Re: How should I configure internal and external DNS servers

2023-11-04 Thread Marco M.
Am 04.11.2023 um 19:41:44 Uhr schrieb Nick Howitt via bind-users: > Thanks for the reply. Interesting. > Option A - It works but I would like to stop maintaining two > different servers with the same data. > Option B - I have no chance of getting the company to agree to IPv6. Then you are in a

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 20:12:59 Uhr schrieb Nick Howitt via bind-users: > I have those lines, but if I remove them, then presumably I cannot > have internal overrides anywhere, like a hosts file would or like > dnsmasq would? BIND doesn't care about /etc/hosts. If you make it authoritative for a zone,

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 19:54:32 Uhr schrieb Nick Howitt: > How do you mean remove the zone information? In your /etc/bind are configuration files. Look for named.conf* and find those that include zones: zone "f.8.1.1.0.7.1.0.1.0.a.2.ip6.arpa" { type master; file

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 19:18:49 Uhr schrieb Nick Howitt via bind-users: > Can the bind-internal not be made to caching only and not > authoritative? If so, how? Of course it can, simply remove the zone configuration, but it will then cache the records from the authoritative server (your

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 19:15:45 Uhr schrieb Nick Howitt via bind-users: > You are preaching to the converted, but we have a huge mix of SLES > 11, Ubuntu 16, 18, 20 and 22 machines + Windows Server 2016. Getting > them all current is a long term project and it has to go through all > sorts of customer

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 17:58:51 Uhr schrieb Nick Howitt via bind-users: > On 03/11/2023 17:54, Marco M. wrote: > > Am 03.11.2023 um 17:48:32 Uhr schrieb Nick Howitt via bind-users: > > > >> My problem is the use of external IP's duplicated between the > >> internal

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 17:48:32 Uhr schrieb Nick Howitt via bind-users: > My problem is the use of external IP's duplicated between the > internal and external masters for some IPs/FQDNs which I want to get > rid of. Implement IPv6 and get rid of the old IPv4 technology for internal communication. It

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Marco M.
Am 03.11.2023 um 15:51:32 Uhr schrieb Nick Howitt via bind-users: > As this site is externally accessible as well, we also have to put an > identical entry in bind-external so we end up having many identical > entries in bind-internal and bind-external. It seems they people who set that up

Re: Help about DNS documentation

2023-11-03 Thread Marco M.
Am 03.11.2023 um 15:20:50 Uhr schrieb Amaury Van Pevenaeyge: > Hello everyone, > > I'm currently a final year Master's student at the Free University of > Brussels. As part of my Master's thesis, I have to implement a DNS > amplification scenario within a Cyber Range. However, before > achieving

Re: DNS NXDOMAIN flood

2023-11-02 Thread Marco M.
Am 02.11.2023 um 12:02:00 Uhr schrieb Mosharaf Hossain: > We are receiving the traffic form random IP addresses to DNS servers. Even when those IP addresses change, can you verify in any way that those are not spoofed, so the traffic originates rom that networks? -- Visit

Re: 9.18 BIND not resolving .gov.bd site

2023-10-30 Thread Marco M.
Am 30.10.2023 um 12:25:32 Uhr schrieb Mosharaf Hossain: > mofa.gov.bd.86400 IN NS ns1.bcc.gov.bd. > mofa.gov.bd.86400 IN NS ns2.bcc.gov.bd. > couldn't get address for 'ns1.bcc.gov.bd': not found > couldn't get address for 'ns2.bcc.gov.bd': not found