DNS issue

2010-08-29 Thread Agarwal Vivek-RNGB36
Hi All I am using ISC-BIND 9.3.4 as a DNS Server. Im facing an issue that Im getting lot of Queries as like : type NS, class IN. This is leading to high CPU Utilization of my system. Can anyone help me that how can I solve this issue and why these requests will be coming Regards Vivek Aggarwal

bind 9.7.1 tries to automatically resign non-dynamic zones

2010-08-29 Thread Paul B. Henson
We're prototyping dnssec with bind 9.7.1, and ran into a strange issue where it looks like bind is trying to automatically resign non-dynamic zones when the signatures are going to expire. Our zones are signed by an external process, and all bind is supposed to do is serve them 8-/. Zones are sig

Re: cant update 'cz'

2010-08-29 Thread clemens
> On Aug 28 2010, clem...@dwf.com wrote: > > >I am getting the message: > >cz DNSKEY: please check the 'trusted-keys' for 'cz' in named.conf. > > > >And in the past this has meant that something needed to be updated. > > > >However, when I pull 'anchors.xml' and run anchors2keys < anchors.xml

Re: cant update 'cz'

2010-08-29 Thread Kevin Oberman
> From: clem...@dwf.com > Date: Sun, 29 Aug 2010 17:02:29 -0600 > Sender: bind-users-bounces+oberman=es@lists.isc.org > > > On Aug 28 2010, clem...@dwf.com wrote: > > > > >I am getting the message: > > >cz DNSKEY: please check the 'trusted-keys' for 'cz' in named.conf. > > > > > >And in t

Re: Recursion problems

2010-08-29 Thread Chris Buxton
Josh, Did you ever get a response to this? I'm a few weeks behind on my list reading, but I don't see any follow-ups. It looks to me like your server is getting referred to the efollett.com name servers (yours?), but then appears to believe these names are aliases (CNAME records, not A records