EDNS and fallback

2015-05-14 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hello, I am trying to understand EDNS queries and the fallback capabilities. BIND 9.9.6-P1. I have a particular scenario where two sites are connected via firewall links and UDP fragmentation is not allowed. The symptoms I am seeing is that a dig command sends out several queries with

Simple max-journal-size question

2014-06-11 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
I just can't seem to find the answer to such a simple question (BIND9.9). I have a very active dynamic zone that now has an incredibly large journal file. I would like to use the max-journal-size parameter in the zone declaration to keep this from happening again. I understand that I can

ASSERT messages

2014-04-10 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hello, We have ~125 servers. About 1330 Central yesterday, the named of 6 of these crashed in 2 hours time (not at the same time, but within two hours). Since then, there have been other asserts at the same machines and with several other machines (total of 11 now). There hves been no

RE: Inline Signing does not update SOA?

2012-05-08 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
-Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Monday, May 07, 2012 4:54 PM To: Bischof, Ralph F. (MSFC-IS40)[NICS] Cc: bind-users@lists.isc.org Subject: Re: Inline Signing does not update SOA? In message a605629600c9a347b5881ffe16f101fb3d82823...@ndmsscc07

Inline Signing does not update SOA?

2012-05-07 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hi, I am testing with BIND 9.9.0 and inline signing. I have run upon something that I cannot figure out. When I update the SOA record of the master zone file, if I reload the zone with rndc reload, the SOA record is updated. If I perform a stop/start of the named executable, the SOA

RE: Inline Signing does not update SOA?

2012-05-07 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hi Evan, -Original Message- From: Evan Hunt [mailto:e...@isc.org] Sent: Monday, May 07, 2012 12:44 PM To: Spain, Dr. Jeffry A. Cc: Bischof, Ralph F. (MSFC-IS40)[NICS]; bind-users@lists.isc.org Subject: Re: Inline Signing does not update SOA? Ralph: There was a lot of discussion

RE: SERVFAIL with ocsp.entrust.net.

2012-04-25 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
-bounces+ralph.bischof=nasa@lists.isc.org [mailto:bind-users-bounces+ralph.bischof=nasa@lists.isc.org] On Behalf Of Bischof, Ralph F. (MSFC-IS40)[NICS] Sent: Tuesday, April 24, 2012 12:53 PM To: bind-users@lists.isc.org Subject: SERVFAIL with ocsp.entrust.net. Hi Mark, Good

SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hello, I have been trying to find out why my caching servers are giving SERVFAIL as an answer for any type of query except for an A record for the domain in the subject. Whether I try a , TXT, SOA, PTR, TXT, etc, I get a SERVFAIL answer. Yet, it seems that anyone else in the world

RE: SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
with ocsp.entrust.net. In article mailman.576.1335276428.63724.bind-us...@lists.isc.org, Bischof, Ralph F. (MSFC-IS40)[NICS] ralph.bisc...@nasa.gov wrote: Hello, I have been trying to find out why my caching servers are giving SERVFAIL as an answer for any type of query except

SERVFAIL with ocsp.entrust.net.

2012-04-24 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
/DHCP SAIC/NICS 256-544-3982 -Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Tuesday, April 24, 2012 10:44 AM To: Bischof, Ralph F. (MSFC-IS40)[NICS] Cc: comp-protocols-dns-b...@isc.org Subject: Re: SERVFAIL with ocsp.entrust.net. Entrust is definitely aware

INSIST message

2012-02-17 Thread Bischof, Ralph F. (MSFC-IS40)[NICS]
Hello, I have had a couple of INSIST messages in my general log. I am running BIND 9.6-ESV-R4-P3. Can someone enlighten me as to why I would be getting these? Out of over 125 machines, this is the only one that has logged this message starting yesterday. This is a recursive