Re: T_ANY

2010-03-20 Thread Mark Andrews
In message , Tony Fi nch writes: > On Sat, 20 Mar 2010, Glenn English wrote: > > > > Just why qmail reports a T_ANY failure as a CNAME failure, I also don't > > know. > > This is a bug in qmail. It tries to canonicalize domains in the SMTP > envelope of outgoing messages. It originally did this b

Re: BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread Doug Barton
On 03/20/10 17:11, michael peters wrote: > zone "0.253.150.10.in-addr.arpa" in { > type master; > file "/etc/bind/10.150.253.0.rev"; > }; > zone "0.0.16.172.in-addr.arpa" in { > type master; > file "/etc/bind/172.16.0.0.rev"; > }; This is your probl

Re: BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread michael peters
On Sat, Mar 20, 2010 at 7:11 PM, michael peters wrote: > Mar 20 19:07:37 catapult named[29579]: starting BIND 9.6.1-P1 -u bind > Mar 20 19:07:37 catapult named[29579]: built with '--prefix=/usr' > '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bi > nd' '--localstatedir=/v

Re: PTR format question

2010-03-20 Thread groups
First off, please don't grab an unrelated message and reply to it when starting a new thread. Please actually post a new message. Doug.. I grabbed the wrong thread.. Actually double posted too.. :-/ In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4

Re: PTR format question

2010-03-20 Thread groups
groups wrote: In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4 Current PTR in this format: (1 tab between entries) $ORIGIN 58.172.in-addr.arpa. $ORIGIN 0.58.172.in-addr.arpa. 11PTRnat-172-58-0-11.example.com. 12PTRnat-172-58-0-12

Re: BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread Doug Barton
On 03/20/10 16:46, michael peters wrote: > I've been reading documentation, searching the archives, searched Google > for the answer, but have found nothing that solves the problem. > > I have an Ubuntu 9.10 system with BIND 9.6.1 installed for my internal > DNS system. You'll want to update to

Re: PTR format question

2010-03-20 Thread Doug Barton
First off, please don't grab an unrelated message and reply to it when starting a new thread. Please actually post a new message. > In the process of cleaning up a much neglected PTR file > > Bind: 9.6.2.1 > OS: CentOS 5.4 > > Current PTR in this format: (1 tab between entries) > > $ORI

BIND9 Internal Reverse Look-ups Fail

2010-03-20 Thread michael peters
I've been reading documentation, searching the archives, searched Google for the answer, but have found nothing that solves the problem. I have an Ubuntu 9.10 system with BIND 9.6.1 installed for my internal DNS system. External forward and reverse work fine, Internal forward works fine but it fai

Re: PTR format question

2010-03-20 Thread Alan Clegg
groups wrote: > In the process of cleaning up a much neglected PTR file > > Bind: 9.6.2.1 > OS: CentOS 5.4 > > Current PTR in this format: (1 tab between entries) > > $ORIGIN 58.172.in-addr.arpa. > $ORIGIN 0.58.172.in-addr.arpa. > 11PTRnat-172-58-0-11.example.com. > 12PTR

Re: dnssec signing tools

2010-03-20 Thread charles
Kevin Oberman wrote, On 03/20/2010 05:48 PM: Date: Sat, 20 Mar 2010 16:28:59 -0500 From: groups Sender: bind-users-bounces+oberman=es@lists.isc.org I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May

PTR format question

2010-03-20 Thread groups
In the process of cleaning up a much neglected PTR file Bind: 9.6.2.1 OS: CentOS 5.4 Current PTR in this format: (1 tab between entries) $ORIGIN 58.172.in-addr.arpa. $ORIGIN 0.58.172.in-addr.arpa. 11PTRnat-172-58-0-11.example.com. 12PTRnat-172-58-0-12.example.com. ... $O

Re: dnssec signing tools

2010-03-20 Thread groups
Gary Wallis wrote, On 03/20/2010 04:52 PM: groups wrote: I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a complete

Re: dnssec signing tools

2010-03-20 Thread Kevin Oberman
> Date: Sat, 20 Mar 2010 16:28:59 -0500 > From: groups > Sender: bind-users-bounces+oberman=es@lists.isc.org > > I should have been more specific.. What dnssec tools do the folks at ISC > recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 > > Thx > Charles > > Greeti

Re: how to ignore external queries?

2010-03-20 Thread Leonardo Rodrigues
Em 19/03/2010 19:43, ic.nssip escreveu: and the results came up with a statement that "External Queries are REJECTED" and "It would be better for it to ignore external queries." _Question is... How can I IGNORE External Queries instead of Rejecting them?_ firewall them !!! The better wou

Re: dnssec signing tools

2010-03-20 Thread Gary Wallis
groups wrote: I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a complete rebuild of a Master DNS server running 9.6.1.

Re: dnssec signing tools

2010-03-20 Thread groups
I should have been more specific.. What dnssec tools do the folks at ISC recommend.. I am scheduled for a 5 day class in Arlington, VA in May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a complete rebuild of a Master DNS server running 9.6.1.P3. (will upgr

Re: T_ANY

2010-03-20 Thread Tony Finch
On Sat, 20 Mar 2010, Glenn English wrote: > > Just why qmail reports a T_ANY failure as a CNAME failure, I also don't > know. This is a bug in qmail. It tries to canonicalize domains in the SMTP envelope of outgoing messages. It originally did this by performing CNAME queries on each domain, but t

Re: T_ANY

2010-03-20 Thread Glenn English
On Mar 20, 2010, at 10:12 AM, Florian Weimer wrote: > Have you compiled qmail yourself? Thanks, Florian, but it's fixed. The problem was that my PIX firewall's IDS blocks T_ANY queries by default, and Yahoo's qmail does T_ANY queries. I turned the block off in the PIX. I'm told that qmail '

Re: T_ANY

2010-03-20 Thread Florian Weimer
* Glenn English: >>> Hi. This is the qmail-send program at yahoo.com. > Both servers are Debian lenny, 'named -v' says BIND 9.5.1-P3, and > bind's config check says it's OK. But it has nothing to do with any > of that, I think, because the query works from inside. Have you compiled qmail yoursel