Re: Operators, how do you handle EDNS?

2009-01-13 Thread Mark Andrews
In message <20090114021016.ga24...@esri.com>, Ray Van Dolson writes: > On Tue, Jan 13, 2009 at 05:00:38PM -0800, Ray Van Dolson wrote: > > On Tue, Jan 13, 2009 at 04:35:46PM -0800, Mark Andrews wrote: > > > The number of nameservers that fail to respond to EDNS > > > queries is miniscule. The

Re: Occasional problems resolving from capitalone.com

2009-01-13 Thread Mark Andrews
In message , Rich Goodson writes: > Hi all, > > I have some caching resolvers that are running BIND 9.4.3. They > answer about 30k-ish recursive queries per second at peak hours. > > Every couple of weeks or so, we get calls to customer support with > complaints that the www.capitalone.com

Re: Operators, how do you handle EDNS?

2009-01-13 Thread Ray Van Dolson
On Tue, Jan 13, 2009 at 05:00:38PM -0800, Ray Van Dolson wrote: > On Tue, Jan 13, 2009 at 04:35:46PM -0800, Mark Andrews wrote: > > The number of nameservers that fail to respond to EDNS > > queries is miniscule. The majority of nameservers on the > > net actually talk EDNS. > > > >

Re: Current named statistics format documentation

2009-01-13 Thread Jeremy C. Reed
See http://ftp.isc.org/www/bind/arm95/Bv9ARM.ch06.html#id2593348 (Sorry that is for a different version of BIND, but it does cover more statistics info.) If you need any specific clarifications, please let us know. ___ bind-users mailing list bind-user

Re: Establishing a backup primary-master

2009-01-13 Thread Robert Spangler
On Tuesday 13 January 2009 19:40, Baird, Josh wrote: > I am in the process of developing a DR (disaster recovery) plan for my > primary masters. Could someone please confirm (or correct me) that a > second server in the "masters {}" statement of a slave zone will only be > used in the event that

Re: Operators, how do you handle EDNS?

2009-01-13 Thread Ray Van Dolson
On Tue, Jan 13, 2009 at 04:35:46PM -0800, Mark Andrews wrote: > The number of nameservers that fail to respond to EDNS > queries is miniscule. The majority of nameservers on the > net actually talk EDNS. > > I suggest that you re-analyse the failures to determine > t

Establishing a backup primary-master

2009-01-13 Thread Baird, Josh
I am in the process of developing a DR (disaster recovery) plan for my primary masters. Could someone please confirm (or correct me) that a second server in the "masters {}" statement of a slave zone will only be used in the event that the first master cannot be reached? Example: zone "examp

Re: Operators, how do you handle EDNS?

2009-01-13 Thread Mark Andrews
In message <20090114000726.ga23...@esri.com>, Ray Van Dolson writes: > I know what ISC will say on this -- that we should be tracking down > people whose DNS servers or network infrastructure blocks or impedes > EDNS... this is fine and well, and we do make such efforts, but often > times networ o

RE: Current named statistics format documentation

2009-01-13 Thread James Pratt
From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of ip admin Sent: Tuesday, January 13, 2009 7:23 PM To: bind-users@lists.isc.org Subject: Current named statistics format documentation Hi,  any idea where the statistic number currently reported to the

Current named statistics format documentation

2009-01-13 Thread ip admin
Hi, any idea where the statistic number currently reported to the named.stats file are documented. The ARM only describes some. For BIND 9.4.1 I get the following counters ++ Name Server Statistics ++ (Legend) success referral nxrrset nxdomain recursion failure dupquerydr

Operators, how do you handle EDNS?

2009-01-13 Thread Ray Van Dolson
I know what ISC will say on this -- that we should be tracking down people whose DNS servers or network infrastructure blocks or impedes EDNS... this is fine and well, and we do make such efforts, but often times networ owners are unresponsive and our own customer demands compel us to disable EDNS

Occasional problems resolving from capitalone.com

2009-01-13 Thread Rich Goodson
Hi all, I have some caching resolvers that are running BIND 9.4.3. They answer about 30k-ish recursive queries per second at peak hours. Every couple of weeks or so, we get calls to customer support with complaints that the www.capitalone.com web site is unavailable. The CNAME for www.capi

Re: delegating to 3rd Windows nameserver

2009-01-13 Thread Kirk
When I do a nslookup or dig I only see the first two servers and not sec2: -- ns-1: nslookup set type=ns _tcp.utmck.edu Non-authoritative answer: _tcp.utmck.edu nameserver = pri1.utmck.edu _tcp.utmck.edu nameserver = sec1.utmck.edu Authoritative answers can be found

delegating to 3rd Windows nameserver

2009-01-13 Thread Davenport, Steve M
Hello, We have nameservers supporting utmck.edu and delegate the zones used by Windows to Windows nameservers as follows: $ORIGIN utmck.edu. _tcp IN NS pri1.utmck.edu. IN NS sec1.utmck.edu. _udp IN NS pri1.utmck.edu. IN NS

Re: Bind 9.6.0p1- Windows - The service did not respond to the startor control request in a timely fashion.

2009-01-13 Thread Danny Mayer
Jukka Pakkanen wrote: > Jukka Pakkanen wrote: >>> Chiesa Stefano wrote: Hi all. Maybe it's not a new issue, but... I have a Windows 2003 SP2 with a 9.4.2 release that worked fine for years. Today I wanted to upgrade my release to 9.6. I installed it but when I try

RE: Bind 9.6.0p1- Windows - The service did not respond to the startor control request in a timely fashion.

2009-01-13 Thread Jukka Pakkanen
Jukka Pakkanen wrote: >> Chiesa Stefano wrote: >>> Hi all. >>> Maybe it's not a new issue, but... >>> >>> I have a Windows 2003 SP2 with a 9.4.2 release that worked fine for >>> years. >>> Today I wanted to upgrade my release to 9.6. >>> I installed it but when I try to start the service the system

Re: Bind 9.6.0p1- Windows - The service did not respond to the startor control request in a timely fashion.

2009-01-13 Thread Danny Mayer
Jukka Pakkanen wrote: >> Chiesa Stefano wrote: >>> Hi all. >>> Maybe it's not a new issue, but... >>> >>> I have a Windows 2003 SP2 with a 9.4.2 release that worked fine for >>> years. >>> Today I wanted to upgrade my release to 9.6. >>> I installed it but when I try to start the service the system

Re: Unable to get authenticated negative responses from BIND 9.6.0 w/ NSEC3?

2009-01-13 Thread Johan Ihren
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Mark, Anyone done this recently who can give me a suggestion to where I may go wrong? NXDOMAIN + OPTOUT -> AD=0 Doh! I reversed the logic for OPTOUT in my apparently confused head. Many thanks for the quick correction. Everything

Re: Bind 9.6.0p1- Windows - The service did not respond to the startor control request in a timely fashion.

2009-01-13 Thread Jukka Pakkanen
Chiesa Stefano wrote: Hi all. Maybe it's not a new issue, but... I have a Windows 2003 SP2 with a 9.4.2 release that worked fine for years. Today I wanted to upgrade my release to 9.6. I installed it but when I try to start the service the system says: Event Type: Error Event Source: Service Co