domain doesn't exist, then it can simply give NXDOMAIN and our job
will be done as we trust that nameserver through trust chain.
So what's the need of NSEC??
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
Please don't pr
Firstly, where do we get the public key for the DS records?
Can you clarify your question???
Second, why do I get multiple DS records as response? -
You will always get a 2 DS Records in response. One for SHA-1 and second for
SHA-256.
_
dig +dnssec -t DS isc.org @b0.org.afilia
will be highly obliged.
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for ne
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Miek Gieben
Sent: Saturday, February 18, 2012 12:42 AM
To: bind-users@lists.isc.org
Subject: Re: A few conceptual question about
-Original Message-
From: Chuck Swiger [mailto:cswi...@mac.com]
Sent: Saturday, February 18, 2012 1:04 AM
To: Gaurav kansal
Cc: bind-users@lists.isc.org
Subject: Re: Query Regarding AKAMAI Working Model
Hi, Gaurav--
On Feb 17, 2012, at 11:15 AM, Gaurav kansal wrote:
> I w
DNSSEC is done on Authoritative side. Caching DNS only check whether that
particular domain is signed or not, only if that caching DNS is designed to
do so.
As we don't signed our records on fly in DNSSEC, so DNSSEC doesn't increase
the load but ya it increases the size of the response of the quer
Why u are using mapped{} options in dns64 conf ???
What we are doing is:
dns64 2001:db8:5200::/96 {
Clients {
2001:db8:1000:10::/64;
2001:db8:20:10::/64;
...
};
};
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kans
Hi Rock,
So have u got success in mapping specific v6 network to defined v4 network?
From: Rock July [mailto:headgea...@yahoo.com]
Sent: Monday, June 04, 2012 10:55 AM
To: Gaurav Kansal; 'Phil Mayers'; bind-users@lists.isc.org
Subject: Re: DNS64 - multiple mapping
Hi Gaur
Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
2012... Now you can use your 1984 calenders again.:P:P
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for ne
Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
2012... Now you can use your 1984 calenders again.:P:P
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your read
Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
2012... Now you can use your 1984 calenders again.:P:P
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for ne
st-zone.in
for which I am the master?
Thanks
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Dear Team,
I want to collect some stats (such as most which zone has queried most,
which DNS Server queries us most and so on) based on my DNS Logs.
Is there any open-source tool available to filter out these statistics using
my dns logs.
Thanks and Regards,
Gaurav Kansal
Mob
daemon or in case of system restart?
Sorry to bother you guys but I can't STOP/START the named service at my end.
That's why I am asking this question.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[m
ng request
or not.
I use the 'OARC's DNS Reply Size Test Server' for the same and I got the
below mentioned O/P:
#dig +short rs.dns-oarc.net txt
rst.x476.rs.dns-oarc.net.
rst.x450.x476.rs.dns-oarc.net.
rst.x490.x450.x476.rs.dns-oarc.net.
"Tested at 2012-12-31 09:40:11 UTC
I just want to test whether this limit is within my organization.
Is any method available by which I can check this?
Regards,
Gaurav Kansal
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Sten Carlsen
Hi Team,
Thanks for help.
My Firewall was dropping packet size larger than 512 bytes.
Cisco 5580 having ASA 8.3. It is by default blocking my EDNS0 Packet.
Thanks and Regards,
Gaurav Kansal
On 12/31/12, Sten Carlsen wrote:
>
>
>
>
> With the replies you have shown, th
p udp --dport 53 -m state --state NEW -m
recent --update --seconds 60 --hitcount 5 --name DNSQF --rsource -j DROP
If anyone is using iptables for limiting DNS Query per IP, then pl. help me
out.
Thanks and Regards,
Gaurav Kansal
Mob - 9910118448
Happy New Year 2013.
IPv4 is
e of
the best trainer.
And these events are economical too.
Charges was Rs. 15,000/- (Roughly $300) only.
I can't comment how best is ISC Courses because ISC training rarely happens in
INDIA.
As per my opinion, ISC should focus on training events in INDIA also.
Regards,
Gaurav Kansal
whether this feature is available in Bind or in
any Open-Source Program which in turn can be combined with BIND to achieve
the desired result.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Have you enabled IPv6 on something today
Dec 30 15:55:32 IPV6-NKN-DNS named[13123]: error (FORMERR) resolving
'ib.sin1.geoadnxs.com//IN': 64.208.141.11#53
Dec 30 15:55:32 IPV6-NKN-DNS named[13123]: error (FORMERR) resolving
'ib.sin1.geoadnxs.com//IN': 64.208.141.10#53
Dec 30 15:55:32 IPV6-NK
d also if you have a list of feature which needs to explicitly enabled,
pl. share the same.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Intercom - 7331
Have you enabled IPv6 on something today...?
___
Please visit h
Hi Chris,
Thanks for your response.
I am getting the error message for lot of domains.
Log of error entries are attached.
Is it possible to configure bind so that error message should not be
generated in logs file.
Regards,
Gaurav Kansal
-Original Message-
From
Thanks Chris for your useful comments.
On Dec 30, 2013, at 9:46 PM, Gaurav Kansal wrote:
I am getting the error message for lot of domains.
Log of error entries are attached.
All the ones I checked were caused by broken implementations.
Is this a broken implementation of IPv6 or
helps.
I want to ask is it possible to have a CNAME configuration by which I can
divert all queries for my xyz.gov.in domain to xyz.in domain.
Happy New Year J.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
Intercom - 7331
Have you enabled IPv6 on something
Thanks Evan. J
-Original Message-
From: Evan Hunt [mailto:e...@isc.org]
Sent: Tuesday, December 31, 2013 1:27 AM
To: Gaurav Kansal
Cc: bind-users@lists.isc.org
Subject: Re: Enabing RRL in bind
On Mon, Dec 30, 2013 at 05:47:13PM +0530, Gaurav Kansal wrote:
> In bind 9.9.4, Repo
his only. What's the difference between Zone or Host ?? Is
it key generation for one client machine or what ?
I also want to know which algorithm is the best one on security aspects for
generating Keys for DNSSEC.
Thanks and Regards,
Gaurav Kansal
Emp Code - 6274
Mob - 9910118448
HI Tony,
Thanks for help.
I was wondering if HMAC* keys are not used for zone then why the same is
displayed when we use "dnssec-keygen -h".
Regards,
Gaurav Kansal
-Original Message-
From: Tony Finch [mailto:fa...@hermes.cam.ac.uk] On Behalf Of Tony Finch
Sent: Mon
query channels or by any other means) which we can save for
future reference purposes.
Thanks and Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind
At the time of posting this question, I didn't think that this thread will
cause this much of discussion. :)
Thanks to all for nice explanation and help.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-
Hi Matus,
I also notice the same thing.
This may be an issue or any other feature in bind tool which is producing this
result.
I did it on windows 8, so I think that may be 8 and bind 9.9.5 is producing
this and I didn't do much troubleshooting on this.
Sent frm Kansal's Mobile
Sry for typo err
Ok I wl try.
Shd I upgrade bind on dns servers also ???
Sent frm Kansal's Mobile
Sry for typo error :)
Mark Andrews wrote:
>
>Use BIND 9.9.5-W1.
>
>Mark
>
>In message <9jawi1csarsretigbud1n5h0.1395229889...@email.android.com>, Gaurav K
>ansal writes:
>> Hi Matus,
>>
>> I also notice the same t
ng with OpenSSL works... no
configure: error: Could not run test program using OpenSSL from
/usr/lib and /usr/include.
Please check the argument to --with-openssl and your
shared library configuration (e.g., LD_LIBRARY_PATH).
Pl. help me what sh
for OpenSSL library
configure:15436: error: "/usr/include/openssl//include/openssl/opensslv.h"
not found
## ##
## Cache variables. ##
Regards,
Gaurav Kansal
-Original Message-
From: Jeremy C. Reed [mailto:jr...@isc.org]
Sent: Friday, May 02, 2014 6:0
down (Or it will stop responding) ???
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
website from ipv4 machine. For this, I need DNS
Translation. Is this is possible?
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind
ly on ipv4 internet. But I need the reverse one.
I already have my website running on ipv6 and wanna to make it accessible to
ipv4 only network users.
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.is
will first go to root servers then .in NS server and then nkn.in NS
server.
I wanna show this to my trainees as a POC. Is this possible?
Thanks and Regards,
Gaurav Kansal
NIC
8860785630
9910118448
___
Please visit https://lists.is
Dear Sven,
Client queries a name for Both A and records.
Now, the thing is NAME exist but either A or doesn't exist for this.
Then how can a server reply that "no such name"??
Thanks and Regards,
Gaurav Kansal
9910118448
From: bind-users-bounces+ga
destination point, ipv4 header is removed and packet is forwarded
as per its ipv6 destination.
No issue as at all except slowness in opening some website due to the MTU
size of the tunnels. So keep in mind the MTU size of your tunnel AND fine
tune it for smooth browsing.
Thanks and Regards,
Gaurav
so number is not an issue at all. But I
don't understand where exactly is this limitation exists???
Please some elaborate on this.
Thanks and Regards,
Gaurav Kansal
9910118448
___
Please visit https://lists.isc.org/mailman/listinf
Thanks a lot Mark.
But I don't understand the calculation part.
Is there any source available from which I can get detail information
regarding the same??
Thanks and Regards,
Gaurav Kansal
9910118448
-Original Message-
From: Mark Andrews [mailto:ma...@isc.org]
Sent: Frida
Hi Marco,
Thanks.
Dnsperf tool is not working in my machine. I don't understand why??
Is there any other tool available?
Thanks and Regards,
Gaurav Kansal
9910118448
-Original Message-
From: Marco Bicca [mailto:marco_bi...@symantec.com]
Sent: Thursday, 03 November, 20
86400 IN 2405:8a00:1000::2
;; Query time: 603 msec
;; SERVER: 180.149.63.3#53(180.149.63.3)
;; WHEN: Tue Nov 15 17:59:33 2011
;; MSG SIZE rcvd: 165
[@gaurav ~]#
Thanks and Regards,
Gaurav Kansal
8860785630
9910118448
Can you please explain What is the meaning of "INVALID RECORD"?
Thanks and Regards,
Gaurav Kansal
9910118448
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Micha
1. When was 1/8 allocated, recently? Maybe you need to update your
bogon filter?
Can we anyhow find when an IP block is assigned to an organization by RIR
???
I have tried WHOIS but didn't find anything for the same.
Thanks and Regards,
Gaurav Kansal
8860785630
99101
onses: REFUSED".
So, Is the error is because I am trying to transferring a zone on a
different IP which is not Authoritative for that zone or because of
something else
Thanks and Regards,
Gaurav Kansal
9910118448
___
Please v
6:07 PM
To: bind-users@lists.isc.org
Subject: Re: Zone Transfer Query
On 05/12/11 12:32, Gaurav Kansal wrote:
> Dear All,
>
> I have a master DNS on IPv4 AND slave DNS on IPv6.
>
> I also have a IPv4 address on slave (But only IPv6 address is entered
> in NS). Now I am trying to
Did you increment the Serial Number in SOA??
-Original Message-
From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org
[mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of
Gregory Machin
Sent: Tuesday, 20 December, 2011 7:40 AM
To: bind-us...@isc.org
Subject
query, and it is showing the RRSIG
record in the query answer.
It this is sufficient to prove that .IN Domain is DNSSEC enabled or i have to
check something else.
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
Thanks n Rega
.
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network.
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
___
available from which I can check my domain for AD
flag set?
Please don't print this e-mail until & unless you really need, it will save
Trees on Planet Earth.
IPv4 is Over,
Are your ready for new Network.
Thanks n Regards,
GAURAV KANSAL
9910118448
Vo
Ya.
It also appears the same to me.
-Original Message-
From: Jan-Piet Mens [mailto:jpm...@gmail.com] On Behalf Of Jan-Piet Mens
Sent: Wednesday, January 11, 2012 5:00 PM
To: bind-users@lists.isc.org
Cc: Gaurav kansal
Subject: Re: DNSSEC authentication and ad parameter
> DNS O
on Planet Earth.
IPv4 is Over,
Are your ready for new Network.
Thanks n Regards,
GAURAV KANSAL
9910118448
VoIP - 6259
Operation And Routing Unit
NIC , NEW DELHI
-Original Message-
From: Anand Buddhdev [mailto:ana...@ripe.net]
Sent: Wednesday, January 11, 2012 4:37 PM
To: Gaurav
AM
To: bind-users@lists.isc.org
Subject: Re: Unknown RR in .in domain
On 2/6/2012 1:35 PM, Gaurav kansal wrote:
> Can anyone please tell me why TYPE50 RR is showing in response coming
> from .in domain
Because your version of DIG does not understand NSEC3 records.
http://tools.ie
.
Is there any way out to figure out the same ?
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman
)
and many other..
Fb is on the 2nd spot in the AS wise query statistics. (Paper
http://kansal15.blogspot.in/2014/09/ipv6-dns-measurement-stats.html )
I was wondering why Fb is querying us and that too in so much quantity ?
Did anyone face similar behavior from FB ASn ??
Regards,
Gaurav
Pl. explain me what is going wrong in this case ?
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
one.data:3
This is happening because I am calling same zone file in both view.
Please help me out what I should do for getting rid of this issue.
Thanks and Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bin
Thanks for information.
Is there any other way by which I can define the zone (which are same for
all views) outside the view or anything else by which I don't need to
replicate the file for all the views.
Regards,
Gaurav Kansal
-Original Message-
From: Niall O'Reilly [mailto:
ifferent zone definition (one contains
definition and the second one contains 'in-view' parameter). I know that
this is not at all tough I but I just need to know if I can use same file
for including in both the view (by anyhow).
Regards,
Gaurav Kansal
___
.
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
servers.net.domain: 23284 [1au]
NS? 172.192.168.2. (42)
Regards,
Gaurav Kansal
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
I am on nic network and we have our own v6 connectivity.
Sent by kansal's device.
From: Mukund Sivaraman
Sent: Monday, June 15, 6:51 PM
Subject: Re: Not able to query from F.ROOT-SERVERS.NET over IPv6 -- FROM INDIA
To: Gaurav Kansal
Cc: bind-users@lists.isc.org
Hi Gaurav On Mon
I am trying to telnet (port 53)/ping/dig on 2001:500:2F::F address.
Src address is 2405:8a00::/32.
Trace is blocked at firewall end. If needed i wl try to get the same.
Regards,
Gaurav Kansal
Sent by kansal's device.
From: Warren Kumari
Sent: Monday, June 15, 6:54 PM
Subjec
* * *
May be ISC guys can help me out in this. As they are managing the F.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Stuart Browne
Sent: Tuesday, June 16, 2015 5:05 AM
Cc: bind-users@lists.isc.org
Hi Kevin,
Thanks for nice explanation.
I am not using ‘forward’ in my dns server.
It’s a pure caching server.
Regards,
Gaurav Kansal
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Darcy Kevin (FCA)
Sent: Tuesday, June 16, 2015 1:59 AM
hat I can make sure is my hint file is up-to-dated with this cross
check.
Pl. correct me if I am wrong.
Regards,
Gaurav Kansal
-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Cathy Almond
Sent: Wednesday, June 17, 2
In case, i have my hint file in bind configuration and it also have its
hard-coded one, who will get the priority.
Means which file will be used by bind for getting responses from root ?
Sent by kansal's device.
On Wed, Jun 17, 2015 at 7:17 AM -0700, "Anand Buddhdev" wrote:
On
what is the issue.
--
Thanks and Regards,
Gaurav Kansal
+91-9910118448
Disclaimer:
This e-mail and its attachments may contain official Indian Government information. If you are not the intended recipient, please notify the sender immediately and delete this e-mail. Any dissemination or use of
This is a “spoofing resistance” technique.
For more info, check “0x20 Bit Encoding”.
Sent from my iPhone
> On 22-Dec-2019, at 10:59 PM, bind-users@lists.isc.org wrote:
>
> Every so often, we get a run of peculiar queries to our (BIND / named)
> DNS server. Note the apparently random mix of low
Sent from my iPhone
> On 22-Dec-2019, at 11:02 PM, h.rei...@thelounge.net wrote:
>
>
>
>> Am 22.12.19 um 18:28 schrieb Paul Kosinski via bind-users:
>> Every so often, we get a run of peculiar queries to our (BIND / named)
>> DNS server. Note the apparently random mix of lower case and upper
looking for whole zone file at a single place.
--
Thanks and Regards,
Gaurav Kansal
+91-9910118448
Disclaimer:
This e-mail and its attachments may contain official Indian Government information. If you are not the intended recipient, please notify the sender immediately and delete this e-m
ut this page:
https://www.dns.icann.org/services/axfr/
Regards,
Anand
On 12/12/2020 13:39, Gaurav Kansal wrote:
Hello folks,
Like the way Root zone file is available here
<https://www.internic.net/domain/root.zone>, does we have the zone files
of "in-addr.arpa" and "ip6.arpa" avail
tware with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
--
Thanks and Regards,
Gaurav Kansal
+91-9910118448
Disclaimer:
This e-mail and its atta
Hi guys,
I need the help in figuring out whether BIND supports ANAME ? If yes, then from
which version on wards ?
Use case of ANAME RR is explained here - [
https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ |
https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/ ]
Thanks.
Gaurav
in review and it will be merged some time this
> year.
>
> --
> Ondřej Surý — ISC (He/Him)
>
> My working hours and your working hours may be different. Please do not feel
> obligated to reply outside your normal working hours.
>
>>> On 7. 8. 2021, at 19:33, Gaur
ch view and doesn't
want to log REFUSED queries (which are for PUBLIC view) in query-error
category.
please help how can i achieve this.
Thanks,
Gaurav Kansal
Disclaimer:
This e-mail and its attachments may contain official Indian Government
information. If you are not the i
-
From: bind-users@lists.isc.org
To: bind-users@lists.isc.org
Sent: Tuesday, August 24, 2021 5:37:35 PM
Subject: Re: Logging statements w.r.t. view in Bind 9.16.18
Hi there,
On Tue, 24 Aug 2021, Gaurav Kansal wrote:
> I want a clarity whether we can have individual logging statement
> pe
you can achieve high QPS.
One such tool which can do all for you is dnsmonster -
https://github.com/mosajjal/dnsmonster <https://github.com/mosajjal/dnsmonster>
. Just send mirror traffic to this and it will do everything for you.
Thanks,
Gaurav Kansal
> On 25-Apr-2022, at 22:15, m3
Yup. But if the DNS infra is under my control, then definitely the keys (which
i have used for encryption) will also be with me. Am i missing something here ?
🧐
—
Gaurav Kansal
> On 03-May-2022, at 14:40, Petr Špaček wrote:
>
> On 03. 05. 22 10:56, Gaurav Kansal wrote:
>>
81 matches
Mail list logo
