Re: can @ be CNAME?

2010-11-23 Thread Tech W.


--- On Tue, 23/11/10, Matus UHLAR - fantomas  wrote:

> From: Matus UHLAR - fantomas 
> Subject: Re: can @ be  CNAME?
> To: bind-users@lists.isc.org
> Received: Tuesday, 23 November, 2010, 3:58 PM
> On 23.11.10 15:50, Tech W. wrote:
> > can I set @ to a cname type? like:
> > 
> > @  IN  CNAME  www.example.com.
> 
> Certainly not. for a domain you have you need SOA and NS
> records, and CNAME
> is incompatible with both of them.
> 

But why @ can have an A RR?

@ IN A 12.34.56.78

This seems OK for us.


  
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: can @ be CNAME?

2010-11-23 Thread Matthew Seaman
On 23/11/2010 08:07, Tech W. wrote:
> --- On Tue, 23/11/10, Matus UHLAR - fantomas  wrote:
>> From: Matus UHLAR - fantomas 

>>> can I set @ to a cname type? like:
>>>
>>> @  IN  CNAME  www.example.com.
>>
>> Certainly not. for a domain you have you need SOA and NS
>> records, and CNAME
>> is incompatible with both of them.
>>
> 
> But why @ can have an A RR?
> 
> @ IN A 12.34.56.78
> 
> This seems OK for us.

CNAME records are special.  You can't have any other records for a label
where you have a CNAME record (well, with the exception of RRSIG records
if you're using DNSSEC).  This is covered in great detail in any
introductory text on DNS.

The principle reason to want to have a CNAME record at the apex of a
zone is to make http://example.com/ be a synonym for
http://www.example.com/.  The way to deal with that is to turn it round
and make www.example.com be the CNAME record, and have the A record at
example.com.  Or just have A or  records at both example.com and
www.example.com

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matt...@infracaninophile.co.uk   Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: can @ be CNAME?

2010-11-23 Thread Tech W.
Thanks a lot Matthew.

> 
> CNAME records are special.  You can't have any other
> records for a label
> where you have a CNAME record (well, with the exception of
> RRSIG records
> if you're using DNSSEC).  This is covered in great
> detail in any
> introductory text on DNS.
> 
> The principle reason to want to have a CNAME record at the
> apex of a
> zone is to make http://example.com/ be a synonym for
> http://www.example.com/.  The way to deal with
> that is to turn it round
> and make www.example.com be the CNAME record, and have the
> A record at
> example.com.  Or just have A or  records at both
> example.com and
> www.example.com
> 



  
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Split Delegation IP Reverse

2010-11-23 Thread Wilbert J. Rojas O.


  
  
Hi,

Hello!

  My scenario is as follows:

  I have the following network
192.168.0.0/24 which manages my primary DNS server for this zone
reversals and if any updates on the reverse of an IP upgrade to
a second DNS server is a slave.

  Well my question is:

  Suppose I have a third server that
will manage DNS but only part of the reverse IP block that my
two DNS servers given, say that this third server must manage
the reverse DNS for the network 192.168.0.230/28 only.

  How could you do this?

  Escuchar
  Leer fonéticamente
  


Ing. Wilbert J. Rojas O. |Equipos y Sistemas, S.A.
Administrador de Sistemas.
Colegio Centro América 60 mts al norte. | Managua, Nicaragua
wro...@ideay.net.ni | Tel.:+505 2277-4000 Ext.115|Fax: +505 2277-4411

  

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Split Delegation IP Reverse

2010-11-23 Thread Jonathan Petersson
You could CNAME the records to another PTR domain maintained by the
third server.

230.0.168.192.in-addr.arpa is an alias for 230.0-28.0.168.192.in-addr.arpa
230.0-28.0.168.192.in-addr.arpa domain name pointer host.domainname

On Tue, Nov 23, 2010 at 10:43 PM, Wilbert J. Rojas O.
 wrote:
> Hi,
>
> Hello!
>
> My scenario is as follows:
>
> I have the following network 192.168.0.0/24 which manages my primary DNS
> server for this zone reversals and if any updates on the reverse of an IP
> upgrade to a second DNS server is a slave.
>
> Well my question is:
>
> Suppose I have a third server that will manage DNS but only part of the
> reverse IP block that my two DNS servers given, say that this third server
> must manage the reverse DNS for the network 192.168.0.230/28 only.
>
> How could you do this?
> Escuchar
> Leer fonéticamente
>
> Ing. Wilbert J. Rojas O. |Equipos y Sistemas, S.A.
> Administrador de Sistemas.
> Colegio Centro América 60 mts al norte. | Managua, Nicaragua
> wro...@ideay.net.ni | Tel.:+505 2277-4000 Ext.115|Fax: +505 2277-4411
>
> ___
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Split Delegation IP Reverse

2010-11-23 Thread Wilbert J. Rojas O.

Jonathan Thanks for responding, but I don't understand your idea.


Ing. Wilbert J. Rojas O. |Equipos y Sistemas, S.A.
Administrador de Sistemas.
Colegio Centro América 60 mts al norte. | Managua, Nicaragua
wro...@ideay.net.ni | Tel.:+505 2277-4000 Ext.115|Fax: +505 2277-4411


El 23/11/2010 04:01 p.m., Jonathan Petersson escribió:


You could CNAME the records to another PTR domain maintained by the
third server.

230.0.168.192.in-addr.arpa is an alias for 230.0-28.0.168.192.in-addr.arpa
230.0-28.0.168.192.in-addr.arpa domain name pointer host.domainname

On Tue, Nov 23, 2010 at 10:43 PM, Wilbert J. Rojas O.
  wrote:

Hi,

Hello!

My scenario is as follows:

I have the following network 192.168.0.0/24 which manages my primary DNS
server for this zone reversals and if any updates on the reverse of an IP
upgrade to a second DNS server is a slave.

Well my question is:

Suppose I have a third server that will manage DNS but only part of the
reverse IP block that my two DNS servers given, say that this third server
must manage the reverse DNS for the network 192.168.0.230/28 only.

How could you do this?
Escuchar
Leer fonéticamente

Ing. Wilbert J. Rojas O. |Equipos y Sistemas, S.A.
Administrador de Sistemas.
Colegio Centro América 60 mts al norte. | Managua, Nicaragua
wro...@ideay.net.ni | Tel.:+505 2277-4000 Ext.115|Fax: +505 2277-4411

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Split Delegation IP Reverse

2010-11-23 Thread Kevin Oberman
It makes the thread hard to follow!
> Why not?
> > Please don't top post.

> > On Tue, Nov 23, 2010 at 10:43 PM, Wilbert J. Rojas O.
> >   wrote:
> >> Hi,
> >>
> >> Hello!
> >>
> >> My scenario is as follows:
> >>
> >> I have the following network 192.168.0.0/24 which manages my primary DNS
> >> server for this zone reversals and if any updates on the reverse of an IP
> >> upgrade to a second DNS server is a slave.
> >>
> >> Well my question is:
> >>
> >> Suppose I have a third server that will manage DNS but only part of the
> >> reverse IP block that my two DNS servers given, say that this third server
> >> must manage the reverse DNS for the network 192.168.0.230/28 only.
> >>
> >> How could you do this?
> >> Escuchar
> >> Leer fonéticamente
> >>
> >> Ing. Wilbert J. Rojas O. |Equipos y Sistemas, S.A.
> >> Administrador de Sistemas.
> >> Colegio Centro América 60 mts al norte. | Managua, Nicaragua
> >> wro...@ideay.net.ni | Tel.:+505 2277-4000 Ext.115|Fax: +505 2277-4411
> >>
> >> ___
> >> bind-users mailing list
> >> bind-users@lists.isc.org
> >> https://lists.isc.org/mailman/listinfo/bind-users
> >>
> El 23/11/2010 04:01 p.m., Jonathan Petersson escribió:
> 
> > You could CNAME the records to another PTR domain maintained by the
> > third server.
> >
> > 230.0.168.192.in-addr.arpa is an alias for 230.0-28.0.168.192.in-addr.arpa
> > 230.0-28.0.168.192.in-addr.arpa domain name pointer host.domainname
> >


> Date: Tue, 23 Nov 2010 16:18:17 -0600
> From: "Wilbert J. Rojas O." 
> Sender: bind-users-bounces+oberman=es@lists.isc.org
> 
> Jonathan Thanks for responding, but I don't understand your idea.
> 
> 
> Ing. Wilbert J. Rojas O. |Equipos y Sistemas, S.A.
> Administrador de Sistemas.
> Colegio Centro América 60 mts al norte. | Managua, Nicaragua
> wro...@ideay.net.ni | Tel.:+505 2277-4000 Ext.115|Fax: +505 2277-4411
> 
> 

See RFC2317, "Classless IN-ADDR.ARPA delegation".
http://www.ietf.org/rfc/rfc1035.txt
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: ober...@es.net  Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Split Delegation IP Reverse

2010-11-23 Thread Barry Margolin
In article ,
 "Wilbert J. Rojas O."  wrote:

> Jonathan Thanks for responding, but I don't understand your idea.

See RFC 2317 for the mechanism to delegate subnets of a /24.

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Split Delegation IP Reverse

2010-11-23 Thread Noel Butler
On Tue, 2010-11-23 at 14:34 -0800, Kevin Oberman wrote:

> It makes the thread hard to follow!


what rot, its no worse than bottom posters, nor those who forget how to
trim replies to what's relevant, once you become responsible for this
list server, then you can choose, until then, please desist with self
appointment net-copping.


> > Why not?
> > > Please don't top post.




signature.asc
Description: This is a digitally signed message part
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: error (broken trust chain) resolving

2010-11-23 Thread Brian J . Murrell
Casey Deccio  deccio.net> writes: 
> 
> I still don't have the answer to this.

Fair enough.  I was just looking for clarification on your previous statements.

> Perhaps a BIND developer may
> have better insight into the log messages and what may be going on.

Yeah, I was hoping to have caught the attention of a BIND developer here with
all of this by now.  Perhaps they just don't hang out here.  Maybe I will try to
find out where to ask questions that they might see.

Thanx!

b.
 




___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: error (broken trust chain) resolving

2010-11-23 Thread Jeremy C. Reed
On Wed, 24 Nov 2010, Brian J. Murrell wrote:

> Yeah, I was hoping to have caught the attention of a BIND developer 
> here with all of this by now.  Perhaps they just don't hang out here.  
> Maybe I will try to find out where to ask questions that they might 
> see.

I was reading it all along, but could never reproduce. I thought it was 
a temporary issue.

I see your new bug report. Someone will follow up soon.

___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users