Re: Questions on how to setup Reverse DNS in bind 9

2016-07-20 Thread Matus UHLAR - fantomas

On 19.07.16 19:28, Spork Schivago wrote:

I got the A records set back up again.   Here's the important stuff I think.

Does it look right?


yes, although you may safely skip the localhost, and you may skip ".jetbbs.com."
or replace simply "jetbbs.com." by "@" 
(if cpannel supports that - it should)


e.g.


jetbbs.com. 86400   IN  NS   ns1.jetbbs.com.


@   86400   IN  NS  ns1


For the reverse DNS pointer records, I think when I contact GoDaddy, I'm
going to ask if they can setup a PTR record so 104.238.117.105 points to
franklin.jetbbs.com and 132.148.11.44 points to franklin.jetbbs.com as
well.   I think that'll help with mail filtering and stuff.


that will help your mail in getting delivered in the first place ;-)


On Tue, Jul 19, 2016 at 5:45 PM, Spork Schivago 
wrote:

I had removed the A record after it didn't work.   I was speaking in past
tense there.  One of the DNS checking tools I was using went nuts
complaining about something not being right so I undid my changes.   I'll
recreate it.


I'd like to see which tool and what complaints were they.
some tools are good, some insist on useless things and some miss important
things...


The idea behind having two IP addresses and setting up the DNS servers was
because I wanted to eventually setup some redundancy and play around with
running a server out of my house.   I'll create the second A record for
jetbbs.com again but when we get into the new house, I'll change it so
the IP address for the second A record points to my server at the house.
That way, if one server goes down, people can still connect.   It'd be a
great opportunity to learn this stuff a bit more I think.


good idea.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg sausage and Spam, that's not got much Spam in it.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Questions on how to setup Reverse DNS in bind 9

2016-07-20 Thread Spork Schivago
Matus UHLAR - fantomas,

I don't remember the tools, but I know that the way cPanel handles stuff
with Apache, it broke my website for me.   Using the cPanel / WHM
interface, I could tell Apache to listen on one IP or the other, not both,
unfortunately.   Some people (my wife's cell for instance) could make it to
my site, but on her laptop, I could not.   I believe this is because I
redirect everything to port 443 and the SSL certs were setup for the first
IP, not the second.   I believe when I assigned the second IP address to
the A record jetbbs.com, sometimes I'd go to the first IP and Apache would
pick it up, other times, I'd go to the second IP and Apache wouldn't know
how to handle it.   Maybe it was because the SSL certs were created when I
only had the one IP, I don't know.   But it really messed things up and I
had to remove the second IP again.   I think if I manually edited the
httpd.conf file and regenerated the SSL certs, things might have started
working.

Ken

On Wed, Jul 20, 2016 at 4:14 AM, Matus UHLAR - fantomas 
wrote:

> On 19.07.16 19:28, Spork Schivago wrote:
>
>> I got the A records set back up again.   Here's the important stuff I
>> think.
>>
>> Does it look right?
>>
>
> yes, although you may safely skip the localhost, and you may skip ".
> jetbbs.com."
> or replace simply "jetbbs.com." by "@" (if cpannel supports that - it
> should)
>
> e.g.
>
> jetbbs.com. 86400   IN  NS   ns1.jetbbs.com.
>>
>
> @   86400   IN  NS  ns1
>
> For the reverse DNS pointer records, I think when I contact GoDaddy, I'm
>> going to ask if they can setup a PTR record so 104.238.117.105 points to
>> franklin.jetbbs.com and 132.148.11.44 points to franklin.jetbbs.com as
>> well.   I think that'll help with mail filtering and stuff.
>>
>
> that will help your mail in getting delivered in the first place ;-)
>
> On Tue, Jul 19, 2016 at 5:45 PM, Spork Schivago 
>> wrote:
>>
>>> I had removed the A record after it didn't work.   I was speaking in past
>>> tense there.  One of the DNS checking tools I was using went nuts
>>> complaining about something not being right so I undid my changes.   I'll
>>> recreate it.
>>>
>>
> I'd like to see which tool and what complaints were they.
> some tools are good, some insist on useless things and some miss important
> things...
>
> The idea behind having two IP addresses and setting up the DNS servers was
>>> because I wanted to eventually setup some redundancy and play around with
>>> running a server out of my house.   I'll create the second A record for
>>> jetbbs.com again but when we get into the new house, I'll change it so
>>> the IP address for the second A record points to my server at the house.
>>> That way, if one server goes down, people can still connect.   It'd be a
>>> great opportunity to learn this stuff a bit more I think.
>>>
>>
> good idea.
> --
> Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> - Have you got anything without Spam in it?
> - Well, there's Spam egg sausage and Spam, that's not got much Spam in it.
>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Questions on how to setup Reverse DNS in bind 9

2016-07-20 Thread Matus UHLAR - fantomas

On 20.07.16 21:40, Spork Schivago wrote:

I don't remember the tools, but I know that the way cPanel handles stuff
with Apache, it broke my website for me.   Using the cPanel / WHM
interface, I could tell Apache to listen on one IP or the other, not both,
unfortunately.   Some people (my wife's cell for instance) could make it to
my site, but on her laptop, I could not.   I believe this is because I
redirect everything to port 443 and the SSL certs were setup for the first
IP, not the second.


huh? SSL certs should be created with required hostname, e.g.
franklin.jetbbs.com in CommonName - not the IPs. 


you just need transfer both public and private keys to other server...
just watch out if you don't make the private key available to others.


  I believe when I assigned the second IP address to
the A record jetbbs.com, sometimes I'd go to the first IP and Apache would
pick it up, other times, I'd go to the second IP and Apache wouldn't know
how to handle it.   Maybe it was because the SSL certs were created when I
only had the one IP, I don't know.   But it really messed things up and I
had to remove the second IP again.   I think if I manually edited the
httpd.conf file and regenerated the SSL certs, things might have started
working.


this is your problem. don't generate ssl keys when adding IPs.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users