Re: Forwarding based on Client IPs

2012-04-04 Thread Matus UHLAR - fantomas
, should access opendns services directly, not through other server - I guess opendns filters depending on source IP, which will be the same for all clients using your dns server. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: A large number of ANY query type queries

2012-03-28 Thread Matus UHLAR - fantomas
... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95

Re: Name Resolution issue with one domain

2012-03-22 Thread Matus UHLAR - fantomas
On 21/03/2012 09:41, Matus UHLAR - fantomas wrote: maybe the admin set that up to force local servers using random ports, instead of 53, for outgoing requests. Nobody should use port 53 for _ougtoing_ requests. On 21.03.12 23:41, Anand Buddhdev wrote: You're wrong. A name server can use any

Re: Name Resolution issue with one domain

2012-03-21 Thread Matus UHLAR - fantomas
: 18071+$ [1au] A? www.dubaiairport.com. ar: OPT UDPsize=4096 (49) ; DiG 9.9.0rc2 -b 0.0.0.0#53 www.dubaiairport.com @svr-b003.dubaiairport.com ;; global options: +cmd ;; connection timed out; no servers could be reached bsdi# -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk

Re: Loadbalance caching dns server

2012-03-20 Thread Matus UHLAR - fantomas
server with a load balance method. Each server will get 5 requests. there are network appliances that allow to do such thing. For example, nortel alteon, cisco ACE, or linux ipvs. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: rndc reconfig vs. rndc reload

2012-03-16 Thread Matus UHLAR - fantomas
is NOT for individual zone file, it takes very long. The question is, if/how can it be made to run faster. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: nslookup fails if missing PTR record for IPv6 DNS server.

2012-03-16 Thread Matus UHLAR - fantomas
to nslookup you can also use host, as it simpler and usually gives you what you need, unless you need to debug DNS itself. On Fri, 16 Mar 2012, Matus UHLAR - fantomas wrote: the main problem is nslookup itself, and this is just one of reasons nslookup is not recommended for use. [...] but I need

Re: reverse dns for IPV6 ranges

2012-03-09 Thread Matus UHLAR - fantomas
. SpamHaus has some recommendations related to IPv6 in order to avoid overhauling DNS when abusive client changes IPs to abuse servers. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto

Re: BIND 9.9.0 Inline-Signing Out of Control

2012-03-05 Thread Matus UHLAR - fantomas
ns0 named[806928]: client [ns1]#51607/key ns0-ns1 (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: BIND 9.9.0 is now available

2012-03-02 Thread Matus UHLAR - fantomas
alternate suggestions for misspelled domain names. Note that names that are in DNSSEC-signed domains are exempted from this when validation is in use. [RT #23146] just by signing? so I can spare all our domains from being misused by such shit just by signing them? -- Matus UHLAR - fantomas, uh

Re: CVE-2012-1033 (Ghost domain names) mitigation

2012-02-13 Thread Matus UHLAR - fantomas
UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. M$ Win's are shit, do not use it ! ___ Please visit https

Re: CVE-2012-1033 (Ghost domain names) mitigation

2012-02-09 Thread Matus UHLAR - fantomas
doing a nightly restart for other reasons. what? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. My mind is like a steel trap - rusty

Re: Multiple BIND instances

2012-02-08 Thread Matus UHLAR - fantomas
if gives you some kind of safety or other advantage, but I don't know about any that would help in such case. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Multiple BIND instances

2012-02-07 Thread Matus UHLAR - fantomas
On 2/7/2012 11:17 AM, Matus UHLAR - fantomas wrote: You can even run a single BIND instance with two separate views and that should not affect functionality. On 07.02.12 04:02, sasa sasa wrote: Wouldn't this have mixed (one) caches? No, unless you use attach-cache directive. However

Re: allow-query for a zone

2012-01-16 Thread Matus UHLAR - fantomas
allow-query in a zone and there's no reason why none wouldn't be valid in allow-query statement. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu

Re: load balance of DNS

2012-01-13 Thread Matus UHLAR - fantomas
with it. I know other 4 or 7 layer software (like LVS and Nginx) can do that, but also want to know if BIND supports this. better get such solution then... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: RFC 6303 vs. BIND: NS ... has no address records (A or AAAA)

2012-01-11 Thread Matus UHLAR - fantomas
: 1.0.0 PTR localhost. The same about 255.in-addr.arpa instead of 255.255.255.255.in-addr.arpa. I even wonder why was 255.255.255.255 implemented as default and described in RFC 6303 ... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: zone update to slave

2012-01-11 Thread Matus UHLAR - fantomas
added something manually, because it only writes the zone file, it does not read it. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. (R

Re: About root zones

2012-01-05 Thread Matus UHLAR - fantomas
may also break things. In fact, it may cause similar problems than Peter Andreev is trying to avoid. And it may cause them independantly on the nameserver used. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: DNSSEC and IXFR

2012-01-05 Thread Matus UHLAR - fantomas
as a very simple IXFR removing old NSEC and adding new record with tro NSEC's ? Or, is there something I don't understand correctlt about DNSSEC? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: About root zones

2012-01-03 Thread Matus UHLAR - fantomas
it loses data like TTLs. and that is one of reasons why BIND does not (and apparently even should not) use system libresolv and gethost* functions. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

Re: About root zones

2012-01-03 Thread Matus UHLAR - fantomas
2012/1/2 Matus UHLAR - fantomas uh...@fantomas.sk: I don't see your point now. I'm afraid that you will have to live with the fact that you can not disable sending queries from BIND when it needs them, you can only prevent it by configuring BIND (so it will not need them) or firewall

Re: About root zones

2012-01-02 Thread Matus UHLAR - fantomas
On 21.12.11 19:21, Peter Andreev wrote: All these servers are slaves. They don't send notifies. 2011/12/21 Matus UHLAR - fantomas uh...@fantomas.sk: they do, unless you have turned it off... On 22.12.11 11:54, Peter Andreev wrote: Of course I turned it off, it's normal practice for slaves

Re: About root zones

2012-01-02 Thread Matus UHLAR - fantomas
On 21.12.11 19:21, Peter Andreev wrote: I think that if server is authoritative - and - slave-only it should use system resolver rather than querying by itself. 2012/1/2 Matus UHLAR - fantomas uh...@fantomas.sk: BIND will not use system resolver. BIND is the resolver. Relying on other

Re: About root zones

2011-12-21 Thread Matus UHLAR - fantomas
purposes? 2011/12/20 Matus UHLAR - fantomas uh...@fantomas.sk: yes. On 21.12.11 12:17, Peter Andreev wrote: This fact is really disappointing. well, it's needed for proper functionality. What exactly seems to be your problem? Note that - only clients that are allowed to recurse are able

Re: load-balancing in DNS using two A records

2011-12-21 Thread Matus UHLAR - fantomas
In message 2011122018.ga3...@fantomas.sk, Matus UHLAR - fantomas writes: Long time ago when we were trying to have multiple web servers for redundancy and balancing, we have found that multiple IP's is not a good solution (parts of web pages didn't load). We selected L3 switches

Re: About root zones

2011-12-21 Thread Matus UHLAR - fantomas
the same afaik. However, disabling additional-from-cache is OK and afaik disabled by default. That's why any sort of internal lookups looks very suspicious for me. server needs to resolve names if it's supposed to send NOTIFY messages. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: About root zones

2011-12-21 Thread Matus UHLAR - fantomas
2011/12/21 Matus UHLAR - fantomas uh...@fantomas.sk: Disabling recursion should do the same afaik. However, disabling additional-from-cache is OK and afaik disabled by default. On 21.12.11 19:21, Peter Andreev wrote: No, it is enabled by default. server needs to resolve names if it's

Re: Cache only and reverse mapping

2011-12-20 Thread Matus UHLAR - fantomas
to different DNS providers, and later complain that you provide old zones to your other customers (because they did not tell you that you should stop providing them). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: purpose of the RIR(for example RIPE) domain: object

2011-12-20 Thread Matus UHLAR - fantomas
. They are exported to DNS ... 2011/12/19, Matus UHLAR - fantomas uh...@fantomas.sk: On 19.12.11 10:32, Martin T wrote: what is the purpose of RIPE database domain: objects? Are they practically used for something? And according to RIPE database manual, nserver attribute under domain object specifies

Re: About root zones

2011-12-20 Thread Matus UHLAR - fantomas
purposes? yes. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Despite the cost of living, have you noticed how popular it remains

Re: load-balancing in DNS using two A records

2011-12-20 Thread Matus UHLAR - fantomas
provider-independent address space (if possible) and use separate uplinks. That gives you much better line saturation. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: purpose of the RIR(for example RIPE) domain: object

2011-12-19 Thread Matus UHLAR - fantomas
informative field(it's not mandatory according to whois -h whois.ripe.net -t domain)? reverse delegations in RIPE are done through RIPE database domain: objects. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread Matus UHLAR - fantomas
512 bytes. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Save the whales. Collect the whole set

Re: CNAME only zone?

2011-12-09 Thread Matus UHLAR - fantomas
of this type from either Network Solutions or register.com before, not sure which. Note that there still may be servers that have configured .com as delegation-only and thus it won't work there. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive

Re: CNAME only zone?

2011-12-09 Thread Matus UHLAR - fantomas
On 09.12.11 17:52, Lightner, Jeff wrote: Also - why is it a registrar can do a CNAME only but we mere mortals can't? Because if you want CNAME, you must put it directly to he .com zone what mere mortals just can not. And I wonder if any registrar allows that. -- Matus UHLAR - fantomas, uh

Re: Choosing max-journal-size

2011-11-30 Thread Matus UHLAR - fantomas
for signed). Not sure about the locking implications. I think this is something BIND should take care about. Does BIND veridy the journal not to exceed usefull size? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: Choosing max-journal-size

2011-11-30 Thread Matus UHLAR - fantomas
On 30/11/11 10:09, Matus UHLAR - fantomas wrote: Well, that's way too much. The main point of journal is imho to provide On 30.11.11 11:51, Phil Mayers wrote: I think this is a decision for each operator to make themselves. I was trying to explain that there are reasonable limits over which

Re:

2011-11-25 Thread Matus UHLAR - fantomas
. not mentioning new features (mostly DNSSEC related) that new servers have. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Nothing is fool-proof

DNSSEC and IXFR

2011-11-25 Thread Matus UHLAR - fantomas
, does is have this feature too? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Atheism is a non-prophet organization

Re: Issue with cache

2011-11-22 Thread Matus UHLAR - fantomas
characteristics to store all responses - positive and negative? yes. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 2B|!2B, that's a question

Re: Modify BIND ACLs on-the-fly?

2011-11-22 Thread Matus UHLAR - fantomas
client can identify itself by TSIG instead of IP address. of course, this requires tyour client to support TSIG ... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: Modify BIND ACLs on-the-fly?

2011-11-22 Thread Matus UHLAR - fantomas
tsig-aware proxy on them? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Due to unexpected conditions Windows 2000 will be released in first

another INSIST bug?

2011-11-18 Thread Matus UHLAR - fantomas
bug? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows found: (R)emove, (E)rase, (D)elete

Re: Turning log on bind for troubleshooting

2011-11-16 Thread Matus UHLAR - fantomas
searching for some DNS howto's -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The box said 'Requires Windows 95 or better', so I bought

Re: Subdomain Issue

2011-11-11 Thread Matus UHLAR - fantomas
what unusual is logged then. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease

Re: Subdomain Issue

2011-11-09 Thread Matus UHLAR - fantomas
Now I have only one question: On 08.11.11 20:27, trm asn wrote: The moment I have done the rndc reload example.com, the domain and all subdomain were became not resolvable. what does the named's log say? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: Bind does not reply with no such name to A query

2011-11-09 Thread Matus UHLAR - fantomas
A recors. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Remember half the people you know are below average

how to split TXT record for IpSEC?

2011-11-09 Thread Matus UHLAR - fantomas
/Dmy066XopR/ vlrslCABREFiIOAzFMkOvQ0ZUkOGyWN5ERJ161k9msDnFUlldWuK17g2mzp24/nVx+hOXfzg qhhpeSQV8RK0zZkOe3pVd+a0uuDeYaMtSIRTOT5D xTvWInVjR8LXtpPiGqj5qO+hQhysgk= Can you recomment can I split it to multiple records so they all fit? Thank you -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: how to split TXT record for IpSEC?

2011-11-09 Thread Matus UHLAR - fantomas
On 09.11.11 14:35, Matus UHLAR - fantomas wrote: I have a domain with TXT record that does not fit into 255 characters, some king of ipsec record: sofia.dashofer.sk. 3600IN TXT X-IPsec-Server(10)=@sofia.dashofer.sk AQNqdEjqL33Pf4MFgJYs5v4xRhEPTWouM3Ny1HfcecM+TdX

Re: Subdomain Issue

2011-11-08 Thread Matus UHLAR - fantomas
ns1973.hostgator.com. this is an error probably ;testINNSns1974.hostgator.com.* Please help me out on this issue. however those entries seem to be invalid to me -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising

Re: DNS requests with Rd flag cleared

2011-11-05 Thread Matus UHLAR - fantomas
server. that's what authoritative server means. Are there some possibilities to force a recursive DNS to perform its recursive process even for request received with rd flag cleared ? no. You must do what Phil Meyers advised to you in other reply -- Matus UHLAR - fantomas, uh...@fantomas.sk

Re: Redirecting subdomain to different resolver

2011-10-20 Thread Matus UHLAR - fantomas
(sends iterative requests). So, the forward can be configured to fall-back to standard resolution, and it can resolve delegated subdomains, if the forwarders allow recursion to you. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: intermittent bad horizontal referral?

2011-10-20 Thread Matus UHLAR - fantomas
.pps.com.au. pps.com.au. 14400 IN NS ppsdns1.pps.com.au. pps.com.au. 14400 IN NS ppsdns6.pps.com.au. ;; Received 214 bytes from 69.36.145.34#53(n.au) in 227 ms -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: NXDOMAIN redirection in BIND 9.9

2011-10-03 Thread Matus UHLAR - fantomas
companies will break DNS to do something it is not designed for. Now I see it doesn't. Bad. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu

Re: CNAME or A record?

2011-09-28 Thread Matus UHLAR - fantomas
use a CNAME, you only need to handle the single A record name in the server. No, web server setup has nothing to do with CNAME or A record types. (Unless a web server is directed to behave differently, but I don't know why would anyone do that). -- Matus UHLAR - fantomas, uh...@fantomas.sk

Re: DNS-cache with custom gTLDs

2011-09-26 Thread Matus UHLAR - fantomas
? if you want to implement local TLD or any king of zone visible locally, you can define it on recursive servers, or on different servers and forward requests for that zone from caches to those different servers. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: DNS-cache with custom gTLDs

2011-09-22 Thread Matus UHLAR - fantomas
. Is it safe to hijack on dns-cache? no, it is not. If it's an isp, they should track the broken client. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: One IP in multiple zones

2011-09-22 Thread Matus UHLAR - fantomas
Is it possible to have one IP in multiple zone files for forward lookups? On 21.09.11 15:23, Adamiec, Lawrence wrote: What I am looking at doing is the following. www.existingdomain.edu 86400 A 192.0.0.1 www.existingdomain.newdomain.edu 86400 A 192.0.0.1 just do it. -- Matus UHLAR

Re: A few (too) simple questions about DNS records

2011-09-21 Thread Matus UHLAR - fantomas
. when you are defining a new zone, you will need SOA and in most cases NS records too (that means, unless you are configuring private zone running in your network). Most of other zones include MX records for the zone. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: DNS-cache with custom gTLDs

2011-09-21 Thread Matus UHLAR - fantomas
to fake it? Why do you think it does not trust what forwarder returned? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Depression is merely

Re: Query regarding NS record

2011-09-18 Thread Matus UHLAR - fantomas
, mail.myoffice.com won't work. I recommend tou to get your ISP slave your zone and create additional NS records pointing on your ISP's name severs for mail.myoffice.com. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: slow non-cached quries

2011-09-11 Thread Matus UHLAR - fantomas
for outgoing queries? Note that BIND versions released in last 3 years randomize source ports unless they are told not to do so (which is very bad idea, unless someone does that for them). -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail

Re: slow non-cached quries

2011-09-09 Thread Matus UHLAR - fantomas
port and the same identification I'd which makes it impossible for it to determine the query/response pairs. who is sending those packets? Is that your BIND? Just one question why doesn't the bind drop such packets. apparently it does and that's why it's so slow... -- Matus UHLAR - fantomas, uh

Re: question about forward

2011-09-02 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The only substitute for good manners is fast reflexes

Re: Fwd: Re: slow non-cached quries

2011-09-02 Thread Matus UHLAR - fantomas
one fails) and using those from anywhere? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Spam = (S)tupid (P)eople's (A)dvertising (M

Re: Max number of views and performance.

2011-08-30 Thread Matus UHLAR - fantomas
On 30.08.11 01:36, sky shade wrote: I think in use views with diferent zones files, all for same domain, no recursive querys, one view for each network/AS that my bgp router know. 1. are you sure you need that? 2. how many versions of the domains does that make? -- Matus UHLAR - fantomas, uh

Re: Separating zone file for static usage and DDNS

2011-08-30 Thread Matus UHLAR - fantomas
BIND to to wha tyou want, you just won't do it by editing the zone but by sending changes to BIND. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek

Re: Max number of views and performance.

2011-08-25 Thread Matus UHLAR - fantomas
only differ by loaded zones, that should not be a problem. If it's not possible, you (or the OP) can surely configure 120 or e.g. million real or virtual machines to provide the DNS service. That is just what views do within one BIND process. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http

Re: RFC 1918 error clarification

2011-08-18 Thread Matus UHLAR - fantomas
and put everything there. the problem above looks like client with IP 192.168.16.3 asked the named on server mail2 for 108.21.168.192.in-addr.arpa and 171.1.168.192.in-addr.arpa and got the responses from the internet. You should serve those zones locally... -- Matus UHLAR - fantomas, uh

Re: Memory utilisation problem on busy bind resolver

2011-08-10 Thread Matus UHLAR - fantomas
. That could explain much. Do you run authoritative servers for private and special subnets? (rfc 5735 named them all). Do you run own .local and .localhost zone? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: Insufficient DNS Source Port Randmoization

2011-07-28 Thread Matus UHLAR - fantomas
firewall? Does the firewall change source port? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Nothing is fool-proof to a talented fool

Re: Forward only zones.

2011-07-27 Thread Matus UHLAR - fantomas
must be lowered at microsoft DNS? yes. TTL for records, expires only if oyou fetch zones. Note that microsoft's DNS servers are very bad at maintaining zones (especially those dynamically updated by clients) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: Forward only zones.

2011-07-26 Thread Matus UHLAR - fantomas
On 24.07.2011 18:40, Matus UHLAR - fantomas wrote: This is how BIND is supposed to work. If you _need_ such setup, why don't you setup your AD servers as recursive point clients directly to them? you can teoretically configure maximum cache time in BIND but that would be useless server

Re: Forward only zones.

2011-07-25 Thread Matus UHLAR - fantomas
On 24.07.11 09:15, Vbvbrj wrote: zone my_domain.com IN { On 24.07.2011 18:40, Matus UHLAR - fantomas wrote: I would prefer not to using underscores in domain names. While they are allowed, they may cause some stuff not to work. Why do you have underscore here? On 25.07.11 09:24, Vbvbrj

Re: Forward only zones.

2011-07-24 Thread Matus UHLAR - fantomas
be useless server. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They say when you play that M$ CD backward you can hear satanic messages. That's

Re: MX choosing

2011-07-22 Thread Matus UHLAR - fantomas
to talk to one of these hosts,will it try the next one? or it just give up? this is out of DNS and BIND scope. see rfc 5321, section 5.1 for MTA requirements. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address

Re: SPF implementation schedule.

2011-07-12 Thread Matus UHLAR - fantomas
problems. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0

Re: DNAME?

2011-07-01 Thread Matus UHLAR - fantomas
zones. But I still find it more readable... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. On the other hand, you have different fingers

Re: better performance with 32 bit ! why?

2011-06-30 Thread Matus UHLAR - fantomas
different comparing to -n 8 to server 1 (yes, the same). What has been reported it that more than 4 cores add (nearly) no more performance -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto

Re: Better solution than making a recursive nameserver authoritative?

2011-06-29 Thread Matus UHLAR - fantomas
of wanting this? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. One World. One Web. One Program. - Microsoft promotional advertisement Ein Volk

Re: bind-users Digest, Vol 902, Issue 1

2011-06-29 Thread Matus UHLAR - fantomas
with faster CPU and 64-bit OS on slower CPU-machine? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. It's now safe to throw off your computer

Re: better performance with 32 bit ! why?

2011-06-29 Thread Matus UHLAR - fantomas
explained to you that bind does not scale much better with more than 4 threads. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Windows 2000

Re: bind9 enum hack

2011-06-24 Thread Matus UHLAR - fantomas
recursion allowed. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0

Re: Slaves do not more update

2011-06-23 Thread Matus UHLAR - fantomas
say anything? Did you try to run one of slaves in debug mode? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. They that can give up

Re: Slaves do not more update

2011-06-22 Thread Matus UHLAR - fantomas
the SOA version on master? Did the master reload new zone? What do logs say? Changing timestamp on slave indicates that the slave is checking and thinks it hat the fresh version. What do the logs say? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: Received notify, master unreachable (cached)

2011-06-21 Thread Matus UHLAR - fantomas
think you may be right, but I'd better put a limit on how often this may happen, so the bind won't re-check too often if the master is unreachable. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie

Re: How to Setup a Name Servers visible on Internet?

2011-06-21 Thread Matus UHLAR - fantomas
are a single-server replacement for multiple servers. When using views, many things get complicated, including zone transfers. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem

Re: I can't resolve one domain: nhs.uk

2011-06-17 Thread Matus UHLAR - fantomas
) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Silvester Stallone: Father of the RISC concept

Re: How to Setup a Name Servers visible on Internet?

2011-06-17 Thread Matus UHLAR - fantomas
will even catch the imap, pop, pop3 and smtp hosts and redirect them to www no, it will not. Wildcard applies only for domains that do not exist. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie

Re: How to Setup a Name Servers visible on Internet?

2011-06-14 Thread Matus UHLAR - fantomas
/ and slave/ ... It's much easier to do vi metropolitanbuntu.co.za rndc reload metropTAB or maybe in tcsh: rndc reload !!:1 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT

Re: link-local glue AAAA

2011-06-05 Thread Matus UHLAR - fantomas
or other bogus ip addresses in NS records for public domains. Technically correct, but will not apparently work from outside and any registry should reject that. However registries do not have power over delegating within your registered zone so the rest is up to you -- Matus UHLAR - fantomas, uh

Re: DNS Racing -Multi ISP load balancing with failover using DNS.

2011-06-02 Thread Matus UHLAR - fantomas
On 31/05/11 09:28, Matus UHLAR - fantomas wrote: This problem could be avoided by providing the same data, but differently sorted, correct? On 31.05.11 12:27, Phil Mayers wrote: Not really. Client side sorting may take place (e.g. to comply with RFC 3484 policies in calls to getaddrinfo

Re: DNS Racing -Multi ISP load balancing with failover using DNS.

2011-06-01 Thread Matus UHLAR - fantomas
On 31/05/11 09:28, Matus UHLAR - fantomas wrote: This problem could be avoided by providing the same data, but differently sorted, correct? On 31.05.11 12:27, Phil Mayers wrote: Not really. Client side sorting may take place (e.g. to comply with RFC 3484 policies in calls to getaddrinfo

Re: DNS Racing -Multi ISP load balancing with failover using DNS.

2011-05-31 Thread Matus UHLAR - fantomas
. DNS Race just keeps the answers permanently out of sync instead of the temporary condition that happens with normal updates. This problem could be avoided by providing the same data, but differently sorted, correct? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I

Re: DNS Racing -Multi ISP load balancing with failover using DNS.

2011-05-30 Thread Matus UHLAR - fantomas
the client will get the worse result... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 10 GOTO 10 : REM (C) Bill Gates 1998, All Rights Reserved

9.8 manuals on web

2011-05-30 Thread Matus UHLAR - fantomas
Hello, the web page (http://www.isc.org/software/bind/documentation) claims to provide links to 9.4-9.8 manuals (html and pdf) however only 9.4 and 9.5 are working. Did a mistake happen here? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e

recursive lookups problems with 9.8.0_p2

2011-05-30 Thread Matus UHLAR - fantomas
IN A 68.180.130.15 -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. REALITY.SYS corrupted. Press any key to reboot Universe

Re: norecursion on external zone, but how do I allow CNAMEs to be fully resolved?

2011-05-20 Thread Matus UHLAR - fantomas
. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. We are but packets in the Internet of life (userfriendly.org

Re: Problems in views in a zone transfer

2011-05-10 Thread Matus UHLAR - fantomas
... If you have multiple views on the slave containing the same zone, you must either give them different IP and send notify to both IPs or you can configure one view to fetch the zone from master and notify the second view, which will fetch the zone from master or the first view. -- Matus UHLAR

<    2   3   4   5   6   7   8   9   10   >