RE: bad zone not loaded

2015-02-04 Thread hugo hugoo
Many thanks for your help. I will focus now on my provisionning system. Date: Wed, 4 Feb 2015 08:42:40 -0500 From: a...@clegg.com To: bind-users@lists.isc.org Subject: Re: bad zone not loaded -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2/3/15 8:43 AM, hugo hugoo wrote

bad zone not loaded

2015-02-03 Thread hugo hugoo
Hello, Can anybody help me? I am using bind 9.8.2 Sometime my provisionning system provision a bad record ina zone. Example A record with 1.2.3.4.5 value (just an example). My provisioning system do not detect all bad situations and therefore I can have a zone with only a bad record.

dig and IPV6 server

2013-08-26 Thread hugo hugoo
Dear all, I try to used dig on my windows PC using a server in IPV6. (local loppback from the BBOX I use) It do not work. Any help possible? C:\dignslookup www.google.be Server: UnKnown Address: fe80::a6b1:e9ff:fe68:c8== server I will use with DIG. Non-authoritative answer: Name:

RE: any requests

2013-06-03 Thread hugo hugoo
the records? Hugo, Date: Sun, 2 Jun 2013 22:13:33 + From: v...@rhyolite.com To: bind-users@lists.isc.org Subject: Re: any requests From: Matus UHLAR - fantomas uh...@fantomas.sk On 02.06.13 20:28, hugo hugoo wrote: I plan to block these kind of requests on the dns cache servers

any requests

2013-06-02 Thread hugo hugoo
All, Can anyone explain me the purpose of ANY requests sent to cache dns servers? I plan to block these kind of requests on the dns cache servers in order to avoid any amplification attack. But I was wondering if complaints can come if I do such limitation. Thanks in advance for your help.

signature expiration

2013-04-11 Thread hugo hugoo
Hello, Can anyone tell me why signatures in dnssec mut be renewed every 30 days?What are the modifications made on a zone with a resign? Thanks in advance for the clarifications. Hugo, ___ Please visit

spf ent txt records.

2013-03-13 Thread hugo hugoo
Dear all, I received the following question and I am not able to aswer as spf records are still mysterious to me. We are using BIND 9.7. Thanks in advance for your answers, Hugo, Does our DNS-server support SPF-type records? Or do we put SPF-info in a TXT-record? Ref. : Early

Wild card for IPV6 reverse configuration

2012-06-12 Thread hugo hugoo
Dear all, I have tried to configure a zone containing a range of IPV6 PTR records. My target was to see how it is possible to configure such a zone to always return the same answer for all the IPV6 IP’s in the range. And if possible to return specifi names for specific IP’s. Example of a

TTL for name servers

2012-06-05 Thread hugo hugoo
Dear all, Can anyone clarify to me the use of the TTL for a NS record? Let’s take the example of a *.be domain. A TTL value is present on both locations. 1) In a dns.be server (for example x.dns.be): in my example here below, value is 86400 2) In the name server itself: in my

records via GENERATE

2012-05-14 Thread hugo hugoo
Dear all, Is there a difference between the configuration of a set of A records using: 1) GENERATE command like: $GENERATE 0-255 $-1.2.3 A3.2.1.$ 2) Defining all the records one by one. - difference in the amount of memory used? - difference in the speed to retrive

[no subject]

2012-05-07 Thread hugo hugoo
Dear all, I have the following situation in my zone migration for one server (A) to another server (B) The zone is called toto.be and contains the following record: www.toto.be 86400 IN CNAME www.titi.be == the zone titi.be is in the same server (A) but is not transferred to the server

RE:

2012-03-19 Thread hugo hugoo
/12 8:20 AM, hugo hugoo hugo...@hotmail.com wrote: == do I have to create in zone toto.be the following NS record: titi.toto.be. TTL IN NS ns1.xxx.be I have found cases where this situation is present and other when it is not present...and both cases seems to work. What

RE: reverse dns for IPV6 ranges

2012-03-19 Thread hugo hugoo
CC: bind-users@lists.isc.org Subject: RE: reverse dns for IPV6 ranges On Mon, 12 Mar 2012, hugo hugoo wrote: Has anyone else experience with reverse IPV6 configuration with Bind? We do static PTR records in the ip6.arpa zones like we do in the in-addr.arpa zones, to create address-name

zone transfer with DIG: SOA duplicate

2012-03-19 Thread hugo hugoo
Dear all, I have this strange behaviour when I do a zone transfer with the following commande: dig @name_server zone_name AXFR == I received 2 SOA records (duplicates). One SOA record is at the end of the received information. Is this normal? Thanks for any feedback, Hugo,

RE: zone transfer with DIG: SOA duplicate

2012-03-19 Thread hugo hugoo
@lists.isc.org Subject: Re: zone transfer with DIG: SOA duplicate On 03/19/12 10:33, hugo hugoo wrote: Dear all, I have this strange behaviour when I do a zone transfer with the following commande: dig @name_server zone_name AXFR == I received 2 SOA records (duplicates). One

RE:

2012-03-19 Thread hugo hugoo
Subject: Re: On 3/19/2012 10:08 AM, hugo hugoo wrote: Hello, I have correctly understood the need to have the NS of a subdomain in the parent domain to avoid any malfunction with a future migratio to DNSSEC. But can anybody give me a clear method to detect such missconfiguration

[no subject]

2012-03-13 Thread hugo hugoo
Dear all, I have a problem in the understanding of the creation of a subzone. Here the situation; let's call the name server ns1.xxx.be I have zone toto.be with some records (not important) In the same name server, I want to create the subzone titi.toto.be with some records. == do I

with subject: NS record for subzone definition

2012-03-13 Thread hugo hugoo
Dear all, I have a problem in the understanding of the creation of a subzone. Here the situation; let's call the name server ns1.xxx.be I have zone toto.be with some records (not important) In the same name server, I want to create the subzone titi.toto.be with some records. == do I

RE:

2012-03-13 Thread hugo hugoo
...@austinenergy.com To: hugo...@hotmail.com; bind-users@lists.isc.org On 3/13/12 8:20 AM, hugo hugoo hugo...@hotmail.com wrote: == do I have to create in zone toto.be the following NS record: titi.toto.be. TTL IN NS ns1.xxx.be I have found cases where this situation is present and other

RE:

2012-03-13 Thread hugo hugoo
practice is to always put the NS records and not leave it to chance. On Mar 13, 2012 9:43 AM, hugo hugoo hugo...@hotmail.com wrote: Thanks for the feedback. Is this a glue record? I do not have any IP defined in the NS record. What is the flow of a request to a subzone? Is the content

RE: NS record for subzone definition

2012-03-13 Thread hugo hugoo
On Mar 13 2012, hugo hugoo wrote: Thanks for this clear feedback. I understand the problem if the subdomain is not on the same name servers as the domain. The NS record is needed to could find the subdomain on the other name server. You said that the NS is not mandatory (it will work fine

RE: reverse dns for IPV6 ranges

2012-03-12 Thread hugo hugoo
HEllo, Has anyone else experience with reverse IPV6 configuration with Bind? Regards, Hugo, From: spa...@countryday.net To: hugo...@hotmail.com CC: bind-users@lists.isc.org Subject: RE: reverse dns for IPV6 ranges Date: Tue, 6 Mar 2012 03:09:42 + But if only some IP have e

log for one domain

2012-03-11 Thread hugo hugoo
Dear all, Is it possible to logs queries to a specific domain? I have a domain configured in my system but I do not know if it used and by who? I want to avoid a lot of logs, so the reason of my question: only have a query log for a specific domain. Thanks in advance for any help. Hugo,

reverse dns for IPV6 ranges

2012-03-05 Thread hugo hugoo
Dear all, Can anyone help me with its experience on reverse dns for IPV6? Presently, when we reverse an IPV4 subnet for clients, we configure all the reverse for the whole subnet. It is a lot of PTR's but perfectly manageable. With IPV6, the number of IP's that we will receive is amazing

RE: reverse dns for IPV6 ranges

2012-03-05 Thread hugo hugoo
thanks for your comment. But if only some IP have e reverse..what about the other server who have received an IP in the range? Ip that can be changed every x hours. IF no reverse, it can be blacklisted for some reasons or having some problems with services asking a reverse dns resolution.

information in slave zone file

2011-12-15 Thread hugo hugoo
Hello, I have recently done a migration bind8 to bind9. I have remarked that in my slave zones file, I did not have anymore some interesting information I had with bind8. These informations are comments on the last zone transfer. Can anybody tell me if it is possible in BINDP to have the same

bind9 statistics

2011-11-03 Thread hugo hugoo
Hello, I have the following problem; In bind8, I can find statistics every hour in the log file (see here below). But in BIND9 I do not find the same statistics in the log file. Is it possible to have it? Oct 31 07:11:37 dnszone001 named[19854]: NSTATS 1320041497 1301566457 TYPE0=50862

answer to not existing record

2011-11-03 Thread hugo hugoo
Hello, I have seen a difference in the behaviour for a query to a non existing query (the domain is not manage by the name server) between bind8 and bind9. I just would like to know if it is normal or if it is a problem. Thanks in advance for your feedback Bind9: # dig @localhost

several master ip's for a slave zone

2011-11-03 Thread hugo hugoo
Hello, I have seen that for a slave zone, it is possible to configure several master IP's. Why this possibility? How does it works if several master zone can be used for the zone transfer? Thanks for any feedback, Hugo,

bind 9 performance

2011-06-15 Thread hugo hugoo
Hello all, I plan to replace bind8 with bind9 on a same hardware (just software upgrade). - Has anyone faced a performance problem due to an upgrade bind8/bind9? - Is bind9 less performant or do I have to be confident on this aspect? Thanks in advance for any feedback, Hugo,

RE: bind 9 performance

2011-06-15 Thread hugo hugoo
+abushlaibi=ies.etisalat...@lists.isc.org Date: Wed, 15 Jun 2011 20:30:58 To: bind-users@lists.isc.org Subject: Re: bind 9 performance hugo hugoo wrote: - Has anyone faced a performance problem due to an upgrade bind8/bind9? I didn't notice anything like that when I last upgraded from BIND8

how to check if a slave zone is expired

2011-05-04 Thread hugo hugoo
Dear all, Is there a way to check that a slave zone is expired? I use dig in the following way to see that the zone is not responding on my server...but is this due to the fact that the zone is expired or another problem? dnszone002:/etc/bind/zones/slave# dig @localhost omega-pharma.be soa

RE: how to check if a slave zone is expired

2011-05-04 Thread hugo hugoo
helpdesk to get this corrected. Kind regards, Marc Lampo EURid vzw/asbl Security Officer From: hugo hugoo [mailto:hugo...@hotmail.com] Sent: 04 May 2011 08:53 AM To: bind-users@lists.isc.org Subject: how to check if a slave zone is expired Dear all, Is there a way to check that a slave

RE: how to check if a slave zone is expired

2011-05-04 Thread hugo hugoo
Marc, Thanks for the feedback. I have indeed seen in the logs that the zone is expired on ns2 but my question was more general in order not to have to always try to see the logs (info not available if the zone has expired some weeks ago..). So..no way to check that a zone is expired?

slave AXFR bind9

2011-04-21 Thread hugo hugoo
Dear all, I am really lost with the working of my slave zone. Here the situation/configuration. I use a server called lenny where the zone is idendified as slave. I use a server called custmaster where the zone is master. After a stop/start of the BIND9 in the Lenny server (slave zone), the

RE: slave timers

2011-04-19 Thread hugo hugoo
: slave timers On Mon, 18 Apr 2011, hugo hugoo wrote: I am testing the migration bind8 to Bind9 and the working for slave zones. To do this, I have put the following values to the timers in the master zone. $ORIGIN com. toto 3600 IN SOA ns1.toto.com. postmaster.toto.com

RE: slave timers

2011-04-19 Thread hugo hugoo
? Is it possible to visualise the value of the refresh timer of a zone? Any other idea? Hugo, Date: Tue, 19 Apr 2011 12:06:54 -0400 From: dspa...@gmail.com To: bind-users@lists.isc.org Subject: Re: slave timers On 4/19/2011 11:42 AM, hugo hugoo wrote: Hello, I have in fact

slave timers

2011-04-18 Thread hugo hugoo
Dear all, I am testing the migration bind8 to Bind9 and the working for slave zones. To do this, I have put the following values to the timers in the master zone. $ORIGIN com. toto 3600IN SOA ns1.toto.com. postmaster.toto.com. ( 2011041404 302 3600 604800

RE: start script for bind9

2011-04-15 Thread hugo hugoo
@lists.isc.org Subject: Re: start script for bind9 On 14.04.11 14:23, hugo hugoo wrote: I have installed bind9 using the make install procedure. It works but I did not find any startup script to could put in my /etc/init.d/ directory. I know that if bind is installed via apt-get install (I am

start script for bind9

2011-04-14 Thread hugo hugoo
Hello, I have installed bind9 using the make install procedure. It works but I did not find any startup script to could put in my /etc/init.d/ directory. I know that if bind is installed via apt-get install (I am using debian linux version), there is automatically a bind9 startup script in

notify send by Master zones

2011-04-12 Thread hugo hugoo
Dear all, I would appreciate if someone can explain me why a notify is present on my logs (bind9) for a master zone: zone fbtest07.be/IN: loaded serial== zone loades after a reload fbtest07.be/IN: sending notifies (serial 8)== notify sent (but what is the destination?)

bind and IPV6

2011-02-22 Thread hugo hugoo
Dear all, In the scope of the IPV6 deployment, I have been asked if oiyr DNS servers are IPV6 compliant. We are now upgrading all our servers to bind-9.6-ESV-R3. - Can anybody give some feedback on the IPV6 compliancy? IS bind-9.6-ESV-R3 totally compliant with IPV6? Thanks in advance to

RE: migration bind8/bind9: config problems.

2011-02-16 Thread hugo hugoo
quotable which is to do the minimum changes to make the message transmitable via 7bit smtp so that the message is readable by old clients. Anything above that minimum is a bug. In message col105-w610d1e1f6dce88a566c29fac...@phx.gbl, hugo hugoo writes: Dear all, I am testing an upgrade

migration bind8/bind9: config problems.

2011-02-15 Thread hugo hugoo
Dear all, I am testing an upgrade from bind8 to bind9. For this, I have installed bind9 in a server with the same configuration files as present in the server running bind8. When I start bind9, I have the following errors and the server do not start. Can you anyone answer the questions

bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread hugo hugoo
Dear all, I plan to upgrade my nameservers from bind8 to bind9. I guess I will encounter some compatibility problems notably in the layout of the zone files - can anybody give me the point of attention for this upgrade? Your experience will be appreciated. - is it possible to install

bind9 and IPV6

2011-01-13 Thread hugo hugoo
For all users... Can anybody give me informations on the IPV6 compatibility of BIND9 compared to BIND8? It is not clear what is present in BIND9 and not in BIN8 regarding IPV6. I have created an IPV6 record in BIND8 and it works... Thanks in advance for any clear references or for any

RE: one record to be redirected to a specific IP

2010-04-25 Thread hugo hugoo
can we redirect only www.abcd.com without any impact on toto.www.abcd.com? Date: Sat, 24 Apr 2010 15:49:39 -0700 From: do...@dougbarton.us To: hugo...@hotmail.com Subject: Re: one record to be redirected to a specific IP On 04/24/10 15:09, hugo hugoo wrote: Hello, thanks for your

one record to be redirected to a specific IP

2010-04-23 Thread hugo hugoo
Hello all, I plan to use BIND as caching DNS. But I need to could redirect a specific record to a specific IP. How can I do this? This redirection must only be applied for one record. Ex: a query for www.ABCD.com must be answered by the IP I have choosen. The redirection