Re: BIND 9.9.0 assertion failure

2012-03-14 Thread Eivind Olsen
ffic (not enough to strain it, the load is normally around 0.02 or thereabout). Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Multithreaded BIND 9.9.0 on Linux - I'm confused

2012-04-11 Thread Eivind Olsen
1, I'd double the amount of threads? Will there be any real world advantage (or disadvantage) to specifying for example a couple of specific listen-on statements instead of using the listen-on any? Regards Eivind Olsen ___ Please visit https://

Re: Update

2012-04-13 Thread Eivind Olsen
ached > [root@localhost ~]# Is there a local host firewall (iptables?) running on the DNS server? And if so, is tcp and udp port 53 open? Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe fr

Re: Can I build a new DNS/BIND system parallel to our existing DNS production system?

2012-05-03 Thread Eivind Olsen
off with fewer threads but higher clock speeds from typical Intel/AMD systems. (caveat: I haven't benchmarked BIND 9.9.x, which might have improved this). Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to un

Re: bind caching dns

2012-05-09 Thread Eivind Olsen
. Indeed RFC3197 > (https://www.ietf.org/rfc/rfc3197.txt) tells a cautionary tale. I've been using a net-snmp subagent called "B9Agent", with good success. It doesn't parse the XML statistics data but uses the statistics-file instead. For more details, see http://www.l3jane.net/w

Re: erros in logs

2012-05-11 Thread Eivind Olsen
BIND is to tell BIND that it shouldn't even try to use IPv6 (start the "named" command with option "-4"). If you're using for example RHEL / CentOS with the vendor-provided RPMs, you can do this by editing /etc/sysconfig/named and adding/editing t

Re: Bind configuration

2012-05-21 Thread Eivind Olsen
Use the full zone name in the zone definition. zone "cairosource" Regards Eivind Olsen Den 21. mai 2012 kl. 16:33 skrev "Amira Othman" : > Hi all > > I have configured bind9 on centos 5.8 but I still can't nslookup my domain. > Below are my confi

Re: Operation Cancelled Error

2012-07-12 Thread Eivind Olsen
et one result and be at the mercy of the external nameservers. You will probably get the highest result if you only ask for pre-cached answers, in which case reaching 100k qps (and higher) on a single server should be easy (with some not-too-old hardware) Regards Eivind

Re: Operation Cancelled Error

2012-07-12 Thread Eivind Olsen
usage - latency (how long does it take to get a reply) - packet loss / lost queries Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: RHEL, Centos, Fedora rpm vs ISC bind versions

2012-07-15 Thread Eivind Olsen
Den 15. juli 2012 kl. 16:57 skrev Benny Pedersen : > change to gentoo/funtoo ? Some might prefer to run the same Linux distribution on all their servers, changing to something like Gentoo just to get BIND running seems a bit overkill. Regards Eivind Ol

Re: Can't receive emails from another machine

2012-08-03 Thread Eivind Olsen
Stayvoid wrote: > Is it connected with my zone file settings (which are specified on the > side of my registrar) or with BIND? Hard to tell, I don't think you've told us the name of the domain..? Give the name, and it should be much easier to figure out what's going on.

What can cause excessive amount of _dns-sd queries?

2012-08-23 Thread Eivind Olsen
.16.172.in-addr.arpa IN PTR + talk.l.google.com IN A + gmail-pop.l.google.com IN A + gmail-imap.l.google.com IN A + ...and similar variations of these. Have any of you seen something like this before? Regards Eivind Olsen ___ Please visit https://lis

Re: What can cause excessive amount of _dns-sd queries?

2012-08-23 Thread Eivind Olsen
belongs to some customer) Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Sunos 5.8 Error:EDNS not supported by your namesever

2012-09-05 Thread Eivind Olsen
Solaris 8 installation I still have access to - the BIND bundled on that one was 8.2.4. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.o

Re: Cacti Template for graphing BIND9.8 queries stats

2013-11-13 Thread Eivind Olsen
t_en to expose counters from BIND through SNMP, which you can then easily get into Cacti. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists

Re: bind 9.8 named_stats parser

2015-08-05 Thread Eivind Olsen
y:b9agent_en to expose BIND9 statistics via SNMP - you might give that one a try? Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.i

Problem looking up domain dryfire.com

2016-08-16 Thread Eivind Olsen
nfo: 17 unexpected RCODE resolving 'dryfire.com/NS/IN': 213.162.97.177#53 A search for "17 unexpected RCODE" seems to indicate this might be caused by incompatibility between SIT/DNS cookies and older versions of NSD. Is this also w

Re: Round robin DNS query response

2010-09-29 Thread Eivind Olsen
spreading" won't account for servers being down etc, the only failover mechanism is if whatever your clients are using is capable of retrying on a different IP-address if the first one doesn't answer. Regards Eivind Olsen ___ bind-users

How does BIND 9 scale with multithreading?

2010-09-29 Thread Eivind Olsen
tion for server hardware would be for a recursive DNS server. On one hand, the Sun (ok, Oracle) Niagara/Coolthreads architecture seems to work nicely enough, but maybe I'd be better off with some generic Intel/AMD based solution with fewer threads/cores but higher GHz per thread?

Re: Unable to query the nameserver

2010-10-05 Thread Eivind Olsen
s only served by a single physical server and that server happens to go down some day? Any server _will_ go down sometimes, even if you decide to not patch it... If it's serving a domain name you care about, I'd _really_ recommend having multiple _separate_ nameservers, hosted on sep

RE: minimum cache times?

2010-10-05 Thread Eivind Olsen
izing this so you can do it once from one location (easiest solution: make a wrapper script, running rndc on all servers in turn, over the network). Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Custom DNS error with BIND?

2010-10-05 Thread Eivind Olsen
.or must edit bind source code? As far as I know, it's not natively supported by BIND. Are you _really_ sure you want this? Suggested reading is for example <http://en.wikipedia.org/wiki/DNS_hijacking> Regards Eivind Olsen ___ bind-

Re: Recover deleted zone file

2010-10-05 Thread Eivind Olsen
either.. I haven't tried this, so I can't guarantee it will work, but it might work changing the named.conf to allow zone transfers, then do a "rndc reconfig"? No guarantees that it will work as expected though :D Regards Eivind Olsen _

RE: minimum cache times?

2010-10-05 Thread Eivind Olsen
rvers used in your organization, you'll still have problems making a solution here. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Unable to query the nameserver

2010-10-05 Thread Eivind Olsen
eed to look into fixing that, as I'm guessing BIND is then really trying to give you some nice information in the logs but it can't.. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Unable to query the nameserver

2010-10-05 Thread Eivind Olsen
still not logging: # service named restart -g The "-g" option is to get debug output. I doubt that works nicely with the "service" command. Running RedHat? I don't have a RedHat system in front of me... but.. you could try: # service named

Re: Performance hit on Query logging

2010-10-07 Thread Eivind Olsen
way to determine "named" utilization ? Are there measurable impacts to Query response not reflected in CPU load, Memory or IO? Not sure what you're after. Parameters to measure? Latency / response time? Regards Eivind Olsen ___ bind-use

Re: Performance hit on Query logging

2010-10-07 Thread Eivind Olsen
rformance. resperf has a report tool which can easily make some nice graphs for you, showing when BIND starts to struggle with sending the replies, and another graph to tell you the latency / delay in replies. This should give you some numbers, to see how much query logging would impact you

Integrating BIND9 with external graphing like Cacti

2010-10-13 Thread Eivind Olsen
Has anyone here made use of the XML statistics interface in BIND9, to get some numbers into Cacti (or another similar tool)? If so, how, and which numbers did you feel were worth turning into graphs? Regards Eivind Olsen ___ bind-users mailing list

Re: Crashed Bind

2010-11-19 Thread Eivind Olsen
about that? I only took a quick google-search for it, but it looks similar to the error message mentioned on http://xorl.wordpress.com/2009/07/30/cve-2009-0696-isc-bind-9-remote-rrset-crash/ And yes, update your BIND. Regards Eivind Olsen ___ bin

Re: Help with the subzone problem

2010-11-25 Thread Eivind Olsen
so check the delegation of the domain, and we could check that we got sensible answers from your authoritative nameservers for both abc.com and games.abc.com Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Fwd: performance on the big query traffic

2010-12-26 Thread Eivind Olsen
s over an entire day? Do you know if there are any peaks? If so, how long + high? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: bind 9.7.2-P3 does not resolve www.microsoft.com

2010-12-28 Thread Eivind Olsen
> trying to resolve www.microsoft.com or microsoft.com results in a > "connection timed out; no servers could be reached" Well, for what it's worth - it's not just you having that issue. When testing from home and from work I get the same. Of course, I could be doing something wrong, but whenever

Re: bind 9.7.2-P3 does not resolve www.microsoft.com

2010-12-28 Thread Eivind Olsen
out when I do a "Get DNS Records" query for "microsoft.com" When testing for yourself, please keep in mind that limited queries seem to work fine (like, asking for A records, or MX), but doing any-queries which give everything seems to fail. Regards Eivind Olsen ___

Re: Controlling many DNS servers using rndc

2011-01-04 Thread Eivind Olsen
efficient/parallel way to do this.. Depends, really. rndc itself can work remotely, but that might not be an option in all networks. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
ead. (Yes, I know it's best practice to combine the authoritative + recursive functionality) Is my mind playing tricks with me? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
(Resending it here, didn't mean to reply just to you Alan) > On 1/6/2011 3:38 AM, Eivind Olsen wrote: >> (Yes, I know it's best practice to combine the authoritative + recursive >> functionality) > [...] it's NOT best [...] Yep, I knew that. Embarassing of me to

Re: queryperf for stress test

2011-01-16 Thread Eivind Olsen
of outstanding queries (-q number) will make a difference? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: service if s/up/down/g ipv6

2011-01-22 Thread Eivind Olsen
m not 100% sure I understand the question. I don't see any record for r13151.ovh.net, only a normal IPv4 A record: Eivind-mac:~ eivind$ dig +short a r13151.ovh.net 87.98.186.232 Eivind-mac:~ eivind$ dig +short r13151.ovh.net Eivind-mac:~ eivind$

Re: dns best practices

2011-01-23 Thread Eivind Olsen
mit BIND to a specific port for external (outbound) queries Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: service if s/up/down/g ipv6

2011-01-24 Thread Eivind Olsen
> http://pastebin.com/7Be9FavZ That zonefile seems to be for fakessh.eu, and not for ovh.net. Your initial problem was regarding IPv6 towards r13151.ovh.net ? If so, that's the zonefile we'll need to look at. Regards Eivind Olsen _

Re: Question when testing Caching Server with resperf

2011-01-24 Thread Eivind Olsen
query for the same name will get a faster answer from the cache? Did you flush the cache between tests? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Forward using CNAME record

2011-01-25 Thread Eivind Olsen
.com doesn't know how to deal with requests coming in for www.ioanamorosan.com and gives that error message. The administrators of the webserver could add a ServerAlias setting in their Apache configuration, to put requests into the correct document root. Regards Eivind Olsen _

Re: Globally setting TTL

2011-01-25 Thread Eivind Olsen
tains "$TTL 86400" or whatever. Try it and see if that works for you :D Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: bind Bind or BIND?

2011-01-26 Thread Eivind Olsen
ons of the name, on http://en.wikipedia.org/wiki/BIND : The acronym of BIND is Berkeley Internet Name Domain in a technical paper published in 1984. However, the most common acronym today and the one that can be found on the ISC web site is Berkeley Internet Name Daemo

Re: IXFR and AXFR

2011-01-27 Thread Eivind Olsen
e changes being made, so it can give a meaningful reply when asked to provide "all changes since serial number X", so you'll normally see IXFR being possible for dynamically updated zones (and a couple of other cases, check the ARM). Regards Eivind Olsen __

Re: bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread Eivind Olsen
vendor supplied BIND for some operating system / distribution, I guess it depends on how it's packaged etc. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Delegation question

2011-02-04 Thread Eivind Olsen
n extract from the BIND 9.7 ARM, section 6.2.16.2: "Forwarding occurs only on those queries for which the server is not authoritative and does not have the answer in its cache." How exactly had you configured forwarding in your named.conf file? Regards Eivind Olsen ___

Re: Delegation question

2011-02-04 Thread Eivind Olsen
n no longer piggyback off the previous line you've just commented out). You didn't mention whether you already were commenting out the A record or not. Check your logs to see if BIND complains about anything. Also try pushing your zonefile through named-c

Re: $GENERATE for /8 networks

2011-02-17 Thread Eivind Olsen
< 256; $bnet++) { for ($cnet = 0; $cnet < 256; $cnet++) { for ($dnet = 0; $dnet < 256; $dnet++) { print "${dnet}.${cnet}.${bnet} PTR ${network}-${bnet}-${cnet}-${dnet}.mynetwork.\n"; } } } (no, I'll not pr

Question about some oddities in the logs

2011-02-21 Thread Eivind Olsen
es" lists some RESERVED0 as well. Should I expect to see these out in the wild? Or should I only really worry if they're listed in bigger numbers? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Question about some oddities in the logs

2011-02-22 Thread Eivind Olsen
notifies, true. But I don't need that. Currently the root zone has a refresh value of 1800 seconds and expire = 604800 seconds, so my slave servers will check the root for updates often enough. One advantage is that we can now instantly reject queries for things like "ei

Re: Multi language support in BIND

2011-02-23 Thread Eivind Olsen
n't capable of sending emails to such domain names - unless you make your users send directly to the punycode version - and really, you can't expect people to do that manually. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How to allow set Host file dns query priorities in BIND

2011-02-23 Thread Eivind Olsen
nless you have a very good reason. And if your Internet connection goes down, does it really matter whether you can do lookups, if you can't make the connections anyway? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org htt

Re: How to allow set Host file dns query priorities in BIND

2011-02-23 Thread Eivind Olsen
don't think the hosts file is very suited for LOC, TXT and other such records. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Threaded bind on CentOS

2011-02-24 Thread Eivind Olsen
ally it should log how many threads it's using. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: inconsistency dnssec debuguers response and writing conseil for new areas zone

2011-02-28 Thread Eivind Olsen
z.net/d/nicolaspichot.fr/dnssec/ especially about missing key 12961. -- Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc increment the serial

2011-03-05 Thread Eivind Olsen
u, you'll need to configure it, for example by setting up an rndc.key file (location depending on your installation of BIND). An easy way to configure rndc is with the "rndc-confgen -a" command line. -- Regards Eivind Olsen eiv...@aminor.no

Re: rndc: 'reload' failed: not found

2011-03-08 Thread Eivind Olsen
r BIND is running as? For example, http://fixunix.com/dns/55171-chrootd-bind-dlz-file-__db-00-perms-causing-rndc-reload-fail-where-set-change-them.html Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc: 'reload' failed: not found

2011-03-08 Thread Eivind Olsen
he original poster looks at it to see if is of any help). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc: 'reload' failed: not found

2011-03-08 Thread Eivind Olsen
> Is both of the zone loaded from DLZ? In my tests? Neither of the zones, it was just meant to show that the "rndc reload" error message was the same as if BIND had no idea about the zone. Regards Eivind Olsen eiv...@aminor.no ___ bind-

Re: necessary to have a secondary dns ipv6

2011-03-13 Thread Eivind Olsen
You are normally required to have at least two nameservers for your domains. Keep in mind that any ipv6-only hosts will be unable to use your ipv4 nameservers. Did this answer your question? Regards Eivind Olsen Den 14. mars 2011 kl. 00:10 skrev "fakessh @" : > How is it necess

Re: ip6.arpa help

2011-03-18 Thread Eivind Olsen
n some template, if there's not a specific record already defined? -- Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc-key has expired

2011-03-23 Thread Eivind Olsen
y does it say? I'm guessing you might have enabled dynamic updates in a DNSSEC signed zone, without BIND having access to the private keys needed to sign, but that's a wild guess really. Regards Eivind Olsen ___ bind-users mailing list bind

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Eivind Olsen
d in this query, or is that nameserver really weird? 4) If you've sorted all the stuff above: now is the time to try to add the DS or DLV records. I'd not suggest you try this before the previous issues have been corrected. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: problem for validate the script dnssec to isc dlv

2011-03-28 Thread Eivind Olsen
ONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;fakessh.eu.IN NS ;; Query time: 55 msec ;; SERVER: 87.98.186.232#53(87.98.186.232) ;; WHEN: Mon Ma

Re: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Eivind Olsen
server No. Don't do that. A cache/resolver is not the same as an authoritative server. For example, it will not flag the cache contents as being authoritative (the AA flag). Get a proper secondary/slave nameserver somewhere, it doesn't need to be costly. R

Re: BIND 9 and 2 Domains

2011-03-31 Thread Eivind Olsen
llowing/denying zone transfers etc - this example is just meant to show the basic case) Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Is it possible to block resolution of a malware address?

2011-04-01 Thread Eivind Olsen
servers you have as well) Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: priority with A record?

2011-04-05 Thread Eivind Olsen
iharrathi@orange-ftgroup.com wrote: > Is there anyway to enable priority on A or NS record? No. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Deny query to specific domain

2011-04-05 Thread Eivind Olsen
ritative for that domain (define it as a zone etc.), or configure RPZ which is supported in BIND 9.8.0 for example. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Maximum limit of query per second

2011-04-06 Thread Eivind Olsen
ed recursive clients in named.conf, but that's all. I didn't spend time on getting higher qps during testing, as I figured 10 qps in best-case conditions on a single server would suffice, at least for the time being. Regards Eivind Olsen ___

RE: Maximum limit of query per second

2011-04-06 Thread Eivind Olsen
a you are guaranteed to have in your local cache? Or would your testing require your server to go out on the Internet and be at the mercy of external servers as well? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.i

Re: multiple IP address in Address Record in BIND

2011-04-17 Thread Eivind Olsen
kup sva.com > Name:   sva.com > Addresses:  10.10.10.10, 10.10.10.10, 10.10.10.10, 10.10.10.10,10.10.10.10 You would like it to point to the same IP-address many times? Why? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.o

Re: multiple IP address in Address Record in BIND

2011-04-17 Thread Eivind Olsen
> In the bind 8 days people would put the same address multiple times and > then > other addresses as well to "weight" the responses. Yes, but in the example given it's the same address all the time, no mention of any other addresses, and that's why I ask - wh

Re: max-cache-size rule of thumb?

2011-04-18 Thread Eivind Olsen
e - with normal use, it should stabilize on some amount by itself, based on your usage patterns. Memory is fairly cheap these days, too. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Eivind Olsen
t a CNAME outside of the zone, pointing to www.whitehouse.gov.edgesuite.net which is yet another CNAME pointing to a1128.h.akamai.net. Neither of these seem to be DNSSEC signed. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.

RE: slave timers

2011-04-19 Thread Eivind Olsen
ems with one of these two (ns.uat / ns2.uat)? If it isn't, have you told the master nameserver about the slave with for example the also-notify option? How have you configured BIND on the master nameserver, with regards to notify settings? Regards Eivind Olsen eiv

Re: slave AXFR bind9

2011-04-21 Thread Eivind Olsen
S record in the zonefile, and isn't listed with also-notify either. Am I right? Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: continous DNS query to ROOT DNS server

2011-04-26 Thread Eivind Olsen
;, ISC_TRUE }, { "28.172.IN-ADDR.ARPA", ISC_TRUE }, { "29.172.IN-ADDR.ARPA", ISC_TRUE }, { "30.172.IN-ADDR.ARPA", ISC_TRUE }, { "31.172.IN-ADDR.ARPA", ISC_TRUE }, { "168.192.IN-ADDR.ARPA", ISC_TRUE }, #endif Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Anyone have problems with BIND 9.8.0

2011-04-28 Thread Eivind Olsen
Marion Bogdanov wrote: > In my preparation to upgrade from 9.7.3 to 9.8.0. I figured it would be > worth to field the obvious question: has anyone run into any problems in > their upgrade? I haven't notice anything myself really, but would be interested in hearing of others have.

Re: Error when trying to make secondary nameserver from copying primary nameserver

2011-05-05 Thread Eivind Olsen
dHat package, so I on't know how it expects things to be set up, if you're using the bundled start script. If the permissions initially look good, I suggest you look into whether you have SELinux running, maybe its policies are making problems for you? Regards Eivind Olsen eiv...@aminor

Re: subdomain delegation question #2: (simple config)

2011-05-24 Thread Eivind Olsen
example.com. The $ORIGIN will be appended here to the non-FQDN, meaning you really have: sccnj04.sccnj04.example.com. IN NS sip.example.com. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Deny MX query

2011-05-24 Thread Eivind Olsen
t is it worth it? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: IPv4 & IPv6 named processes on a dual stack host

2011-05-24 Thread Eivind Olsen
ng like this to your options block in named.conf: listen-on-v6{ any; }; I see you mention you run ISC DHCP 4.1 of some version: yes, the DHCP software can currently only run either IPv4 or IPv6. BIND can easily deal with both protocols at the same time. Regards Eivind Olsen __

Re: Getting different name resolution for news.google.com from master and slave BIND

2011-05-24 Thread Eivind Olsen
u come from. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

RE: Getting different name resolution for news.google.com from master and slave BIND

2011-05-24 Thread Eivind Olsen
single of your nameservers, doing manual queries to all 4 Google nameservers (ns1 - 4)? Same result from all 4, or different results? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Bug in bind 9.7.3?

2011-05-26 Thread Eivind Olsen
eck if I can get them to crash). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Bug in bind 9.7.3?

2011-05-26 Thread Eivind Olsen
n able to reproduce it on a DNSSEC-validating BIND either. I'm not saying there's no bug, only that I can't reproduce it myself (probably, I'm doing something wrong). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list

Re: Bug in bind 9.7.3?

2011-05-27 Thread Eivind Olsen
ith this issue much faster than I'd have expected really. No, I'm not saying I'd have expected you to take ages, but hopefully you know what I'm trying to say here. Keep up the good work! -- Regards Eivind Olsen eiv...@aminor.no ___ bi

Re: Hosting my company DNS server in Internet

2011-05-30 Thread Eivind Olsen
n name(s) if you haven't already done so. - tell your registrar to configure your parent domain so it'll delegate your domain to your nameservers. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: MX record IP address instead of hostnames

2011-06-07 Thread Eivind Olsen
p-uspto.gov. I can't, no. It looks fine enough when I check here (a bit odd to only have a single nameserver, but that's beside the point). [eivind@vimes ~]$ dig +short mx coop-uspto.gov 5 coop-mbxhc-1.coop-uspto.gov. 5 coop-mbxhc-0.coop-uspto.gov. [eivind@vimes

Re: testing bind9

2011-06-09 Thread Eivind Olsen
e lookup zone for your internal subnet. It really isn't important, even though nslookup tends to think it is. In general, I'd recommend debugging/testing DNS lookups with a proper tool like dig, and not nslookup which has a couple of snags which can easily c

Re: primary and secondary running different versions

2011-06-11 Thread Eivind Olsen
se through named-checkconf / named-checkzone). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNS Trouble

2011-06-12 Thread Eivind Olsen
n your zonefile - that is 4 w's and not just the 3 you try to ping. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: why bind unable to find log files

2011-06-13 Thread Eivind Olsen
llow BIND to write to your logfile in that specific directory. The short version of this: learn how to use SELinux if you are going to have it enabled, otherwise you might as well disable it...? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: tell BIND the nameservers have been changed

2011-06-15 Thread Eivind Olsen
cords; if ns[1-2].myzone.com are registered as nameservers and have their own glue records, you should make sure those are updated to the new IP addresses as well. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists

Re: bind 9 performance

2011-06-15 Thread Eivind Olsen
be likely to even notice? Also, BIND8 has been deprecated for almost 4 years now. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: bind 9 performance

2011-06-15 Thread Eivind Olsen
ration changes from BIND8 to BIND9. In general, what I'd recommend is: 1) Read that migration document 2) Test your existing named.conf + zonefiles by either loading them into BIND9 directly, or by using the named-checkconf / named-checkzone commands from BIND9. 3) Watch your logs Regards E

RE: bind 9 performance

2011-06-15 Thread Eivind Olsen
ooking into named.stats wherever your nameserver has its working directory. If you found the file - wait a while, run the command again to dump another set of statistics - you should now have some numbers available in that file and can now calculate how many queries you have per second on average. R

  1   2   >