Re: Problems in views in a zone transfer

2011-05-10 Thread Steve Arntzen
I've been using multiple views and servers successfully for a while now. I hope the following helps... To transfer zones to and from specific views, you can use keys, "match-clients" and "server" declarations to control access and transfers. Setup keys for each view. Disallow clients (and server

Re: no free leases

2011-05-10 Thread Phil Mayers
On 05/10/2011 05:20 PM, Steven Stromer wrote: Hi. I see that there was some discussion in distant past of the "no free leases" reply when defining a range within a pool, especially I think you've posted to the wrong list... this is the BIND (DNS server) list, not the dhcpd list. _

no free leases

2011-05-10 Thread Steven Stromer
Hi. I see that there was some discussion in distant past of the "no free leases" reply when defining a range within a pool, especially when a reservation has been defined within that range. I am experiencing this error, and would appreciate any help locating the solution. Would prefer not to up

Re: Problems in views in a zone transfer

2011-05-10 Thread Matus UHLAR - fantomas
> On Tue, May 10, 2011 at 2:50 PM, Luis Silva wrote: > > Many thanks for the answer. Btw, If I want to notify the slaves that a zone > > is updated, which parameter (ip:port) needs to be configured in the slave to > > differenciate the view? Is the "transfer-source" also used for listening for > >

Re: Problems in views in a zone transfer

2011-05-10 Thread Luis Silva
the same zone* On Tue, May 10, 2011 at 3:39 PM, Luis Silva wrote: > Let me refrase my question. How can I notify a slave that suports different > views for the zone? How can the master distinguish? > > Thanks in advance, > Luis > > On Tue, May 10, 2011 at 2:50 PM, Luis Silva wrote: > >> Many t

Re: Problems in views in a zone transfer

2011-05-10 Thread Luis Silva
Let me refrase my question. How can I notify a slave that suports different views for the zone? How can the master distinguish? Thanks in advance, Luis On Tue, May 10, 2011 at 2:50 PM, Luis Silva wrote: > Many thanks for the answer. Btw, If I want to notify the slaves that a zone > is updated,

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
hi, > > not sure how to read that. now that my time's correct again, can/should > > I leave the server as is? or is there a specific recommendation for > > time setup on a DNS server? > On Tue, 10 May 2011 16:58 +1000, "Mark Andrews" wrote: > "date -u" may now be correct but is plain "date"?

Re: Problems in views in a zone transfer

2011-05-10 Thread Luis Silva
Many thanks for the answer. Btw, If I want to notify the slaves that a zone is updated, which parameter (ip:port) needs to be configured in the slave to differenciate the view? Is the "transfer-source" also used for listening for the notify requests? On Fri, May 6, 2011 at 6:04 AM, Jeff Pang wrot

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Phil Mayers
On 05/10/2011 07:58 AM, Mark Andrews wrote: "date -u" may now be correct but is plain "date"? If it isn't you should correct timezone for the server so that both "date" and "date -u" are correct. Otherwise you leave the server open to the accidental misconfiguration that probably caused this

Looking For Some Help In Configuring BIND On Win32

2011-05-10 Thread James Carlock
Hello, I am looking for help in configuring BIND on Win32, hosting multiple domains and subdomains for each domain, as well as SMTP, POP3 and possibly some of those NNTP servers in the near future. Once I get the .conf files figured out for one simple domain, I hope the rest falls into place. I c

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
In message <1305008349.11252.1450182...@webmail.messagingengine.com>, "" writes : > > > On Tue, 10 May 2011 16:15 +1000, "Mark Andrews" wrote: > > > looks good, right? > > > > yes. > > MANY thanks! i wouldn't have easily found this ... > > > DNSSEC only needs wristwatch time accuracy howeve

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
On Tue, 10 May 2011 16:15 +1000, "Mark Andrews" wrote: > > looks good, right? > > yes. MANY thanks! i wouldn't have easily found this ... > DNSSEC only needs wristwatch time accuracy however it is easy to > get the time wrong if the server is configured in the wrong timezone. > The error was

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
In message <1305006478.3040.1450174...@webmail.messagingengine.com>, "" writes: > On Tue, 10 May 2011 15:32 +1000, "Mark Andrews" wrote: > > > > "date -u" on the nameserver. It is "Tue 10 May 2011 05:32:13 UTC" > > as I send this. > > here, > > date -u > Mon May 9 22:34:59 UTC 2011 > > hr

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
On Tue, 10 May 2011 15:32 +1000, "Mark Andrews" wrote: > > "date -u" on the nameserver. It is "Tue 10 May 2011 05:32:13 UTC" > as I send this. here, date -u Mon May 9 22:34:59 UTC 2011 hrm? not good :-/ switch time server daemon to a known signed domain (clock.isc.org) service ntp rest

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
"date -u" on the nameserver. It is "Tue 10 May 2011 05:32:13 UTC" as I send this. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-us

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
On Tue, 10 May 2011 15:17 +1000, "Mark Andrews" wrote: > dig +dnssec +cd soa com dig +dnssec +cd soa com ; <<>> DiG 9.8.0-P1 <<>> +dnssec +cd soa com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55492 ;; flags:

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread Mark Andrews
dig +dnssec +cd soa com -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bi

Re: proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

2011-05-10 Thread
hi, On Tue, 10 May 2011 15:01 +1000, "Mark Andrews" wrote: > ok. > "dig soa com" > "dig dnskey com" > "dig ds com" dig soa com ; <<>> DiG 9.8.0-P1 <<>> soa com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 62397