RE: Named goes deaf

2009-01-08 Thread Deslatte, Curtis
I didn't see any replies to this question, however... I've noticed very similar behavior. After awhile the 9.5.0-P1 servers do this very same thing. The slaves do the same thing as well. You try a telnet to port 53 and zippo. Though they still resolve and forward. No ZTs... You can dig and a

[SPAM] Re:named’s “/dev/random" error on AIX

2009-01-08 Thread Fuhua Zhang
My AIX5.3 systerm does have a /dev/random and /dev/urandom: dns8:/#cd /dev dns8:/dev#ls -l *rand* crw-r--r--1 root system 39, 0 Dec 16 13:42 random crw-r--r--1 root system 39, 1 Dec 16 13:42 urandom and tzdns8:/#odmget CuDvDr | grep -p random CuDvDr: resourc

Re: named configuration

2009-01-08 Thread Chris Buxton
On Jan 8, 2009, at 1:59 PM, Oliver Block wrote: Am Donnerstag, 8. Januar 2009 19:10:58 schrieben Sie: If you instead just want to create sub.mydomain.org in the mydomain.org zone, all you have to do is add the allow-update (or update-policy) statement to your zone statement on the master. If I

Re: named configuration

2009-01-08 Thread Oliver Block
Thanks! Am Donnerstag, 8. Januar 2009 19:10:58 schrieben Sie: > If you instead just want to create sub.mydomain.org in the > mydomain.org zone, all you have to do is add the allow-update (or > update-policy) statement to your zone statement on the master. If I've understood the facts right, I hav

Re: named configuration

2009-01-08 Thread Chris Buxton
On Jan 8, 2009, at 7:09 AM, Oliver Block wrote: Hello everybody, I am responsible for a so called vServer. I did not pay much attention to the nameserver setup as yet. But now I'd like to configure our named correctly in order to use dynamic updates for subdomains later. preface: I hope yo

Re: problem with nsupdate

2009-01-08 Thread Chris Buxton
On Jan 8, 2009, at 1:47 AM, Oliver Block wrote: Would those errors be covered by the default category? Am Donnerstag, 8. Januar 2009 08:49:13 schrieben Sie: Oliver Block wrote: I CAN SEE NO ERROR MESSAGE. The server log is usually informative in these situations. That depends on what othe

Conflicting glue records?

2009-01-08 Thread David Forrest
Milo Hyson wrote: In our particular case, we have stale glue records for our name- servers that appear to be coming from a domain we host that is owned by someone else. Despite our best efforts, we have not been able to reach the owners and thus have not been able to get the host records changed a

Re: Conflicting glue records?

2009-01-08 Thread Matthew Pounsett
On 08-Jan-2009, at 03:41 , Dawn Connelly wrote: Right, but his question was regarding the host record for the name server. You tell the registrar the name and IP address of the name servers that are authoritative for the domain. The registrar then pushes those glue records to the root servers.

Re: BIND Security Advisory (CVE-2009-0025; Severity: Low)

2009-01-08 Thread David Coulthart
On Jan 7, 2009, at 2:32 PM, rob_aust...@isc.org wrote: Internet Systems Consortium Security Advisory. BIND: EVP_VerifyFinal() and DSA_do_verify() return checks. 7 January 2009 Versions affected: BIND 9.0 (all versions) BIND 9

named configuration

2009-01-08 Thread Oliver Block
Hello everybody, I am responsible for a so called vServer. I did not pay much attention to the nameserver setup as yet. But now I'd like to configure our named correctly in order to use dynamic updates for subdomains later. preface: I hope you don't mind that I obscure the output because I don'

Re: Conflicting glue records?

2009-01-08 Thread Milo Hyson
We have a working hypothesis. It appears that glue-records are set only when one configures a self-referential domain (e.g. example.com -- > ns.example.com), and they're only deleted if one explicitly asks the registrar to do so. In our particular case, it seems when the domain in question w

Re: Conflicting glue records?

2009-01-08 Thread Milo Hyson
I would think that any server-name should be permissible for any domain. However, the IP should only be used in the case of a self- referential entry (your first case). Is there any legitimate reason for someone to give an IP for a name- server that differs from the authoritative source? That

Re: Conflicting glue records?

2009-01-08 Thread Matus UHLAR - fantomas
> > On 07.01.09 19:14, Dawn Connelly wrote: > >> Each registrars push the information that they have. So if you have > >> apples.com with an NS record of ns1.dns.com==137.161.0.1 and > >> oranges.com with a NS record of ns1.dns.com=137.161.0.2 > On Thu, Jan 8, 2009 at 12:31 AM, Matus UHLAR - fanto

Re: Conflicting glue records?

2009-01-08 Thread Milo Hyson
In our particular case, we have stale glue records for our name- servers that appear to be coming from a domain we host that is owned by someone else. Despite our best efforts, we have not been able to reach the owners and thus have not been able to get the host records changed at the regist

Re: problem with nsupdate

2009-01-08 Thread Oliver Block
Would those errors be covered by the default category? Am Donnerstag, 8. Januar 2009 08:49:13 schrieben Sie: > Oliver Block wrote: > > I CAN SEE NO ERROR MESSAGE. > > The server log is usually informative in these situations. > > > hth, > > Doug ___ bi

Re: Conflicting glue records?

2009-01-08 Thread Dawn Connelly
Right, but his question was regarding the host record for the name server. You tell the registrar the name and IP address of the name servers that are authoritative for the domain. The registrar then pushes those glue records to the root servers. Root doesn't care what the name and/or IP address of

Re: Conflicting glue records?

2009-01-08 Thread Matus UHLAR - fantomas
> On Wed, Jan 7, 2009 at 6:29 PM, Milo Hyson wrote: > > If different registrars contain different host records for the same name > > server, what glue records are established in the root servers? Suppose two > > domains at different registrars both list ns1.mydomain.com as a nameserver > > but eac