DNS: how to verify glue NS records?

2014-12-05 Thread Alexei Malinin
Hello. I would like to resolve this problem: - I have a child DNS zone served by my ISP slave name server; - the parent zone is served by my ISP master name server; - the question is - how and with what tools (dig, host, nslookup, or maybe C or Perl libs) can I verify the NS glue records in the

Re: DNS: how to verify glue NS records?

2014-12-05 Thread Casey Deccio
Hi Alexei, On Fri, Dec 5, 2014 at 10:16 AM, Alexei Malinin alexei.mali...@mail.ru wrote: I would like to resolve this problem: - I have a child DNS zone served by my ISP slave name server; - the parent zone is served by my ISP master name server; - the question is - how and with what tools

Glue records for secondary NS

2014-12-05 Thread Robert Moskowitz
I just found out that I had old garbage in my rgistrar setup for my domain. To wit, an NS server that has not been an NS server for years. And now that I use that host name for another usage on another address, it was giving lots of problems. My bad, I should have caught this when I moved

Re: Glue records for secondary NS

2014-12-05 Thread Casey Deccio
On Fri, Dec 5, 2014 at 11:47 AM, Robert Moskowitz r...@htt-consult.com wrote: I have 3 secondaries run by other domains. This was to give me some geo-diversity. How do I create glue records for them? My registrar only lets me create glue records within my domain (the web form pre-provides

Re: Glue records for secondary NS

2014-12-05 Thread Robert Moskowitz
On 12/05/2014 12:30 PM, Casey Deccio wrote: On Fri, Dec 5, 2014 at 11:47 AM, Robert Moskowitz r...@htt-consult.com mailto:r...@htt-consult.com wrote: I have 3 secondaries run by other domains. This was to give me some geo-diversity. How do I create glue records for them? My

Re: Glue records for secondary NS

2014-12-05 Thread Casey Deccio
On Fri, Dec 5, 2014 at 1:00 PM, Robert Moskowitz r...@htt-consult.com wrote: On 12/05/2014 12:30 PM, Casey Deccio wrote: Short answer: you don't need, nor should you configure glue, for the servers run by the other domains. It would be nice, then, if all these DNS tool sites would know

Re: DNS: how to verify glue NS records?

2014-12-05 Thread Alexei Malinin
Hi Casey. Thank you for the explanation. I'm sorry for the misleading Subject of this thread, of course I meant delegation NS records. I understand from your reply that there are no technical means, tools, etc for verifying delegation NS records in the parent zone if the child and parent zone

Re: DNS: how to verify glue NS records?

2014-12-05 Thread Casey Deccio
Hi Alexei, On Fri, Dec 5, 2014 at 2:31 PM, Alexei Malinin alexei.mali...@mail.ru wrote: Thank you for the explanation. I'm sorry for the misleading Subject of this thread, of course I meant delegation NS records. No problem. I knew what you meant :) I understand from your reply that

Re: Glue records for secondary NS

2014-12-05 Thread Mark Andrews
In message caektliqrbcfbdcsdnvxbjxtjvi_nx5xzzfy1d8f4lwhg8m3...@mail.gmail.com , Casey Deccio writes: On Fri, Dec 5, 2014 at 11:47 AM, Robert Moskowitz r...@htt-consult.com wrote: I have 3 secondaries run by other domains. This was to give me some geo-diversity. How do I create glue

Re: DNS: how to verify glue NS records?

2014-12-05 Thread Mark Andrews
In message caektliqyxgmivhw7prifcy3qwby4szjzm8bjz48jj4umooc...@mail.gmail.com , Casey Deccio writes: Hi Alexei, On Fri, Dec 5, 2014 at 2:31 PM, Alexei Malinin alexei.mali...@mail.ru wrote: Thank you for the explanation. I'm sorry for the misleading Subject of this thread, of course

Re: Glue records for secondary NS

2014-12-05 Thread Casey Deccio
On Fri, Dec 5, 2014 at 3:23 PM, Mark Andrews ma...@isc.org wrote: There are other cases where glue is necessary. RFC 1034 unfortunately does not list them. It only lists the most obvious case. Good point. Of course, the general principle is to avoid cyclic dependencies and

Re: DNS: how to verify glue NS records?

2014-12-05 Thread Alexei Malinin
On 12/05/14 23:33, Mark Andrews wrote: ... With all this said a RFC 2317 parent really should let their zone be transfered as the child zone administrator needs a local copy of the zone for when their external link goes down. If they do not have a local copy then reverse lookups will fail

Re: DNS: how to verify glue NS records?

2014-12-05 Thread Mark Andrews
In message 548223dd.2050...@mail.ru, Alexei Malinin writes: On 12/05/14 23:33, Mark Andrews wrote: ... With all this said a RFC 2317 parent really should let their zone be transfered as the child zone administrator needs a local copy of the zone for when their external link goes down.