Re: configure syslog prefix

2013-07-02 Thread Doug Barton
On 07/02/2013 06:34 AM, Sam Wilson wrote: In article , Tony Finch wrote: Klaus Darilion wrote: Some software allows to configure the syslog prefix, but I couldn't find that for bind. Rename the named executable. Assuming a Unix-like OS would having multiple links (hard or soft) have t

Re: BIND + LDAP Backend

2013-07-02 Thread Evan Hunt
On Tue, Jul 02, 2013 at 05:22:15PM -1000, Stephan Fabel wrote: > All, > > sorry if this is a repeating theme here... we are interested in utilizing > LDAP as a backend to BIND. Google gives conflicting information on whether > this is possible/recommended/etc. and I couldn't find anything in the >

BIND + LDAP Backend

2013-07-02 Thread Stephan Fabel
All, sorry if this is a repeating theme here... we are interested in utilizing LDAP as a backend to BIND. Google gives conflicting information on whether this is possible/recommended/etc. and I couldn't find anything in the release notes, which doesn't bode well I suppose... But anyhow: can someo

BIND Service Hung

2013-07-02 Thread Arie Lendra Putra
Hi, I’m running BIND on CentOS 5.3 on 12 Cache only DNS Servers (recursive), its BIND 9.3 its bit outdated yes, planning to upgrade to latest bind on Ubuntu server along with the hardware. These DNS Server sometime is serving around 17Mbps of DNS queries on peak hour, 16 Cores, only around

Re: Reverse address entries

2013-07-02 Thread Eduardo Bonsi
On 7/2/13 12:46 PM, John Horne wrote: On Tue, 2013-07-02 at 12:02 -0700, Eduardo Bonsi wrote: On 7/2/13 9:35 AM, John Horne wrote: We were alerted to the problem because we got long delays (around 20 seconds) when accessing a site doing a reverse lookup. That service then, no doubt the same as

Re: Reverse address entries

2013-07-02 Thread Sten Carlsen
On 02/07/13 21:02, Eduardo Bonsi wrote: > I have been reading all your concerns about reverse FQDNS. In my > example, we are a very small firm and I am the IT network admin > responsible for configuring our server. One of the reasons I > configured our server was because we deal with Photography,

Re: Reverse address entries

2013-07-02 Thread John Horne
On Tue, 2013-07-02 at 12:02 -0700, Eduardo Bonsi wrote: > On 7/2/13 9:35 AM, John Horne wrote: > > > > We were alerted to the problem because we got long delays (around 20 > > seconds) when accessing a site doing a reverse lookup. That service > > then, no doubt the same as with SMTP, then proceede

Re: Reverse address entries

2013-07-02 Thread Eduardo Bonsi
On 7/2/13 9:35 AM, John Horne wrote: On Tue, 2013-07-02 at 14:42 +0100, Sam Wilson wrote: Can anyone here give examples of the types of various software that will not operate without a PTR record? Nope, and our entire reverse zone was externally inaccessible for many months! (See previous pos

Re: Reverse address entries

2013-07-02 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/02/2013 12:36 PM, John Horne wrote: > On Tue, 2013-07-02 at 14:42 +0100, Sam Wilson wrote: > >> Can anyone here give examples of the types of various software >> that will not operate without a PTR record? >> > Nope, and our entire reverse zone

Re: Reverse address entries

2013-07-02 Thread John Horne
On Tue, 2013-07-02 at 14:42 +0100, Sam Wilson wrote: > Can anyone here give examples of the types of various software that will > not operate without a PTR record? > Nope, and our entire reverse zone was externally inaccessible for many months! (See previous posts on the bind9-users list from me

Re: Reverse address entries

2013-07-02 Thread Barry Margolin
In article , Daniel McDonald wrote: > The other place reverse DNS is routinely queried is SMTP. If you care > enough to send mail, you should care enough to set up your reverse entries > realistically so that spam filters will recognize that you are trying to > actively manage your email server

Re: Reverse address entries

2013-07-02 Thread Daniel McDonald
On 7/2/13 8:42 AM, "Sam Wilson" wrote: > There may be a subtle language thing going on here. I read the original > post above as saying, literally, "you need PTR records because various > software tries to match A and PTR records". It doesn't say "you need > PTR records because some systems req

Re: Reverse address entries

2013-07-02 Thread Steven Carr
On 2 July 2013 14:42, Sam Wilson wrote: > Can anyone here give examples of the types of various software that will > not operate without a PTR record? There have already been numerous listings of software that require reverse lookups. SMTP being the main one. Other services like IRC and some data

Re: configure syslog prefix

2013-07-02 Thread Tony Finch
Sam Wilson wrote: > Tony Finch wrote: > > Klaus Darilion wrote: > > > > > > Some software allows to configure the syslog prefix, but I couldn't > > > find that for bind. > > > > Rename the named executable. > > Assuming a Unix-like OS would having multiple links (hard or soft) have > the correct

Re: configure syslog prefix

2013-07-02 Thread Klaus Darilion
On 02.07.2013 14:59, Tony Finch wrote: Klaus Darilion wrote: Some software allows to configure the syslog prefix, but I couldn't find that for bind. Rename the named executable. I would prefer a configuration options, but I guess I have to use this workaround. Tested with symlinks, it

Re: Reverse address entries

2013-07-02 Thread Sam Wilson
In article , Matus UHLAR - fantomas wrote: > >> >In article , > >> > Charles Swiger wrote: > >> >> Certainly. Various software performs what's called a double-reverse > >> >> lookup > >> >> to confirm that the A and PTR records match. > > >In article , > > Matus UHLAR - fantomas wrote: > >>

Re: configure syslog prefix

2013-07-02 Thread Sam Wilson
In article , Tony Finch wrote: > Klaus Darilion wrote: > > > > Some software allows to configure the syslog prefix, but I couldn't find > > that > > for bind. > > Rename the named executable. Assuming a Unix-like OS would having multiple links (hard or soft) have the correct effect? Sam -

Re: configure syslog prefix

2013-07-02 Thread Tony Finch
Klaus Darilion wrote: > > Some software allows to configure the syslog prefix, but I couldn't find that > for bind. Rename the named executable. Tony. -- f.anthony.n.finchhttp://dotat.at/ Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first. Rough, becoming slight or

Re: bind-users Digest, Vol 1560, Issue 1

2013-07-02 Thread Manson, John
Give each instance of named a unique name: A-named, b-named, etc - Original Message - From: bind-users-requ...@lists.isc.org [mailto:bind-users-requ...@lists.isc.org] Sent: Tuesday, July 02, 2013 08:00 AM To: bind-users@lists.isc.org Subject: bind-users Digest, Vol 1560, Issue 1 Send

configure syslog prefix

2013-07-02 Thread Klaus Darilion
Hi! I have several bind instances running on the same host. All of them use the same logging prefix, e.g: named[11926]: zone mydomain/IN: Transfer started. named[11926]: transfer of 'mydomain/IN' from 2.3.4.5#53: connected using 2.3.4.5#44224 named[13479]: client 2.3.4.5#44224: transfer of 'm