Re: Millions of './ANY/IN' queries denied

2021-12-17 Thread Tony Finch
Ondřej Surý  wrote:

> FTR RRL will not help on this case. There’s no difference between
> response with TC and response with REFUSED.

Yes and no :-) RRL uses a mixture of "slip" (i.e. truncation) and dropping
responses, so it will attenuate REFUSED spam. (The documentatin is not
very clear about when it drops, tho...)

Tony.
-- 
f.anthony.n.finchhttps://dotat.at/
North Utsire: Variable 4 or less becoming westerly or northwesterly 3
or 4. Moderate. Drizzle. Good, occasionally poor.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Change records in DNS slave if master is offline

2021-12-17 Thread Roberto Carna
Warren, thanks a lotwith the masterfile-format clause it works OK.

Greetings!!!

El jue, 16 dic 2021 a las 15:43, Warren Kumari () escribió:
>
>
>
> On Thu, Dec 16, 2021 at 10:37 AM Roberto Carna  
> wrote:
>>
>> Dear all, I have one BIND9 server as master and 3 as slaves.
>>
>> The master and one slave are in a given site #1, and the other two
>> slaves are in a geographical different site #2.
>>
>> In case site #1 goes offline, I need to edit records in both slaves
>> from site #2, in order to point some services to other public IP's for
>> contingency.
>>
>> My question is:
>>
>> What is the recommended way to edit the records from a BIND9 slave?
>> Because the zone files are binary files
>
>
> Yup, if you are running (IIRC) > v9.9.x, the default is binary files.
> You can convert these beck to text with:
> named-compilezone -f raw -F text -o example.com.text example.com 
> example.com.binary
>
> You can also change the default in named.conf:
> options {
> // many many options
> masterfile-format text;
> //
> // many other options
> //
> }
>
> The raw (binary) zone files are good for large zones, but for small zones, 
> where speed isn't super important, text format works just fine...
> W
>
>
>>
>> and using the Webmin interface
>> is blocked.
>>
>> The only manner is changing the configuration from slave to master?
>>
>> Thanks in advance, greetings!!!
>> ___
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
>> unsubscribe from this list
>>
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>>
>>
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
>
>
>
> --
> The computing scientist’s main challenge is not to get confused by the
> complexities of his own making.
>   -- E. W. Dijkstra
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users