Re: root and in-addr.arpa zone transfers

2009-09-14 Thread Michael Monnerie
On Montag 14 September 2009 Stephane Bortzmeyer wrote: > > Faster queries after a named restart. Reverse lookups faster too, > > good for the spam filters. > > Did you measure it or is it, like most claims "X is faster", just a > guess? In normal Setup, we see lots of querie to the 3rd DNS entry i

Re: root and in-addr.arpa zone transfers

2009-09-14 Thread Stephane Bortzmeyer
On Fri, Sep 11, 2009 at 07:28:56AM +0200, Michael Monnerie wrote a message of 51 lines which said: > Faster queries after a named restart. Reverse lookups faster too, > good for the spam filters. Did you measure it or is it, like most claims "X is faster", just a guess? __

Re: root and in-addr.arpa zone transfers

2009-09-12 Thread Mark Andrews
In message <20090912082415.ga13...@fantomas.sk>, Matus UHLAR - fantomas writes: > > On Freitag 11 September 2009 Matus UHLAR - fantomas wrote: > > > - it's quite useless to cache the .arpa and .in-addr.arpa since > > > unlike other TLD's they are hierarchically organised so there won't > > > be an

Re: root and in-addr.arpa zone transfers

2009-09-12 Thread Matus UHLAR - fantomas
> On Freitag 11 September 2009 Matus UHLAR - fantomas wrote: > > - it's quite useless to cache the .arpa and .in-addr.arpa since > > unlike other TLD's they are hierarchically organised so there won't > > be any valuable benefit from slaving them, only risks (see above). On 12.09.09 09:27, Michael

Re: root and in-addr.arpa zone transfers

2009-09-12 Thread Michael Monnerie
On Freitag 11 September 2009 Matus UHLAR - fantomas wrote: > - it's quite useless to cache the .arpa and .in-addr.arpa since > unlike other TLD's they are hierarchically organised so there won't > be any valuable benefit from slaving them, only risks (see above). Every other point is OK, but I don

Re: root and in-addr.arpa zone transfers

2009-09-11 Thread Matus UHLAR - fantomas
On 11.09.09 09:13, Rich Goodson wrote: > Slaving root is certainly not something I would recommend to everyone. > In fact, I don't even use it on all of our name servers. I was just > answering the question regarding how one would go about doing something > rather than why or why not to do it.

Re: root and in-addr.arpa zone transfers

2009-09-11 Thread Rich Goodson
Slaving root is certainly not something I would recommend to everyone. In fact, I don't even use it on all of our name servers. I was just answering the question regarding how one would go about doing something rather than why or why not to do it. Here is why I do it and why I'm fairly comf

Restarting named [was: Re: root and in-addr.arpa zone transfers]

2009-09-11 Thread Chris Thompson
On Sep 11 2009, Sam Wilson wrote: In article , Michael Monnerie wrote: On Freitag 11 September 2009 Joseph S D Yao wrote: > However, as M. Bortzmeyer has said, why do this? Faster queries after a named restart. ... How often do you restart named? $ ps -o user,zone,pid,stime,time,comm -U

Re: root and in-addr.arpa zone transfers

2009-09-11 Thread Sam Wilson
In article , Michael Monnerie wrote: > On Freitag 11 September 2009 Joseph S D Yao wrote: > > However, as M. Bortzmeyer has said, why do this? > > Faster queries after a named restart. ... How often do you restart named? We hit our master once a day, in the early hours but that's just habit

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Michael Monnerie
On Freitag 11 September 2009 Joseph S D Yao wrote: > However, as M. Bortzmeyer has said, why do this? Faster queries after a named restart. Reverse lookups faster too, good for the spam filters. mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660 / 415 65

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Joseph S D Yao
On Thu, Sep 10, 2009 at 11:27:27AM +0200, Michael Monnerie wrote: > On Mittwoch 09 September 2009 Rich Goodson wrote: > > zone "." { > > zone "arpa" { > > zone "in-addr.arpa" { > > Thank you Rich, and the others. Can anyone confirm that this is the way > to do? Or should I stay with ftp updates f

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Stephane Bortzmeyer
On Thu, Sep 10, 2009 at 12:31:45PM +0200, Michael Monnerie wrote a message of 70 lines which said: > that's a clear statement, so I'll keep the ftp transfers. It would be better to drop them completely and to return to ordinary DNS resolution. What's the point of mirroring the root? What if y

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Michael Monnerie
On Donnerstag 10 September 2009 Stephane Bortzmeyer wrote: > > right now I'm using scripts to download root.zone and in-addr.arpa > > from internic.net. But this is a non-standard way, > > But a secure way since the files on internic.net are PGP-signed. > > > I'd prefer to directly slave and zone-t

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Michael Monnerie
On Mittwoch 09 September 2009 Rich Goodson wrote: > zone "." { > zone "arpa" { > zone "in-addr.arpa" { Thank you Rich, and the others. Can anyone confirm that this is the way to do? Or should I stay with ftp updates from the websites? Is there an "officially supported" or "recommended" way to do

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Stephane Bortzmeyer
On Wed, Sep 09, 2009 at 11:00:37AM -0400, Rick Dicaire wrote a message of 23 lines which said: > Interestingcan any of the root servers be used, or must it be just > these three? No root server operator (except may be ISC for F) ever promised to keep zone transfer open. It is not regarded

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread Stephane Bortzmeyer
On Wed, Sep 09, 2009 at 08:23:23AM +0200, Michael Monnerie wrote a message of 54 lines which said: > right now I'm using scripts to download root.zone and in-addr.arpa > from internic.net. But this is a non-standard way, But a secure way since the files on internic.net are PGP-signed. > I'd

Re: root and in-addr.arpa zone transfers

2009-09-10 Thread omight
Apparently FreeBSD only slaves F.ROOT-SERVERS.NET in it's default configuration for bind: http://www.freebsd.org/cgi/cvsweb.cgi/src/etc/namedb/named.conf http://www.freebsd.org/cgi/cvsweb.cgi/src/etc/namedb/named.conf?rev=1.21.2.9;content-type=text%2Fplain /* Slaving the following zones from

Re: root and in-addr.arpa zone transfers

2009-09-09 Thread Matus UHLAR - fantomas
On 09.09.09 11:00, Rick Dicaire wrote: > On Wed, Sep 9, 2009 at 10:51 AM, Rich Goodson > wrote: > > zone "." { > >        type slave; > >        file "slave/root.slave"; > >        masters { > >                192.33.4.12;    // C.ROOT-SERVERS.NET. > >                192.112.36.4;   // G.ROOT-SER

Re: root and in-addr.arpa zone transfers

2009-09-09 Thread Rick Dicaire
On Wed, Sep 9, 2009 at 10:51 AM, Rich Goodson wrote: > zone "." { >        type slave; >        file "slave/root.slave"; >        masters { >                192.33.4.12;    // C.ROOT-SERVERS.NET. >                192.112.36.4;   // G.ROOT-SERVERS.NET. >                193.0.14.129;   // K.ROOT-SER

Re: root and in-addr.arpa zone transfers

2009-09-09 Thread Rich Goodson
Michael, Here's a snippet from my named.conf which does what you're talking about. I use this in our recursive resolvers, but for authoritative servers, I find the hints file to be somewhat more robust. FYI, I stole this originally from the default FreeBSD named.conf file that got pushed o

root and in-addr.arpa zone transfers

2009-09-08 Thread Michael Monnerie
Hello, right now I'm using scripts to download root.zone and in-addr.arpa from internic.net. But this is a non-standard way, I'd prefer to directly slave and zone-transfer those 2 zones. Is it possible, and can you show the bind config for these? Thanks a lot, mfg zmi -- // Michael Monnerie,