RE: SERVFAIL issues

2009-01-20 Thread Frank Bulk - iName.com
My bad. Let me restate the request -- that all the information available via XML in the HTML statistics channel is also printed out when issuing rndc stats. Frank -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc. org] On Behalf Of Barry

Disable cache in bind 9.6

2009-01-20 Thread Dmitry Rybin
Hello! How to disable cache in bind-9.6? ttl=0 - bad idea. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: local zone forward

2009-01-20 Thread Chris Buxton
You can't. You can, however, create more specific zones (mail.zone.tld.) rather than the overlapping zone (zone.tld.). Chris Buxton Professional Services Men Mice On Jan 20, 2009, at 3:41 AM, Mikel Jimenez wrote: Hello I have a question relationated to forwarding. I have db.myzone.com in

Re: local zone forward

2009-01-20 Thread Mikel Jimenez
Chris Buxton escribió: You can't. You can, however, create more specific zones (mail.zone.tld.) rather than the overlapping zone (zone.tld.). Chris Buxton Professional Services Men Mice On Jan 20, 2009, at 3:41 AM, Mikel Jimenez wrote: Hello I have a question relationated to forwarding.

Re: local zone forward

2009-01-20 Thread Mikel Jimenez
Chris Buxton escribió: On Jan 20, 2009, at 6:23 AM, Mikel Jimenez wrote: Chris Buxton escribió: You can't. You can, however, create more specific zones (mail.zone.tld.) rather than the overlapping zone (zone.tld.). Chris Buxton Professional Services Men Mice On Jan 20, 2009, at 3:41 AM,

Re: Disable cache in bind 9.6

2009-01-20 Thread Dmitry Rybin
Matus UHLAR - fantomas wrote: On 20.01.09 12:49, Dmitry Rybin wrote: How to disable cache in bind-9.6? ttl=0 - bad idea. if you know that setting TTL to 0 is a bad idea, why do yuo think that disabling a cache in BIND is not a bad idea? Because under high load cache grows to maximum

Re: Disable cache in bind 9.6

2009-01-20 Thread Matus UHLAR - fantomas
On 20.01.09 12:49, Dmitry Rybin wrote: How to disable cache in bind-9.6? ttl=0 - bad idea. Matus UHLAR - fantomas wrote: if you know that setting TTL to 0 is a bad idea, why do yuo think that disabling a cache in BIND is not a bad idea? On 20.01.09 18:39, Dmitry Rybin wrote: Because

in-addr.arpa delegation failure

2009-01-20 Thread Lars Hecking
I've been beating my head against the wall with this issue, and I'm out of ideas: I can't get reverse lookups for a particular, delegated RFC1918 net to work. Setup: Internal root dns.domain.com running bind 9.4.2-P2. This host is set up as a master for 172.30/16. It delegates 172.30 to a

Re: in-addr.arpa delegation failure

2009-01-20 Thread Stephane Bortzmeyer
On Tue, Jan 20, 2009 at 04:14:01PM +, Lars Hecking lheck...@users.sourceforge.net wrote a message of 87 lines which said: This host is set up as a master for 172.30/16. It delegates 172.30 to a subdomain (A record for ns1.sub.domain.com is present elsewhere). Hold on! There is

forwarding but no recursion?

2009-01-20 Thread etirado.ext
Hello, Is this possible to disable recursion for all incoming queries except for those listed in zone statement with a forwarder. I know that no forwarding is allowed if we disable recursion. Something like this ( but this doesn't work I know ): I can't match people so I can't create a view.

compiling BIND on AIX

2009-01-20 Thread Jerry Kemp
I have compiled BIND many times on Solaris/OpenSolaris and several different *BSD's, and this has always been a pretty simple procedure. I currently need to compile (a current) BIND on AIX 5.2 and it appears to me that there is a little more work involved to get a successful compile on this

Re: Disable cache in bind 9.6

2009-01-20 Thread John Wobus
Disabling the cache makes sense if the purpose of your nameserver is to provide your authoritative zone data and you have a different nameserver to handle your site's general DNS queries. TTL settings are part of authoritative zone data, which is completely independent of whether you disable

Re: forwarding but no recursion?

2009-01-20 Thread Josh Kuo
I believe the behavior of the following configuration is to send back the IP address of the forwarders to the clients, and rely on clients to do the recursive query against the forwarders. On Tue, Jan 20, 2009 at 9:25 AM, etirado@orange-ftgroup.com wrote: Hello, Is this possible to

Re: forwarding but no recursion?

2009-01-20 Thread Chris Buxton
On Jan 20, 2009, at 9:25 AM, etirado@orange-ftgroup.com etirado@orange-ftgroup.com wrote: Hello, Is this possible to disable recursion for all incoming queries except for those listed in zone statement with a forwarder. I know that no forwarding is allowed if we disable recursion.

denied NS/IN

2009-01-20 Thread Scott Haneda
Hello, looking at my logs today, I am getting hammered with these: 20-Jan-2009 15:39:06.284 security: info: client 66.230.160.1#48517: query (cache) './NS/IN' denied 20-Jan-2009 15:39:06.790 security: info: client 66.230.128.15#31593: query (cache) './NS/IN' denied Repeated over and over,

RE: denied NS/IN

2009-01-20 Thread Frank Bulk
That's being discussed on NANOG, here's one thread: http://markmail.org/message/ydiqnztzmz5qmusf See here for more details in blocking them: http://www.cymru.com/Documents/secure-bind-template.html specifically: blackhole { // Deny anything from the bogon networks as //

Re: denied NS/IN

2009-01-20 Thread Scott Haneda
On Jan 20, 2009, at 3:52 PM, Frank Bulk wrote: That's being discussed on NANOG, here's one thread: http://markmail.org/message/ydiqnztzmz5qmusf See here for more details in blocking them: http://www.cymru.com/Documents/secure-bind-template.html specifically: blackhole { // Deny

RE: denied NS/IN

2009-01-20 Thread Frank Bulk
According to ISPrime, 66.230.128.15 and 66.230.160.1 are authoritative DNS servers, but do not make outbound requests. As such, they only *receive* queries from remote DNS servers (or clients). So all UDP or TCP-based DNS requests to those two DNS servers are made *to* port 53. And those two

Re: denied NS/IN

2009-01-20 Thread Mark Andrews
In message 232b45f8-acd3-427a-95e9-bc3ca5fc9...@newgeo.com, Scott Haneda writ es: Hello, looking at my logs today, I am getting hammered with these: 20-Jan-2009 15:39:06.284 security: info: client 66.230.160.1#48517: query (cache) './NS/IN' denied 20-Jan-2009 15:39:06.790 security: info:

Re: denied NS/IN

2009-01-20 Thread Scott Haneda
On Jan 20, 2009, at 5:44 PM, Mark Andrews wrote: In message 232b45f8-acd3-427a-95e9-bc3ca5fc9...@newgeo.com, Scott Haneda writ es: Hello, looking at my logs today, I am getting hammered with these: 20-Jan-2009 15:39:06.284 security: info: client 66.230.160.1#48517: query (cache) './NS/IN'

What to do about openDNS

2009-01-20 Thread Scott Haneda
I brought this up a few months back. For me, it is getting worse, and I am not able to come up with a solution. I have many clients who reg domains. They all point to my NS. Sometimes, the client lapses hosting with me, and I delete the zones. They usually leave the domain reg'd and my

unwanted delegations was: What to do about openDNS

2009-01-20 Thread Danny Thomas
Scott Haneda wrote: I brought this up a few months back. For me, it is getting worse, and I am not able to come up with a solution. I have many clients who reg domains. They all point to my NS. Sometimes, the client lapses hosting with me, and I delete the zones. They usually leave the

Re: denied NS/IN

2009-01-20 Thread Mark Andrews
In message fb979b33-df83-4460-a3e4-040cd165e...@newgeo.com, Scott Haneda writ es: On Jan 20, 2009, at 5:44 PM, Mark Andrews wrote: In message 232b45f8-acd3-427a-95e9-bc3ca5fc9...@newgeo.com, Scott Haneda writ es: Hello, looking at my logs today, I am getting hammered with these: