expired or non-authoritative domains

2009-02-06 Thread Konstantin N. Bezruchenko
Hello, I have a two DNS servers, which our customers uses to host their domains. Sometimes customers forgot to renew domain, or just don't want to renew it, or they move domain to other name servers. However i still have records for this domains in my configs. Is there any way to determine

Re: expired or non-authoritative domains

2009-02-06 Thread Mark Andrews
In message 2070cf420902060124ged41b99jf56a15306c9b2...@mail.gmail.com, Konst antin N. Bezruchenko writes: Hello, I have a two DNS servers, which our customers uses to host their domains. Sometimes customers forgot to renew domain, or just don't want to renew it, or they move domain to

Re: How to create the TSIG?

2009-02-06 Thread Niall O'Reilly
On Thu, 2009-02-05 at 16:58 -0800, Chris Buxton wrote: Use a different key for each slave. Definitely, if each of your slaves is under distinct administration. If some organization is managing more than one of your slaves for you, I'ld suggest using a distinct

RE: Case For Microsoft DNS v. BIND 9 - Or Best Practices ForCoexisting

2009-02-06 Thread Baird, Josh
We also run in a mixed MSDNS/BIND environment. All of our AD domain controllers run MSDNS and are authoritative for the AD domain only. They forward all non-authoritative requests (all non AD domain queries) to caching BIND9/Linux servers which also contain slave zones for all of our internal

RE: Case For Microsoft DNS v. BIND 9 - Or Best Practices ForCoexisting

2009-02-06 Thread Baird, Josh
In my case, we let AD/MSDNS do dynamic updates.. no dynamic updates are necessary with BIND. Not sure I understand your split lookups - but your external authoritative nameservers should NOT allow recursion. Josh -Original Message- From: bind-users-boun...@lists.isc.org

Case For Microsoft DNS v. BIND 9 - Or Best Practices For Coexisting

2009-02-06 Thread wiskbroom
Hello; My site is presently using a product derived from BIND-8 for internal DNS only. For years our Windows team has been arguing that they want to be non-dependent on the non-MS DNS servers; which they say causes them much grief on firmwide shutdown/bootups. Well, their concerns have

RE: Case For Microsoft DNS v. BIND 9 - Or Best Practices ForCoexisting

2009-02-06 Thread Jeff Lightner
I'm with Josh on this. The only things that we have that would have both internal and external addresses are servers. For the domain I'm speaking of those are hard assigned addresses not DHCP so there is no dynamic update being done. We simply send an email to the Windoze Admins asking them to

RE: Case For Microsoft DNS v. BIND 9 - Or Best Practices For Coexisting

2009-02-06 Thread Jeff Lightner
I don't see why it is either/or. Here we have Windoze DNS servers for internal lookups and Linux/BIND 9 DNS servers for external lookups. The internal servers refer all queries they aren't authoritative for to the external ones which in turn refer all queries for domains we don't own to the

Re: How to create the TSIG?

2009-02-06 Thread Michelle Konzack
Hello Chris, thank you for the HOWTO... now it is more clear. OK, there are some stange things happen to my master DNS @home. Since I it seems I had a nsupdate from my Laptop, an update from my work- stations was working perfectly and now it comes: I have never used: Am 2009-02-05

Re: How to create the TSIG?

2009-02-06 Thread Chris Buxton
Point 1: The rndc.key file is referenced automatically if its contents are not included, because you do not have a controls statement. This is confusing, so please read the section of the ARM on the controls statement. __ Point 2: Your 'allow-update' statement is wrong. You have: