Re: Allowable reverse mapping zone file names

2016-08-27 Thread Lyle
zones to the end user. In that case, you have to ask them to insert the records you think necessary including your mail server's host name. Lyle Giese LCR Computer Services, Inc. On 08/27/16 10:47, Tom Browder wrote: I do not control 3-octet networks but need reverse mapping for my mail s

Re: rndc on local host: need named running?

2016-08-27 Thread Lyle
On 08/27/16 10:54, Tom Browder wrote: My plan is to have two remote, authoritative name servers (master and slave) for my owned domains. I would like to use rndc to control them from my local host. A couple of questions: 1. Does named need to be running on the local host? No. 2. Can I u

Re: rndc on local host: need named running?

2016-08-27 Thread Lyle
Use any in the allow stanza. On 08/27/16 19:54, Tom Browder wrote: On Saturday, August 27, 2016, Lyle <mailto:l...@lcrcomputer.net>> wrote: On 08/27/16 10:54, Tom Browder wrote: https://calomel.org/dynamic_dns_ddns.htmlMy plan is to have two 2. Can I use rndc from my l

Re: Organization IP address is getting redirected to a website which does not belong to the organization.

2016-09-17 Thread Lyle
ing on 146.142.7.113 tcp port 80. It's issuing a 302 redirect to http://www.watcheezy.com at ip address 37.187.76.95. That host is issuing a 301 redirect to http://us.watcheezy.com at 37.187.76.95. Lyle Giese LCR Computer Services, Inc. _

Re: SOA settings

2018-02-01 Thread Lyle
Bind does default to seconds. However this is not the SOA record. Lyle On 02/01/18 18:08, lbutlr wrote: I am looking at a config file and seeing: 2017112100 ; serial 1H ; refresh 15 ; retry 1w ; expire 1H ; minimum Is that 15 15 seconds? I'm guess ion it should b

Re: 9.18 BIND not iterated over all authoritative nameservers

2023-10-27 Thread Lyle Giese
tive nameserver and responsible party records are not resolvable. Maybe someone with more knowledge of DNS and the use of .local. domain name can shed some light on this. Lyle Giese On 10/27/23 10:36, Michael Martinell via bind-users wrote: Hello, At this point I am hoping that somebody m

Re: CVE-2012-1033 (Ghost domain names) mitigation

2012-02-09 Thread Lyle Giese
rified via DNSSEC), why would my server recheck the DNSSEC records until the TTL has elapsed? My thinking(and I could be quite wrong here) is that my server will cache a good verified answer and DNSSEC does not seem to help here. Please let me know where I am wrong here if I am. Lyle Gi

Re: Master/slave configuration

2012-03-07 Thread Lyle Giese
On linux boxes, adding options rotate to the /etc/resolv.conf helps. Lyle Giese LCR Computer Services, Inc. On 03/07/12 06:54, Bostjan Skufca wrote: Problem is, most of client resolvers (not resolving nameservers, but resolvers on workstations etc) query first specified nameserver first

Re: Recursive queries fail after bind has been running for a few hours

2012-03-12 Thread Lyle Giese
s there 20 seconds of preceeding logs missing when the query started? Lyle Giese LCR Computer Services, Inc. On 03/12/12 15:05, Mr X wrote: Hey there I'm having a bizarre issue with 9.7.3-P3-RedHat-9.7.3-8.P3.el6_2.2 - recursive queries stop functioning after bind has been running for a fe

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Lyle Giese
verride for "www.google.com". ___ Or did they really mean, create a hosts file on the local machine that contains... Or in your proxy server redirect www.google.com to nosslsearch.google.com

Re: Host command timing out sporadically

2012-05-02 Thread Lyle Giese
e mx example.com or dig +trace mail.example.com And see if you can catch the failure and then we can do more for you. The other side of this may be that your Internet connection is overloaded and you are dropping packets or it's taking too long for the query to get out and get the

Re: Host command timing out sporadically

2012-05-02 Thread Lyle Giese
point, dig gives up trying. But the use of dig +trace shows much more diagnostic information which points us to the real issue you have. Lyle Giese LCR Computer Services, Inc. On 05/02/12 16:36, Paul Marais wrote: Thanks Lyle, You're right - I started using the host command because i

Re: Host command timing out sporadically

2012-05-02 Thread Lyle Giese
ressed #2. Besides, the recursion setting in named is immaterial when doing dig +trace. Once dig gets the addresses of the root server, it stops asking your local copy of named and starts asking the root servers for itself and does not rely any further on named. Lyle On 05/02/12 18:59, P

Re: forwarders

2012-05-28 Thread Lyle Giese
ord also has a TTL of 300 seconds for msrv.cairosource.com. This low TTL makes it look like you have a dynamic ip address. Most RBL's require a minimium of 12 hrs and recommend 24 hour TTL on these two records. Lyle Giese LCR Computer Services, Inc.

No valid trust anchors for '.' - solved

2012-06-10 Thread Lyle Giese
discovered the date/time issue, I did not go back to the logs and look at the first boot error messages and focused on the last restart of named set of messages. Lyle Giese LCR Computer Services, Inc. Related error messages: Jun 9 22:29:21 ns1a named[6252]: zone 78.0.10.in-addr.arpa/IN/chase:

Re: Corrupt zone transfer

2012-06-29 Thread Lyle Giese
bly in raw format. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Root hints updates

2012-09-06 Thread Lyle Giese
http://www.internic.net/domain/named.root indicates the named.root file should be available at ftp.internic.net or rs.internic.net. It's only at ftp.internic.net. This page has a pointer to root hints file(via FTP) that does not work either. The http version shows the above mistake.

Re: query (cache) 'domain.com/AAAA/IN' denied

2012-10-10 Thread Lyle Giese
e recursion and you have that turned off. If you don't want a publicly abused dns server, turn recursion on and restrict recursion to your LAN addresses(Allow-recursion). Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/ma

Re: query (cache) 'domain.com/AAAA/IN' denied

2012-10-10 Thread Lyle Giese
NAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;domain.com.INA ;; Query t i actually have another machine that has bind 9.4.2 and it works as desired without all this options. both machines a meant to be authoritative for domain.com... anythin

Re: First usage of BIND9

2012-11-24 Thread Lyle Giese
d even running? See the ARM for a sample for a caching-only name server, which is what you are asking for. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-u

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-09 Thread Lyle Giese
ueries that a recursive name server does. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-11 Thread Lyle Giese
On 01/11/13 03:05, Daniele wrote: Port 53 is open, I can also telnet it from another box in the same network. Now I think the problem can be on the packets size, because I'm trying every solution but nothing works. 2013/1/9 Lyle Giese mailto:l...@lcrcomputer.net>> On 01/

broken ISP in china

2013-02-18 Thread Lyle Giese
s lookaside for a long time and published the necessary DNSSEC records and had no problem. This started right after I moved the domain registration and published a DS record for the domain. I had already been publishing DNSSEC records and they checked out against ISC's lookaside stuff for quit

Re: [mailop] broken ISP in china

2013-02-18 Thread Lyle Giese
On 02/18/13 19:02, Tony Finch wrote: Lyle Giese wrote: Recently I moved this domain(lcrcomputer.net) to a registrar that suports DNSSEC and inserted the DS record for this domain. Was it signed before this point? I am wondering if this is a DNS response size problem - was the cause the

Re: NS geo-distribution

2013-05-01 Thread Lyle Giese
zone. Email is handled more politely in that respect especially. Plus I remember that the Internet is a best effort network. There is no guarantied connectivity on the Internet. Lyle Giese LCR Computer Services, Inc. P.S. Maybe you would like to use that box I have for a tertiary serve

Re: d root server

2013-08-20 Thread Lyle Giese
Your bind code is old and has the old info in it. D root changed it's ip address. Bind has a built-in hints file, in case you don't setup one and it probably has the old ip address for the D root. http://blog.icann.org/2012/12/d-root/ Lyle Giese LCR Computer Services, Inc. On 0

Re: d root server

2013-08-20 Thread Lyle Giese
Have you read the source code for these versions of BIND and examined the set of HINTS that are internal to the code inside BIND? These are loaded before any external HINTS file is loaded up. Lyle On 08/20/13 16:37, rohan.he...@cwjamaica.com wrote: Lyle, Version 9.8.4-P1 is also affected

Re: Zone transfer doesn't work when I set allow-update statement

2014-04-25 Thread Lyle Giese
Allow-update makes the zone a dynamic update zone. You have to stop hand editing the zone file. Use nsupdate to make changes to the zone. Lyle Giese LCR Computer Services, Inc. On 04/25/14 15:03, Jeronimo L. Cabral wrote: Dear, I'm using Bind 9.8.4 with a master / slave scenario.

Re: Zone transfer doesn't work when I set allow-update statement

2014-04-25 Thread Lyle Giese
How are you checking for updated info from the master? I recommend dig @ test.company.com.ar Lyle Giese LCR Computer Services, Inc. On 04/25/14 15:29, Jeronimo L. Cabral wrote: Thanks a lot, but using the allow-update statement, I use nsupdate in order to add a new record: # nsupdate

Re: Why the heck my NS are not working

2014-07-20 Thread Lyle Giese
post the domain name so we can look from out here. Is the name server on a public ip address and your firewall allowing udp & tcp port 53 access to talk to named? Lyle On 07/20/14 02:21, Blason R wrote: Hi Guys, Though it may not relevant with BIND but I need help with NS servers w

Re: DIG Info Request

2015-02-03 Thread Lyle Giese
If I remember right, DIG does not know the root servers and asks the local host to retrieve that information and a server at 172.27.254.11(which is RFC 1918 address space) gave you that answer. Is your machine/shop setup with private root servers? Lyle On 2/3/2015 12:50 PM, Linux Addict

Re: DIG Info Request

2015-02-03 Thread Lyle Giese
172.27.254.11 is giving you that info with the .new name servers. You need to ask whomever manages that server. Look at this line from your +trace output: Received 405 bytes from 172.27.254.11#53(172.27.254.11) in 1 ms Lyle On 2/3/2015 1:13 PM, Linux Addict wrote: Additional info - general

Re: Installing bind is not very clear for me

2015-09-03 Thread Lyle Giese
ical Internet facing applications. Lyle Giese ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How to Fix Reverse DNS?

2015-09-22 Thread Lyle Giese
o set the reverse lookup for you. Lyle Giese LCR Computer Services, Inc. On 9/22/2015 2:08 PM, Ron Wingfield wrote: RE: BIND v9.10.2 I have recently converted from a "legacy" DSL service to AT&T's U-verse . . .has been a painful experience. Heretofore, the following

Re: Bind stats - denied queries?

2020-11-30 Thread Lyle Giese
Be careful 'rejecting' these outright.  These queries are UDP traffic(not TCP) and the source address is easily forged.  RRL is the correct way to limit these. Lyle Giese LCR Computer Services, Inc. On 11/30/20 4:12 AM, Marc Roos wrote: Are newer version of bind still logging

Re: RRL outcome on legitimate traffic...

2020-12-01 Thread Lyle Giese
not blindly just drop traffic. Lyle Giese LCR Computer Services, Inc. On 12/1/20 4:58 AM, Karl Pielorz wrote: Hi all, So there's been quite a thread - that originally started as "Bind stats - denied queries" - and morphed into a whole discussion on spoofed UDP, logging, R

Re: RRL outcome on legitimate traffic...

2020-12-01 Thread Lyle Giese
Probably best to ask Paul Vixie for confirmation. I had implemented RRL when it was still an addon and that was what was documented back then. On 12/1/20 10:15 AM, Karl Pielorz wrote: --On 1 December 2020 at 08:24:50 -0600 Lyle Giese wrote: You need to look at the reply named sends

Re: Bind 9.10 recursion issues

2020-12-04 Thread Lyle Giese
Why are you using forwarders?  These cloudflare servers are not authoritive for cat.com and don't seem to be open resolvers either. Lyle Giese LCR Computer Services, Inc. On 12/4/20 12:48 PM, Wade Blackwell wrote: Good morning from the West Coast,                 It’s been a while

Re: Need Help with BIND9

2021-06-15 Thread Lyle Giese
.keiththewebguy.com not ns1. ). Lyle Giese LCR Computer Services, Inc. On 6/15/21 9:04 AM, techli...@phpcoderusa.com wrote: On 2021-06-15 01:38, Reindl Harald wrote: Am 15.06.21 um 10:31 schrieb Reindl Harald: Am 14.06.21 um 22:37 schrieb techli...@phpcoderusa.com: keiththewebguy.com [1

Re: Need Help with BIND9

2021-06-15 Thread Lyle Giese
Yep, that fixed it. Lyle On 6/15/21 2:23 PM, techli...@phpcoderusa.com wrote: Thank you for your help!!  The zone file is the one I tool from Plesk when I had keiththewebguy.com parked there.  All I did was change the IP addresses. I assume what you want me to do is add keiththewebguy.com

Re: Stopping ddos

2022-08-04 Thread Lyle Giese
forge source address. Lyle On 8/3/22 08:30, Robert Moskowitz wrote: Thanks.  I will look into this. On 8/3/22 07:47, Victor Johansson via bind-users wrote: Hey, I just want to add that there is a better way to do this in iptables with hashlimit. The normal rate limit in iptables is too crude.

Re: Reverse lookups not working when Internet connection failed.

2022-11-04 Thread Lyle Giese
pires or is not there, a recursive only server will fail to give you the answer you seek. That is very dependent on your internal dns setup and the type of dns server you are querying. Lyle Giese On 11/4/22 11:07, David Carvalho via bind-users wrote: Thanks for the replies. My reverse zone

Re: www.ncbi.nlm.nih.gov / pubmed

2010-08-19 Thread Lyle Giese
ation date, not to exceed x numbers of days. That way we don't add a domain and mistype the expiration date or forget we created an exception for it. Lyle Giese LCR Computer Services, Inc. > > I did, and I disagree that it misses the point. > > I wanted a *short term* workaround fo

installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
nd named.conf:line 17: parse failed What 'file' is named-checkconf looking for? Or is this a bogus error message? Am I missing something else? I am starting named as root, but appear to be getting permission issues. It just does not make any sense right now.

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
Lyle Giese wrote: I am not running named as named, but as root(no -u on command line). But in testng I did change the permissions on this directory to 777 with no change in behaviour and changed it back to 755. Lyle Giese LCR Computer Services, Inc. dhottin...@harrisonburg.k12.va.us wrote

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone files it downloaded. named -c /etc/named.conf (yes I am

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
root' permissions when it starts up. > I am not using the -u option nor am I running in a CHROOT environment. ps shows root owning the named process. > Also, there are specific issues when running the Security Enhanced > Linux. This may be your situation, or not. We can't tell. >

Re: ipv6 implementation in an ipv4 camp

2010-09-10 Thread Lyle Giese
of a need unless/until they are forced to by their upstream providers. There is a lot of good info at http://ipv6.he.net and at http://www.sixxs.net for getting a working IPv6 tunnel into their network and how to implement IPv6. Lyle Giese LCR Computer Services, Inc.

Re: installing on SLES 10sp3

2010-09-12 Thread Lyle Giese
Chris Buxton wrote: > On Sep 9, 2010, at 5:02 PM, Lyle Giese wrote: > > >> wllarso wrote: >> >>> I'm not any sort of Linux expert but this started my mind thinking. >>> >>> Take a look at the BIND FAQ, it comes with the sources. There

Re: Unable to query the nameserver

2010-10-04 Thread Lyle Giese
ere that would cause this problem. You may also be bypassing a firewall misconfiguration because of your testing methods, but we can not tell as you are not posting the real IP addresses. Even though the ip addresses involved are registered for w

Re: Unable to query the nameserver

2010-10-05 Thread Lyle Giese
ers answer properly. However they are not querying the ip addresses he is inputing but the current A records eurodns returns when asking about ns1 or ns2.sharingcenter.de. Those queries appear to be returning a wild card entry of 80.92.66.130 for ns1 and ns2.sharingcenter.de. There is no name server

Re: dhcp Unable to add forward map from..connection refused

2010-10-08 Thread Lyle Giese
You are telling dhcp to talk to your DNS server at ip address 192.168.1.250 and it's not listening on that ip address. According to your named.conf, it's only listening on 127.0.0.1. Plus you need an A record for ns.localzone.local. Lyle Giese LCR Computer Services, Inc. tangonig..

Re: Bind and blacklist IP file

2010-10-11 Thread Lyle Giese
Alans wrote: > Hello, > > Is it possible for bind dns to check the queries, if the returned answer > is existed in a file that contains blacklisted IPs then block it? > > One more thing, from where we can get/buy updated lists of categorized > IPs/websites, > like Gaming, Porn, Social...? > > Thank

Re: DNS Propagation

2010-10-14 Thread Lyle Giese
you do need to reply to the list and I sometimes forget as this list server does not put the list in as the from address and my reader does not pick that up. Lyle Giese LCR Computer Services, Inc. João Alberto Kuchnier wrote: > Sorry about that. The domain is dataprom.com. > > ns1.dat

Re: DNS Propagation

2010-10-14 Thread Lyle Giese
tions, scroll down and under More Domain Options, click on Manage Name Servers. This is where you manage the glue records for your name servers. Lyle Giese LCR Computer Services, Inc. João Alberto Kuchnier wrote: > Lyle, > > Domain registrar like Network Solutions? My domain account is se

Re: DNS Propagation

2010-10-14 Thread Lyle Giese
3 > Oct 14 15:31:08 ns2 named[503]: error (unexpected RCODE SERVFAIL) > resolving '21.76.60.212.in-addr.arpa/PTR/IN': 212.60.66.245#53 > > Can you help me to fix this issues? > > João K. > Google is your friend! Please use it. You have mistakes of some sort in your named.c

dnsexperiment.net

2010-10-23 Thread Lyle Giese
Liquid Web. Lyle Giese LCR Computer Services, Inc. Oct 22 16:32:42 linux2 named[20883]: client 69.167.186.59#45185: view external: query (cache) 'ofw4blrqy4.cache.lab.dnsexperiment.net/A/IN' denied Oct 22 16:32:43 linux2 named[20883]: client 69.167.186.59#35522: view ext

Re: How does Yahoo/Google find unknown domains?

2010-11-07 Thread Lyle Giese
owledge or access in this area. Yahoo's Slurp is a misbehaved robot(IMHO). But it does honor robots.txt. I also put in an index.html that redirects accidential visitors to my commerical business homepage. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How does Yahoo/Google find unknown domains?

2010-11-09 Thread Lyle Giese
, > Verizon, DTag and Orange). Maximal I can have 64 x 10 GE with my > Transmode TS System but then I can install my own BPOP. > > Thanks, Greetings and nice Day/Evening > Michelle Konzack > > Despite how I feel about Yahoo's SLURP engine, it still honors rob

Re: about the zone file management

2010-11-29 Thread Lyle Giese
Or nsupdate Lyle Giese LCR Computer Services, Inc. philippe.simo...@swisscom.com wrote: > Hi > > if i good understand your question maybe the answer is : > rndc freeze / thaw > > Philippe > > > >> -Original Message- >> From: bind-

Re: Bind not returning A record

2010-12-22 Thread Lyle Giese
roper answer. There is no A record for www.kwsp.gov.my. It's been setup as a CNAME to www.yu.kwsp.gov.my and you have received that answer. As far as those errors go, those are probably errors in their setup. Lyle Giese LCR Computer Services, Inc. __

Re: bind 9.7.2-P3 does not resolve www.microsoft.com

2010-12-28 Thread Lyle Giese
ael > >From the Chicago area, I get 'Truncated, retrying in TCP mode' and then a connection timeout when doing: dig any microsoft.com @ns[12345].msft.net This however works: dig any www.microsoft.com @ns[12345].msft.net But it returns a cname entry to toggle.www.ms.ada

Re: to route specific dns query to specific dns server

2010-12-29 Thread Lyle Giese
rver, so noone outside your internal network will know about the microsoft domain. The book has examples plus syntax and examples that will cover the rest of your questions. Lyle Giese LCR Computer Services, Inc. Riccardo Castellani wrote: >Hopefully the microsoft domain is a name that is no

Re: to route specific dns query to specific dns server

2010-12-29 Thread Lyle Giese
In re-reading this, I do hope you realize that where I said 'the microsoft dns servers', it means 'YOUR dns servers on YOUR microsoft servers'. If setup correctly, only queries for your mymsdomain.local will be sent to YOUR microsoft servers for the answer. Lyle Ricca

Re: Dynamic zone...

2010-12-31 Thread Lyle Giese
ith a cname in my zone: remote.abc.com 3600 in cname remote1.homedns.org And use a dynamic dns client on the laptop. Then you don't even care what OS is on the laptop, just use the proper client for the OS on it. Lyle Giese LCR Computer Ser

Re: host unreachable. -- a bit more info

2011-01-10 Thread Lyle Giese
rdinary dns lookup. > > j. > > Jay Please do the following two queries from the secondary server and show us the results: dig @146.6.211.1 +tcp arlut.utexas.edu dig @146.6.211.1 -tcp arlut.utexas.edu Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: host unreachable. -- a bit more info

2011-01-10 Thread Lyle Giese
roperly in the firewalls between the two sites. BTW, zone transfers are done using TCP because of their size. Small queries try to use UDP first. This is starting to sound more like the master is not allowing your site to get a zone transfer. That is an ACL issue for the master site. Lyle Giese LC

Re: nsupdate to all servers

2011-01-14 Thread Lyle Giese
ut so is your setup. Just move forward in that direction slowly and carefully and IMHO, you will end up with a stable and well running system without any hacks to trip over later. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-use

Re: help with rndc fail

2011-01-15 Thread Lyle Giese
>> secret "SUpgZRkpZVeteRiTIxQw6w=="; >>> }; >>> controls { >>> inet 127.0.0.1 port 953 >>> allow { 127.0.0.1; } keys { "rndc-key"; }; >>> }; >>> # rndc key end >>> # c

Re: [OT] does deliveragent must have a PTR RR

2011-01-31 Thread Lyle Giese
s as we fight SPAM. The best source for the Best Practices for this is at http://postmaster.aol.com Wonder through ALL of the pages that this area at AOL has to offer or you will miss some important points, like that 12 hrs is considered the min TTL for A and PTR records for mail servers. Less th

Re: notify-source-v6 and transfer-source-v6 for BIND 9.8

2011-03-28 Thread Lyle Giese
ND 9.8.0 Drop the curly brackets. notify-source-v6 2001:470:1f05:1ae0::1; transfer-source-v6 2001:470:1f05:1ae0::1; Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: IPv6 prefix length error

2011-04-28 Thread Lyle Giese
the host OS. You have not specified the prefix length(compares to /24 for IPv4 cidr notation) in your network configuration for your IPv6 addresses. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread Lyle Giese
server on this machine. Do you have UDP and TCP ports 53 open to this server? You need both open. Lyle Giese LCR Computer Services, Inc. On 06/03/11 02:04, kshitij mali wrote: Hello ALL Please help me toubleshoot this bind ISSUE I am facing intermetent problem with some domains

Re: How to improve bind caching dns server performance

2011-06-10 Thread Lyle Giese
ucing the errors you see. There is nothing you can do to fix the errors you described. In addition, you should learn how to use dig +trace for troubleshooting these problems. Lyle ___ bind-users mailing list bind-users@lists.isc.org https://lists.is

Re: Problem resolving CNAME in BIND 9.8.0 and 9.8.0-P2

2011-06-10 Thread Lyle Giese
ts.isc.org/mailman/listinfo/bind-users From here, I can not resolve vm-nldap-nl.hb.se with dig 9.7.3 using the +trace option. Lyle Giese LCR Computer Services, Inc. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: I can't resolve one domain: nhs.uk

2011-06-17 Thread Lyle Giese
on what I see, it would appear that you may be in China. (ns2.fengnet.com and ns1.zjinfo.gov.cn). If you are in fact doing this query from China, all bets are off for a successful query. Lyle Giese LCR Computer Services, Inc. ___ Please visit https

Re: forward name resolution OK, but reverse doesn't work ...

2011-06-17 Thread Lyle Giese
dns servers to get to the right answer. I noticed that you have three zones defined '.' 'arpa' and 'in.addr.arpa' showing 192.5.5.241 (f-root.servers.net) as the master. Are you getting zone transfers from there? I questi

Re: How to Setup a Name Servers visible on Internet?

2011-06-17 Thread Lyle Giese
he error "server not found". I think in this case your wildcard is adding an additional layer of confusion. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: nameserver registration

2011-06-18 Thread Lyle Giese
istrars to make sure proper glue records are maintained for any/all name servers used with a domain registered with them. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from t

Re: nameserver registration

2011-06-18 Thread Lyle Giese
, whoever owns example.com needs to create the glue records by registering ns1 and ns2.example.com as name servers. And if the owner of example.net does not make sure the name servers they want to use are not registered, then they should not be wondering why others will have trouble resolving exa

Re: Restoring BIND DNS configuration from TAR command

2011-06-19 Thread Lyle Giese
The authors of tar were partial to info over man. Try: info tar There is alot more information in the info pages than man pages for tar. Plus the original poster needs to learn how to use the command line a lot better. Lyle Giese LCR Computer Services, Inc. __

Re: How to Setup a Name Servers visible on Internet?

2011-06-20 Thread Lyle Giese
or zone 'metropolitanbuntu.co.za': not authoritative Jun 20 15:11:03 ns2 named[4797]: client 10.0.0.80#62174: view external-root: received notify for zone 'metropolitanbuntu.co.za': not authoritative Once you get the zones to load some of this may disappear. Lyle

Re: How to Setup a Name Servers visible on Internet?

2011-06-20 Thread Lyle Giese
On 06/20/11 12:31, Metropolitan College wrote: Maybe I'm still mix up somethings because after change the settings, the *grep named /etc/log/syslog* still showing errors: Jun 20 19:21:58 ns1 named[3178]: managed-keys-zone ./IN/internal: loading from master file 3bed2cb3a3acf7b6a8ef408420c

Re: How to Setup a Name Servers visible on Internet?

2011-06-21 Thread Lyle Giese
ers@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users Try removing the wild card entry in the metropolitanbuntu.co.za and see if that clears this error. Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/l

Re: bind restart needed to reflect changes to dynamic zone in multiple views

2011-06-24 Thread Lyle Giese
I, I have an internal rbl that I use here. I store the zone data in a postgres sql database and do the updates to it there. The two hosts that serve the data run rbldnsd. I have written perl scripts to periodicly pull a copy of the database and parse that into text files compa

Re: bind restart needed to reflect changes to dynamic zone in multiple views

2011-06-24 Thread Lyle Giese
On 06/24/11 09:21, Brian J. Murrell wrote: On 11-06-24 09:57 AM, Lyle Giese wrote: It's expected behavior in a way. Given your explanation, indeed. :-) You are probably making this change in the internal view and the internal named process knows about the change and reloads the zone.

Re: Problem with name resolving

2011-07-01 Thread Lyle Giese
mportant for troubleshooting this issue. It would appear that you setup the dyndns client on your debian box to update feldland.dyndns.org. But how and where do you update the other two? www.feldland.dyndns.org and test.feldland.dyndns.org Or did you forget to create those at dyndns.org? Lyle Giese

Re: about the reference

2011-07-01 Thread Lyle Giese
tion, comes from those glue records. In your scenerio, the results will be unpredicatable and random. Sometimes it will work and sometimes it won't work. It's important that the glue records be correct. Lyle Giese LCR Computer Services, Inc. __

Re: Problem with name resolving

2011-07-01 Thread Lyle Giese
On 07/01/11 08:50, Markus Feldmann wrote: Am 01.07.2011 14:51, schrieb Lyle Giese: Markus, To be sure, you know that nslookup and dig do NOT use the search parameter in /etc/resolv.conf. So when you do an nslookup or dig query, you have to use the fully qualified domain name(FQDN). PING uses

Re: Problem with name resolving

2011-07-01 Thread Lyle Giese
On 07/01/11 14:13, Markus Feldmann wrote: Am 01.07.2011 18:35, schrieb Lyle Giese: You are right in that you only need one host at dyndns.org to update your ip address, but you want to have two different websites. The proper way to do that is with CNAME entries pointing to the host you are

Re: Problem with name resolving

2011-07-02 Thread Lyle Giese
On 07/02/11 04:48, Markus Feldmann wrote: Am 01.07.2011 22:43, schrieb Lyle Giese: I don't know dyndns.com services that well. I don't know what they support or do not support directly. I added two Hosts at dyndns.org "test-feldland.dyndns.org" and "feldland.dyndns

Re: Problem with name resolving

2011-07-02 Thread Lyle Giese
On 07/02/11 04:37, Markus Feldmann wrote: Am 01.07.2011 22:43, schrieb Lyle Giese: On 07/01/11 14:13, Markus Feldmann wrote: Am 01.07.2011 18:35, schrieb Lyle Giese: You are right in that you only need one host at dyndns.org to update your ip address, but you want to have two different

Re: a death loop with DNS query

2011-07-06 Thread Lyle Giese
.com and ns2.dnsv5.com, you get four A records returned each. However at least from here and it appears from where you are doing the querys, these name servers are not responding. So Dig is just trying all A records returned. Lyle Giese LCR Computer Services, Inc

Re: DDNS propagation between views

2011-07-08 Thread Lyle Giese
d separate zone files. You need to plan and it helps to read the FAQs at ISC about this. http://www.isc.org/faq/item/191 http://www.isc.org/faq/item/182 Lyle Giese LCR Computer Services, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bin

Re: DDNS propagation between views

2011-07-08 Thread Lyle Giese
ink it's hard, but you do need to get your thought patterns in order. Lyle ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: questions on the dig info

2011-07-08 Thread Lyle Giese
rver finds www.qq.com. Second, why ns-tel1.qq.com (which is the authority nameserver for the zone of www.qq.com) returns nothing for this zone's NS query? Misconfiguration of ns-tel1.qq.com or it's not allowed to give you that answer. Hard to tell from here. The view from here do

Re: about the dig

2011-07-19 Thread Lyle Giese
D 9 has the built-in root list. BIND is the name of a collection of DNS related software and consists of many pieces, which named and dig are but two of them. To the best of my knowledge, only named has a root list built-in, which can be overwritten by the proper use of config directives i

Re: Bind time up.

2011-07-23 Thread Lyle Giese
On 07/23/11 09:33, Vbvbrj wrote: On 23.07.2011 17:24, Lyle Giese wrote: On 07/23/11 03:22, Vbvbrj wrote: Hello. I have a server at home, that runs Bind 9 dns and routes internal traffic to internet. Its working fine. When I'm out of home, I disconnect my home switch. In bind log appear

Re: Bind time up.

2011-07-23 Thread Lyle Giese
On 07/23/11 11:13, Vbvbrj wrote: On 23.07.2011 19:00, Lyle Giese wrote: On 07/23/11 09:33, Vbvbrj wrote: On 23.07.2011 17:24, Lyle Giese wrote: On 07/23/11 03:22, Vbvbrj wrote: Hello. I have a server at home, that runs Bind 9 dns and routes internal traffic to internet. Its working fine

  1   2   >