Suggestions for primary DNS hosting

2013-08-07 Thread Matthew Huff
Within the last few years, we have drastically reduced our DNS footprint, as well as our datacenter size. We are looking to migrate our primary DNS to a provider, but I'm having trouble finding ones that meet our requirements 1) Provide primary DNS without necessary being the registar for the do

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Matthew Huff
I had forgotten that about CNAME. But you can hard-code an A record to the nosslsearch.google.com record We have to use this technique (we point the A record to a proxy) for regulatory reasons to block IM connections except through our IM proxy. Matthew Huff | 1 Manhattanville

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Matthew Huff
IN CNAME nosslsearch.google.com. Matthew Huff | 1 Manhattanville Rd Director of Operations   | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 aim: matthewbhuff  | Fax:   914-460-4139 > -Original Message- > From: b

Cisco ACE config for internal DNS load balancing

2012-03-09 Thread Matthew Huff
share? ---- Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 aim: matthewbhuff| Fax: 914-460-4139 smime.p7s Description: S/MIME cryptographic sign

Windows 2008 R2 validating DNSSEC resolvers

2012-02-06 Thread Matthew Huff
used (unless someone knows a workaround). Thanks. Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 aim: matthewbhuff| Fax: 914-460-4139 ___ Please

RE: linux chroot reqs changed?

2010-02-19 Thread Matthew Huff
I would assume it's using udp/tcp socket to the loopback interface instead of the file. -Original Message- From: bind-users-bounces+mhuff=ox@lists.isc.org [mailto:bind-users-bounces+mhuff=ox@lists.isc.org] On Behalf Of Rick Dicaire Sent: Thursday, February 18, 2010 4:17 PM To: Bi

RE: Disable automatic empty IPv6 zones (with -4 already specified)

2009-07-30 Thread Matthew Huff
No, I guess not :) Thanks. I looked for something like that, but my google-fu was lacking. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff  | Fax:   914-460-4139 > -Original Mess

Disable automatic empty IPv6 zones (with -4 already specified)

2009-07-30 Thread Matthew Huff
Is there any way to disable BIND from loading the automatic empty zones (D.F.IP6.APRA, etc...). They are being generated even with the -4 command line. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim

RE: A simple question, please help

2009-07-19 Thread Matthew Huff
You don't need the zone entry. In your options configuration add: ... forwarders { 208.67.222.222; 208.67.220.220; }; forward only; ... And restart. This will make your named server a forward only name server Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchas

RE: 2GB Memory Limits on Solaris 10

2009-06-08 Thread Matthew Huff
even on a 64 bit system is compiled in 32 bit mode. The main reason is that any other libraries it might use (openssl, etc) will also need to have 64 bit versions. Matthew Huff | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http:// <http://www.otaotr.

RE: Adding records to a domain I don't control for anyone who uses my nameserver

2009-03-02 Thread Matthew Huff
x27;t work since they change frequently. Spoofing the dns zones are the only solution. The IM archive server companies usually provide email updates when some of the zones changes. ---- Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com  | Phon

RE: Adding records to a domain I don't control for anyone who uses my nameserver

2009-02-26 Thread Matthew Huff
Try creating a zone file _xmpp_client._tcp.example.com and put the SRV record in there. Treat the host as an entire domain. Matthew Huff | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-460-4139

RE: rndc stats - 9.5.0-p2

2009-02-17 Thread Matthew Huff
There may be more than one "named" binary in your path. You may want to do an explicit reference to check the version (./named -V) or do a "which named" Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Pho

client query logging (refused message)

2009-02-17 Thread Matthew Huff
es: client 62.109.4.89#49464: view external-in: query: . IN NS + ... logged, and I have verified that the query is refused, but nothing in the log shows that it was refused. Is there anyway to log the success/failure of the queries? ---- Matthew Huff   | One Manhattanville Rd OTA Mana

RE: loads of Query denied... is it an attack or a misconfiguration ?

2009-02-11 Thread Matthew Huff
Thanks to David Forest, I realize now that the query IS being refused, however nothing in the bind log shows the refusal. Is there anyway to see that in the log? Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim

RE: loads of Query denied... is it an attack or a misconfiguration ?

2009-02-11 Thread Matthew Huff
ache no; zone "." in { type hint; file "db.cache"; }; zone "foo.com" in { type master; file "master/db.foo"; allow-query { any; }; }; ... ... ... }; Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purcha