Re: Bind9 - Tuning

2017-03-27 Thread Flex Banana
Hi Filho, We have used bind as a server for many years in a VM with a single CPU and 2 Go RAM with almost default settings. Here is the options of our config options { directory "/var/lib/named"; managed-keys-directory "/var/lib/named/dyn/"; zone-statistics yes;

Re: response-rate-limiting - "window" explained?

2017-03-27 Thread Tony Finch
Tom wrote: > Can someone explain the behaviour of "window" in the rate-limit-context? It basically determines the time after a client that was querying very fast but then stopped is allowed to receive responses again. When a client repeats a query, its counter is decremented until it reaches th

Re: bind-dyndb-ldap integration

2017-03-27 Thread Tony Finch
Hika van den Hoven wrote: > > Running named with `-d 10 -g -u named` from the command line got me > some more info but I still do not understand what goes wrong. I looked at this, but I can't work out what the problem is either. Something mysterious is going wrong inside bind-dyndb-ldap's config

Re: best security practices

2017-03-27 Thread Miguel Mucio Santos Moreira
Hi sashk, I recommend NIST Secure Domain Name System Guide, follow bellow link to get it. http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-81-2.pdf See ya -- Miguel Moreira Gerente DPR/SRE/GSR - Gerência de Serviços de Rede +55(31)3339-1401 PRODEMGE - Companhia de Tecnolog

Re: bind-dyndb-ldap integration

2017-03-27 Thread Tomas Krizek
On 03/27/2017 12:11 PM, Tony Finch wrote: > Hika van den Hoven wrote: >> Running named with `-d 10 -g -u named` from the command line got me >> some more info but I still do not understand what goes wrong. > I looked at this, but I can't work out what the problem is either. > Something mysterious

Re: bind-dyndb-ldap integration

2017-03-27 Thread Hika van den Hoven
Hoi Tomas, Monday, March 27, 2017, 2:54:52 PM, you wrote: > On 03/27/2017 12:11 PM, Tony Finch wrote: >> Hika van den Hoven wrote: >>> Running named with `-d 10 -g -u named` from the command line got me >>> some more info but I still do not understand what goes wrong. >> I looked at this, but I