Re: Server mostly caching-only + acache

2008-12-23 Thread yata
On 22 Gru, 23:51, JINMEI Tatuya / 神明達哉 wrote: > At Mon, 22 Dec 2008 01:47:37 -0800 (PST), > > y...@irc.pl wrote: > > I think to change to version 9.4.3 because of interesing feature > > "acache". > > I would like to speed up response time for my clients. > > > My DNS server is mostly (95%) caching

Re: logs

2008-12-23 Thread Chris Buxton
On Dec 20, 2008, at 11:59 PM, billious wrote: Chris Buxton says what?: /etc/default/sysklogd Would that not be: /etc/default/syslogd ? Sorry, you are correct. My mistake. Chris Buxton Professional Services Men & Mice ___ bind-users mailing list b

Using bind 9.5.0 with Active directory

2008-12-23 Thread Nico De Ranter
Hi, I need to create a new Windows 2008 domain in a network with an existing Bind setup. I know I need dynamic DNS for the Windows domain. I also know I need GSS support to get secure dynamic updates and this is supported in Bind 9.5.0. However I can't figure out how to configure everything prop

dynamic updates

2008-12-23 Thread wes
Would a dynamically created A record override an explicitly established one in the zone file? If so, can I deny dynamic updates for specific hostnames? I would like to allow my Windows computers to dynamically update their names, but I don't want to have a situation where a computer named "www" do

Re: dynamic updates

2008-12-23 Thread Chris Thompson
On Dec 23 2008, wes wrote: Would a dynamically created A record override an explicitly established one in the zone file? After the event, there's no difference between a record that was dynamically created and one that was "explicitly established", by which I take you to mean one created by ed

Re: dnsperf and BIND memory consumption

2008-12-23 Thread Doug Barton
On Mon, 22 Dec 2008, ivan jr sy wrote: I have confirmed that the ARCH=x86_64 trick resolved the issues with my configuration. I have tested this with an authoritative and recursive dns/bind95 port with modified Makefile. I have not fully tested the acl.c and iptable.c since the patch suit my

Re: Server mostly caching-only + acache

2008-12-23 Thread JINMEI Tatuya / 神明達哉
At Tue, 23 Dec 2008 01:34:35 -0800 (PST), y...@irc.pl wrote: > > No, "acache" is specifically intended to be used for authoritative > > servers. It doesn't improve anything for a caching (only) server. > Just to be sure. > When my server start working and have clear memory and for example > clien

BIND 9.6.0 is now available.

2008-12-23 Thread Mark Andrews
BIND 9.6.0 is now available. BIND 9.6.0 is a development release of BIND 9. Bugs should be reported to bind9-b...@isc.org. BIND 9.6 has a number of new features over 9.5, including: Full NSEC3 support Automatic zone re-signing New update-policy

BIND 9.5.1 is now available.

2008-12-23 Thread Mark Andrews
BIND 9.5.1 is now available. BIND 9.5.1 is a maintenance release for BIND 9.5. BIND 9.5.1 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.5.1/bind-9.5.1.tar.gz The PGP signature of the distribution is at ftp://ftp.isc.org/isc/bind9/9.5.1/bind-9.5.1

Re: Using bind 9.5.0 with Active directory

2008-12-23 Thread Rob Austein
Four things must be done to allow Bind 9 to support GSS-TKEY: * kinit must work on the host which will run BIND 9. This means krb5.conf must be properly configured with the realm and locations of the Kerberos servers. * Bind 9 must be compiled with GSSAPI enabled. * Bind 9

Re: Using bind 9.5.0 with Active directory

2008-12-23 Thread Danny Mayer
Rob Austein wrote: > Four things must be done to allow Bind 9 to support GSS-TKEY: > > * kinit must work on the host which will run BIND 9. This means > krb5.conf must be properly configured with the realm and > locations of the Kerberos servers. > * Bind 9 must be compiled wit

General performance

2008-12-23 Thread Scott Haneda
Hello, I am working with a client of mine, who jumped right into developing a backend system for managing his arsenal of sites. I am not entirely sure what he is up to, but there is potential to have to add in 50,000 zones. From what I can gather, all the zones are the same, they all have

Re: General performance

2008-12-23 Thread Dawn Connelly
You can make a single generic file and reference that one file repeatedly in the named.conf in each zone definition. I do that frequently for private IP address space. But keep in mind that if there are any errors in the file, you loose EVERYTHING. You can also consider using "INCLUDE" statements i