Re: Is an IPv6-only glue/delegation record a problem in a world of IPv4?

2010-01-11 Thread Matthew Pounsett
On 2010/01/11, at 12:57, Rick Dicaire wrote: If I understand this correctly, the lack of an ANSWER section for query would denote there is no ipv6 glue at the TLD? No, that would indicate that the name server you queried is not authoritative for the record you queried about. Glue, by

Re: Is an IPv6-only glue/delegation record a problem in a world of IPv4?

2010-01-11 Thread Matthew Pounsett
On 2010/01/11, at 12:29, Mathew J. Newton wrote: Specifically, the Dig tool at http://www.kloth.net/services/dig.php seems unable to resolve my records and I can't help but feel it's a problem at my end rather than theirs! The problem may be at Kloth.. but at least one of the many possible

Re: Is an IPv6-only glue/delegation record a problem in a world of IPv4?

2010-01-11 Thread Matthew Pounsett
On 2010/01/11, at 14:48, Mathew J. Newton wrote: FWIW, at least one of the afilias hosts had the same IPv4 address for ns[12].v6ns.org. ns1.v6ns.org. 86400 IN A 77.103.161.36 ns1.v6ns.org. 86400 IN 2a01:348:133::a1 ns2.v6ns.org.

Re: Is an IPv6-only glue/delegation record a problem in a world of IPv4?

2010-01-11 Thread Matthew Pounsett
On 2010/01/11, at 15:16, Matthew Pounsett wrote: By contrast, Verisign's servers have long included glue in the ANSWER section. This is widely considered to be at best suboptimal, and by many (or most) to be a bug. Verisign has indicated that this behaviour is coming to an end, although

Re: BIND9 slave

2009-12-07 Thread Matthew Pounsett
On 07-Dec-2009, at 08:37, George wrote: Is there a way to make the slave server automatically get and update any new domains that are added to the master server? This question pops up about once every two months on the list. There are several other discussions on the subject that you

Re: isc.org has signed delegation

2009-10-22 Thread Matthew Pounsett
On 22-Oct-2009, at 01:16, Loren M. Lang wrote: I just noticed that isc.org has a signed delegation from the .org name servers. I am curious what registrar you went through to get this. .org is doing a limited production release of DNSSEC right now, referred to as Friends Family. There

Re: Nslookup not showng TTL

2009-10-15 Thread Matthew Pounsett
On 15-Oct-2009, at 16:03, John Horne wrote: On Thu, 2009-10-15 at 13:15 -0400, Kevin Darcy wrote: Removing features from nslookup gets us that much closer to KILLING and BURYING it. Forever. So why does the ISC still distribute it? (Although I guess the answer may simply be because

Re: Glue record miunderstanding

2009-10-01 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01-Oct-2009, at 16:03, Scott Haneda wrote: Is it also correct, I only need a NS glue record for the actual NS itself. There does not need to be a glue record for very zone that I am providing DNS for? The only case where glue *must* be

Re: Glue record miunderstanding

2009-10-01 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01-Oct-2009, at 19:03, Scott Haneda wrote: So I see my NS is listed in the additional section. This to me tells me there is in fact glue, so I should consider the report at http://intodns.com/hostwizard.com to be inaccurate? Yeah, I just

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18-Jun-2009, at 14:25, Gregory Hicks wrote: Kevin: I'll bite! What is the difference between a sub*domain* and a sub*zone*? I don't see how you could have the one w/o the other. But that could be because I'm feeling especially slow today.

Re: proving a server doesn't have a zone

2009-06-01 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01-Jun-2009, at 15:42, Todd Snyder wrote: I'm sure I'm just having a dumb moment, and that the return codes from dig can give me what I need, but I can't figure it out. Indeed, dig can help you here. Send the server a non-recursive query

Re: Delegation of DHCP blocks within same server?

2009-05-20 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20-May-2009, at 19:03, John Cole wrote: For a concrete example: 10.0.0.0/16 is presently handled by a single zone file. 10.1.3.0/24 is DHCP issued 10.1.4.0/24 is DHCP issued I haven't tested this... but I'm 99% certain that you can simply

Re: named-xfer?

2009-04-02 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02-Apr-2009, at 18:33, Michelle Konzack wrote: Hello, I have to fetch some zones from http://www.zonedit.com/ but it seems, named-xfer does not more exist in bind9. How can I now manualy download a zone? dig IN AXFR zone @server file

Re: TSIG verify failure

2009-02-28 Thread Matthew Pounsett
On 28-Feb-2009, at 04:11, Jeremie Le Hen wrote: AXFR fails invariably with the following error: tsig verify failure. Do, by chance, TSIG packets use IP address during encryption? I've been struggling to understand the problem for maybe 8 hours, but I'm clueless now... Any help would be

Re: single-character host names

2009-02-25 Thread Matthew Pounsett
On 25-Feb-2009, at 16:46, Mike Bernhardt wrote: So what is the accepted view on this currently? Is there another RFC that has made it OK now? I'm not going to say this definitively, because I'm not certain, but I think 952 may have been updated by a later RFC. Certainly there are

Re: my DNS not resolving

2009-01-29 Thread Matthew Pounsett
On 29-Jan-2009, at 13:49, S. Jeff Cold wrote: BIND List, I have a server running OpenSuse 11.1 with BIND 9.5.0P2-18.1. This server has a dedicated IP address from my ISP. I want this server to resolve my registered domain jatec.us. The server has internet connectivity. If I dig

Re: Forcing a secondary update...

2009-01-26 Thread Matthew Pounsett
On 26-Jan-2009, at 17:50, Jeff Justice wrote: Without getting into how I managed to accomplish this, I have wound up with a secondary DNS that has incorrect information in it but the serial numbers are the same as on the master. So, my question is: how can I get the secondary to sync up?

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT Illegal

2009-01-25 Thread Matthew Pounsett
On 25-Jan-2009, at 03:44 , Al Stu wrote: When a domain name associated with an MX RR is looked up and the associated data field obtained, the data field of that response MUST contain a domain name.That domain name, when queried, MUST return at least one address record (e.g., A or

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT Illegal

2009-01-25 Thread Matthew Pounsett
On 25-Jan-2009, at 13:15 , Al Stu wrote: Yes, blah was supposed to be srv1. I do receive both the CNAME and A records for the A mx.xyz.com query. See attached capture file. In the capture file three global search and replacements were performed to match the previous example. 1)

Re: allow-query-cache and resolution time

2009-01-22 Thread Matthew Pounsett
On 22-Jan-2009, at 16:00 , LENA MATUSOVSKAYA, BLOOMBERG/ 731 LEXIN wrote: Hello, Thank you for answering my quesiton yesterday. I have a new question about allow-query-cache and its effect on a dns server' response resolution time. allow-query-cache specifies which hosts are allowed

Re: unwanted delegations was: What to do about openDNS

2009-01-21 Thread Matthew Pounsett
On 21-Jan-2009, at 03:23 , Scott Haneda wrote: On Jan 20, 2009, at 6:42 PM, Matthew Pounsett wrote: Registries that implement host records (so, at least the gTLDs) could accept the word of the registrant of the zone that contains a name server (or the word of their registrar

Re: Conflicting glue records?

2009-01-08 Thread Matthew Pounsett
On 08-Jan-2009, at 03:41 , Dawn Connelly wrote: Right, but his question was regarding the host record for the name server. You tell the registrar the name and IP address of the name servers that are authoritative for the domain. The registrar then pushes those glue records to the root servers.

<    1   2