Problem looking up domain dryfire.com

2016-08-16 Thread Eivind Olsen
nfo: 17 unexpected RCODE resolving 'dryfire.com/NS/IN': 213.162.97.177#53 A search for "17 unexpected RCODE" seems to indicate this might be caused by incompatibility between SIT/DNS cookies and older versions of NSD. Is this also w

Re: bind 9.8 named_stats parser

2015-08-05 Thread Eivind Olsen
y:b9agent_en to expose BIND9 statistics via SNMP - you might give that one a try? Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.i

Re: Cacti Template for graphing BIND9.8 queries stats

2013-11-13 Thread Eivind Olsen
t_en to expose counters from BIND through SNMP, which you can then easily get into Cacti. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists

Re: Sunos 5.8 Error:EDNS not supported by your namesever

2012-09-05 Thread Eivind Olsen
Solaris 8 installation I still have access to - the BIND bundled on that one was 8.2.4. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.o

Re: What can cause excessive amount of _dns-sd queries?

2012-08-23 Thread Eivind Olsen
belongs to some customer) Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

What can cause excessive amount of _dns-sd queries?

2012-08-23 Thread Eivind Olsen
.16.172.in-addr.arpa IN PTR + talk.l.google.com IN A + gmail-pop.l.google.com IN A + gmail-imap.l.google.com IN A + ...and similar variations of these. Have any of you seen something like this before? Regards Eivind Olsen ___ Please visit https://lis

Re: Can't receive emails from another machine

2012-08-03 Thread Eivind Olsen
Stayvoid wrote: > Is it connected with my zone file settings (which are specified on the > side of my registrar) or with BIND? Hard to tell, I don't think you've told us the name of the domain..? Give the name, and it should be much easier to figure out what's going on.

Re: RHEL, Centos, Fedora rpm vs ISC bind versions

2012-07-15 Thread Eivind Olsen
Den 15. juli 2012 kl. 16:57 skrev Benny Pedersen : > change to gentoo/funtoo ? Some might prefer to run the same Linux distribution on all their servers, changing to something like Gentoo just to get BIND running seems a bit overkill. Regards Eivind Ol

Re: Operation Cancelled Error

2012-07-12 Thread Eivind Olsen
usage - latency (how long does it take to get a reply) - packet loss / lost queries Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: Operation Cancelled Error

2012-07-12 Thread Eivind Olsen
et one result and be at the mercy of the external nameservers. You will probably get the highest result if you only ask for pre-cached answers, in which case reaching 100k qps (and higher) on a single server should be easy (with some not-too-old hardware) Regards Eivind

Re: Bind configuration

2012-05-21 Thread Eivind Olsen
Use the full zone name in the zone definition. zone "cairosource" Regards Eivind Olsen Den 21. mai 2012 kl. 16:33 skrev "Amira Othman" : > Hi all > > I have configured bind9 on centos 5.8 but I still can't nslookup my domain. > Below are my confi

Re: erros in logs

2012-05-11 Thread Eivind Olsen
BIND is to tell BIND that it shouldn't even try to use IPv6 (start the "named" command with option "-4"). If you're using for example RHEL / CentOS with the vendor-provided RPMs, you can do this by editing /etc/sysconfig/named and adding/editing t

Re: bind caching dns

2012-05-09 Thread Eivind Olsen
. Indeed RFC3197 > (https://www.ietf.org/rfc/rfc3197.txt) tells a cautionary tale. I've been using a net-snmp subagent called "B9Agent", with good success. It doesn't parse the XML statistics data but uses the statistics-file instead. For more details, see http://www.l3jane.net/w

Re: Can I build a new DNS/BIND system parallel to our existing DNS production system?

2012-05-03 Thread Eivind Olsen
off with fewer threads but higher clock speeds from typical Intel/AMD systems. (caveat: I haven't benchmarked BIND 9.9.x, which might have improved this). Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to un

Re: Update

2012-04-13 Thread Eivind Olsen
ached > [root@localhost ~]# Is there a local host firewall (iptables?) running on the DNS server? And if so, is tcp and udp port 53 open? Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe fr

Multithreaded BIND 9.9.0 on Linux - I'm confused

2012-04-11 Thread Eivind Olsen
1, I'd double the amount of threads? Will there be any real world advantage (or disadvantage) to specifying for example a couple of specific listen-on statements instead of using the listen-on any? Regards Eivind Olsen ___ Please visit https://

Re: BIND 9.9.0 assertion failure

2012-03-14 Thread Eivind Olsen
ffic (not enough to strain it, the load is normally around 0.02 or thereabout). Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

Re: One IP in multiple zones

2011-09-21 Thread Eivind Olsen
Adamiec, Lawrence wrote: > Is it possible to have one IP in multiple zone files for forward > lookups? What type of troubles would be encountered? Like, having www.example.com and ftp.example.org point to the same IP address? Yes, it's nothing weird about it. Regards E

Re: Bind DNS Need help with name resolution...

2011-08-21 Thread Eivind Olsen
sachin k wrote: > Can someone please help me understand why this is not working? A few suggestions: - try looking up names with dig instead of nslookup - do a tcpdump while testing, to see where packets are going, and whether you get anything back at all. Regards Eivind Olsen eiv...@aminor

Re: rankstel.net (was: SPF implementation schedule.)

2011-07-12 Thread Eivind Olsen
orking: ns1.ranksitt.net is giving return code REFUSE when I ask it for the NS records to rankstel.net, and ns1.rankstel.net just isn't giving any answer back (timeout). Whoever owns those nameservers should probably consider fixing them. PS! Don't just reply to a previous email when you write

Re: Clients get DNS timeouts because ipv6 means more queries for each lookup

2011-07-11 Thread Eivind Olsen
both of these: 1) Disable or at least configure IPv6 properly on your server 2) Tell BIND to not use IPv6 transport, typically by starting "named" with the command line option "-4". How to do that depends on your operating system / distr

Re: SPF implementation schedule.

2011-07-11 Thread Eivind Olsen
s something like libspf (http://www.libspf2.org) is what you want? Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DDNS propagation between views

2011-07-08 Thread Eivind Olsen
you're pretty much telling one of your views "There, I _might_ have changed the contents of your zonefile, so now you'll need to check it again". Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bi

Re: update bind

2011-07-06 Thread Eivind Olsen
ith the new version - just in case (I don't know your setup, whether you use anything "odd" like the DLZ and so on). Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bi

Re: better performance with 32 bit ! why?

2011-06-29 Thread Eivind Olsen
ward to what you're planning for 9.something - I still have more cores I could in theory gain some speed from. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users

Re: better performance with 32 bit ! why?

2011-06-29 Thread Eivind Olsen
so, you mentioned using tcpreplay, which is also apparantly single-threaded , making the comparison like this: 1*1.6GHz vs 1*2.33GHz. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: better performance with 32 bit ! why?

2011-06-29 Thread Eivind Olsen
iharrathi@orange-ftgroup.com wrote: > The 64 bit server(server1) is faster than the 32 bit server (server2). Really? I thought you said the 64 bit server had a CPU with 1.6GHz cores, and the 32 bit server had 2.33GHz cores? Regards Eivind Ol

Re: better performance with 32 bit ! why?

2011-06-28 Thread Eivind Olsen
- as far as I know tcpreplay is single-threaded - which also suggests the reason it might win out on the 32 bit system is again due to the clock frequency. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to u

Re: Error when start named

2011-06-26 Thread Eivind Olsen
Rodrigo Faria Tavares wrote: > [root@centos ~]# grep 4 /etc/sysconfig/named > #OPTIONS ="-4" Looks like you have commented out that line. Remove the # character there, if you want to really disable IPv6 in BIND. Regards Eivind Olsen

Re: Error when start named

2011-06-25 Thread Eivind Olsen
in /etc/named.rfc1912.zones around line 10, and in /etc/named.conf around line 35. The error message suggests you have defined the root zone "." twice. Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-user

Re: How to Setup a Name Servers visible on Internet?

2011-06-21 Thread Eivind Olsen
HEN: Tue Jun 21 19:15:21 2011 ;; MSG SIZE rcvd: 107 Eivind-mac:~ eivind$ Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How to Setup a Name Servers visible on Internet?

2011-06-21 Thread Eivind Olsen
ed out; no servers could be reached Eivind-mac:~ eivind$ dig any metropolitanbuntu.co.za @41.134.194.91 ; <<>> DiG 9.6.0-APPLE-P2 <<>> any metropolitanbuntu.co.za @41.134.194.91 ;; global options: +cmd ;; connection timed out; no servers

Re: How to Setup a Name Servers visible on Internet?

2011-06-21 Thread Eivind Olsen
something? Regards Eivind Olsen ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: forward name resolution OK, but reverse doesn't work ...

2011-06-17 Thread Eivind Olsen
ed to slave it from any of the 6 in-addr.arpa nameservers: [a-f].in-addr-servers.arpa I'm guessing your logs also have entries about being unable to do zone transfers of in-addr.arpa. Regards Eivind Olsen ___ Please visit https://lists.isc.org/ma

RE: bind 9 performance

2011-06-15 Thread Eivind Olsen
ooking into named.stats wherever your nameserver has its working directory. If you found the file - wait a while, run the command again to dump another set of statistics - you should now have some numbers available in that file and can now calculate how many queries you have per second on average. R

Re: bind 9 performance

2011-06-15 Thread Eivind Olsen
ration changes from BIND8 to BIND9. In general, what I'd recommend is: 1) Read that migration document 2) Test your existing named.conf + zonefiles by either loading them into BIND9 directly, or by using the named-checkconf / named-checkzone commands from BIND9. 3) Watch your logs Regards E

Re: bind 9 performance

2011-06-15 Thread Eivind Olsen
be likely to even notice? Also, BIND8 has been deprecated for almost 4 years now. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: tell BIND the nameservers have been changed

2011-06-15 Thread Eivind Olsen
cords; if ns[1-2].myzone.com are registered as nameservers and have their own glue records, you should make sure those are updated to the new IP addresses as well. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists

Re: why bind unable to find log files

2011-06-13 Thread Eivind Olsen
llow BIND to write to your logfile in that specific directory. The short version of this: learn how to use SELinux if you are going to have it enabled, otherwise you might as well disable it...? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNS Trouble

2011-06-12 Thread Eivind Olsen
n your zonefile - that is 4 w's and not just the 3 you try to ping. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: primary and secondary running different versions

2011-06-11 Thread Eivind Olsen
se through named-checkconf / named-checkzone). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: testing bind9

2011-06-09 Thread Eivind Olsen
e lookup zone for your internal subnet. It really isn't important, even though nslookup tends to think it is. In general, I'd recommend debugging/testing DNS lookups with a proper tool like dig, and not nslookup which has a couple of snags which can easily c

Re: MX record IP address instead of hostnames

2011-06-07 Thread Eivind Olsen
p-uspto.gov. I can't, no. It looks fine enough when I check here (a bit odd to only have a single nameserver, but that's beside the point). [eivind@vimes ~]$ dig +short mx coop-uspto.gov 5 coop-mbxhc-1.coop-uspto.gov. 5 coop-mbxhc-0.coop-uspto.gov. [eivind@vimes

Re: Hosting my company DNS server in Internet

2011-05-30 Thread Eivind Olsen
n name(s) if you haven't already done so. - tell your registrar to configure your parent domain so it'll delegate your domain to your nameservers. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Bug in bind 9.7.3?

2011-05-27 Thread Eivind Olsen
ith this issue much faster than I'd have expected really. No, I'm not saying I'd have expected you to take ages, but hopefully you know what I'm trying to say here. Keep up the good work! -- Regards Eivind Olsen eiv...@aminor.no ___ bi

Re: Bug in bind 9.7.3?

2011-05-26 Thread Eivind Olsen
n able to reproduce it on a DNSSEC-validating BIND either. I'm not saying there's no bug, only that I can't reproduce it myself (probably, I'm doing something wrong). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list

Re: Bug in bind 9.7.3?

2011-05-26 Thread Eivind Olsen
eck if I can get them to crash). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

RE: Getting different name resolution for news.google.com from master and slave BIND

2011-05-24 Thread Eivind Olsen
single of your nameservers, doing manual queries to all 4 Google nameservers (ns1 - 4)? Same result from all 4, or different results? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Getting different name resolution for news.google.com from master and slave BIND

2011-05-24 Thread Eivind Olsen
u come from. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: IPv4 & IPv6 named processes on a dual stack host

2011-05-24 Thread Eivind Olsen
ng like this to your options block in named.conf: listen-on-v6{ any; }; I see you mention you run ISC DHCP 4.1 of some version: yes, the DHCP software can currently only run either IPv4 or IPv6. BIND can easily deal with both protocols at the same time. Regards Eivind Olsen __

Re: Deny MX query

2011-05-24 Thread Eivind Olsen
t is it worth it? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: subdomain delegation question #2: (simple config)

2011-05-24 Thread Eivind Olsen
example.com. The $ORIGIN will be appended here to the non-FQDN, meaning you really have: sccnj04.sccnj04.example.com. IN NS sip.example.com. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Error when trying to make secondary nameserver from copying primary nameserver

2011-05-05 Thread Eivind Olsen
dHat package, so I on't know how it expects things to be set up, if you're using the bundled start script. If the permissions initially look good, I suggest you look into whether you have SELinux running, maybe its policies are making problems for you? Regards Eivind Olsen eiv...@aminor

Re: Anyone have problems with BIND 9.8.0

2011-04-28 Thread Eivind Olsen
Marion Bogdanov wrote: > In my preparation to upgrade from 9.7.3 to 9.8.0. I figured it would be > worth to field the obvious question: has anyone run into any problems in > their upgrade? I haven't notice anything myself really, but would be interested in hearing of others have.

Re: continous DNS query to ROOT DNS server

2011-04-26 Thread Eivind Olsen
;, ISC_TRUE }, { "28.172.IN-ADDR.ARPA", ISC_TRUE }, { "29.172.IN-ADDR.ARPA", ISC_TRUE }, { "30.172.IN-ADDR.ARPA", ISC_TRUE }, { "31.172.IN-ADDR.ARPA", ISC_TRUE }, { "168.192.IN-ADDR.ARPA", ISC_TRUE }, #endif Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: slave AXFR bind9

2011-04-21 Thread Eivind Olsen
S record in the zonefile, and isn't listed with also-notify either. Am I right? Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

RE: slave timers

2011-04-19 Thread Eivind Olsen
ems with one of these two (ns.uat / ns2.uat)? If it isn't, have you told the master nameserver about the slave with for example the also-notify option? How have you configured BIND on the master nameserver, with regards to notify settings? Regards Eivind Olsen eiv

Re: DNSSEC, whitehouse, isc, and troubleshooting...

2011-04-18 Thread Eivind Olsen
t a CNAME outside of the zone, pointing to www.whitehouse.gov.edgesuite.net which is yet another CNAME pointing to a1128.h.akamai.net. Neither of these seem to be DNSSEC signed. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.

Re: max-cache-size rule of thumb?

2011-04-18 Thread Eivind Olsen
e - with normal use, it should stabilize on some amount by itself, based on your usage patterns. Memory is fairly cheap these days, too. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: multiple IP address in Address Record in BIND

2011-04-17 Thread Eivind Olsen
> In the bind 8 days people would put the same address multiple times and > then > other addresses as well to "weight" the responses. Yes, but in the example given it's the same address all the time, no mention of any other addresses, and that's why I ask - wh

Re: multiple IP address in Address Record in BIND

2011-04-17 Thread Eivind Olsen
kup sva.com > Name:   sva.com > Addresses:  10.10.10.10, 10.10.10.10, 10.10.10.10, 10.10.10.10,10.10.10.10 You would like it to point to the same IP-address many times? Why? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.o

RE: Maximum limit of query per second

2011-04-06 Thread Eivind Olsen
a you are guaranteed to have in your local cache? Or would your testing require your server to go out on the Internet and be at the mercy of external servers as well? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.i

Re: Maximum limit of query per second

2011-04-06 Thread Eivind Olsen
ed recursive clients in named.conf, but that's all. I didn't spend time on getting higher qps during testing, as I figured 10 qps in best-case conditions on a single server would suffice, at least for the time being. Regards Eivind Olsen ___

Re: Deny query to specific domain

2011-04-05 Thread Eivind Olsen
ritative for that domain (define it as a zone etc.), or configure RPZ which is supported in BIND 9.8.0 for example. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: priority with A record?

2011-04-05 Thread Eivind Olsen
iharrathi@orange-ftgroup.com wrote: > Is there anyway to enable priority on A or NS record? No. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Is it possible to block resolution of a malware address?

2011-04-01 Thread Eivind Olsen
servers you have as well) Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: BIND 9 and 2 Domains

2011-03-31 Thread Eivind Olsen
llowing/denying zone transfers etc - this example is just meant to show the basic case) Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: can I set the second nameserver to a public dns cache?

2011-03-28 Thread Eivind Olsen
server No. Don't do that. A cache/resolver is not the same as an authoritative server. For example, it will not flag the cache contents as being authoritative (the AA flag). Get a proper secondary/slave nameserver somewhere, it doesn't need to be costly. R

Re: problem for validate the script dnssec to isc dlv

2011-03-28 Thread Eivind Olsen
ONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;fakessh.eu.IN NS ;; Query time: 55 msec ;; SERVER: 87.98.186.232#53(87.98.186.232) ;; WHEN: Mon Ma

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Eivind Olsen
d in this query, or is that nameserver really weird? 4) If you've sorted all the stuff above: now is the time to try to add the DS or DLV records. I'd not suggest you try this before the previous issues have been corrected. Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc-key has expired

2011-03-23 Thread Eivind Olsen
y does it say? I'm guessing you might have enabled dynamic updates in a DNSSEC signed zone, without BIND having access to the private keys needed to sign, but that's a wild guess really. Regards Eivind Olsen ___ bind-users mailing list bind

Re: ip6.arpa help

2011-03-18 Thread Eivind Olsen
n some template, if there's not a specific record already defined? -- Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: necessary to have a secondary dns ipv6

2011-03-13 Thread Eivind Olsen
You are normally required to have at least two nameservers for your domains. Keep in mind that any ipv6-only hosts will be unable to use your ipv4 nameservers. Did this answer your question? Regards Eivind Olsen Den 14. mars 2011 kl. 00:10 skrev "fakessh @" : > How is it necess

Re: rndc: 'reload' failed: not found

2011-03-08 Thread Eivind Olsen
> Is both of the zone loaded from DLZ? In my tests? Neither of the zones, it was just meant to show that the "rndc reload" error message was the same as if BIND had no idea about the zone. Regards Eivind Olsen eiv...@aminor.no ___ bind-

Re: rndc: 'reload' failed: not found

2011-03-08 Thread Eivind Olsen
he original poster looks at it to see if is of any help). Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc: 'reload' failed: not found

2011-03-08 Thread Eivind Olsen
r BIND is running as? For example, http://fixunix.com/dns/55171-chrootd-bind-dlz-file-__db-00-perms-causing-rndc-reload-fail-where-set-change-them.html Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: rndc increment the serial

2011-03-05 Thread Eivind Olsen
u, you'll need to configure it, for example by setting up an rndc.key file (location depending on your installation of BIND). An easy way to configure rndc is with the "rndc-confgen -a" command line. -- Regards Eivind Olsen eiv...@aminor.no

Re: inconsistency dnssec debuguers response and writing conseil for new areas zone

2011-02-28 Thread Eivind Olsen
z.net/d/nicolaspichot.fr/dnssec/ especially about missing key 12961. -- Regards Eivind Olsen eiv...@aminor.no ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Threaded bind on CentOS

2011-02-24 Thread Eivind Olsen
ally it should log how many threads it's using. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How to allow set Host file dns query priorities in BIND

2011-02-23 Thread Eivind Olsen
don't think the hosts file is very suited for LOC, TXT and other such records. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: How to allow set Host file dns query priorities in BIND

2011-02-23 Thread Eivind Olsen
nless you have a very good reason. And if your Internet connection goes down, does it really matter whether you can do lookups, if you can't make the connections anyway? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org htt

Re: Multi language support in BIND

2011-02-23 Thread Eivind Olsen
n't capable of sending emails to such domain names - unless you make your users send directly to the punycode version - and really, you can't expect people to do that manually. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Question about some oddities in the logs

2011-02-22 Thread Eivind Olsen
notifies, true. But I don't need that. Currently the root zone has a refresh value of 1800 seconds and expire = 604800 seconds, so my slave servers will check the root for updates often enough. One advantage is that we can now instantly reject queries for things like "ei

Question about some oddities in the logs

2011-02-21 Thread Eivind Olsen
es" lists some RESERVED0 as well. Should I expect to see these out in the wild? Or should I only really worry if they're listed in bigger numbers? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: $GENERATE for /8 networks

2011-02-17 Thread Eivind Olsen
< 256; $bnet++) { for ($cnet = 0; $cnet < 256; $cnet++) { for ($dnet = 0; $dnet < 256; $dnet++) { print "${dnet}.${cnet}.${bnet} PTR ${network}-${bnet}-${cnet}-${dnet}.mynetwork.\n"; } } } (no, I'll not pr

Re: Delegation question

2011-02-04 Thread Eivind Olsen
n no longer piggyback off the previous line you've just commented out). You didn't mention whether you already were commenting out the A record or not. Check your logs to see if BIND complains about anything. Also try pushing your zonefile through named-c

Re: Delegation question

2011-02-04 Thread Eivind Olsen
n extract from the BIND 9.7 ARM, section 6.2.16.2: "Forwarding occurs only on those queries for which the server is not authoritative and does not have the answer in its cache." How exactly had you configured forwarding in your named.conf file? Regards Eivind Olsen ___

Re: bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread Eivind Olsen
vendor supplied BIND for some operating system / distribution, I guess it depends on how it's packaged etc. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: IXFR and AXFR

2011-01-27 Thread Eivind Olsen
e changes being made, so it can give a meaningful reply when asked to provide "all changes since serial number X", so you'll normally see IXFR being possible for dynamically updated zones (and a couple of other cases, check the ARM). Regards Eivind Olsen __

Re: bind Bind or BIND?

2011-01-26 Thread Eivind Olsen
ons of the name, on http://en.wikipedia.org/wiki/BIND : The acronym of BIND is Berkeley Internet Name Domain in a technical paper published in 1984. However, the most common acronym today and the one that can be found on the ISC web site is Berkeley Internet Name Daemo

Re: Globally setting TTL

2011-01-25 Thread Eivind Olsen
tains "$TTL 86400" or whatever. Try it and see if that works for you :D Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Forward using CNAME record

2011-01-25 Thread Eivind Olsen
.com doesn't know how to deal with requests coming in for www.ioanamorosan.com and gives that error message. The administrators of the webserver could add a ServerAlias setting in their Apache configuration, to put requests into the correct document root. Regards Eivind Olsen _

Re: Question when testing Caching Server with resperf

2011-01-24 Thread Eivind Olsen
query for the same name will get a faster answer from the cache? Did you flush the cache between tests? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: service if s/up/down/g ipv6

2011-01-24 Thread Eivind Olsen
> http://pastebin.com/7Be9FavZ That zonefile seems to be for fakessh.eu, and not for ovh.net. Your initial problem was regarding IPv6 towards r13151.ovh.net ? If so, that's the zonefile we'll need to look at. Regards Eivind Olsen _

Re: dns best practices

2011-01-23 Thread Eivind Olsen
mit BIND to a specific port for external (outbound) queries Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: service if s/up/down/g ipv6

2011-01-22 Thread Eivind Olsen
m not 100% sure I understand the question. I don't see any record for r13151.ovh.net, only a normal IPv4 A record: Eivind-mac:~ eivind$ dig +short a r13151.ovh.net 87.98.186.232 Eivind-mac:~ eivind$ dig +short r13151.ovh.net Eivind-mac:~ eivind$

Re: queryperf for stress test

2011-01-16 Thread Eivind Olsen
of outstanding queries (-q number) will make a difference? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
(Resending it here, didn't mean to reply just to you Alan) > On 1/6/2011 3:38 AM, Eivind Olsen wrote: >> (Yes, I know it's best practice to combine the authoritative + recursive >> functionality) > [...] it's NOT best [...] Yep, I knew that. Embarassing of me to

DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
ead. (Yes, I know it's best practice to combine the authoritative + recursive functionality) Is my mind playing tricks with me? Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Controlling many DNS servers using rndc

2011-01-04 Thread Eivind Olsen
efficient/parallel way to do this.. Depends, really. rndc itself can work remotely, but that might not be an option in all networks. Regards Eivind Olsen ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

  1   2   >