Re: named’s “/dev/random error on AIX

2009-01-10 Thread blrmaani
Can't see what you posted.. can you post as a text? From subject message it appears that you see /dev/random failure in syslog. What is the impact? Do you see issues in dnssec-keygen etc? On Jan 8, 10:47 pm, Fuhua Zhang harr...@21cn.com wrote: This is a multi-part message in MIME format.

Re: Issues in delegating to subdomain owned by other company

2009-01-10 Thread Matus UHLAR - fantomas
On 10.01.09 14:04, blrmaani wrote: When we delegate a subdomain, should the nameserver to which we delegate be AUTHORITATIVE? yes What happens if the nameserver to which we delegate the subdomain is a NON-AUTHORITATIVE nameserver (eg., cache-only name server ). ? Could this be the reason

Re: Issues in delegating to subdomain owned by other company

2009-01-10 Thread Mark Andrews
In message 937b61bf-c12f-4498-b20c-8cd5613bd...@z1g2000yqn.googlegroups.com, blrmaani writes: I have configured my named (BIND-9) to delegate a subdomain owned by our partner company. The queries in the subdomain are failing intermittently. Our partner company IT team is not ready to

Re: Problem resolving www.lmsintl.com

2009-01-10 Thread Doug Barton
Apisa, Kathy (US - MABS) wrote: I am running bind 9,4.2-P2 You'll want to upgrade that to 9.4.3-P1 for better security, performance, etc. on windows and can resolve all external Domains names Really? You've tried them ALL? :) with the exception of www.lmsintl.com http://www.lmsintl.com/

Re: Issues in delegating to subdomain owned by other company

2009-01-10 Thread Barry Margolin
In article gkb7mt$lt...@sf1.isc.org, blrmaani blrma...@gmail.com wrote: Thanks.. so if I dig further deeper on this it appears that the the query being sent to the subdomain's nameserver is NON-RECURSIVE. So, if the resource-records are already cached on the subdomain's nameserver (assuming

Re: BIND Security Advisory (CVE-2009-0025; Severity: Low)

2009-01-10 Thread Rob Austein
At Thu, 8 Jan 2009 09:10:42 -0500, David Coulthart wrote: Would someone be able to provide some more details as to what particular configurations of BIND this affects? My interpretation is it only impacts recursive nameservers that have DNSSEC validation enabled. And not even all of