Re: Debug Approach Help?

2021-08-11 Thread Tim Daneliuk via bind-users
On 8/11/21 12:49 PM, Richard T.A. Neal wrote:
> There's a very good article on the ISC website which discusses BIND logging:
> https://kb.isc.org/docs/aa-01526
> 
> I recommend reading and implementing the logging as per their suggestion 
> (backup or make a note of your current logging configuration options in case 
> you want to revert in future) and then start looking through those logs the 
> next time your on-prem slave stops resolving.
> 
> Once you spot any errors in the look you can post them here on the list and 
> others will try and help explain what may be happening.
> 
> Richard.

Perfect, will do, and thanks...
-- 

Tim Daneliuk tun...@tundraware.com
PGP Key: http://www.tundraware.com/PGP/
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: Debug Approach Help?

2021-08-11 Thread Richard T.A. Neal
There's a very good article on the ISC website which discusses BIND logging:
https://kb.isc.org/docs/aa-01526

I recommend reading and implementing the logging as per their suggestion 
(backup or make a note of your current logging configuration options in case 
you want to revert in future) and then start looking through those logs the 
next time your on-prem slave stops resolving.

Once you spot any errors in the look you can post them here on the list and 
others will try and help explain what may be happening.

Richard.

-Original Message-
From: bind-users  On Behalf Of Tim Daneliuk 
via bind-users
Sent: 11 August 2021 3:56 pm
To: bind-users@lists.isc.org
Subject: Debug Approach Help?

I am running bind 9.16.19 on two FreeBSD 13-STABLE instances.  The master is on 
a Digital Ocean droplet and works fine.  The slave is hosted on physical 
machine here in our offices.

This has always worked flawlessly until recently.   Periodically, the slave
refuses to resolve names like 'git.freebsd.org' and we have to restart bind on 
the slave to get it working correctly again.

Rather than using cron to restart bind every hour (!), we'd like to get to the 
root of the problem.  The slave machine is at the end of a Comcast Business 
pipe and their execrable security edge garbage may be implicated.

We could use some help on an approach to debugging this.  Having never had 
significant bind problems over 20 years of use, we literally have no named 
debugging experience...

TIA,
--

Tim Daneliuk tun...@tundraware.com
PGP Key: http://www.tundraware.com/PGP/
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Debug Approach Help?

2021-08-11 Thread Tim Daneliuk via bind-users
I am running bind 9.16.19 on two FreeBSD 13-STABLE instances.  The master
is on a Digital Ocean droplet and works fine.  The slave is hosted on
physical machine here in our offices.

This has always worked flawlessly until recently.   Periodically, the slave
refuses to resolve names like 'git.freebsd.org' and we have to restart bind
on the slave to get it working correctly again.

Rather than using cron to restart bind every hour (!), we'd like to get to
the root of the problem.  The slave machine is at the end of a Comcast
Business pipe and their execrable security edge garbage may be implicated.

We could use some help on an approach to debugging this.  Having never had
significant bind problems over 20 years of use, we literally have no named
debugging experience...

TIA,
-- 

Tim Daneliuk tun...@tundraware.com
PGP Key: http://www.tundraware.com/PGP/
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users