Re: Assistance with reverse lookup zone

2009-06-12 Thread Sven Emil Skretteberg
Hi As others have indicated, this block has been delegated to you using RFC2317 - Classless IN-ADDR.ARPA delegation. You have to make configure a zone in your named.conf named 162-27.3.187.64.in-addr.arpa. Then populate this zone with your data. Something like ... $ORIGIN

Re: Assistance with reverse lookup zone

2009-06-12 Thread Frank Pikelner
On Fri, 2009-06-12 at 11:42 +1000, Mark Andrews wrote: In message b86f8bceeed5184ca225e0cc10ff61163ec...@bdc03srv04.bdc.int, Frank Pikelner writes: Every now and then we get a bounce on emails that are sent through one = of our mails servers located on 64.187.3.170. The bounce messages

Re: Tracking down validation failures

2009-06-12 Thread Chris Thompson
On Jun 11 2009, Jeremy C. Reed wrote: On Thu, 11 Jun 2009, Chris Thompson wrote: We have recently turned on DNSSEC validation (using dlv.isc.org) in our main university-wide recursive nameservers, which are running BIND 9.6.1rc1. No-one is actually complaining, but the counts I am seeing for

Re: Assistance with reverse lookup zone

2009-06-12 Thread Kirk
Frank Pikelner wrote: Thank you for everyone's assistance. I have updated the zone files. After the updates and restarting BIND, I run dig +trace ptr 170.3.187.64.in-addr.arpa and the result stops just prior to getting to my DNS server and correctly resolving the name of the IP address. I'm new

Re: Trying to understand DNSSEC and BIND versions better

2009-06-12 Thread Chris Buxton
On Jun 12, 2009, at 1:50 AM, Adam Tkac wrote: On Wed, Jun 10, 2009 at 08:37:52PM -0700, Chris Buxton wrote: A few of our customers, running servers that they describe as experiencing high traffic (by their own standards), have had to have us rebuild BIND from the stock source code for them

Re: Assistance with reverse lookup zone

2009-06-12 Thread Chris Buxton
On Jun 12, 2009, at 9:37 AM, Frank Pikelner wrote: Thank you for everyone's assistance. I have updated the zone files. After the updates and restarting BIND, I run dig +trace ptr 170.3.187.64.in-addr.arpa and the result stops just prior to getting to my DNS server and correctly resolving the

Re: querylog entries

2009-06-12 Thread Jeremy C. Reed
On Fri, 12 Jun 2009, R Dicaire wrote: Hi folks, just upgraded from 9.4x to 9.6.1, and looking at my query.log I'm seeing entries appended with -EC, -ED , -EDC, etc. What does this indicate, and where can I read up on what they mean? Hi, I am just copying and pasting from the great ARM which

Re: Tracking down validation failures

2009-06-12 Thread JINMEI Tatuya / 神明達哉
At 12 Jun 2009 17:50:39 +0100, Chris Thompson c...@cam.ac.uk wrote: (They don't add up to as much as the statistics-channel ValFail counter is increasing by, though.] It's not surprising: if validation attempt succeeds with one authoritative server after some validation failures with other

Slave DNS disconnect...

2009-06-12 Thread Jeff Lasman
We recently received a /24 from a provider who said they'd delegate rDNS authority to our servers: ns1.ns-one.net (85.17.204.1) and ns2.ns-one.net (69.26.172.2) But looking at the dig trace (I won't copy it in here) for one of the IP#s (chosen at random): $ dig -x 74.124.205.95 +trace it