Re: Slave not creating/updating zones

2013-07-15 Thread Matus UHLAR - fantomas
https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Reverse Lookups with Forwarders

2013-07-09 Thread Matus UHLAR - fantomas
to zone 110.252.173.in-addr.arpa IN { All the requests for 173.252.110.0-173.252.110.255 is forwarded to 10.10.96.1. Use 110.252.173.in-addr.arpa then. You should be aware that the IP range belongs to facebook, as already noted. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Bind unable to get MX reocrd from Parrent name server

2013-07-05 Thread Matus UHLAR - fantomas
. ;; global options: +cmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: REFUSED, id: 52980 ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Reverse address entries

2013-07-03 Thread Matus UHLAR - fantomas
should get NXDOMAIN answer. in such case there's nothing to wait for any longer. Are you sure that was not a case of unreachable servers? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto

Re: configure syslog prefix

2013-07-03 Thread Matus UHLAR - fantomas
#id2576269 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows 2000: 640 MB ought to be enough for anybody

Re: BIND Service Hung

2013-07-03 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They say when you play that M$ CD backward you can hear satanic messages. That's nothing. If you play

Re: Reverse address entries

2013-07-01 Thread Matus UHLAR - fantomas
, Matus UHLAR - fantomas uh...@fantomas.sk wrote: He apparently meant exactly the same. Also calles FcRDNS - forward confirmed or full circle reverse DNS. On 01.07.13 14:11, Sam Wilson wrote: OK. So what Mr. Swiger refers to is not relevant - it's no reason to add PTR records. Yes

Re: How to suppress ADDITIONAL SECTION per zone

2013-07-01 Thread Matus UHLAR - fantomas
limiting - a patch was discussed here a few days/weeks ago. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. (R)etry, (A)bort, (C)ancer

Re: servfail response message question

2013-06-27 Thread Matus UHLAR - fantomas
load balancers... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95

Re: Secondary DNS question...

2013-06-27 Thread Matus UHLAR - fantomas
from scratch. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux IS user friendly, it's just selective who its friends

Re: Secondary DNS question...

2013-06-27 Thread Matus UHLAR - fantomas
and overall my DNS was just erratic. I have now moved all of my secondary to BuddyNS with much better redundancy, and I figured out what was causing my ns1 to be glitchy. Can you tell us what, just for evidence? Thank you. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: servfail response message question

2013-06-27 Thread Matus UHLAR - fantomas
. If they are accessible from us, of course. We could check it ourselves and see how it behaves from the net. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Secondary DNS question...

2013-06-26 Thread Matus UHLAR - fantomas
-users/2013-June/090970.html or pcap format at http://test.fantomas.sk/74.87.108.83.dns.pcap -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Secondary DNS question...

2013-06-25 Thread Matus UHLAR - fantomas
On 24.06.13 07:41, Frank Bulk wrote: Interesting to note that querying for ANY does return an SOA. I can't explain that behavior. On 24.06.13 14:54, Matus UHLAR - fantomas wrote: I can guess a kind of DNS filter/firewall. Some l3 switches or load balancers tend to produce strange results too

Re: Answers from cache or authority section?

2013-06-25 Thread Matus UHLAR - fantomas
, the given NS records prevail over delegation from parent zone. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. - Holmes, what kind

Re: How to suppress ADDITIONAL SECTION per zone

2013-06-24 Thread Matus UHLAR - fantomas
records being sent from a selected list of zone in our configuration.. You still have not answered my question, so I repeat it: What is the point of your question? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Secondary DNS question...

2013-06-24 Thread Matus UHLAR - fantomas
set for for ns1.starionhost.net: -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Support bacteria - they're the only culture some people

Re: How to suppress ADDITIONAL SECTION per zone

2013-06-21 Thread Matus UHLAR - fantomas
On 21.06.13 02:00, blrmaani wrote: The additional-from-auth yes_or_no ; option is a global option. I would like to know if there is a per-zone configuration to do the same in BIND9 configuration? I couldn't find it in BIND9 ARM. What is the point of your question? -- Matus UHLAR - fantomas

Re: Secondary DNS question...

2013-06-21 Thread Matus UHLAR - fantomas
be interested to hear about any red flags you may see. I don't see any ... since the problems reported were not true, we may assume there was no problem causer by one of your servers' outage. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e

Re: What happens when one out of three NSs are down?

2013-06-12 Thread Matus UHLAR - fantomas
, authoritative and glue NS records should be the same). But don't tell me that you use TTL so small that someone would notice. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: does zone trump forward?

2013-06-04 Thread Matus UHLAR - fantomas
after NXDOMAIN is received is an ugly hack and violates the DNS principles. The problem must be solved by DNS tools. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: any requests

2013-06-02 Thread Matus UHLAR - fantomas
that. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Nothing is fool-proof to a talented fool

Re: does zone trump forward?

2013-06-02 Thread Matus UHLAR - fantomas
are served locally. Only recursive queries are being forwarded. To ask the question another way, does the zone statement take precedence on matching queries over any forwarding? yes. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: Bind 9.9.3 configuration message: missing 'file' entry

2013-06-02 Thread Matus UHLAR - fantomas
{ publicSlaves; }; allow-transfer { localhost; transferees; }; }; Have you looked carefuly enough, and to the correct file if there is no missed character that makes the configuration invalid? Have you run named-checkconf with and without the given file as parameter? -- Matus UHLAR - fantomas

Re: Help on NXDOMAIN to try next forwarder in the list

2013-05-31 Thread Matus UHLAR - fantomas
DNS servers to mycompany.com But administrator does not know which one has it So, is that mytestdomain101.com or mycompany.com or mygeo1.mycompany.com? It would be easier to look at the problem if you provided us correct data. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: Help on NXDOMAIN to try next forwarder in the list

2013-05-31 Thread Matus UHLAR - fantomas
THERE IS NO SUCH RECORD. You need to fix your DNS infrastructure, not try to circumvent it's issues. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Negative zones; NXDOMAIN responses

2013-05-21 Thread Matus UHLAR - fantomas
{ 192.5.5.241; }; notify no; }; I thought this is not oficially recommended for ordinary users to prevent root servers from being overloaded (transfers use much more resources than ordinary lookups). Has this changed? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: Negative zones; NXDOMAIN responses

2013-05-21 Thread Matus UHLAR - fantomas
On 21.05.13 11:03, Mark Andrews wrote: The simplest solution is to slave the root zone and turn off notify to so you don't spam the official root servers. 192.5.5.241 is f.root-servers.net. In message 20130521072352.ga17...@fantomas.sk, Matus UHLAR - fantomas writes: I thought

Re: Negative zones; NXDOMAIN responses

2013-05-20 Thread Matus UHLAR - fantomas
solution. You should not use services broken like this of any ISP. I'd even recommend not to use ANY services of such ISPs. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: architecture question

2013-05-09 Thread Matus UHLAR - fantomas
and home. ...I still think it would be better to have reserved private TLD for intranets as we have IP's in rfc1918 (plus rfc6598 for ISPs) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu

Re: architecture question

2013-05-09 Thread Matus UHLAR - fantomas
On 09.05.13 10:21, Tony Finch wrote: Right. Give each student a subdomain of some existing domain, even if the subdomains aren't publicly delegated. Matus UHLAR - fantomas uh...@fantomas.sk wrote: yes, so they will start using it in their job and home. On 09.05.13 16:01, Tony Finch wrote

Re: Classless PTR query issue

2013-05-07 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Saving Private Ryan... Private Ryan exists. Overwrite? (Y/N

Re: How does bind select what master to use?

2013-04-27 Thread Matus UHLAR - fantomas
accessible and their RTT. It tends to prefer theone with shoertet RTT but ocasionally re-tries (RTT can change over time. If notice comes, BIND tends to prefer server that has sent it. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: BIND 9.4.x and check-names

2013-04-19 Thread Matus UHLAR - fantomas
check-names response; Ok, I'm reading up on that now. Should I be able to suppress the logging using: check-names response ignore; ? This should be the default. Also, current version could have better handling of this issue... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: BIND 9.4.x and check-names

2013-04-17 Thread Matus UHLAR - fantomas
general: warning: zone /IN: gc._msdcs./A: bad owner name (check-names) default.log:12-Apr-2013 00:45:37.447 general: warning: zone /IN: gc._msdcs./A: bad owner name (check-names) Hmm, aren't those supposed to be SRV records? -- Matus UHLAR

Re: Understanding Kaminsky exploit w/bind

2013-04-16 Thread Matus UHLAR - fantomas
is the only way to avoid this attack. Once the spoofed answer with guessed ID and containing NS records of attacker's servers is accepted, the attacker owns the domain at least within your nameserver. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e

Re: I'm having thousands of queries a domain isc.org and this increases my cpu percentage to 100%. That may be happening and how I can control this? is an attack? attachment of the log I made an updat

2013-04-16 Thread Matus UHLAR - fantomas
: view external: query (cache) 'hao.360.cn/A/IN' denied Aren't thosedomains pointing their NS onto your nameserver? What's your IP, if it's not secret? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: I'm having thousands of queries a domain isc.org and this increases my cpu percentage to 100%. That may be happening and how I can control this? is an attack? attachment of the log I made an updat

2013-04-16 Thread Matus UHLAR - fantomas
to be really a bitch, you can set up recursive view with . domain providing * records. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: clients-per-query increased to 15

2013-04-10 Thread Matus UHLAR - fantomas
, although you may want to have at least two of them, to have backup if one fails. imho you should first answer my first question and then you see if you need to increase clients-per-query or not. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive

Re: reverse resolution failing

2013-04-10 Thread Matus UHLAR - fantomas
servers, of which one returns positive answer and two reply NXDOMAIN (no such host). seems someone configured invalid serial to reverse zone and now slaves don't fetch updates... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Simple question about zone and CNAME

2013-04-09 Thread Matus UHLAR - fantomas
on, and putting websites on hostnames that don't start with www. is the common case now. Can we save our energy for something more productive? Why did you post this then? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Some Server not Resolving certain address

2013-04-08 Thread Matus UHLAR - fantomas
? Is it the root dns populate issue or something else? Is there a way to force DNS server to update from root? dopmain positivebrain.asia has invalid NS records. maybe a web DNS checker could provide correct answer, although you must try more of them... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Some Server not Resolving certain address

2013-04-08 Thread Matus UHLAR - fantomas
? because while delegation NS records are OK, the NS records in domain itself are broken. With the first lookup you may get the answer from the parent servers, but later lookups will use broken NS records and thus they will fail. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: rate limit dns query response ...

2013-04-04 Thread Matus UHLAR - fantomas
at firewall level. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Silvester Stallone: Father of the RISC concept

Re: Forward First on Master Zone (bypass SOA)

2013-03-29 Thread Matus UHLAR - fantomas
this: On 28.03.13 17:00, Ben-Eliezer, Tal (ITS) wrote: Hi Chris, this looks interesting, I'll do some testing and report back! Note that this way you won't maintain two copies of the same file, but three different files and with each change you'll have to choose where to put it... -- Matus UHLAR

Re: Recursion issue

2013-03-28 Thread Matus UHLAR - fantomas
answer the authoritative data. You have said you do not have recursion allowed, why do you expect it to be allowed now? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Recursion issue

2013-03-28 Thread Matus UHLAR - fantomas
as Chris. Please show us how you do the dig. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty

Re: Suspecious DNS traffic

2013-03-25 Thread Matus UHLAR - fantomas
from TCP+UDP port 53 coming to any =1024 port on your nameserver. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The only substitute for good

Re: querying TLD nameservers - limitations

2013-03-25 Thread Matus UHLAR - fantomas
. Are there other limitations I should be aware of while developing my script? Yes, you should not abuse any service, whether you monitor it or not. For example, you should not send extensive queries to foreign servers. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: Setting a timeout for forwarders

2013-03-25 Thread Matus UHLAR - fantomas
that are declared as a forwarder in the named.conf.options settings. Why do you define such forwarders in named.conf at all? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Suspecious DNS traffic

2013-03-25 Thread Matus UHLAR - fantomas
to your DNS server where source port is 53. all the security is useless if blocks your service. Luckily, most of firewalls can track the connection state. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie

Re: 100% CPU / wedge with 9.8.3-P4 RPZ?

2013-03-16 Thread Matus UHLAR - fantomas
in the release notes for 9.8.4/9.8.5 - any ideas? This is with the Spamhaus DBL, in case it matters. do you have local copy of spamhaus DBL? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto

Re: How to optimize dns requests

2013-03-15 Thread Matus UHLAR - fantomas
: ; DiG 9.8.1-P1 mail.com [...] ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 this is clearly a cached answer (aa flag is missing). How did you come to the conclusion that caching does not work? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: forwarding query-source (was Re: name caching and forwarding)

2013-03-05 Thread Matus UHLAR - fantomas
AS number for this, provider-independent IP Addresses are quite enough (at least here in Europe) I just did not want to explain this more deeply - that is question for the OP and their ISP. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: forwarding query-source (was Re: name caching and forwarding)

2013-03-02 Thread Matus UHLAR - fantomas
DNS problem chould be solved by BIND configuration. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Chernobyl was an Windows 95 beta test site

Re: Problems with resolving a local tld

2013-02-28 Thread Matus UHLAR - fantomas
their own domain anywhere in the DNS tree, because they simply do not have any domain seen in the public available (no company's domain, using multiple ISPs etc) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: How to flush MX records from the cache

2013-02-28 Thread Matus UHLAR - fantomas
On 28.02.13 08:41, Abdul Khader wrote: Is there a way to flush MX records from the cache of a caching DNS server ? No. You only can flush whole cache (rndc flush) or flush records for given domain (rndc flushname). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning

Re: Unwanted resolver usage of /etc/host.conf

2013-02-24 Thread Matus UHLAR - fantomas
and/or ignore that file. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Microsoft dick is soft to do no harm

Re: Most specific match on PTR records

2013-02-22 Thread Matus UHLAR - fantomas
; }; }; so a type static-stub works, while type forward does not? Is this another difference between those two types? (type forward has one advantage: it allows standard resolving to take place when forwarding does not help. But this is not the case.) -- Matus UHLAR - fantomas, uh

Re: allow-query and views

2013-02-21 Thread Matus UHLAR - fantomas
be querying cache? correct, no external hosts should query your cache. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. There's a long-standing bug

Re: Resolver behavior on expired TTLs

2013-02-21 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. How does cat play with mouse? cat /dev/mouse ___ Please

Re: allow-query and views

2013-02-21 Thread Matus UHLAR - fantomas
to have different views for different clients. So for my internal view where I: match-clients{ httnets; }; match-destinations{ httnets; }; recursion yes; allow-query{ httnets; }; On 02/21/2013 10:40 AM, Matus UHLAR - fantomas wrote: allow-query is useless here, unless

Re: allow-query and views

2013-02-21 Thread Matus UHLAR - fantomas
? it's kind of general switch to allow/deny recursion. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. I don't have lysdexia. The Dog

Re: broken ISP in china

2013-02-18 Thread Matus UHLAR - fantomas
604800 change that to 4w not needed but and negative cache value 86400 gulp drop that to no more than 3600, maybe even just use 600. I agree with this one. Value 86400 for negative cache is widely used, but mostly from obsolete understanding of SOA field name minimum. -- Matus UHLAR

Re: question about dns query distribution

2013-02-08 Thread Matus UHLAR - fantomas
is the reason behind it that both servers' having queries ? there are cases where DNS resolver sorts IP addresses and thus prefersone of them. There are also cases where DNS resolver measures response time and uses the faster DNS server. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: reverse resolution failing

2013-02-07 Thread Matus UHLAR - fantomas
139.0.184.142.in-addr.arpa. Saturn works OK for most questions, and returns a PTR record if you ask for ANY, but if you request a PTR directly it ignores you. some kind of lame DNS load balancers? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: Wildcard CNAME record?

2013-01-16 Thread Matus UHLAR - fantomas
that require wildcards ;-) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty to obtain a little

Re: Wildcard CNAME record?

2013-01-16 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 16.01.13 14:57, Baird, Josh wrote: Is it acceptable to have a wildcard CNAME? Example: * IN CNAMEsomewhere.com. Or, would it be advised to only use wildcard 'A' records? while it is technically valid

Re: lame-servers: error (FORMERR) resolving [something]

2013-01-08 Thread Matus UHLAR - fantomas
there's none I would completely trust. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Spam = (S)tupid (P)eople's (A)dvertising (M)ethod

Re: zone files in bind-9.9

2013-01-06 Thread Matus UHLAR - fantomas
should do -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Support bacteria - they're the only culture some people have

Re: is there a also-allow-transfer

2012-12-16 Thread Matus UHLAR - fantomas
via masters {} directive, and use it in also-notify {} clause. you will just have to define 74.81.81.82 two times - in both acl and masters directives... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Can't find named_dump.db

2012-12-06 Thread Matus UHLAR - fantomas
why we use /var) On 03.12.12 21:32, Daniele Imbrogino wrote: I edited the working directory to /etc/bind because this is the directory where I have all the zone data files. If I use the default /var/cache/bind do I have to move also the zone data files 2012/12/5 Matus UHLAR - fantomas uh

Re: truncated responses vs. minimal-responses?

2012-12-05 Thread Matus UHLAR - fantomas
On 28.11.12 18:38, Tony Finch wrote: Yes it does. For example, have a look at responses to queries for dotat.at in mx for various buffer sizes and observe that RRsets are dropped but the TC bit is not set. On 11/30/2012 01:30 PM, Matus UHLAR - fantomas wrote: Nice to see. I'm seeing

Re: Expiration TTLs

2012-12-05 Thread Matus UHLAR - fantomas
... If anyone has better info on how do microsoft AD sevrers work with DNS, just let us know... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Can't find named_dump.db

2012-12-05 Thread Matus UHLAR - fantomas
this way just to have dumps and core files in /var/cache/bind where named usually can write, instead of /etc where it usually can't (and shouldn't). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: OT - Dns test Q/A

2012-12-05 Thread Matus UHLAR - fantomas
a document from which I can extract few questions? Sorry for the OT and thanks in advance. Sorry for not responding sooner, but I have not idea where you could find such informations. I can only recommend you to search the net for already existing dns knowledge tests... -- Matus UHLAR - fantomas

Re: Querying directly a nameserver works, while forwarding not

2012-12-05 Thread Matus UHLAR - fantomas
named.conf.options - named.conf.options options { listen-on ...; }; I used instead: - named.conf: options { // common.options ... include named.conf.options; }; - named.conf.options: // host-specific options listen-on ...; -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: truncated responses vs. minimal-responses?

2012-11-30 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas uh...@fantomas.sk wrote: I know. But there are cases you just have much of data in the DNS and what I am asking is, if BIND really does skip authority section, if it helps to avoid sending truncated packets. On 28.11.12 18:38, Tony Finch wrote: Yes it does. For example

Re: Upstart job for BIND9

2012-11-30 Thread Matus UHLAR - fantomas
On Thu, Nov 29, 2012 at 7:25 PM, Matus UHLAR - fantomas uh...@fantomas.skwrote: famous assertion failures? What system do you run the BIND on? Shouldn't you better upgrade to version that has no famous assertion failures? On 29.11.12 20:50, Alexander Gurvitz wrote: Well, of course it's

Re:

2012-11-30 Thread Matus UHLAR - fantomas
. 172800 IN NS ns2.videolinedvd.com. ;; ADDITIONAL SECTION: ns1.videolinedvd.com. 172800 IN A 72.167.164.36 ns2.videolinedvd.com. 172800 IN A 72.167.164.36 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive

Re:

2012-11-30 Thread Matus UHLAR - fantomas
, Matus UHLAR - fantomas wrote: actually, they have glue A record in .com zone: ;; AUTHORITY SECTION: videolinedvd.com. 172800 IN NS ns1.videolinedvd.com. videolinedvd.com. 172800 IN NS ns2.videolinedvd.com. ;; ADDITIONAL SECTION: ns1.videolinedvd.com. 172800

Re: Upstart job for BIND9

2012-11-29 Thread Matus UHLAR - fantomas
upgrade to version that has no famous assertion failures? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux IS user friendly, it's just

Re: truncated responses vs. minimal-responses?

2012-11-28 Thread Matus UHLAR - fantomas
of data in the DNS and what I am asking is, if BIND really does skip authority section, if it helps to avoid sending truncated packets. If it does, the minimal-responses does NOT affect packet truncation. if it does not, I ask why... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

truncated responses vs. minimal-responses?

2012-11-27 Thread Matus UHLAR - fantomas
with this. Can anyone enlight me in this? Thank you. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. - Holmes, what kind of school did you study

Re: dns master-slave transfer

2012-11-08 Thread Matus UHLAR - fantomas
). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Despite the cost of living, have you noticed how popular it remains

Re: Moving from type forward to type static-stub

2012-10-10 Thread Matus UHLAR - fantomas
are unreachable. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up essential liberty to obtain a little temporary safety

Re: What can cause excessive amount of _dns-sd queries?

2012-09-17 Thread Matus UHLAR - fantomas
to sites like facebook, youtube, apple store etc. I don't work for the company anymore so I have no idea if they have fixed it (the only way I could think of it was to change the company's DNS architecture https://lists.isc.org/pipermail/bind-users/2012-April/087314.html -- Matus UHLAR - fantomas, uh

Re: Reverse zones best practices

2012-06-28 Thread Matus UHLAR - fantomas
... (the best is to have records in the database, so you can sort according to anything you need) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: Reverse zones best practices

2012-06-28 Thread Matus UHLAR - fantomas
records for subzones. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. - Have you got anything without Spam in it? - Well, there's Spam egg

Re: Recommended value for max-cache-size for cache-only shared hosts..

2012-06-01 Thread Matus UHLAR - fantomas
memory, it currently uses 1359868 VSZ and 732852 RSS after 38 days with ~432 queries per second. I have even increased max-ttl and max-negative-ttl to see if it affects memory usage. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: logging to syslog on another host?

2012-05-30 Thread Matus UHLAR - fantomas
syslog daemon is for, simply configure it to forward logs to another machine. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux is like

Re: Partial forwarding.

2012-05-30 Thread Matus UHLAR - fantomas
either forwards, or resolves. If it resolves, it is authoritative - if it does not have the answer, then the answer does not exist. You can use lightweight DNS servers like dnsmasq that can locally resolve some hosts and forward all the rest. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: Bind configuration and log error

2012-05-23 Thread Matus UHLAR - fantomas
should I do to enable that? your server has apparently problems with internet conectivity. Is it behind firewall? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Checking for zone expiration?

2012-05-22 Thread Matus UHLAR - fantomas
that will trigger transfer attempt, or is it useless in such case? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. If Barbie is so popular, why do

Re: Reverse zone delegation for 172.16.16.0/20 - HOW TO?

2012-05-21 Thread Matus UHLAR - fantomas
... 31.16.172.in-addr.arpa and use it as 16 separate /16 zones. Better do not try to make this easiee, you will end in making that more complicated and error-prone. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Reverse zone delegation for 172.16.16.0/20 - HOW TO?

2012-05-21 Thread Matus UHLAR - fantomas
not to do things this weay and better split the /16 block to 256 od /24 blocks and simply delegate each other as you need. Doing it simple is both nice and resistant to errors. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Max Client per Query

2012-05-03 Thread Matus UHLAR - fantomas
want to limit number query done by a client. The usage of resources in my equipments is very high specially in my firewall. either you have misconfigured or misbehaving client, or you need to upgrade your dns server. By limiting queries you may cause troubles to your clients. -- Matus UHLAR

Re: Don't understand why I get a FORMERR (quad-A - ipv6 related)

2012-04-25 Thread Matus UHLAR - fantomas
is that the name servers for www.ryanair.com are misconfigured. They are returning answers as if they are configured for ryanair.com (see the SOA record) instead of www.ryanair.com as can be seen below. Hmm, I've been solving their problem years ago. Haven't they still fix that? -- Matus UHLAR - fantomas

Re: troubleshooting bind

2012-04-10 Thread Matus UHLAR - fantomas
abovec. Check all servers in the resolution path for the answer. It's a quite common problem with master/slave synchronization, multiple masters, or a missing delegation to a subdomain, where this can happen. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: TC Flag

2012-04-10 Thread Matus UHLAR - fantomas
On 10.04.12 19:24, rams wrote: When I get TC flag for UDP query? when the answer is too big to fit into the UDP packet of sice 512 (default) or client-provided (when your client advises bigger buffer size) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

<    1   2   3   4   5   6   7   8   9   10   >