Re: RPZ Errors

2013-11-12 Thread Alan Clegg

On Nov 12, 2013, at 12:13 AM, Crist Clark cjc+bind-us...@pumpky.net wrote:

 From the initial mail: This is BIND 9.9.2 (Infoblox 6.7.3).
 
 No huge increase in resource usage noted.

Has the vendor in question provided a response?

Having worked on Frankenstein versions of BIND in the past (Hi, Redhat!), I’d 
be leery of answering this question as an “outsider”.  Certainly not with an 
authoritative answer.

AlanC
-- 
Alan Clegg | +1-919-355-8851 | a...@clegg.com



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Can I have Inbound load balancing achieved with below settings

2013-11-12 Thread Manish Rane
Hey Fellas,

I am thinking on this perspective need some help on this. Please guide me
if I am wrong or let me know if I can achieve the stuff

1. I have a firewall with TWO ISP links, lets assume ISP1 and ISP2. And
then I have internal webserver www.foobar.com with IP 192.168.1.10
2. I have natted 192.168.1.10 with ISP1 and ISP2 Public IP addresses

1.1.1.1 [ISP1] == 192.168.1.10  Port 80
2.2.2.2 [ISP2] == 192.168.1.10 Port 80


3. NS server for foobar.com is on Internet lets assume ns.xyz.com. Added a
sub-domain www.foobar.com
4. Now this sub-domain with www.foobar.com is on BIND server and kept it in
my network say IP 192.168.1.20 which is again natted with Public IP
addresses for ISP1 [1.1.1.10] and ISP2 [2.2.2.20]
5. So, if both the links are up, client coming on either of the link would
get both the IP addresses
6.Assume if ISP1 goes down, client coming on ISP1 would never be able to
reach; hence as per DNS protocol will try for another link and come on ISP2
and then probably get an IP address of Link 2 i.e. 2.2.2.2.
7. I am sure in this case he would get both the IP addresses even if he is
coming from other link; that's what puzzles me or wondering if I can return
only IP of ISP2 in case of IPS1 is down? That way I achieve HA or
loadbalance?
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users