Re: Magic for NSEC3

2009-01-07 Thread B C
On Mon, Jan 5, 2009 at 5:57 PM, Jim  wrote:

> While testing our DNSSEC signing product, I found that the expense of
> signing with NSEC3 versus NSEC was very data dependent. In TLD type
> zones with a sparse number of records that needed to be signed,
> signing time could be reduced from hours to minutes by specifying
> NSEC3. The resultant data files were much smaller than  those signed
> with NSEC.

This is presumably a result of OPT-IN and as more child zones are
signed the effect will be less marked.

Brett
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Internal whois server

2009-08-11 Thread B C
Jonathan,

On Mon, Aug 10, 2009 at 5:30 PM, Jonathan
Petersson wrote:
> Hi all,
>
> This is probably somewhat of an un-legit way of using whois but I'm
> curious as to whether it would be possible to install an internal
> whois server that responds with the appropriate prefix-data upon
> request for internal ip-numbers/domains while forwarding unknown
> requests to external whois servers.
>
> Has anyone done a similar implementation or know what kind of software
> that could be used to obtain this?
>

The RIPE NCC provide whois software (both client and server) as open
source software on their website:

http://www.ripe.net/db/tools/index.html

This will enable you to setup an internal server and db I don't think
it will currently let you forward unknown queries on  but as it's open
source you should be able to change it to satisfy your needs.

BTW Don't think this really belongs on the bind-users list. You might
want to ask more about it on the RIPE NCC Services mailing list.

Brett
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users