Re: [SPAM] Re: Split view multiple zones

2009-01-28 Thread Matus UHLAR - fantomas
Of course I could just copy and paste all the zones also in 'custom' view but it doubles the configuration size. On 27.01.09 17:26, Chris Burton wrote: I've been using an include file for zones common between multiple views, it might help in your case too. I'm afraid they won't eat the same

Re: Split view multiple zones

2009-01-28 Thread Mark Andrews
In message 49800cfd.nihabiqjcalhfl+u%akos...@andykosela.com, Andy Kosela writ es: Reinis Rozitis r...@roze.lv wrote: I've been using an include file for zones common between multiple views, might help in your case too. Thanks somehow didnt think about this way. Pretty much takes to

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT Illegal

2009-01-28 Thread Matus UHLAR - fantomas
On 27.01.09 10:18, Al Stu wrote: I not only say it, I have demonstrated it. But you have demonstrated something different than we're discussing all the time. BIND is the DNS system we are discussing. Have not looked to see if that specifically is spec'ed in an RFC. Yes other DNS

Re: disableing EDNS messages bind-9.5.0

2009-01-28 Thread Matus UHLAR - fantomas
Dean Clapper wrote: I'm trying to troubleshoot why we are getting a lot of disabling EDNS messages in /var/log/messages. We are running bind-9.5.0.P2 on a linux box. [...] Jan 27 11:43:39 ns0 named[27764]: too many timeouts resolving '196.198.117.216.zen.spamhaus.org/A' (in

Re: contacting a external nameserver

2009-01-28 Thread Serge Fonville
In that case you can use either views or a split dns Regards. Serge Fonville On Wed, Jan 28, 2009 at 12:44 AM, Luis Silva luisfilsi...@gmail.com wrote: Yes, basically what I need is a forwarder. Basically I want an internal network but external queries must be handled by another server.

Re: What are these entries in the log file - query: . IN NS +?

2009-01-28 Thread Jukka Pakkanen
Sorry remembered wrong, it's not free. But not that expensive either. Yeah now I remember, I browsed for a free firewall for server platform for days, but didn't find any. But have been very happy with the Net Firewall. Jukka Tony Toews [MVP] tto...@telusplanet.net kirjoitti

wildcarding everything

2009-01-28 Thread Scott Haneda
Hello, I am wondering the technical possibility of a DNS change. Even if it is technically possible, I also want to make sure it is compliant as well. I would like to resolve any and all requests to a fixed IP, if there is no zone in place. While I understand I can create a zone for

reg - BIND 9.3.0 - CVE-2009-0025

2009-01-28 Thread Ashish
Hi Folks, This is regarding the recent security threat CVE-2009-0025. We are using DNS 9.3.0 and unfortunately, we cannot upgrade (management issues) to 9.3.6 (As suggested in ISC website) ISC's website suggests to Upgrade OpenSSL to at least OpenSSL 0.9.8j and then to upgrade to

Re: BIND 9.4.x vs 9.6.x - pid-file check and creation

2009-01-28 Thread Thomas Schulz
In article glp3rc$23p...@sf1.isc.org, Jan Arild =?iso-8859-1?Q?Lindstr=F8m?= j...@telenor.net wrote: Hi, ah, of course. I did not think about it as a Solaris bug. I patched BIND 9.6.0-P1 os.c code so it first checks for the diretory before it tries the fast approach of just running mkdir. And

RE: wildcarding everything

2009-01-28 Thread Ben Bridges
What specifically are you intending to wildcard? com.? net.? .? If so, then you would be implicitly making your name servers authoritative for domains for which your servers are not supposed to be authoritative. Ben Bridges -Original Message- From: bind-users-boun...@lists.isc.org

Re: What are these entries in the log file - query: . IN NS +?

2009-01-28 Thread Mark Andrews
In message fl82o4hqjudbc65bkfk08ilg3lmk4hq...@4ax.com, Tony Toews [MVP] wri tes: Tony Toews [MVP] tto...@telusplanet.net wrote: FWIW In the last 28 hours I have the following alleged IP addresses and coun t in my log file. Real lookups 1665 204.15.80.50 4 3.217.28.226 1144

named and database backed systems

2009-01-28 Thread Scott Haneda
Hello, my past post about wildcarding the . in a named server seems it may be wrought with issues in the long term. In short, my issues is a auto website creation tool that needs to be simple for users to change their registrar data, and have their site be served up. The old method

Re: wildcarding everything

2009-01-28 Thread Scott Haneda
On Jan 28, 2009, at 3:34 PM, Mark Andrews wrote: In message 30e0039f-b0fd-4322-b0e0-52eeefa76...@newgeo.com, Scott Haneda writ es: I can remove the entire DNS management, zone creation, and deltion if I wildcard. Any domain in which they enter in my clients ns's will resolve automatically as

Re: named and database backed systems

2009-01-28 Thread David Ford
Use the DLZ extension. It's been around for a while. I.e. put the following in your named.conf and use whatever interface you wish. I use Ant with a few modifications. I don't have nearly the number of domains that you do so my simple system works fine. dlz postgres zone { database

Re: named and database backed systems

2009-01-28 Thread Scott Haneda
Damnit, ever time I search this stuff out, I search for named something-or-other and should use BIND in my search :) I am going to test deploy on my worksation on OS X. Named comes up with relative ease, just add a key and I am pretty much up and running, albeit out of date, but for

Re: named and database backed systems

2009-01-28 Thread Mark Andrews
In message 29c7b7bc-f017-4404-b011-8b50206c7...@newgeo.com, Scott Haneda writ es: Damnit, ever time I search this stuff out, I search for named something-or-other and should use BIND in my search :) I am going to test deploy on my worksation on OS X. Named comes up with relative ease,