Re: Trying to understand DNSSEC and BIND versions better

2009-06-10 Thread Chris Buxton
On Jun 10, 2009, at 7:01 PM, Chris Adams wrote: Once upon a time, Chris Buxton said: On the other hand, the builds from the Linux vendors have been less than perfectly stable at moderately high levels of traffic. Rebuilding from stock source code has always fixed this problem. We've seen thi

Re: Trying to understand DNSSEC and BIND versions better

2009-06-10 Thread Chris Adams
Once upon a time, Chris Buxton said: > On the other hand, the builds from the Linux vendors have been less > than perfectly stable at moderately high levels of traffic. Rebuilding > from stock source code has always fixed this problem. We've seen this > problem with both the Red Hat build an

Re: Trying to understand DNSSEC and BIND versions better

2009-06-10 Thread Chris Buxton
On Jun 9, 2009, at 5:21 PM, Mark Andrews wrote: In message <20090609113700.ga6...@evileye.atkac.englab.brq.redhat.com>, Adam Tk ac writes: On Tue, Jun 09, 2009 at 11:22:12AM +1000, Mark Andrews wrote: In message <99e6a67a9da87041a8020fbc11f480b3031cc...@exvs01.dsw.net>, "Jeff Lig htner

Re: Clients sometimes get wrong view

2009-06-10 Thread Chris Buxton
Is there any chance that stub resolver caching is at work here? For example, if someone is in the datacenter, uses a name in some way, and then moves to the office, it's conceivable that their stub resolver will hang onto the datacenter address for the name. A simple test for this would be

Re: Issue with reverse dns and local caching name server

2009-06-10 Thread Mark Andrews
In message <4a2fcb63.8030...@easysoft.com>, Jason Crummack writes: > Kirk wrote: > >> $ dig +trace @127.0.0.1 -x 203.22.30.47 > >> > >> ; <<>> DiG 9.4.3 <<>> +trace @127.0.0.1 -x 203.22.30.47 > >> ; (1 server found) > >> ;; global options: printcmd > >> . 517909 IN NS

Nicht erreichbar bis 22.06.2009 / Out of Office until 06/22/2009

2009-06-10 Thread Joachim Strohbach/Denic
Ich werde ab 30.05.2009 nicht im Büro sein. Ich kehre zurück am 22.06.2009. Danke für Ihre E-Mail-Nachricht. Ich bin bis 22. Juni 2009 nicht im Büro. In dringenden Angelegenheiten kontaktieren Sie bitte DENIC IT-Services (E-Mail: i...@denic.de, Tel: (069) 27235-160 oder -250). - Thank you

RE: Changing CHROOT at BIND compile time

2009-06-10 Thread Todd Snyder
Please ignore me - I realized too late that someone else was installing BIND as I was compiling, and that created the directory I was seeing. I realize now that BIND wouldn't be creating this ... it was silly of me to assume that. Cheers, Todd. -Original Message- From: bind-users-boun..

Re: Changing CHROOT at BIND compile time

2009-06-10 Thread Jeremy C. Reed
On Wed, 10 Jun 2009, Todd Snyder wrote: > I am working at building BIND, and I will admit right now that I am not > much of a developer. I noticed that when you compile/make/install BIND, > it creates /var/named/chroot as the default chroot jail. We don't use > that particular standard, and have

Re: queries with no RD bit set are truncating

2009-06-10 Thread Kevin Darcy
Peter Andreev wrote: Good day I have met a trouble with non-recursive BIND 9.3.3, running on FreeBSD 6.2-R. Sometimes if one of our clients sends query with no RD bit set, he receives a truncated answer. If RD bit is set then all well. Where I should look to localise a problem? By "non-recu

Changing CHROOT at BIND compile time

2009-06-10 Thread Todd Snyder
Good day, I am working at building BIND, and I will admit right now that I am not much of a developer. I noticed that when you compile/make/install BIND, it creates /var/named/chroot as the default chroot jail. We don't use that particular standard, and have been simply moving things afterwards.

Re: BIND not talking to syslog daemon

2009-06-10 Thread Chris Thompson
On Jun 10 2009, Todd Snyder wrote: I have a nameserver running BIND 9.3.5-p1 that doesn't want to log to the syslog daemon. I have 2 identically configured servers, one of them works, one doesn't. My logging configuration looks like: category default{ my_default; defaul

queries with no RD bit set are truncating

2009-06-10 Thread Peter Andreev
Good day I have met a trouble with non-recursive BIND 9.3.3, running on FreeBSD 6.2-R. Sometimes if one of our clients sends query with no RD bit set, he receives a truncated answer. If RD bit is set then all well. Where I should look to localise a problem? Thank you. ___

Re: Issue with reverse dns and local caching name server

2009-06-10 Thread Jason Crummack
Kirk wrote: $ dig +trace @127.0.0.1 -x 203.22.30.47 ; <<>> DiG 9.4.3 <<>> +trace @127.0.0.1 -x 203.22.30.47 ; (1 server found) ;; global options: printcmd . 517909 IN NS G.ROOT-SERVERS.NET. . 517909 IN NS A.ROOT-SERVERS.NET. .

RE: BIND not talking to syslog daemon

2009-06-10 Thread Jeff Lightner
What OS? On RHEL5 I have to set options in /etc/sysconfig/syslog (separate from /etc/syslog.conf) like this: SYSLOGD_OPTIONS="-m 0 -a /var/named/chroot/dev/log" -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Todd Snyder Sen

BIND not talking to syslog daemon

2009-06-10 Thread Todd Snyder
Good day, I've run into a bit of an oddity, and I'm hoping someone might have an idea. I have a nameserver running BIND 9.3.5-p1 that doesn't want to log to the syslog daemon. I have 2 identically configured servers, one of them works, one doesn't. My logging configuration looks like:

Re: Issue with reverse dns and local caching name server

2009-06-10 Thread Jason Crummack
Noel Butler wrote: On Wed, 2009-06-10 at 11:20 +0100, Jason Crummack wrote: dig @82.138.243.4 30.22.203.in-addr.arpa NS I get a response from that IP as well, however from mine, I don't, I suspect that's the server cache. Is this IP range still delegated to you? dig 30.22.203.in-addr.arpa

Re: Issue with reverse dns and local caching name server

2009-06-10 Thread Noel Butler
On Wed, 2009-06-10 at 11:20 +0100, Jason Crummack wrote: > dig @82.138.243.4 30.22.203.in-addr.arpa NS > I get a response from that IP as well, however from mine, I don't, I suspect that's the server cache. Is this IP range still delegated to you? dig 30.22.203.in-addr.arpa NS ; <<>> Di

Re: Issue with reverse dns and local caching name server

2009-06-10 Thread Jason Crummack
Thanks for the reply Noel i still don't understand why that would work on the external name server we have access to and not on our internal one? $ dig @82.138.243.4 30.22.203.in-addr.arpa NS ; <<>> DiG 9.3.2 <<>> @82.138.243.4 30.22.203.in-addr.arpa NS ; (1 server found) ;; global options:

Re: Issue with reverse dns and local caching name server

2009-06-10 Thread Noel Butler
Jason, Looks like a DNS delegation error, login to your 'MyApnic' and make sure everything is good. I can not get an external response here ~$ host 203.22.30.47 Host 47.30.22.203.in-addr.arpa not found: 2(SERVFAIL ~$ dig 30.22.203.in-addr.arpa NS ; <<>> DiG 9.4.2-P2 <<>> 30.22.203.in-addr.ar

Issue with reverse dns and local caching name server

2009-06-10 Thread Jason Crummack
Hi all, I'm fairly new to bind configuration and was wondering if you could point me in the right direction for issues we seem to be having with our caching name server reverse looking up a particular address, i've been banging my head against this for the last couple of days now and wondered