Re: DNS server Problem

2008-04-14 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE-
Hash: RIPEMD160

Ruel Luchavez wrote:
 Hi,
 
 I have BIND DNS Server in my freebsd, i keep on searching in google on how
 to restart it?
 is there a command to restart it like the squid and dhcp? or there is no
 command for it?

That is somewhat different to what you've asked about previously.  You
don't say if you're running the base system version of BIND or one from
ports.

In the former case, you can do:

  /etc/rc.d/named restart

In the latter case, that command should still work, but may not depending
on how it was all set up.  (The bind94 port doesn't come with its own rc
script -- I believe the expectation is that you should use the system script
by setting variables in /etc/rc.conf appropriately)

In either case you should be able to do:

  rndc reload 

so long as you've properly set up /etc/namedb/rndc.conf or /etc/namedb/rndc.key

Cheers,

Matthew

- -- 
Dr Matthew J Seaman MA, D.Phil.   Flat 3
  7 Priory Courtyard
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
  Kent, CT11 9PW, UK
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.8 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEAREDAAYFAkgDIDUACgkQ3jDkPpsZ+VbMBQCfXxg/zVy3A3WkIFkkCwaaFPBX
UDkAoLVno5AyqfbcBqa9lA/J1IJn+2Iv
=9bI5
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: DNS server Problem

2008-04-14 Thread John Clement
 I have BIND DNS Server in my freebsd, i keep on searching in google on
 how
 to restart it?
 is there a command to restart it like the squid and dhcp? or there is
 no
 command for it?

You might like to try

# rndc reload

Cheers

 Thanks in advanced..
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-
 [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server Problem

2008-04-14 Thread Mel
On Monday 14 April 2008 11:02:43 Ruel Luchavez wrote:

 I have BIND DNS Server in my freebsd, i keep on searching in google on how
 to restart it?
 is there a command to restart it like the squid and dhcp? or there is no
 command for it?

If you start reading here:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/system-administration.html

It will soon answer your question and you will pick up the basics of FreeBSD 
administration very quickly.

-- 
Mel

Problem with today's modular software: they start with the modules
and never get to the software part.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server Problem

2008-04-14 Thread Wojciech Puchar


I have BIND DNS Server in my freebsd, i keep on searching in google on how
to restart it?


/etc/rc.d/named restart


is there a command to restart it like the squid and dhcp? or there is no
command for it?

Thanks in advanced..
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server on firewall

2005-10-21 Thread Eric F Crist

On Oct 21, 2005, at 8:04 AM, kilim wrote:


Hi,

I'm getting a second machine next week and was wondering if the
following settup would be ok:

1st machine pf + NAT and also primary DNS
2nd machine as a secondary DNS

Now I know that its not the smartest thing to do, have primary DNS on
the firewall, but I'm thinking since the DNS is going to be chrooted,
it would be ok, no ?

What do you think ?

Thank you !


You're better off not installing and running a DNS server on your  
firewall.  I would recommend you simply turn your new machine into  
your primary DNS server and ask/pay someone to host a secondary  
server for you.


___
Eric F Crist  I am so smart, S.M.R.T!
Secure Computing Networks  -Homer J Simpson

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread cpghost
Sean Dicks wrote:
I can ping both NS servers but when it comes to pinging my domain it
doesn't ping. Ideas on what could be wrong?
 

You probably didn't configure the resolver library correctly.
In /etc/resolv.conf, you need to add the name server entries:
/etc/resolv.conf:
 domain example.com
 nameserver 1.2.3.4
 nameserver 5.6.7.8
Pinging the name servers using their IP addresses doesn't
test the resolver at all.
While that is the most likely cause, it is also possible that
you just bought a domain (or changed its records), and it
can take up to 72 hours for the DNS entries to propagate
throught the net.
Another reason is that you (or your net admin) blocked
ICMP at the firewall level, so you can't expect a reply
to a ping. You can test this easily by pinging, say,
www.altavista.com or another site that replies to pings.
Other reasons are possible too.
Sean
cpghost.
--
Cordula's Web. http://www.cordula.ws/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread Sean Dicks
I am only using dns forwarding. I already have default values in
/etc/resolv.conf from my ISP, do I have to add my 2 others and delete
the ones from the ISP or just leave it as is. I registered the domain
today when I whois rimouski-undernet.org I see right nameservers on
it. Doesn't that mean it has propagated?

Sean

On Sun, 11 Jul 2004 18:47:23 +0200, cpghost [EMAIL PROTECTED] wrote:
 
 
 Sean Dicks wrote:
 
 I can ping both NS servers but when it comes to pinging my domain it
 doesn't ping. Ideas on what could be wrong?
 
 
 You probably didn't configure the resolver library correctly.
 In /etc/resolv.conf, you need to add the name server entries:
 
 /etc/resolv.conf:
   domain example.com
   nameserver 1.2.3.4
   nameserver 5.6.7.8
 
 Pinging the name servers using their IP addresses doesn't
 test the resolver at all.
 
 While that is the most likely cause, it is also possible that
 you just bought a domain (or changed its records), and it
 can take up to 72 hours for the DNS entries to propagate
 throught the net.
 
 Another reason is that you (or your net admin) blocked
 ICMP at the firewall level, so you can't expect a reply
 to a ping. You can test this easily by pinging, say,
 www.altavista.com or another site that replies to pings.
 
 Other reasons are possible too.
 
 Sean
 
 cpghost.
 
 --
 Cordula's Web. http://www.cordula.ws/
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread Eric Crist
On Sunday 11 July 2004 12:35, Sean Dicks wrote:
 I am only using dns forwarding. I already have default values in
 /etc/resolv.conf from my ISP, do I have to add my 2 others and delete
 the ones from the ISP or just leave it as is. I registered the domain
 today when I whois rimouski-undernet.org I see right nameservers on
 it. Doesn't that mean it has propagated?

 Sean

No, it doesn't.  I can successfully perform a whois from here on your domain, 
but an nslookup/dig both fail.  Give it 72 hours to propagate across the net.  
While the whois server for your domain is correct, the root servers for 
the .org TLD have not been updated to know where to look for that domain's 
information.

If it's still not working 3 days from now, let us know and we'll see if we can 
help you from there.

-- 
Eric F Crist

Keep your pecker hard and your powder dry, and the world WILL turn.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread cpghost
Sean Dicks wrote:
I am only using dns forwarding. I already have default values in
/etc/resolv.conf from my ISP, do I have to add my 2 others and delete
the ones from the ISP or just leave it as is. I registered the domain
today when I whois rimouski-undernet.org I see right nameservers on
it. Doesn't that mean it has propagated?
 

The WHOIS and DNS databases are distinct,
and not necessarily synchronized. You need
to wait until your domain is added to the .ORG
zone file of the master .ORG DNS Server
(that normally happens every 12 hours from the
PIR registry, IIRC [I can be wrong here!]). It can
then take up to 72 hours to propagate to the other
.ORG DNS slaves, and also to your ISPs DNS servers.
Just give it some time to propagate.
% dig rimouski-undernet.org
;  DiG 8.3  rimouski-undernet.org
;; res options: init recurs defnam dnsrch
;; res_nsend: Operation timed out
Yep, not yet visible here...
-cpghost.
--
Cordula's Web. http://www.cordula.ws/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread Len Conrad

No, it doesn't.  I can successfully perform a whois from here on your domain,
but an nslookup/dig both fail.  Give it 72 hours to propagate across the net.
propagation is a bogus idea when applied to DNS.  Like WMD and immediate 
threat when applied to Iraq.

As soon as the delegation and glue data for domain.tld is present in the 
.tld servers, that data is instantaneously available across all of Internet.

dig @NS_auth_for_tld domain.tld  any
Forget about whois data, it is operationally irrelevant for DNS 
operation.  whois protocol with whois servers, dns protocol with dns 
servers, ne'ver the twain meet.

Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread Eric Crist
On Sunday 11 July 2004 13:12, cpghost wrote:
 Just give it some time to propagate.

 % dig rimouski-undernet.org

 ;  DiG 8.3  rimouski-undernet.org
 ;; res options: init recurs defnam dnsrch
 ;; res_nsend: Operation timed out

 Yep, not yet visible here...

 -cpghost.

Something I didn't think about at my last reply, are you sure your DNS server 
is set up correctly?  Does it resolve it's own domains correctly, and is it 
able to answer queries about other domains?  I would check that while you 
were waiting for propagation.

-- 
Eric F Crist

Keep your pecker hard and your powder dry, and the world WILL turn.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread Len Conrad

Perhaps you need to do some research on the subject.
perhaps you need to clarify your vagary 
There are a series of DNS systems
???
For a public domain.tld, the only two servers involved are :
1. the servers authoritative for .tld to publish the delegation and glue 
records for domain.tld.

2. the servers authoritative for domain.tld to answer authoritatively.
Period. There are NO other servers involved, nor is there any propagation.
a domain needs to be added to before it will function correctly.
This is known as propagation.
the misnomer propagation is used by people who think DNS data needs time to 
be available, to propagate, over several days or a week, for all of 
Internet.  This is pure BS. There is no such concept in DNS.

Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2004-07-11 Thread Matthew Seaman
On Sun, Jul 11, 2004 at 01:53:22PM -0500, Len Conrad wrote:
 
 a domain needs to be added to before it will function correctly.
 This is known as propagation.
 
 the misnomer propagation is used by people who think DNS data needs time to 
 be available, to propagate, over several days or a week, for all of 
 Internet.  This is pure BS. There is no such concept in DNS.

For a brand new domain, you are exactly correct, or indeed for an RR
added to an existing domain.  For modification to any RR within a
previously existing domain there may well be a delay perceived by the
end user while waiting out the TTL of any old data cached in various
servers between him and the authoritative servers.  Those TTLs are
typically somewhere between an hour and several days.  It's not
actually a propagation delay, but the effect is much the same.

As the administrator of a zone, you can avoid or mitigate the delay by
dropping the TTL on any zone sufficiently far in advance of any
important changes.  You will see DNS traffic to your server increase
somewhat as network caches invalidate their stored data more often,
but that's the price of getting the fresh data out there promptly.

The worst case is where the NS records in the parent zone are modified
to point to a new set of authoritative servers, but the previous
authoritative servers are neither shut down nor loaded with the up to
date zone data.  A cache may keep referring back to the old servers
and refreshing itself with what it has no way of telling is old data
for some time.  It's a good idea when changing the servers for a
domain to make sure both the old and the new servers carry the latest
zone data for some suitable overlap period.

Cheers,

Matthew 

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpOgzGztlAuO.pgp
Description: PGP signature


Re: DNS server

2004-07-11 Thread Kevin Stevens
On Jul 11, 2004, at 12:46, Matthew Seaman wrote:
On Sun, Jul 11, 2004 at 01:53:22PM -0500, Len Conrad wrote:
a domain needs to be added to before it will function correctly.
This is known as propagation.
the misnomer propagation is used by people who think DNS data needs  
time to
be available, to propagate, over several days or a week, for all of
Internet.  This is pure BS. There is no such concept in DNS.
And FYI, speaking of DNS updating:
http://slashdot.org/article.pl?sid=04/07/11/ 
1741225mode=threadtid=126tid=95

KeS
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: DNS Server Farm

2003-08-04 Thread Max Clark
For recursive lookups you should only be looking at djbdns's dnscache
(http://cr.yp.to).

As far as load balancers go, my preference has always been hardware (ASIC)
based appliances such as the Alteon AceDirector or the Foundry ServerIron.
Both are rock solid and will handle more traffic than you could imagine.

Max

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of En Sabah Nur
Sent: Sunday, August 03, 2003 9:40 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: DNS Server Farm


Hi there

Our company has inherited/bought an ISP outfit which has around 2
million subscribers. Among our first priority is to upgrade the DNS
service which has been abysmal according to the users

Can someone give me a head-start on a recommended configuration for such
DNS outlay which serves 2M+ dial-up users?
Are multiple Bind boxes with a hardware load-balancer sufficient and up
to the job? If so, which hardware solution (load-balancer) should I be
shortlisting?

Most of the users' complains has been requests time-outs and bad
uptimes, which suggest bad load management and redundancy. As I am most
comfortable with FreeBSD, and I intend to deploy it across the boxes we
inherited with the deal. Having said that, we do have some Solaris
boxens which is lying around.

Any ideas and guides is greatly appreciated

Thanks

--
En Sabah Nur [EMAIL PROTECTED]

--
Living in LA is like not having a date on Saturday night.
-- Candice Bergen

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2003-07-30 Thread Jerry M. Howell II
hi
 
how i can install and configure DNS server in freeBSD???plzz tell me
step by step

It's outlined in many howto's and the handbook as well as google. Also
the are some classes out there. If you work at it hard enough you might
be suprised how easy it is to set up.
-- 
Jerry M. Howell II
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2003-07-30 Thread Joshua Oreman
On Wed, Jul 30, 2003 at 04:07:37PM -0600 or thereabouts, Jerry M. Howell II wrote:
 hi
  
 how i can install and configure DNS server in freeBSD???plzz tell me
 step by step
 
 It's outlined in many howto's and the handbook as well as google. Also
 the are some classes out there. If you work at it hard enough you might
 be suprised how easy it is to set up.

Check out the DNS HOWTO at www.tldp.org. Has a few Linuxisms but still very good.

-- Josh

 -- 
 Jerry M. Howell II
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: DNS server

2002-10-26 Thread Unix Tools
Hi,
Automate the conf file creation. I have done it.A perl script OR a c script
will do.

Thank You.

- Original Message -
From: ann kok [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 24, 2002 09:15 PM
Subject: DNS server


 Hi all

 I have question about DNS server:

 I have more than 300 domain names and want to all
 domain names pointing to one ipaddress

 I don't want to create 300 zones separately

 ls it possible to do it one zone to have this feature?

 Thank you for your help


 __
 Do you Yahoo!?
 Y! Web Hosting - Let the expert host your web site
 http://webhosting.yahoo.com/

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-questions in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: DNS server

2002-10-24 Thread Josef Grosch
On Thu, Oct 24, 2002 at 03:03:21PM -0500, Kevin D. Kinsey, DaleCo, S.P. wrote:
 From: ann kok [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, October 24, 2002 10:45 AM
 Subject: DNS server
 
 
  Hi all
 
  I have question about DNS server:
 
  I have more than 300 domain names and want to all
  domain names pointing to one ipaddress
 
  I don't want to create 300 zones separately
 
  ls it possible to do it one zone to have this feature?
 
 I don't think so...maybe it's time to pay the piper.
 The good news ... I have been wrong before.
 
 OTOH, if they're all pointing to the same IP, the zone files wouldn't
 be near as hard as named.conf, you could almost use cp
 and a replace tool and have 300 zone files up in a day...

30 lines of perl should do the job.


Josef

-- 
  == Copyright(c) 2002 by Josef Grosch. All rights reserved. ==
  == ==
Josef Grosch   | Another day closer to a | FreeBSD 4.6.2
[EMAIL PROTECTED] |   Micro$oft free world  | www.bafug.org

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: DNS server

2002-10-24 Thread Kevin D. Kinsey, DaleCo, S.P.
From: ann kok [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 24, 2002 10:45 AM
Subject: DNS server


 Hi all

 I have question about DNS server:

 I have more than 300 domain names and want to all
 domain names pointing to one ipaddress

 I don't want to create 300 zones separately

 ls it possible to do it one zone to have this feature?

I don't think so...maybe it's time to pay the piper.
The good news ... I have been wrong before.

OTOH, if they're all pointing to the same IP, the zone files wouldn't
be near as hard as named.conf, you could almost use cp
and a replace tool and have 300 zone files up in a day...

Kevin Kinsey

 Thank you for your help






To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: DNS server

2002-10-24 Thread Kevin D. Kinsey, DaleCo, S.P.
- Original Message -
From: Josef Grosch [EMAIL PROTECTED]
To: Kevin D. Kinsey, DaleCo, S.P. [EMAIL PROTECTED]
Cc: ann kok [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Thursday, October 24, 2002 3:34 PM
Subject: Re: DNS server


 On Thu, Oct 24, 2002 at 03:03:21PM -0500, Kevin D. Kinsey, DaleCo,
S.P. wrote:
  From: ann kok [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Thursday, October 24, 2002 10:45 AM
  Subject: DNS server
 
 
   Hi all
  
   I have question about DNS server:
  
   I have more than 300 domain names and want to all
   domain names pointing to one ipaddress
  
   I don't want to create 300 zones separately
  
   ls it possible to do it one zone to have this feature?
 
  I don't think so...maybe it's time to pay the piper.
  The good news ... I have been wrong before.
 
  OTOH, if they're all pointing to the same IP, the zone files
wouldn't
  be near as hard as named.conf, you could almost use cp
  and a replace tool and have 300 zone files up in a day...

 30 lines of perl should do the job.


#/usr/bin/perl

case ((perl==$ReplaceTool))

Might offend some to call it that, but I'm sure it would
work also.:-)

KDK


 Josef

 --
   == Copyright(c) 2002 by Josef Grosch. All rights reserved. ==





To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: dns server

2002-09-18 Thread Charles Pelletier

wow,

I'd like to thank everyone who keeps sending me replies to my dns questions.
Every last one has been of some help and I will be using all the reference
material and links sent me when I begin the work. My intent had been to use
my small 3 PC network as a test victim for the real thing: a 30 PC network
which I am responsible for.
Thanks again for the continued help,
--charlie pelletier
--litmus(mp3.com/litmus)
- Original Message -
From: Jimi Thompson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, September 18, 2002 9:52 PM
Subject: Re: dns server


 You're much better off not getting into the complexity of DNS for 3
clients.
 You're talking about having to set up the start of authority, forward and
 reverse zones, etc.  I'll refer you to the bind website for the
information.
 Better yet, just go to your local book store and look at the BIND book by
 O'Reilly.  DNS is rather a pain in the behind and not a task worth
tackling
 for 3 workstations.  You can manage that simply from the host file.  No
DNS
 needed.

 HTH,

 Jimi
 - Original Message -
 From: [EMAIL PROTECTED]
 Newsgroups: sol.lists.freebsd.questions
 Sent: Friday, September 13, 2002 8:04 PM
 Subject: dns server


  curious:
  what advantage is there in building my own dns server over just setting
  static IP's for my internal network? do the advantages really only exist
 for
  larger networks (my internal home network consists of only 3 computers
 other
  than the gateway)?
  --charlie pelletier
  --litmus(mp3.com/litmus)
 
 
 
  To Unsubscribe: send mail to [EMAIL PROTECTED]
  with unsubscribe freebsd-questions in the body of the message
 





To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message