Re: SERVFAIL issues

2009-01-19 Thread Barry Margolin
In article , "Frank Bulk" wrote: > Sorry for not being more clear. It's my understanding that "rndc stats" > dumps only a subset of what ARM provides. You still don't make sense. ARM is documentation, it doesn't provide any statistics. ARM = Administrator's Reference Manual for BIND. >

RE: SERVFAIL issues

2009-01-19 Thread Frank Bulk
Sorry for not being more clear. It's my understanding that "rndc stats" dumps only a subset of what ARM provides. Regards, Frank -Original Message- From: JINMEI Tatuya / 神明達哉 [mailto:jinmei_tat...@isc.org] Sent: Monday, January 19, 2009 1:38 PM To: Frank Bulk Cc: bind-us...@isc.org S

Re: max open files vs max sockets

2009-01-19 Thread David Forrest
On Mon, 19 Jan 2009, JINMEI Tatuya / 神明達哉 wrote: At Sat, 17 Jan 2009 12:06:13 -0600 (CST), David Forrest wrote: On startup of named 9.6.0 I get the following message: Jan 17 11:55:20 maplepark named[13014]: max open files (1024) is smaller than max sockets (4096) Is this a problem for a sm

Re: Stub Zones...

2009-01-19 Thread Chris Buxton
It's perfectly valid to list any or all of the zone's authoritative servers, whether they are primary master or slave. Chris Buxton Professional Services Men & Mice On Jan 19, 2009, at 1:40 PM, Kyle McDonald wrote: Hi, I have what I hope is an easy question: When settingup a 'stub' zone, i

Stub Zones...

2009-01-19 Thread Kyle McDonald
Hi, I have what I hope is an easy question: When settingup a 'stub' zone, is it only valid to list the primary server for the zone in the 'masters {...};' config line? Or is it OK to list secondary servers in that list also? -Kyle ___ bind-users ma

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread JINMEI Tatuya / 神明達哉
At Mon, 19 Jan 2009 16:40:28 +1100, Nathan Ollerenshaw wrote: > I have an Authoritative BIND server. It is configured to only allow > recursive queries from localhost, with recursion disabled for any > remote clients. [snip] > The ideal solution for me, would be a bind configuration option

Re: Bind9.5.1 Multithreading

2009-01-19 Thread JINMEI Tatuya / 神明達哉
At Sat, 17 Jan 2009 23:18:59 +0330, "Bind" wrote: > I have worked with bind 9 in single thread,but i want to upgrade my server > to solaris 10 and bind 9.5.1-P1(my machine has 4Gig Ram and 2 cpu(900mhz)) > Based on practical experience: > does enable multithreading for Bind 9.5.1 is good or not?

Re: max open files vs max sockets

2009-01-19 Thread JINMEI Tatuya / 神明達哉
At Sat, 17 Jan 2009 12:06:13 -0600 (CST), David Forrest wrote: > On startup of named 9.6.0 I get the following message: > > Jan 17 11:55:20 maplepark named[13014]: max open files (1024) is smaller than > max sockets (4096) > > Is this a problem for a small internal network dns server? It depe

Re: SERVFAIL issues

2009-01-19 Thread JINMEI Tatuya / 神明達哉
At Sat, 17 Jan 2009 00:37:25 -0600, "Frank Bulk" wrote: > Thanks for the info -- is there a way that there can be feature parity, at > least in terms of stats reported, between ARM and "rndc stats"? I don't understand the question...what do you mean by 'feature parity between ARM and "rndc stats

RE: Unified Root - Domain Configuration Issue

2009-01-19 Thread Frank Bulk
This issue of how applications and operating systems resolve single-word TLDs and host names was discussed on NANOG some time ago: http://www.mail-archive.com/na...@nanog.org/msg03092.html Regards, Frank -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Chris Buxton
On Jan 19, 2009, at 7:48 AM, John Wobus wrote: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server

Re: Unified Root - Domain Configuration Issue

2009-01-19 Thread Chris Thompson
On Jan 19 2009, Joe Baptista wrote: So a little more testing using firefox as an application gives us some interesting results. Using the .TM TLD I entered http://tm/ into my browsers. It did not work. Firefox replaced http://tm/ with http://www.tm.com/ - which is not the web site I wanted to

Re: Unified Root - Domain Configuration Issue

2009-01-19 Thread Joe Baptista
So a little more testing using firefox as an application gives us some interesting results. Using the .TM TLD I entered http://tm/ into my browsers. It did not work. Firefox replaced http://tm/ with http://www.tm.com/ - which is not the web site I wanted to reach. However - if we qualify the TL

Re: Unified Root - Domain Configuration Issue

2009-01-19 Thread Joe Baptista
Well - like I said below - it is not recommended to simply use http://tld/ - however there are a few IANA TLDs that in fact are setup with A records associated with TLDs. Just did a test out of curiosity and found the following ccTLDs with A records. AC. 86400 IN A 193.223.78.210 AF. 86400 IN

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread John Wobus
On Jan 19, 2009, at 5:02 AM, Leonardo Rodrigues Magalhães wrote: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query

Re: Conflicting glue records?

2009-01-19 Thread Stephane Bortzmeyer
On Thu, Jan 08, 2009 at 02:46:44AM -0800, Milo Hyson wrote a message of 127 lines which said: > stale glue records for our name-servers that appear to be coming > from a domain we host that is owned by someone else. I don't really like to work on hypothetical situations. Either you post the r

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Leonardo Rodrigues Magalhães
Leonardo Rodrigues Magalhães escreveu: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server, it

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Leonardo Rodrigues Magalhães
Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server, it will respond with a "query refused" packet

Re: ipv6 BIND reverse lookup question/problem

2009-01-19 Thread David Holder
Bryce, The following format is correct: 2.5.0.0.1.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.a.0.0.0.6.d.f.0.ip6.arpa Webmin is formatting the entry incorrectly. Regards, David Dr David Holder CEng FIET MIEEE Erion Ltd, Oaklei