Re: ISC Bind in Active Directory

2012-10-18 Thread G.W. Haywood
Hi there, On Thu, 18 Oct 2012, bind-users-requ...@lists.isc.org wrote: ISC Bind in Active Directory (Aaron Thompson) I'm hopping Sometimes AD has that effect. :) to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. I've been working on a client's

Re: ISC Bind in Active Directory

2012-10-18 Thread Michael Sinatra
On 10/18/12 11:03 AM, Aaron Thompson wrote: > Hi All, > > I'm hopping to get some feedback from people who use ISC Bind and DHCPD > in Active Directory environments. > > Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a > pretty stable service, redundant and we are polling statis

Re: ISC Bind in Active Directory

2012-10-18 Thread Kevin Darcy
You should think of DNS hosting, DNS resolution and DHCP, as separate services that can either be put together on a single platform, or run on separate platforms in various combinations, interoperating with each other. Another important factor is whether your AD domain is colocated with a bunch

Re: Disable log message

2012-10-18 Thread Chris Thompson
On Oct 18 2012, Jeremy C. Reed wrote: On Thu, 18 Oct 2012, Jack Tavares wrote: I am running bind9.8.x built from source and I see this message in the logs built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah' '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib' '--mand

Re: squash 'client query (cache) denied' syslog entries

2012-10-18 Thread Jeremy C. Reed
On Thu, 18 Oct 2012, David Dowdle wrote: > Some of my external facing nameservers are under attack, and the biggiest > fallout, is the machines goign into iowait from logging all the client query > denied syslog messages. > > note: yes, recursion is turned off on these machines. > > The current

squash 'client query (cache) denied' syslog entries

2012-10-18 Thread David Dowdle
Some of my external facing nameservers are under attack, and the biggiest fallout, is the machines goign into iowait from logging all the client query denied syslog messages. note: yes, recursion is turned off on these machines. The current logging is a very vanilla logging { catego

ISC Bind in Active Directory

2012-10-18 Thread Aaron Thompson
Hi All, I'm hopping to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a pretty stable service, redundant and we are polling statistics with Cacti. There is concern by Management of usi

Re: Disable log message

2012-10-18 Thread Jeremy C. Reed
On Thu, 18 Oct 2012, Jack Tavares wrote: > I am running bind9.8.x built from source and I see this message in the logs > built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah' > '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib' > '--mandir=/usr/share/man' '--with-opens

RE: Disable log message

2012-10-18 Thread Jack Tavares
Let me be more specific. Is there a way to tell named to not log this message? Thank you -- Jack Tavares From: Warren Kumari [war...@kumari.net] Sent: Thursday, October 18, 2012 10:18 To: Jack Tavares Cc: Warren Kumari; bind-us...@isc.org Subject: Re: Di

Re: Disable log message

2012-10-18 Thread Warren Kumari
On Oct 18, 2012, at 1:13 PM, Jack Tavares wrote: > I am running bind9.8.x built from source and I see this message in the logs > built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah' > '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib' > '--mandir=/usr/share/man' '--

Disable log message

2012-10-18 Thread Jack Tavares
I am running bind9.8.x built from source and I see this message in the logs built with '--prefix=/blah' '--sbindir=/blah' '--sysconfdir=/blah' '--localstatedir=/var' '--exec-prefix=/usr' '--libdir=/usr/lib' '--mandir=/usr/share/man' '--with-openssl=/blah' '--enable-fixed-rrset' '--enable-shared

Re: dhcpd

2012-10-18 Thread Dwayne Hottinger
Great to hear Im not the only one seeing this. Havent seen any androids yet. I dont think it is any that are jailbroke. One of the devices is division owned so I know it isnt. Just crappy os's. The settings on the ipads actually have a tab for bootp, but no way to change that. ddh On Thu,

RPZ: log parsing

2012-10-18 Thread Hugo Maxwell Connery
Hi, I'm working on a little product which relies on the RPZ facility of BIND, and particularly on parsing the logs from BIND. I am using the logging/channel facility in BIND to separate a log which contains only information relating to recursive queries which have been responded to from an RPZ z

Re: dhcpd

2012-10-18 Thread Jim Glassford
Hi, Running 4.1.1-P1 and we these also from iThings and androids. Tried to verify if the ones doing it where jail broke or something else in common but never got to the bottom of it. Enabling bootp, they continued to ask. We just continue to deny bootp for subnets that have no need for it and

dhcpd

2012-10-18 Thread Dwayne Hottinger
I recently setup a new dhcp server. In my logfiles yesterday I noticed the following message: BOOTP from dynamic client and no dynamic leases I checked the mac addresses of these clients and thus far they are all ipads, ipods or iphones. These devices have gotten ip's in the past. In my dhcpd

Re: Possible DDoS?

2012-10-18 Thread G.W. Haywood
B0;261;0cHi there, On Wed, 17 Oct 2012, Manson, John wrote: Does this rise to the level of a DDoS attack? 82 queries in a second is modest, but you're in US government and that IP is in China. Given the recent publicity, IMO that's probable cause. I blackhole IPs that behave like this. I