connect call failing with EINPROGRESS error code.

2010-07-22 Thread R Juneja
Hi, I am new to socket programming. Please help me with a situation. The function call connect (non -blocking) is failing with setting the errorcode as 36 (EINPROGRESS). I have checked all the relative things. They are set properly. ::connect(sd, ((struct sockaddr*) (void*)

Re: IPv6 Records on an IPv4 Network

2010-07-22 Thread Phil Mayers
On 07/21/2010 10:10 PM, Martin McCormick wrote: This is admittedly not a bind question, but it has become a major nag factor and I am not sure what to recommend. We delegate our Microsoft Active Directory zone to Microsoft domain controllers and they have stuffed their zone with

Re: connect call failing with EINPROGRESS error code.

2010-07-22 Thread Phil Mayers
On 07/22/2010 07:52 AM, R Juneja wrote: Hi, I am new to socket programming. Please help me with a situation. This is the wrong place to ask. This mailing list is for discussing the Bind DNS server, not socket programming. The function call connect (non -blocking) is failing with

Re: . SOA: got insecure response

2010-07-22 Thread Alexander Gall
On Thu, 22 Jul 2010 07:15:25 +1000, Mark Andrews ma...@isc.org said: In message 19526.43429.234698.104...@hadron.switch.ch, Alexander Gall writes: On Wed, 21 Jul 2010 09:20:21 +0200, Gilles Massen gilles.mas...@restena.lu said: Hello, Since enabling the root TA in my resolver, I keep

Re: Maching characteristics

2010-07-22 Thread sthaug
Well i wonder this is the right place. What server characteristics you recomend me as minimum for a bind that will get about 1 req/sec Insufficient information. What kind of queries should the server handle? There's a big difference between an authoritative only server and a recursive

Re: IPv6 Records on an IPv4 Network

2010-07-22 Thread Rock July
Windows Vista and 7 clients will query both type A and query even only IPv4 interface is enabled. If I put the option filter--on-v4 {yes;};, will my DNS reject the queries? Thanks Rock From: Phil Mayers p.may...@imperial.ac.uk To:

Re: IPv6 Records on an IPv4 Network

2010-07-22 Thread Martin McCormick
Phil Mayers writes: If IPv6 is turned off, the windows machines should not be registering IPv6 addresses. Maybe IPv6 was turned on in the past, and they haven't been garbage-collected for some reason? (Windows DNS records which were inserted by dynamic update are supposed to be garbage

reject or drop AAAA queries

2010-07-22 Thread Rock July
Hi All, I just want to know if I put listen--on-v4 {yes;}; on opetions of named.conf, will my DNS drop or reject all queries by IPv4 clients? Thanks, Rock July ___ bind-users mailing list bind-users@lists.isc.org

Re: . SOA: got insecure response

2010-07-22 Thread Gilles Massen
Mark, Named has to deal with multually incompatible senarios. DNSSEC which requires EDNS and nameservers and firewalls which drop EDNS requests so named has to turn off EDNS to get answers back. Occasionally a set of answers will take too long to get back to named or are lost due to network

Re: IPv6 Records on an IPv4 Network

2010-07-22 Thread Phil Mayers
On 22/07/10 12:19, Rock July wrote: Windows Vista and 7 clients will query both type A and query even The OS might make the query, but the application will (should) be using getaddrinfo, and this will return the IPv4 addresses first, so it doesn't matter. only IPv4 interface is

Re: reject or drop AAAA queries

2010-07-22 Thread Rick Dicaire
On Thu, Jul 22, 2010 at 9:24 AM, Rock July headgea...@yahoo.com wrote: I just want to know if I put listen--on-v4 {yes;}; on opetions of named.conf, will my DNS drop or reject all queries by IPv4 clients? Why do you think you want to know this? It was recommended in another listmail on

Script for verifying zone files

2010-07-22 Thread Atkins, Brian (GD/VA-NSOC)
Does anyone know of an existing script or program that can parse a zone file and verify records against an active server? I'm attempting to clean up some large zone files and want to ensure that none of the changes will break DNS when I implement it. Later, I'd like to use it to verify that the

Re: IPv6 Records on an IPv4 Network

2010-07-22 Thread Alan Clegg
On 7/22/2010 8:33 AM, Phil Mayers wrote: only IPv4 interface is enabled. If I put the option filter--on-v4 {yes;};, will my DNS reject the queries? This option breaks DNSSEC. Actually, it doesn't. If the DO bit is set in the query, the default behavior (I'll let you dig to find

Re: Script for verifying zone files

2010-07-22 Thread Tony Finch
On Thu, 22 Jul 2010, Atkins, Brian (GD/VA-NSOC) wrote: Does anyone know of an existing script or program that can parse a zone file and verify records against an active server? Have you looked at named-checkzone? Tony. -- f.anthony.n.finch d...@dotat.at http://dotat.at/ FORTIES: NORTH 5 OR

Re: Script for verifying zone files

2010-07-22 Thread Paul Wouters
On Thu, 22 Jul 2010, Atkins, Brian (GD/VA-NSOC) wrote: Does anyone know of an existing script or program that can parse a zone file and verify records against an active server? named-checkzone these days does some checks unless specified not to do so. (note to self: dont do that on a 2.5M

RE: Script for verifying zone files

2010-07-22 Thread Atkins, Brian (GD/VA-NSOC)
Thanks, Bill. That's more what I'm looking for. Several people suggested looking at named-checkzone, but my goal is to compare an edited version of the zone file against the active zone file. The named-checkzone program, to my understanding, merely checks for syntax and doesn't do anything

RE: Script for verifying zone files

2010-07-22 Thread urs-t.bolliger
Hi Brian, Why don't you load the zonefile you changed into a test dns server and then compare the queries against prod and your test system? Might be easier than parsing the file in my opinion. Regards, Adrian -Original Message- From:

Re: Script for verifying zone files

2010-07-22 Thread Casey Deccio
On Thu, Jul 22, 2010 at 10:01 AM, Atkins, Brian (GD/VA-NSOC) brian.atki...@va.gov wrote: Several people suggested looking at named-checkzone, but my goal is to compare an edited version of the zone file against the active zone file. If you're just looking at changes, try something like:

Re: IPv6 Records on an IPv4 Network

2010-07-22 Thread Phil Mayers
On 22/07/10 16:45, Alan Clegg wrote: On 7/22/2010 8:33 AM, Phil Mayers wrote: only IPv4 interface is enabled. If I put the option filter--on-v4 {yes;};, will my DNS reject the queries? This option breaks DNSSEC. Actually, it doesn't. If the DO bit is set in the query, the default

Multiple masters expected behavior?

2010-07-22 Thread Peter Laws
I have multiple interfaces on my master and multiple interfaces on most of my slaves. I've got one of the slaves set up so that its masters {}; statement has two of the master's interfaces in it. The preferred is first, with the non-preferred second. I was contemplating using this on all

Re: reject or drop AAAA queries

2010-07-22 Thread Mark Andrews
In message 210229.86286...@web120110.mail.ne1.yahoo.com, Rock July writes: Hi All, I just want to know if I put listen--on-v4 {yes;}; on opetions of named.conf, will my DNS drop or reject all queries by IPv4 clients? The option is filter--on-v4. Additionally filter- can

Re: Multiple masters expected behavior?

2010-07-22 Thread Phil Mayers
On 07/22/2010 10:59 PM, Peter Laws wrote: I have multiple interfaces on my master and multiple interfaces on most of my slaves. I've got one of the slaves set up so that its masters {}; statement has two of the master's interfaces in it. The preferred is first, with the non-preferred second.

BIND 9.7.2b1 is now available.

2010-07-22 Thread Mark Andrews
BIND 9.7.2b1 is now available. BIND 9.7.2b1 is a beta version of the maintenance release for BIND 9.7. BIND 9.7.2b1 can be downloaded from ftp://ftp.isc.org/isc/bind9/9.7.2b1/bind-9.7.2b1.tar.gz

Re: Multiple masters expected behavior?

2010-07-22 Thread Barry Margolin
In article mailman.65.1279835965.15649.bind-us...@lists.isc.org, Peter Laws pl...@ou.edu wrote: I have multiple interfaces on my master and multiple interfaces on most of my slaves. I've got one of the slaves set up so that its masters {}; statement has two of the master's interfaces in

Re: USADOTGOV.NET Root Problems?

2010-07-22 Thread Merton Campbell Crockett
Thanks for the confirmation that the problem was related to DNSSEC. I didn't see your message until I got home from work; however, I did find the root of the problem late this afternoon. At each of our Internet egress and ingress points, we have Cisco ASA devices sitting in front of a pair of

Re: reject or drop AAAA queries

2010-07-22 Thread Rock July
This is my current setup right now and the reason why I want to reject or drop the queries; PC Clients: XP, Vista and 7 (Vista and 7 clients are sending both A and queries) send queries to DNS A. DNS A: will just forward the query to My DNS MyDNS: will query to DNS B in behalf of DNS

Re: reject or drop AAAA queries

2010-07-22 Thread Alan Clegg
On 7/22/2010 8:42 PM, Rock July wrote: This is my current setup right now and the reason why I want to reject or drop the queries; PC Clients: XP, Vista and 7 (Vista and 7 clients are sending both A and queries) send queries to DNS A. DNS A: will just forward the query to My DNS