Stats collection script for BIND 9.5 (and greater?)

2008-12-11 Thread Peter Yardley
Hi, I have written a script to collect data from the XML stats channel of a Bind 9.5+ DNS server. It works with Cricket and should work with MRTG and Cacti. You can get it here... http://members.iinet.com.au/~pyard...@ihug.com.au/ in the projects section under 'Bind 9.5 DNS Stats', or this is

Re: ISC launches new website and mailing list manager

2008-12-11 Thread Sue Graves
You probably saw this, but the 9.5 html version is working now. https://www.isc.org/software/bind/documentation/arm95 Sue Matus UHLAR - fantomas wrote: > On 17.11.08 05:10, Mark Andrews wrote: >> https://www.isc.org/software/bind/documentation >> which is in the bullet list as >> Documentation and

Re: DDNS on SOA

2008-12-11 Thread Mark Andrews
In message <20081211202922.ga32...@sol.planetnet.org>, Peter Kringle writes: > Is it possible to update the SOA record of a zone via ddns update? Or do I= > have to shut bind down complete to change the SOA. =20 > Specifically the refresh timer. > > Thanks Yes. Just make sure that the

Re: recursion for reverse/in-addr.arpa zones

2008-12-11 Thread Ben Croswell
Are there NS records and/or zone forwarding for the 10.131.10.0? If there is the servers will look to the most specfic domain. -- -Ben Croswell On Thu, Dec 11, 2008 at 4:38 PM, Todd Snyder wrote: > Good day, > > We are working on an odd issue. I can provide more detail as necessary, > but don

recursion for reverse/in-addr.arpa zones

2008-12-11 Thread Todd Snyder
Good day, We are working on an odd issue. I can provide more detail as necessary, but don't want to fill this email with snips of useless stuff. All IP's/names provided are made up, as they don't matter in this problem as far as I can tell. This is more a functional question than a specific ope

Re: DDNS on SOA

2008-12-11 Thread Chris Buxton
Yes, it is possible to change the SOA record by dynamic update. Just add a new one. Be careful about the serial number, though - the number may change due to other updates between the time you check it and the time you set it in the new SOA record, so add a sufficiently large increment. C

DDNS on SOA

2008-12-11 Thread Peter Kringle
Is it possible to update the SOA record of a zone via ddns update? Or do I have to shut bind down complete to change the SOA. Specifically the refresh timer. Thanks -- Peter (K0VX) http://www.planetnet.org 2CFF D38A 3F42 B215 2098 DA89 26C4 A1B6 3C6E 199F signature.asc Description: Digit

Re: dnsperf and BIND memory consumption

2008-12-11 Thread JINMEI Tatuya / 神明達哉
At Thu, 11 Dec 2008 11:25:42 +0300, Dmitry Rybin wrote: > OK. I just make bind from src with ./configure --enable-threads & gcc > option -static. > > file /usr/local/sbin/named-test > /usr/local/sbin/named-test: ELF 64-bit LSB executable, x86-64, version 1 > (FreeBSD), for FreeBSD 7.1 (701100),

Re: Question about Records not authoritative for

2008-12-11 Thread Ben Croswell
This is exactly what we have done in the past to mitigate malware. Just load somebaddomain.com with no A records or with a wildcard pointing to 127.0.0.1. -- -Ben Croswell On Thu, Dec 11, 2008 at 11:29 AM, Baird, Josh wrote: > You could just create an authoritative zone for the domain on you

Re: setup default DNS server with only one record

2008-12-11 Thread Jonathan Petersson
You want to manipulate the "." zone. The config you have should be valid, just point your "." zone in named.conf to the zone file. /Jonathan On Thu, Dec 11, 2008 at 1:08 AM, Chris Henderson <[EMAIL PROTECTED]>wrote: > I am trying to setup a default DNS server for one of my restricted > network s

Re: setup default DNS server with only one record

2008-12-11 Thread Matthew Pounsett
On 11-Dec-2008, at 04:08 , Chris Henderson wrote: I am trying to setup a default DNS server for one of my restricted network segment so that no matter what people type in their browser, they will be redirected to a single IP address or the hostname. The zone file that I have setup is partially

RE: Question about Records not authoritative for

2008-12-11 Thread Baird, Josh
You could just create an authoritative zone for the domain on your internal view to override recursion. You can then create a wildcard 'A' record or such to resolve to 127.0.0.1, etc. Josh From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Casartello, Thomas Sent: Thursday, Dec

Question about Records not authoritative for

2008-12-11 Thread Casartello, Thomas
I was wondering if Bind allows you to override certain records for zones we are not authoritative for. Essentially we have a virus that some users have been infected with, and we want to temporarily blockout the domain name of the server that this virus connects to to send its information out. (

Re: DNS issues with tmomail.net

2008-12-11 Thread Sam Wilson
In article <[EMAIL PROTECTED]>, David Ford <[EMAIL PROTECTED]> wrote: > Sam Wilson wrote: > > I hadn't noticed it but all the records in the response to a request for > > the MX for tmomail.net have a TTL of 60 seconds, that's the MX record, > > the NS authority record and the additional A reco

Re: DNS Master server migration.

2008-12-11 Thread Anton Korotin
On Thu, Dec 11, 2008 at 9:00 AM, Chris Henderson <[EMAIL PROTECTED]> wrote: > I'm migrating away from my 12 year old Solaris master DNS server to a > new Linux based master server. I'm looking for suggestions on how to > make the transition smooth without any downtime. The IP address of the > new s

Re: dnsperf and BIND memory consumption

2008-12-11 Thread Dmitry Rybin
max-cache-size 64M; # /usr/bin/limits -v 1200M /usr/local/sbin/named-test -c /etc/namedb/named.conf Over 10 minutes of work and core dumped: (gdb) bt #0 0x0058c3fc in thr_kill () #1 0x005c5a68 in abort () #2 0x00597af7 in malloc () #3 0x0056645a in isc_mem_crea

setup default DNS server with only one record

2008-12-11 Thread Chris Henderson
I am trying to setup a default DNS server for one of my restricted network segment so that no matter what people type in their browser, they will be redirected to a single IP address or the hostname. The zone file that I have setup is partially working - it resolves .mydomain.com to a single IP add

Re: dnsperf and BIND memory consumption

2008-12-11 Thread Dmitry Rybin
OK. I just make bind from src with ./configure --enable-threads & gcc option -static. file /usr/local/sbin/named-test /usr/local/sbin/named-test: ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD), for FreeBSD 7.1 (701100), statically linked, FreeBSD-style, not stripped fresh system (yesterd