RE: dnstop

2009-08-02 Thread Alans
Stephane & Breno, Thanks J

 

Regards,
Alans

 

From: Breno Silveira Soares [mailto:breno.soa...@serpro.gov.br] 
Sent: Thursday, July 30, 2009 6:20 PM
To: Alans
Cc: bind-users@lists.isc.org
Subject: Re: dnstop

 

Alans escreveu: 

Hi,

 

I’m new to dnstop, what is really matter, is it new queries or total?

The total is the counter of queries since you start dnstop.
The new queries is the counter after you refresh with other option.





-- 
Ats,
Breno S. Soares
Analista de Redes
SERPRO/SUPRE/REBHE
Tel: (31) 3311-6825
 

"Esta mensagem do SERVIÇO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO),
empresa pública federal regida pelo disposto na Lei Federal nº 5.615, é
enviada exclusivamente a seu destinatário e pode conter informações
confidenciais, protegidas por sigilo profissional. Sua utilização
desautorizada é ilegal e sujeita o infrator às penas da lei. Se você a
recebeu indevidamente, queira, por gentileza, reenviá-la ao emitente,
esclarecendo o equívoco."
 
"This message from SERVIÇO FEDERAL DE PROCESSAMENTO DE DADOS (SERPRO) -- a
government company established under Brazilian law (5.615/70) -- is directed
exclusively to its addressee and may contain confidential data, protected
under professional secrecy rules. Its unauthorized use is illegal and may
subject the transgressor to the law's penalties. If you're not the
addressee, please send it back, elucidating the failure."

 

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

invalid option name 62

2009-08-02 Thread Piotr Kirklewski

Hi
I'm using Mandriva Direcotry Server Enterprise 5.
After installation the DNS is started but when I try to start the dhcp 
service I get "invalid option name 62" .
The rest of that message says that I should post a question to the 
mailing list at isc.org.

Anyone knows what is actauly wrong?
Bes regards

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: idsable ipv6 in config?

2009-08-02 Thread Chris Thompson

On Jul 30 2009, Matus UHLAR - fantomas wrote:


On Jul 30 2009, Stephane Bortzmeyer wrote:

-4 shuts down any v6 service. We would like BIND to be able to *reply*
to v6 queries without *generating* them. (For the record, I have the
same issue than Gilles.)


On 30.07.09 15:46, Chris Thompson wrote:
Would 


 server ::/0 { bogus yes; };

work?


no, it would prevent server from replying v6 requests


That doesn't seem to be the case. With that server statement and

 listen-on-v6 { ::1; };

I can get query responses out of ::1 without any trouble.

--
Chris Thompson
Email: c...@cam.ac.uk
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: How many available compile options are on bind-9.4.3-P3

2009-08-02 Thread Mark Andrews

In message <5b3755fb0908010944k6a8c125fl187c31e7c91c...@mail.gmail.com>, Akihir
o Moriguchi writes:
> Hello,
> 
> I'm builiding bind-9.4.3-P3 but I don't know what compile options
> available on the version.
> I've already read README, ./configure --help and searched in doc/arm,
> and also see the configure file itself but I'm not sure what exact
> FEATURE that enable or disable.
> 
> Please let me know what compile option available.
> 
> Best regards,
> Akihiro Moriguchi
> ___
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

"configure --help" gives all the options.

--enable-FEATURE and --disable-FEATURE are examples of how to use enable and
disable commands.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: [SPAM] Win2k and bind

2009-08-02 Thread Danny Mayer
Matus UHLAR - fantomas wrote:
> On 29.07.09 22:37, Abello, Vinny wrote:
>> Considering 2003, 2003 R2, 2008, and 2008 R2 (technically done, but will
>> officially release in October) have been released, I don't think dropping
>> support for an ancient operating system from 9.5 years ago and roughly 3
>> prior generations that the vendor doesn't even support is a bad idea. :)
>> 2k boxes are time bombs, IMO.
> 
> even if they were not (windows updates), there is a technical reason that
> prevents new bind from being compatible with it (new security features
> require that). Search web/archives for more info.

That's not exactly true. The security fixes did not require any
Windows-specific changes. However the fixes did provoke an existing bug
in the Windows code that needed to be fixed. To fix that the accept and
connect code needed to be revamped (among other areas) and the best way
to do that required changes to clean up the implementation. Functions
only available with Windows XP and later were needed to do this.
> 
> Until M$ fixes that one (I doubt so), new BIND won't be compatible with w2k.
> 

No, they'd have to add the API functions to an obsolete version of Windows.

Danny

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Dig shows wrong ip

2009-08-02 Thread Danny Mayer
Chris Thompson wrote:
> On Jul 30 2009, Danny Mayer wrote:
> 
>> Chris Thompson wrote:
>>> On Jul 28 2009, sth...@nethelp.no wrote:
>>>
 % dig +short a dns3.potomacnetworks.com @a.gtld-servers.net
 216.250.243.230

 As long as that host record exists, with an IP different from what
 your authoritative servers reply with, you are going to have problems,
 because queries will be answered by the GTLD servers and not your own
 authoritative servers.
>>>
>>> This is the wretched "glue promoted to answer" bug (we can call it a
>>> bug by now, surely?) which we are assured that the GTLD servers will
>>> be cured of this year, next year, sometime, or ...
>>>
>>> ... well, they will have to fix it before they can roll out DNSSEC,
>>> won't they? 
>>
>> No. The op always needs to notify the Registrar of their domain when the
>> address of any of their nameservers changes. That has always been a
>> requirement.
> 
> You are misinterpreting what I said. Of course erroneous glue needs to be
> corrected. But there is no need for the servers to return IP addresses
> provided for glue as an *answer* to a query, as the *.gtld-servers.net ones
> do, rather than giving a proper referral. (At least their answers are not
> marked authoritative, unlike those from some other nameservers.)

It needs to be part of the answer if the nameserver is in the same
domain as the FQDN otherwise it won't know where to go for the answers.
That's the point of the glue.

Danny


___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


change NXDOMAIN to a A type response

2009-08-02 Thread Ryan Qian
Hi All
 some isp change NXDOMAIN to a A type response, I know this is can not be 
realized by bind software by default source code, so is there anyone know how 
do they realize this function? change the source code or use proxy software 
upon DNS bind?
Thanks 

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users