Re: ISC BIND

2008-11-26 Thread Mark Andrews
In message <[EMAIL PROTECTED]>, David Ford writes: > Is there any indication about why named shuts down immediately in those > logfiles? > > -david One can always start named using "named -g " which will send the log messages to the screen and stop named becoming a daemon

Re: ISC BIND

2008-11-26 Thread Alberto Colosi/SI/RM/GSI/it
no, if not I was not writing here. I compile and run bing from version 4 and I have compiled and runned each bind version one by one... till today I can't count how many ;) --- Alberto Colosi IBM Global Business Services Sistemi Informativi S.P.A. IT NetWork & Secur

Re: ISC BIND

2008-11-26 Thread David Ford
Is there any indication about why named shuts down immediately in those logfiles? -david Alberto Colosi/SI/RM/GSI/it wrote: > > For sure as IBM or Microsoft or an org so big could have!. > My named.conf is really full of ACL and confs. > > my logging channels are: (but I should find something

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread Mark Andrews
In message <[EMAIL PROTECTED]>, David Sparks writes: > [EMAIL PROTECTED] wrote: > >>> A border router knows what is "inside" and "outside" your network, while > >>> a DNS server does not. Important difference. > >> You're missing the point. This is not about inside and outside networks, > it > >

Re: ISC BIND

2008-11-26 Thread Alberto Colosi/SI/RM/GSI/it
For sure as IBM or Microsoft or an org so big could have!. My named.conf is really full of ACL and confs. my logging channels are: (but I should find something inside one of them or /var/log/messages ;) mainly from 9.0 till 9.5.1b3 is working! what is different inside 9.6 ???

Re: ISC BIND

2008-11-26 Thread David Ford
Look at your log files, commonly in /var/log/ Did you define other logfiles in your named.conf that you had working with 9.51b3? -david Alberto Colosi/SI/RM/GSI/it wrote: > > Hi, why I have BIND from 4 and 8 releases and from born of 9 release I > lifted up till 9.5.1b3 that is working fine. > >

ISC BIND

2008-11-26 Thread Alberto Colosi/SI/RM/GSI/it
Hi, why I have BIND from 4 and 8 releases and from born of 9 release I lifted up till 9.5.1b3 that is working fine. I tried to compile and run ISC BIND 9.6.0b1 with some configure switches and /etc/rc.d/init.d/rc-script statements. Why I get back no errors inside ISC BIND files but in t

Re: dnsperf and BIND memory consumption

2008-11-26 Thread JINMEI Tatuya / 神明達哉
At Wed, 26 Nov 2008 10:34:59 -0800 (PST), ivan jr sy <[EMAIL PROTECTED]> wrote: > I know this is a an old thread, but I wish to resurrect this in > hopes to find answers.. > > 9.5 + threads on FreeBSD 7 is better performance wise, but there is > this problem. > > 9.4 + threads on FreeBSD 7 is a

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread David Sparks
[EMAIL PROTECTED] wrote: >>> A border router knows what is "inside" and "outside" your network, while >>> a DNS server does not. Important difference. >> You're missing the point. This is not about inside and outside networks, it >> is about rfc1918 responses from internet queries. > > I'm afraid

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread sthaug
> > A border router knows what is "inside" and "outside" your network, while > > a DNS server does not. Important difference. > > You're missing the point. This is not about inside and outside networks, it > is about rfc1918 responses from internet queries. I'm afraid I have seen too many organi

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread Chris Buxton
On Nov 26, 2008, at 11:49 AM, David Sparks wrote: However, if you're concerned, it's pretty easy to set up a more secure infrastructure. Put a resolver (resolving name server) at the edge of your network (in a DMZ, presumably) that knows nothing of internal domains (nor IP address space). It re

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread David Sparks
> However, if you're concerned, it's pretty easy to set up a more secure > infrastructure. Put a resolver (resolving name server) at the edge of > your network (in a DMZ, presumably) that knows nothing of internal > domains (nor IP address space). It refuses to send queries to private > addresses,

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread David Sparks
[EMAIL PROTECTED] wrote: >> A good border router will do a few things for network hygiene. It will >> filter >> incoming packets that have a source address from the internal network, and it >> will filter outgoing packets that don't have a source IP in the internal >> network. >> >> A DNS server

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread ivan jr sy
--- On Thu, 11/27/08, David Sparks <[EMAIL PROTECTED]> wrote: > From: David Sparks <[EMAIL PROTECTED]> > Subject: Re: rfc1918 ns records coming from internet are queried? > To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > Date: Thursday, November 27, 2008, 7:43 AM > >> I'm looking for a way to set

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread sthaug
> A good border router will do a few things for network hygiene. It will filter > incoming packets that have a source address from the internal network, and it > will filter outgoing packets that don't have a source IP in the internal > network. > > A DNS server should do a similar thing: it wil

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread Chris Buxton
The queries from the resolver to internal name servers caused by incorrect referrals for outside domains *should* cause no harm. However, if you're concerned, it's pretty easy to set up a more secure infrastructure. Put a resolver (resolving name server) at the edge of your network (in a DM

Re: rfc1918 ns records coming from internet are queried?

2008-11-26 Thread David Sparks
>> I'm looking for a way to set a policy that named wont >> query >> rfc1918 nameserver addresses returned from a non-rfc1918 query. >> Would this be >> a bad policy? > > You could use netmasks with your server statements, like this: > > server 10.0.0.0/8 { > bogus yes; > }; > > server 1

RE: dnsperf and BIND memory consumption

2008-11-26 Thread ivan jr sy
Hi all, I know this is a an old thread, but I wish to resurrect this in hopes to find answers.. 9.5 + threads on FreeBSD 7 is better performance wise, but there is this problem. 9.4 + threads on FreeBSD 7 is almost 50% of the performance, but there is no issues like this. 9.5 without threads

Building bind with visual c++ express

2008-11-26 Thread Serge Fonville
I am trying to build Bind with Visual C++ Express 2005, but get 151 errors and 47 warnings.I already have OpenSSL built and prior to opening the DSW inside win32utils in Visual C++ Express 2005 I ran buildsetup.bat without problems I have the FrameworkSDK v6.0 installed and added the bin to the pat