers and then delegate

Re: DNSSEC and forward zones

2011-11-01 Thread Lyle Giese
rked for me in a similar situation. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Single machine VPS

2011-10-17 Thread Lyle Giese
On 10/17/2011 5:59 AM, Nico Aragón wrote: Hello, I'm new to Bind. My previous registrar (or was it the hosting provider?) was so kind to manage DNS for me. But now I'm required to configure a DNS server in the very same VPS that hosts the HTTP and mail server. I've managed to set it running and

Re: Delegation check failed

2011-09-20 Thread Lyle Giese
r name servers. Then the .com servers know the ip address of the dns servers for waters.com. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

Re: Problems with nic.it

2011-09-20 Thread Lyle Giese
https://lists.isc.org/mailman/listinfo/bind-users Just a quick question, have you registered your name servers with your domain registrar? nic.it may be looking for the necessary glue records. Lyle Giese LCR Computer Services, Inc. ___ Please visit

Re: Bug in Bind 9.8 or am I doing something wrong?

2011-09-06 Thread Lyle Giese
On 9/6/2011 9:13 AM, Tony Finch wrote: Lyle Giese wrote: zone "chaseprod.local"{ type forward; forwarders {10.0.100.205;};}; This seemed to work until I added some stuff for DNSSEC to my named.conf. In order to forward a zone in the presence of DNSSEC validation

Bug in Bind 9.8 or am I doing something wrong?

2011-09-06 Thread Lyle Giese
ery time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Tue Sep 6 08:42:47 2011 ;; MSG SIZE rcvd: 351 Is this a bug or am I doing something wrong? Thanks, Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/

Re: Seemingly random ServFail issues on a caching server

2011-08-31 Thread Lyle Giese
On 8/31/2011 8:40 AM, Florian CROUZAT wrote: Florian CROUZAT wrote on 2011-08-25: Hi list, On a few domains (we'll consider only one domain for this example) I encounter sometimes (seemingly randoms) ServFails while resolving domain names. A client (192.168.147.2) asks my caching server (192.1

Re: DNS Caching Issue

2011-07-26 Thread Lyle Giese
gards, --Sathyan Simple ask both nameservers for the domain sin.gpi-g.com and you get different answers. They have serious DNS problems. Lyle Giese LCR Computer Services, Inc. dig @192.5.6.30 sin.gpi-g.com ; <<>> DiG 9.7.3 <<>> @192.5.6.30 sin.gpi-g.com ; (1 server f

Re: Bind time up.

2011-07-23 Thread Lyle Giese
On 07/23/11 11:13, Vbvbrj wrote: On 23.07.2011 19:00, Lyle Giese wrote: On 07/23/11 09:33, Vbvbrj wrote: On 23.07.2011 17:24, Lyle Giese wrote: On 07/23/11 03:22, Vbvbrj wrote: Hello. I have a server at home, that runs Bind 9 dns and routes internal traffic to internet. Its working fine

Re: Bind time up.

2011-07-23 Thread Lyle Giese
On 07/23/11 09:33, Vbvbrj wrote: On 23.07.2011 17:24, Lyle Giese wrote: On 07/23/11 03:22, Vbvbrj wrote: Hello. I have a server at home, that runs Bind 9 dns and routes internal traffic to internet. Its working fine. When I'm out of home, I disconnect my home switch. In bind log appear

Re: about the dig

2011-07-19 Thread Lyle Giese
D 9 has the built-in root list. BIND is the name of a collection of DNS related software and consists of many pieces, which named and dig are but two of them. To the best of my knowledge, only named has a root list built-in, which can be overwritten by the proper use of config directives i

Re: questions on the dig info

2011-07-08 Thread Lyle Giese
rver finds www.qq.com. Second, why ns-tel1.qq.com (which is the authority nameserver for the zone of www.qq.com) returns nothing for this zone's NS query? Misconfiguration of ns-tel1.qq.com or it's not allowed to give you that answer. Hard to tell from here. The view from here do

Re: DDNS propagation between views

2011-07-08 Thread Lyle Giese
On 07/08/11 19:45, Joseph L. Casale wrote: You can have views and separate zone files. You need to plan and it helps to read the FAQs at ISC about this. http://www.isc.org/faq/item/191 Didn't even think about it that way, ok. http://www.isc.org/faq/item/182 How does one actually do away w

Re: DDNS propagation between views

2011-07-08 Thread Lyle Giese
d separate zone files. You need to plan and it helps to read the FAQs at ISC about this. http://www.isc.org/faq/item/191 http://www.isc.org/faq/item/182 Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bin

Re: a death loop with DNS query

2011-07-06 Thread Lyle Giese
.com and ns2.dnsv5.com, you get four A records returned each. However at least from here and it appears from where you are doing the querys, these name servers are not responding. So Dig is just trying all A records returned. Lyle Giese LCR Computer Services, Inc

Re: Problem with name resolving

2011-07-02 Thread Lyle Giese
On 07/02/11 04:37, Markus Feldmann wrote: Am 01.07.2011 22:43, schrieb Lyle Giese: On 07/01/11 14:13, Markus Feldmann wrote: Am 01.07.2011 18:35, schrieb Lyle Giese: You are right in that you only need one host at dyndns.org to update your ip address, but you want to have two different

Re: Problem with name resolving

2011-07-02 Thread Lyle Giese
On 07/02/11 04:48, Markus Feldmann wrote: Am 01.07.2011 22:43, schrieb Lyle Giese: I don't know dyndns.com services that well. I don't know what they support or do not support directly. I added two Hosts at dyndns.org "test-feldland.dyndns.org" and "feldland.dyndns

Re: Problem with name resolving

2011-07-01 Thread Lyle Giese
On 07/01/11 14:13, Markus Feldmann wrote: Am 01.07.2011 18:35, schrieb Lyle Giese: You are right in that you only need one host at dyndns.org to update your ip address, but you want to have two different websites. The proper way to do that is with CNAME entries pointing to the host you are

Re: Problem with name resolving

2011-07-01 Thread Lyle Giese
On 07/01/11 08:50, Markus Feldmann wrote: Am 01.07.2011 14:51, schrieb Lyle Giese: Markus, To be sure, you know that nslookup and dig do NOT use the search parameter in /etc/resolv.conf. So when you do an nslookup or dig query, you have to use the fully qualified domain name(FQDN). PING uses

Re: about the reference

2011-07-01 Thread Lyle Giese
tion, comes from those glue records. In your scenerio, the results will be unpredicatable and random. Sometimes it will work and sometimes it won't work. It's important that the glue records be correct. Lyle Giese LCR Computer Services, Inc. __

Re: Problem with name resolving

2011-07-01 Thread Lyle Giese
mportant for troubleshooting this issue. It would appear that you setup the dyndns client on your debian box to update feldland.dyndns.org. But how and where do you update the other two? www.feldland.dyndns.org and test.feldland.dyndns.org Or did you forget to create those at dyndns.org? Lyle Giese

Re: bind restart needed to reflect changes to dynamic zone in multiple views

2011-06-24 Thread Lyle Giese
On 06/24/11 09:21, Brian J. Murrell wrote: On 11-06-24 09:57 AM, Lyle Giese wrote: It's expected behavior in a way. Given your explanation, indeed. :-) You are probably making this change in the internal view and the internal named process knows about the change and reloads the zone.

Re: bind restart needed to reflect changes to dynamic zone in multiple views

2011-06-24 Thread Lyle Giese
I, I have an internal rbl that I use here. I store the zone data in a postgres sql database and do the updates to it there. The two hosts that serve the data run rbldnsd. I have written perl scripts to periodicly pull a copy of the database and parse that into text files compa

Re: How to Setup a Name Servers visible on Internet?

2011-06-21 Thread Lyle Giese
ers@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users Try removing the wild card entry in the metropolitanbuntu.co.za and see if that clears this error. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/l

Re: How to Setup a Name Servers visible on Internet?

2011-06-20 Thread Lyle Giese
On 06/20/11 12:31, Metropolitan College wrote: Maybe I'm still mix up somethings because after change the settings, the *grep named /etc/log/syslog* still showing errors: Jun 20 19:21:58 ns1 named[3178]: managed-keys-zone ./IN/internal: loading from master file 3bed2cb3a3acf7b6a8ef408420c

Re: How to Setup a Name Servers visible on Internet?

2011-06-20 Thread Lyle Giese
On 06/20/11 10:01, Metropolitan College wrote: Good Afternoon, Please I used the Views, and still have the same errors: /var/cache/bind/194.134.41.in-addr.arpa:2: ignoring out-of-zone data (194.134.41.in-addr.arpa) /var/cache/bind/194.134.41.in-addr.arpa:9: ignoring out-of-zone data (90.194.1

Re: Restoring BIND DNS configuration from TAR command

2011-06-19 Thread Lyle Giese
The authors of tar were partial to info over man. Try: info tar There is alot more information in the info pages than man pages for tar. Plus the original poster needs to learn how to use the command line a lot better. Lyle Giese LCR Computer Services, Inc. __

Re: nameserver registration

2011-06-18 Thread Lyle Giese
, whoever owns example.com needs to create the glue records by registering ns1 and ns2.example.com as name servers. And if the owner of example.net does not make sure the name servers they want to use are not registered, then they should not be wondering why others will have trouble resolving exa

Re: nameserver registration

2011-06-18 Thread Lyle Giese
istrars to make sure proper glue records are maintained for any/all name servers used with a domain registered with them. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from t

Re: How to Setup a Name Servers visible on Internet?

2011-06-17 Thread Lyle Giese
he error "server not found". I think in this case your wildcard is adding an additional layer of confusion. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: forward name resolution OK, but reverse doesn't work ...

2011-06-17 Thread Lyle Giese
dns servers to get to the right answer. I noticed that you have three zones defined '.' 'arpa' and 'in.addr.arpa' showing 192.5.5.241 (f-root.servers.net) as the master. Are you getting zone transfers from there? I questi

Re: I can't resolve one domain: nhs.uk

2011-06-17 Thread Lyle Giese
on what I see, it would appear that you may be in China. (ns2.fengnet.com and ns1.zjinfo.gov.cn). If you are in fact doing this query from China, all bets are off for a successful query. Lyle Giese LCR Computer Services, Inc. ___ Please visit https

Re: Problem resolving CNAME in BIND 9.8.0 and 9.8.0-P2

2011-06-10 Thread Lyle Giese
ts.isc.org/mailman/listinfo/bind-users From here, I can not resolve vm-nldap-nl.hb.se with dig 9.7.3 using the +trace option. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How to improve bind caching dns server performance

2011-06-10 Thread Lyle Giese
On 06/10/11 07:53, David Sparro wrote: On 6/10/2011 5:04 AM, kshitij mali wrote: HI All, I am repeated facing SERVFAIL error with respond to dig command . but when i dig to known domian like yahoo,gmail.orkut etc then no problem . i think there is some perfomance issue with mycaching dns server

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread Lyle Giese
server on this machine. Do you have UDP and TCP ports 53 open to this server? You need both open. Lyle Giese LCR Computer Services, Inc. On 06/03/11 02:04, kshitij mali wrote: Hello ALL Please help me toubleshoot this bind ISSUE I am facing intermetent problem with some domains

Re: IPv6 prefix length error

2011-04-28 Thread Lyle Giese
the host OS. You have not specified the prefix length(compares to /24 for IPv4 cidr notation) in your network configuration for your IPv6 addresses. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https

Re: notify-source-v6 and transfer-source-v6 for BIND 9.8

2011-03-28 Thread Lyle Giese
ND 9.8.0 Drop the curly brackets. notify-source-v6 2001:470:1f05:1ae0::1; transfer-source-v6 2001:470:1f05:1ae0::1; Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: [OT] does deliveragent must have a PTR RR

2011-01-31 Thread Lyle Giese
s as we fight SPAM. The best source for the Best Practices for this is at http://postmaster.aol.com Wonder through ALL of the pages that this area at AOL has to offer or you will miss some important points, like that 12 hrs is considered the min TTL for A and PTR records for mail servers. Less th

Re: help with rndc fail

2011-01-15 Thread Lyle Giese
>> secret "SUpgZRkpZVeteRiTIxQw6w=="; >>> }; >>> controls { >>> inet 127.0.0.1 port 953 >>> allow { 127.0.0.1; } keys { "rndc-key"; }; >>> }; >>> # rndc key end >>> # c

Re: nsupdate to all servers

2011-01-14 Thread Lyle Giese
ut so is your setup. Just move forward in that direction slowly and carefully and IMHO, you will end up with a stable and well running system without any hacks to trip over later. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-use

Re: host unreachable. -- a bit more info

2011-01-10 Thread Lyle Giese
roperly in the firewalls between the two sites. BTW, zone transfers are done using TCP because of their size. Small queries try to use UDP first. This is starting to sound more like the master is not allowing your site to get a zone transfer. That is an ACL issue for the master site. Lyle Giese LC

Re: host unreachable. -- a bit more info

2011-01-10 Thread Lyle Giese
rdinary dns lookup. > > j. > > Jay Please do the following two queries from the secondary server and show us the results: dig @146.6.211.1 +tcp arlut.utexas.edu dig @146.6.211.1 -tcp arlut.utexas.edu Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Dynamic zone...

2010-12-31 Thread Lyle Giese
ith a cname in my zone: remote.abc.com 3600 in cname remote1.homedns.org And use a dynamic dns client on the laptop. Then you don't even care what OS is on the laptop, just use the proper client for the OS on it. Lyle Giese LCR Computer Ser

Re: to route specific dns query to specific dns server

2010-12-29 Thread Lyle Giese
uggest me, can I not permit Internet queries for ''mymsdomain.local' ? 3- Can you show me sample example of forwarding configure file for specific domain, please ? - Original Message - *From:* Lyle Giese <mailto:l...@lcrcomputer.net> *To:* Riccardo Caste

Re: to route specific dns query to specific dns server

2010-12-29 Thread Lyle Giese
rver, so noone outside your internal network will know about the microsoft domain. The book has examples plus syntax and examples that will cover the rest of your questions. Lyle Giese LCR Computer Services, Inc. Riccardo Castellani wrote: >Hopefully the microsoft domain is a name that is no

Re: bind 9.7.2-P3 does not resolve www.microsoft.com

2010-12-28 Thread Lyle Giese
ael > >From the Chicago area, I get 'Truncated, retrying in TCP mode' and then a connection timeout when doing: dig any microsoft.com @ns[12345].msft.net This however works: dig any www.microsoft.com @ns[12345].msft.net But it returns a cname entry to toggle.www.ms.ada

Re: Bind not returning A record

2010-12-22 Thread Lyle Giese
roper answer. There is no A record for www.kwsp.gov.my. It's been setup as a CNAME to www.yu.kwsp.gov.my and you have received that answer. As far as those errors go, those are probably errors in their setup. Lyle Giese LCR Computer Services, Inc. __

Re: about the zone file management

2010-11-29 Thread Lyle Giese
Or nsupdate Lyle Giese LCR Computer Services, Inc. philippe.simo...@swisscom.com wrote: > Hi > > if i good understand your question maybe the answer is : > rndc freeze / thaw > > Philippe > > > >> -Original Message- >> From: bind-

Re: How does Yahoo/Google find unknown domains?

2010-11-09 Thread Lyle Giese
, > Verizon, DTag and Orange). Maximal I can have 64 x 10 GE with my > Transmode TS System but then I can install my own BPOP. > > Thanks, Greetings and nice Day/Evening > Michelle Konzack > > Despite how I feel about Yahoo's SLURP engine, it still honors rob

Re: How does Yahoo/Google find unknown domains?

2010-11-07 Thread Lyle Giese
owledge or access in this area. Yahoo's Slurp is a misbehaved robot(IMHO). But it does honor robots.txt. I also put in an index.html that redirects accidential visitors to my commerical business homepage. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

dnsexperiment.net

2010-10-23 Thread Lyle Giese
Liquid Web. Lyle Giese LCR Computer Services, Inc. Oct 22 16:32:42 linux2 named[20883]: client 69.167.186.59#45185: view external: query (cache) 'ofw4blrqy4.cache.lab.dnsexperiment.net/A/IN' denied Oct 22 16:32:43 linux2 named[20883]: client 69.167.186.59#35522: view ext

Re: DNS Propagation

2010-10-14 Thread Lyle Giese
3 > Oct 14 15:31:08 ns2 named[503]: error (unexpected RCODE SERVFAIL) > resolving '21.76.60.212.in-addr.arpa/PTR/IN': 212.60.66.245#53 > > Can you help me to fix this issues? > > João K. > Google is your friend! Please use it. You have mistakes of some sort in your named.c

Re: DNS Propagation

2010-10-14 Thread Lyle Giese
tions, scroll down and under More Domain Options, click on Manage Name Servers. This is where you manage the glue records for your name servers. Lyle Giese LCR Computer Services, Inc. João Alberto Kuchnier wrote: > Lyle, > > Domain registrar like Network Solutions? My domain account is se

  1   2   >