problem with NS record resolution

2014-07-02 Thread Manuel Ramirez Montero
Hi, i have BIND 9.9.5-P1 installed. i have tried to configure a new zone "isilon.mep.es": zone "isilon.mep.es" in { type master; file "/var/named/data/isilon.mep.es.hosts"; allow-update { dns; }; allow-transfer { dns_xfer

Re: problem with NS record resolution

2014-07-02 Thread Reindl Harald
Am 02.07.2014 14:00, schrieb Manuel Ramirez Montero: > scgal1 NS sipgal1 > scmol1 NS sipmol1 > sipgal1 A 10.1.32.224 > sipmol1 A 10.1.32.222 why don't you just use FQDN instead "sipgal1" and "sipmol1"? that b

Re: problem with NS record resolution

2014-07-02 Thread Mark Andrews
Turn off forwarding for the namespace. Add a empty forwarders clause. zone "isilon.mep.es" in { type master; file "/var/named/data/isilon.mep.es.hosts"; allow-update { dns; }; allow-transfer { dns_xfer; }; forwarders { /* empty */ }; }; Mark -- Mark

Re: problem with NS record resolution

2014-07-02 Thread Manuel Ramirez Montero
Hi, if the ns record and type A record are in the same zone , is not necesary. I have configured the forwarders with no values as Mark has told before and that works fine!!! . Regards 2014-07-02 14:09 GMT+02:00 Reindl Harald : > > > Am 02.07.2014 14:00, schrieb Manuel Ramirez Montero: > > scga

Cannot get "allow-query-on" to work

2014-07-02 Thread Bob Harold
I am using Ubuntu 12.04.4, BIND 9.8.1-P1, and just added: allow-query-on { 127.0.0.1; }; To the default /etc/bind/named.conf.options file. That should make it only answer queries sent to 127.0.0.1, and not answer queries sent to the server's normal IP. But it seems to have no effect. I have tri

Re: Cannot get "allow-query-on" to work

2014-07-02 Thread Reindl Harald
Am 02.07.2014 17:08, schrieb Bob Harold: > I am using Ubuntu 12.04.4, BIND 9.8.1-P1, and just added: > > allow-query-on { 127.0.0.1; }; > > To the default /etc/bind/named.conf.options file. > That should make it only answer queries sent to 127.0.0.1, and not > answer queries sent to the server'

Re: Cannot get "allow-query-on" to work

2014-07-02 Thread Bob Harold
The server I really need this for is a little more complex. I was just trying for a simple test case. Here are more details on my plans to actually use "allow-query-on". Two DNS servers, one only for the data centers, and another for the users, but also as backup for the data center. DNS resolv

Re: Cannot get "allow-query-on" to work

2014-07-02 Thread Reindl Harald
personally i would not mix that and have own virtual servers and control the reachability via iptables, the servers can act as slave/master where needed so that the datacenter nameserver has all zones and differ where it makes sense we do something similar with internal / public namservers 4 dns s

re: Cannot get "allow-query-on" to work.

2014-07-02 Thread Bob McDonald
Did you specify 127.0.0.1 in the "listen-on" options statement? > I am using Ubuntu 12.04.4, BIND 9.8.1-P1, and just added: > allow-query-on { 127.0.0.1; }; > To the default /etc/bind/named.conf.options file. > That should make it only answer queries sent to 127.0.0.1, and not answer > queries s

Re: Cannot get "allow-query-on" to work.

2014-07-02 Thread Bob Harold
"listen-on" defaults to all the computer's IPv4 addresses, including the loopback, so I did not put an explicit "listen-on" statement. It answers queries to both the loopback and other addresses. -- Bob Harold DNS hostmaster University of Michigan On Wed, Jul 2, 2014 at 1:06 PM, Bob McDonald

problem resolving ardownload.adobe.com

2014-07-02 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 version: 9.10.0-P2 dig ardownload.adobe.com. @localhost ;; ANSWER SECTION: ardownload.adobe.com. 8743IN CNAME ardownload.wip4.adobe.com. dig ardownload.adobe.com. @8.8.8.8 ;; ANSWER SECTION: ardownload.adobe.com. 4141IN CNAME ard

Re: Cannot get "allow-query-on" to work

2014-07-02 Thread Jeremy C. Reed
> I am using Ubuntu 12.04.4, BIND 9.8.1-P1, and just added: > allow-query-on { 127.0.0.1; }; Please upgrade your BIND. There was a bug in allow-query-on that was fixed since 9.8.6rc2. Please note that currently allow-query-on is only used for "zone" configurations. Use allow-cache-on if restrict