A And Cname-record

when i am trying to add A and CNAME record together for the same subdomain, getting an error as below, you all kind assistance would be highly appreciated thanks in advance my records are as follows in zone auotdiscover IN A 1.1.1.1 autodiscover IN CNAME autodiscover.acig.com.sa

Fwd: DNS Misconfiguration on- http://cyberia.net.sa/

Some one is is claiming that our name server 212.118.64.2 is vulnerable with below information is this true Any suggestions would be appreciated Thanks a n advance Ejaz Dear CYBERIA GROUP Security Team , I Rahul a Ethical Hacker and Security Researcher. I found a vulnerability on your

slave-not-updated

address = 212.119.93.5 When I enable the logs for xfer, it doesn't give any clue of problem name server of medun.net.sa. Is there any way to troubleshoot from the master server why there is no synchnization to one more Slave. Thanks in advance. Thanks, Mohammed Ejaz Asst. Operation

cyberia.net.sa

I am using bind I have problem in resolving my domain cyberia.net.sa over the internet. Whereas it is working fine internally. Any clue would be highly appeicated. Thanks, Mohammed Ejaz Asst. Operation Director of Systems. Cyberia SAUDI ARABIA P.O.Box: 301079, Riyadh 11372 Phone: (+966

RE: DNS-Format-Eroor

to do in a firewall with a temporary rule. On 18/12/2017 14:54, Mohammed Ejaz wrote: Thank you for the detail explanation really appreciated . We have asked by our National cyber Security Center to investigate on this, as they have detected massive malicious requests from our DNS

RE: DNS-Format-Eroor

traffic from our DNS server to the internet world. Any explanations would be highly appreciated. Thanks in advance. Ejaz -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Mark Elkins Sent: Monday, December 18, 2017 1:58 PM To: bind

DNS-Format-Eroor

ing ns2.mumbai-m.site/: reply has no answer Dec 17 09:58:41 ns20 named[1530]: DNS format error from 46.105.221.247#53 resolv ing ns1.mumbai-m.site/: reply has no answer Thanks, Mohammed Ejaz Asst. Operation Director

RE: domain-unable-resolve

have problem in my "name servers" when we use open DNS server such as google and several others, they don't have any issue to resolve their records. Satisfying customer is become tough. Only they have problem to resolve the queries when they start using our DNS ns10.cyberia.net.sa

domain-unable-resolve

. k6FE6tYUXXZrZHrHZK/s1npMpvp/aj5o1o00Ght0jfnndM0bFK roR7lh Fz6X0mJKHaAZw10oGT3LPDElABqywAgtbTKoa5usaOsc4g+2BhUXS+t3 E2s3CL9S1myP+DtQ DRlNMfBpD2NoR4pcPTwlnbiF9VCScLNFWvla6LcV AeQ= ;; Received 595 bytes from 192.54.112.30#53(h.gtld-servers.net) in 138 ms ;; Received 70 bytes from 212.118.102.2#53(ns1

RE: outgoing-traffic

e also 50 bytes not more than that?? Ejaz -Original Message- From: S Carr [mailto:sjc...@gmail.com] Sent: Wednesday, July 27, 2016 4:58 PM To: Ejaz <me...@cyberia.net.sa> Cc: bind-users <bind-users@lists.isc.org> Subject: Re: outgoing-traffic On 27 July 2016 at 14:44, Ejaz

RE: outgoing-traffic

Oh I am sorry for my misunderstanding.. I was thinking 9.1.1 not 9.11. ok that is fine.. will upgrade it to 911 and I will see if it control. Thank you so much for all. Ejaz -Original Message- From: Reindl Harald [mailto:h.rei...@thelounge.net] Sent: Wednesday, July 27, 2016 4:58

RE: outgoing-traffic

Hello, You mean I need to downgrade my bind to 9.11, as my current version is "BIND 9.9.2-P1" Ejaz -Original Message- From: Tony Finch [mailto:d...@dotat.at] Sent: Wednesday, July 27, 2016 4:49 PM To: Ejaz <me...@cyberia.net.sa> Cc: 'S Carr' <sjc...@gmai

RE: outgoing-traffic

is sending ANY request , by default it should be denied when users requests for it.. Ejaz -Original Message- From: S Carr [mailto:sjc...@gmail.com] Sent: Wednesday, July 27, 2016 4:19 PM To: Ejaz <me...@cyberia.net.sa> Cc: bind-users <bind-users@lists.isc.org> Subject:

RE: outgoing-traffic

Thanks you. The traffic will go to router which is handled by the Network dept. The fear that may router can crash if we start enabling the packet capture since it is layer 7. Is advisable, if we deny outbound UDP port 0 from the DNS servers, after enabling firewall. Ejaz

RE: outgoing-traffic

Thanks for all. But the strange thing is that if the request comes on 53 port then it should go only from 53 is it?? Why goes out from 0, any clue would be highly appreciate. Regards Ejaz -Original Message- From: Tony Finch [mailto:d...@dotat.at] Sent: Tuesday, July 26, 2016 4:12

RE: outgoing-traffic

375K Gi0/2 212.119.64.3Gi0/1 212.118.122.100 11 68K Gi0/2 212.119.64.2Gi0/1 212.118.122.101 11 362K Gi0/2 212.119.64.3Gi0/1 212.118.122.101 11 66K Thanks in advance for your support. Ejaz

RE: outgoing-traffic

Ok that's fine. But what is the reason why it is sending such huge traffic towards particluare IPs, Ejaz -Original Message- From: Reindl Harald [mailto:h.rei...@thelounge.net] Sent: Tuesday, July 26, 2016 11:36 AM To: Ejaz <me...@cyberia.net.sa>; 'Abdul Khader'

RE: outgoing-traffic

I am not using iptable firewall from my redhat Linux box, all traffic manged by network team.. Ejaz From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Abdul Khader Sent: Tuesday, July 26, 2016 11:21 AM To: bind-users@lists.isc.org Subject: Re: outgoing-traffic

outgoing-traffic

10:53:25 ns10 named[3004]: client 212.107.121.110#4635: no more TCP clients: quota reached Jul 26 10:53:26 ns10 named[3004]: client 212.107.121.110#4636: no more TCP clients: quota reached Thanks, Mohammed Ejaz Asst. Operation Director of Systems. Cyberia SAUDI ARABIA P.O.Box: 301079

RE: multiple-Directories

ot;; "/var/ejaz/named"; dump-file "/var/named/data/cache_dump.db"; ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org

RE: unalbe-to-query

Thank you for all, it works for me after I adding "allow query {any;}" in that zone.. Ejaz -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Reindl Harald Sent: Monday, December 14, 2015 12:57 PM To:

RE: unalbe-to-query

.. host -t soa arabsat.com arabsat.com has SOA record ns1.cyberia.net.sa. root.cyberia.net.sa. 2015121472 43200 4320 1209600 600 Please advise how can I trouble shoot. Thanks in advance… ejaz -Original Message- From: Niall O'Reilly [mailto:niall.orei...@ucd.ie

unalbe-to-query

Hi all, We are one of the leading ISP of Saudi Arabia. Installed latest version of bind and smbind inorder manage the zones over the Web interface. Wonder is that, the zones which configured through smbind cannot be seen from the outside world.. locally it is fine. For an example

RE: Problem-In-TranferingZone

r [root@ns6 named]# named -v BIND 9.9.8 (Extended Support Version) Slave server [root@ns10 named]# named -v BIND 9.9.4-RedHat-9.9.4-29.el7 (Extended Support Version) I am trying to retrieve all the zones together from the master. Did not copied from the old serer Ejaz

Problem-In-TranferingZone

. Regards Ejaz ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

bind-web-based control panel

All. Dees bind support for web-based control panel? I need one that can automatically push updates to both the master and slave servers, as well as having logins for customers to modify their zone information. Regards, Mohammed Ejaz CYBERIAR SAUDI ARABIA P.O.Box 301079, Riyadh 11372

RE: unable-resolving (Mohammed Ejaz)

Sent: Monday, March 09, 2015 1:41 PM To: bind-users@lists.isc.org Subject: RE: unable-resolving (Mohammed Ejaz) Hi there, ... we have been receiving complain from our customer that they are unable to open the websites when they use our DNS server ... Does your server allow your customer to make

RE: unable-resolving

it won't. Our DNS sometimes resolves the domain and sometimes are not Default Server: ns1.cyberia.net.sa Address: 212.119.64.2 www.twitter.com Server: ns1.cyberia.net.sa Address: 212.119.64.2 *** ns1.cyberia.net.sa can't find www.twitter.com: Server failed Ejaz

RE: can't-resolve

yes, true the problem is from the firewall. Thanks everyone for the tremendous support. Ejaz From: Warren Kumari [mailto:war...@kumari.net] Sent: Sunday, January 4, 2015 5:09 PM To: Mohammed Ejaz Cc: Barry Margolin; comp-protocols-dns-b...@isc.org Subject: Re: can't-resolve

RE: can't-resolve

Hello, all. now everything is fine once the port 1024 opened from the network firewall. so it means not only 53 port requires to be open. -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Ejaz Sent: Sunday, December 28

RE: can't-resolve

. Regards, Mohammed Ejaz CYBERIAR SAUDI ARABIA P.O.Box 301079, Riyadh 11372, Saudi Arabia Tel: +966 11 464 7114 Ext. 140 Fax: +966 11 465 4735 -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Matus UHLAR - fantomas Sent: Friday

RE: can't-resolve

I am sure sir there is no firewall on in the server you can make sure by telnet to the port 53 of this IP 212.119.64.228 Regards, Mohammed Ejaz CYBERIAR SAUDI ARABIA P.O.Box 301079, Riyadh 11372, Saudi Arabia Tel: +966 11 464 7114 Ext. 140 Fax: +966 11 465 4735 -Original Message- From

RE: can't-resolve

Subject: Re: can't-resolve On 25 December 2014 at 08:05, Mohammed Ejaz me...@cyberia.net.sa wrote: logging { channel querylog{ file /var/log/querylog; severity debug 10; print-category yes; print-time yes

RE: can't-resolve

...@lists.isc.org] On Behalf Of Steven Carr Sent: Thursday, December 25, 2014 5:54 PM To: Bind users Subject: Re: can't-resolve On 25 December 2014 at 14:50, Mohammed Ejaz me...@cyberia.net.sa wrote: I wanted tell you one more thing when I reassign my old IP which is 212.119.64.12 then everything works fine (I

RE: can't-resolve

Ejaz CYBERIAR SAUDI ARABIA P.O.Box 301079, Riyadh 11372, Saudi Arabia Tel: +966 11 464 7114 Ext. 140 Fax: +966 11 465 4735 -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Matus UHLAR - fantomas Sent: Thursday, December 25, 2014

RE: can't-resolve

: yahoo.com.cyberia.net.sa IN + (212.119.64.228) 25-Dec-2014 22:54:13.209 client 212.119.65.80#58417 (yahoo.com): query: yahoo.com IN A + (212.119.64.228) 25-Dec-2014 22:54:16.261 client 212.119.65.80#58418 (yahoo.com): query: yahoo.com IN + (212.119.64.228) Regards, Mohammed Ejaz

can't-resolve

{ 212.119.1.228; 212.1.2.2;}; Any clue would be highly appreciated. thanks in advance. Regards Ejaz Middle East internet Co. Cyberia Riyadh www.cyberia.net.sa http://www.cyberia.net.sa Mobile:+966-562311787 ___ Please visit https

RE: can't-resolve

, 2014 4:54 PM To: Bind users Subject: Re: can't-resolve On 24 December 2014 at 13:42, Mohammed Ejaz me...@cyberia.net.sa wrote: Any clue would be highly appreciated. thanks in advance. What's the name of the zone so we can test from here? Did you update the parent zone to tell it the nameserver IP

RE: can't-resolve

and mail servers IN NS ns1.kalam.net.sa. IN NS ns2.kalam.net.sa. IN MX 10 smtp.cyberia.net.sa. ; Define localhost localhost INA 127.0.0.1 ; Define hosts in this zone ejazIN A 212.119.65.226 ns1

tsig-key

==; }; # Master server IP server 195.88.245.33 { keys { TRANSFER; }; }; In named.conf file on the slave server. include /var/named/tsigkeys; Any help would be highly appreciated. Thanks Ejaz Sys admin ___ Please

No-Sync-at-Slave

: timed out Any one's help would be highly appreciated thanks in advance. Regards Ejaz ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https

RE: No-Sync-at-Slave

Thank you so much for your immediate answer, I wanted know how did you check as 212.93.192.4 configured only on UDP? -Original Message- From: Mark Andrews [mailto:ma...@isc.org] Sent: Thursday, May 8, 2014 10:33 AM To: Mohammed Ejaz Cc: bind-us...@isc.org Subject: Re: No-Sync-at-Slave

RE: resolving-problem

.alfransi.com.sa. fransiplus.com. 172800 IN NS ns2.alfransi.com.sa. ;; Received 87 bytes from 192.5.6.30#53(192.5.6.30) in 202 ms ;; connection timed out; no servers could be reached Ejaz _ From: Steven Carr [mailto:sjc...@gmail.com] Sent: Sunday, July 21, 2013 3:09

resolving-problem

below. Ns1.nesma.net.sa Ns2.nesma.net.sa Any help would be highly appreciated. Thank you so much in advance Regards, __ Mohammed Ejaz Sr,Systems Administrator Middle East Internet Company (CYBERIA) Riyadh, Saudi Arabia Phone: +966-1-4647114 Ext: 140 Mobile +966

RE: resolving-problem

bytes from 192.5.6.30#53(192.5.6.30) in 202 ms From My pc. Where I can't resolve. fransiplus.com.sa Server: ns1.nesma.net.sa Address: 212.71.32.19 DNS request timed out. timeout was 2 seconds. *** Request to ns1.nesma.net.sa timed-out Ejaz _ From: Steven

FW: resolving-problem

Thanks you once again for your quick response. Yes, I can resolve all other webistes without any problems. As well as requested, find the attached only main the configuration file, Ejaz _ acl trusted { 92.48.0.0/18; 212.119.65.0/24; 212.71.32.0/19

DNSSEC-deployment

. Thanks Regards Ejaz ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

third dns server

.cyberia.net.sa internet address = 212.119.64.3 ns4.mot.gov.sa internet address = 212.119.69.222 ns3.mot.gov.sa internet address = 212.119.69.221 ejaz ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind

new version of bind

installed the BIND 9.5.1-P2 version, such as problem in opening the websites and slow browsing issues etc... Ejaz ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Failover

as it is available it should read from the same IP, 2. Secondary www record pointing 4.3.2.1 it should act only incase of primary is down. Ejaz ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

RE: Failover

First of all many thanks for your response, Actually we are in ISP; this solution is for one of our customer in this case we need to give the access of the server to the customer, Ejaz _ From: philippe.simo...@swisscom.com [mailto:philippe.simo...@swisscom.com] Sent: Monday