Re: Dig Hangs during axfr request when not on localhost.

2019-06-14 Thread John Horne
On Fri, 2019-06-14 at 10:05 +, John Horne wrote: > On Fri, 2019-06-14 at 08:53 +0100, Pete Fry via bind-users wrote: > > Hi > > > > versions: > > BIND 9.9.4-RedHat-9.9.4-74.el7_6.1 (Extended Support Version) > > CentOS Linux release 7.6.1810 (Core) >

Re: Dig Hangs during axfr request when not on localhost.

2019-06-14 Thread John Horne
o bind-9.9.4-73.el7_6.x86_64 and the zone transfers are working again. John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK [http://www.plymouth.ac.u

Re: How to get memory statistics?

2018-02-15 Thread John Horne
On Thu, 2018-02-15 at 12:47 +, Tony Finch wrote: > John Horne <john.ho...@plymouth.ac.uk> wrote: > > > > Running BIND 9.9.4, we have set the 'memstatistics-file' option in our > > named config file. My understanding is that memory stats will be dumped to > > th

How to get memory statistics?

2018-02-15 Thread John Horne
files and the general server logs, and can find no error message or the like. So, my question is how do we get memory stats from named? Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA

Rate-limiting - working? How to test?

2014-01-17 Thread John Horne
Hello, I have BIND 9.9.4 installed on a server, and have included in the global options: rate-limit { responses-per-second 5; log-only yes; }; However, if I run from a client: for n in `seq 1 10`; do dig +short jhorne.csd.plymouth.ac.uk a

Re: Rate-limiting - working? How to test?

2014-01-17 Thread John Horne
On 17/01/14 14:22, Rich Goodson wrote: You need a rate-limit log stanza to see rate limiting information (rate limiting from IP address, no longer limiting from IP address, etc), and the individual queries that are not responded to are logged either in your querylog or query-errors (can’t

Re: Reverse address entries

2013-07-02 Thread John Horne
. That service then, no doubt the same as with SMTP, then proceeded but without the reverse lookup answer. John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Please visit https://lists.isc.org/mailman

Re: Reverse address entries

2013-07-02 Thread John Horne
On Tue, 2013-07-02 at 12:02 -0700, Eduardo Bonsi wrote: On 7/2/13 9:35 AM, John Horne wrote: We were alerted to the problem because we got long delays (around 20 seconds) when accessing a site doing a reverse lookup. That service then, no doubt the same as with SMTP, then proceeded

Answers from cache or authority section?

2013-06-25 Thread John Horne
. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
onto the Internet-facing Linux servers. However, there is a whole load of muttering that Microsoft and AD won't like that; it's all integrated with each other; running the DNS zone on Linux servers will be a problem with the MS servers etc etc. John. -- John Horne, Plymouth University, UK Tel

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 17:07 +0100, Steven Carr wrote: On 25 June 2013 16:53, John Horne john.ho...@plymouth.ac.uk wrote: So what I now do not understand is why (at home) I can do several reverse lookups for different IP addresses, and they all give me an answer. Likewise if I do something

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 17:20 +0100, Phil Mayers wrote: On 25/06/13 16:53, John Horne wrote: servers. However, there is a whole load of muttering that Microsoft and AD won't like that; it's all integrated with each other; running the DNS zone on Linux servers will be a problem with the MS

RPZ - how to modify NS records in answer?

2013-06-21 Thread John Horne
no difference. So, I'm wondering what the RPZ zone file should contain to enable an NS record to be omitted from the reply? Thanks, John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Please visit https

Re: RPZ - how to modify NS records in answer?

2013-06-21 Thread John Horne
On Fri, 2013-06-21 at 17:11 +0100, John Horne wrote: My understanding is that RPZ can do this, but I just cannot seem to configure the RPZ zone file to enable this. The zone file contains: = $TTL 1H @ SOA LOCALHOST. hostmaster.plymouth.ac.uk (1 1h 15m 30d 2h

9.3.3 - SPF record checks

2013-05-30 Thread John Horne
for an SPF record and finding no corresponding TXT record makes sense, but finding a TXT record and warning that there is no SPF record would seem a little pointless. John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001

Re: 9.3.3 - SPF record checks

2013-05-30 Thread John Horne
On Fri, 2013-05-31 at 06:53 +1000, Mark Andrews wrote: In message 1369923655.1952.6.camel@jhorne.config, John Horne writes: Hello, I noticed in the 9.3.3 announcement the following new SPF check: Adds a new configuration option, check-spf; valid values are warn (default

Re: Split view - differing SOA serial number

2010-07-09 Thread John Horne
, and they remain consistent after an update. Many thanks to people for the replies. John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https

Split view - differing SOA serial number

2010-07-08 Thread John Horne
for each view it appears in. As such since this zone is in both the internal and external views, I would expect the serial number to always be the same. I am a little confused as to where the difference is coming from. I assume I am missing something obvious!? Thanks, John. -- John Horne, University

Re: Split view - differing SOA serial number

2010-07-08 Thread John Horne
On Thu, 2010-07-08 at 07:34 -0400, Alan Clegg wrote: On 7/8/2010 7:26 AM, John Horne wrote: However, when checking the SOA serial number of our reverse zone we are seeing different values depending on whether we are inside or outside of the campus. This zone is maintained internally by MS

Re: Split view - differing SOA serial number

2010-07-08 Thread John Horne
. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Split view - differing SOA serial number

2010-07-08 Thread John Horne
On Thu, 2010-07-08 at 07:34 -0400, Alan Clegg wrote: On 7/8/2010 7:26 AM, John Horne wrote: However, when checking the SOA serial number of our reverse zone we are seeing different values depending on whether we are inside or outside of the campus. This zone is maintained internally by MS

Re: Split view logging?

2009-11-23 Thread John Horne
On Thu, 2009-11-19 at 14:55 -0800, Gregory Hicks wrote: From: Chris Buxton cbux...@menandmice.com Date: Tue, 17 Nov 2009 08:16:18 -0800 On Nov 17, 2009, at 7:02 AM, John Horne wrote: Hello, Using BIND 9.5.1, is it possible to configure split view logging

Split view logging?

2009-11-17 Thread John Horne
Hello, Using BIND 9.5.1, is it possible to configure split view logging - that is, a separate logging channel/category for different views? I'm trying to separate out the queries of our local clients from the external ones. Thanks, John. -- John Horne, University of Plymouth, UK Tel: +44

Nslookup not showng TTL

2009-10-15 Thread John Horne
www.plymouth.ac.uk canonical name = extranet.plymouth.ac.uk. Name: extranet.plymouth.ac.uk Address: 141.163.163.185 == How can I see the TTL value using nslookup? Thanks, John. -- John Horne, University of Plymouth, UK Tel: +44 (0

Re: Nslookup not showng TTL

2009-10-15 Thread John Horne
On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: How can I see the TTL value using nslookup? I'm not sure how force nslookup to show TTL but the `dig` utility is far more better tool for getting such information: I agree

Re: Nslookup not showng TTL

2009-10-15 Thread John Horne
- I've been using dig for years, and only use nslookup if I have to on my Windows laptop at work, on the Linux/UNIX systems dig is only used. If nslookup was no longer present in the BIND distribution then that doesn't bother me at all. John. -- John Horne, University of Plymouth, UK Tel: +44 (0

Re: problem with bind book example

2009-09-24 Thread John Horne
On Wed, 2009-09-23 at 15:17 -0700, Linda W wrote: In my main config it's in the section: root . IN { type hint; file root.hint; }; I don't have the BIND book to hand, but that should be: zone . IN { John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752

Re: Invalid lan. and local. TLDs

2009-08-31 Thread John Horne
and that was changed). John. -- -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org