I assume this has to do with the transfer-format option set to
'many-answers' (this is the default of bind), so what decides how many
records goes into one DNS packet? Since it is a tcp-stream I assumed
there would be only one TSIG signature in the end, I guess I assumed
wrong.
So, if there a
Can u tell me how to do this ?
If you enable query log, you might be able to see if it's actually
serving queries at that time.
I mean it hang is named process is still running but it cannot respond any
lookup query. CPU is almost at low rate 5-6 % or lower. It's both hang with
single thread
On Thu, 2010-07-08 at 07:34 -0400, Alan Clegg wrote:
You need to specify different file locations for each of the slaved
zones (even if the data is the same) in each view.
On 08.07.10 15:01, John Horne wrote:
Does that apply for master zones which are common (i.e. the same data)
to both
On 08.07.10 14:42, Peter Laws wrote:
BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2
From the host itself, a slave for all my zones, I can resolve all my
zones. I cannot, however, resolve anything else.
For example, if I dig google.com I get a timeout.
Further, if I do a blank dig, I don't get
Hi ,
What is the cname chains limit ?
Thanks Regards,
Ramesh
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
On 07/09/10 07:36, khanh rua wrote:
Can u tell me how to do this ?
If you enable query log, you might be able to see if it's actually
serving queries at that time.
I mean it hang is named process is still running but it cannot
respond any lookup query. CPU is almost at low rate 5-6 % or
Am Fri, 9 Jul 2010 15:08:20 +0530
schrieb rams brames...@gmail.com:
Hi ,
What is the cname chains limit ?
Thanks Regards,
Ramesh
I've managed to get 17 cnames into a chain returned by dig. named-checkzone
wouldn't mind additional cnames though. In my example zone I've put 100 cnames
On 7/9/2010 4:57 AM, Chiesa Stefano wrote:
27/05/2010 17.06.32 1094 C:\bind\bin\named.exe Protezione
antivirus standard:Impedisci a worm distribuiti tramite mass-mailing di
inviare messaggi 93.49.247.253:25
(translated from italian: Prevent mass mailing worms from sending mail).
On 7/9/2010 4:57 AM, Chiesa Stefano wrote:
27/05/2010 17.06.32 1094 C:\bind\bin\named.exe Protezione
antivirus standard:Impedisci a worm distribuiti tramite mass-mailing di
inviare messaggi 93.49.247.253:25
(translated from italian: Prevent mass mailing worms from sending mail).
For those of you that don't follow bind-users closely, this is a bit of
troubling news. I'm not surprised that a bad guy would masquerade his
malware as BIND, but to actually see it documented is sad.
AlanC
Original Message
Subject: Re: Does bind send email?
Date: Fri, 9 Jul
On 7/9/2010 7:25 AM, Alan Clegg wrote:
For those of you that don't follow bind-users closely, this is a bit of
troubling news. I'm not surprised that a bad guy would masquerade his
malware as BIND, but to actually see it documented is sad.
[this was supposed to go to an internal list and not
On 09.07.10 15:08, rams wrote:
What is the cname chains limit ?
the logical limit is 1. The technical limit usually depends on how big
packet can your (stub) resolver accept.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
On 09/07/10 12:18, tomasz dereszynski wrote:
check below link
apparently viruses (some) hide themselves behind that name/process.
http://www.file.net/process/named.exe.html
mind you, it might be something else ...
Maybe McAfee is triggering on MX lookups?
A couple of details:
* bind is working fine and on the server the Task Manager shows just one
named.exe process (show processes from all users checked)
* I don't' think McAfee is triggering on MX lookups because he's blocking
connection on port 25 (look at the end of log line:
Since you now know that BIND doesn't send email and its possible to name a
virus whatever the virus writer wishes, it might be prudent to compare the
file with a known good version from here (check signatures):
ftp://ftp.isc.org/isc/bind9/
While off topic for this forum, you should also try
Am Fri, 9 Jul 2010 15:09:24 +0200
schrieb Chiesa Stefano stefano.chi...@wki.it:
A couple of details:
* bind is working fine and on the server the Task Manager shows just
one named.exe process (show processes from all users checked)
* I don't' think McAfee is triggering on MX lookups because
Looking at the Mcafee AccessProtectionLog I noticed that behaviour only 26
times starting from 06/06/2009.
Too few tries for a malware/virus, isn't it?
Could it be a port used fortuitously by named in his random port use?
Ciao.
Stefano.
-Messaggio originale-
Da:
Hi,
I'm about to set up bind with GeoIP patches.
What I'm not sure, is how do you guys handle high availability?
Suppose I have zones for Americas and Europe, and a destination server
in Europe dies - how do you handle it so that new (i.e. web) requests
hit American servers only?
Set TTL
On Thu, 2010-07-08 at 23:02 -0400, Barry Margolin wrote:
Are you sure both views are actually getting the notifies? You need the
master to send two notifies, each one satisfying the match-XXX criteria
of one of the views.
If only one notify is sent, only the view that it matches will
On Thursday 08 July 2010 8:41:19 am Dimitri
Yioulos wrote:
Hello to all.
I have recently set up a slave DNS server
(bind-9.3.6) on a CentOS 5.x Linux box. The
master is our Windows server and, really, it
directly serves our AD infrastructure, and
forwards external queries to our ISP''s
On Fri, 2010-07-09 at 16:26 +0200, Tomasz Chmielewski wrote:
Hi,
I'm about to set up bind with GeoIP patches.
What I'm not sure, is how do you guys handle high availability?
Suppose I have zones for Americas and Europe, and a destination server
in Europe dies - how do you handle it so
Am 09.07.2010 17:28, Mark Watts wrote:
The textbook answer is to use anycast, which is how ISC (among others)
provide redundancy for their F-root nameserver.
Sure, but I'm afraid I won't have anycast available for this project.
Failing that, you'd probably turn to simply having more than
On 07/09/10 02:23, Matus UHLAR - fantomas wrote:
On 08.07.10 14:42, Peter Laws wrote:
BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2
From the host itself, a slave for all my zones, I can resolve all my
zones. I cannot, however, resolve anything else.
For example, if I dig google.com I get a
Hi Tomasz,
On 2010-07-09, at 10:26 AM, Tomasz Chmielewski wrote:
Hi,
I'm about to set up bind with GeoIP patches.
What I'm not sure, is how do you guys handle high availability?
Suppose I have zones for Americas and Europe, and a destination server in
Europe dies - how do you handle
Am 09.07.2010 22:30, Dave Knight wrote:
Hi Tomasz,
On 2010-07-09, at 10:26 AM, Tomasz Chmielewski wrote:
Hi,
I'm about to set up bind with GeoIP patches.
What I'm not sure, is how do you guys handle high availability?
Suppose I have zones for Americas and Europe, and a destination server
Sending again, this time from an account actually subscribed to the list, doh :)
From: Dave Knight dave.kni...@icann.org
Date: July 9, 2010 4:39:38 PM EDT
To: Tomasz Chmielewski man...@wpkg.org
Cc: bind-users@lists.isc.org bind-users@lists.isc.org
Subject: Re: GeoIP and maintaining high
Hey! A firewall setting was wrong! Imagine that!
Thanks, all. :-)
On 07/09/10 14:18, Peter Laws wrote:
On 07/09/10 02:23, Matus UHLAR - fantomas wrote:
On 08.07.10 14:42, Peter Laws wrote:
BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2
From the host itself, a slave for all my zones, I can
27 matches
Mail list logo