Re: How to create the TSIG?

2009-02-05 Thread Chris Buxton
Create a key: dnssec-keygen -a hmac-md5 -b 512 -n host slave1.key (Note: Use something better than hmac-md5 if your BIND version supports it.) This creates two files, with similar names. Extract the secret from either of them (it is the same in both) and create a key statement: key "slav

Re: SERVFAIL from validating nameservers for advocaat.pro & advocaten.pro

2009-02-05 Thread Mark Andrews
In message , Chris Thompson writes: > On Feb 5 2009, I wrote: > > >DLV records for advocaat.pro & advocaten.pro are among the recent >additions to dlv.isc.org. Using validating recursive nameservers > >running BIND 9.5.1-P1 (configured to trust dlv.isc.org), I get SERVFAILs > >looking things up

Re: Inconsistent failure to resolve

2009-02-05 Thread David Ford
Yes, I'll be happy to test it. -david JINMEI Tatuya / 神明達哉 wrote: > > If you can easily reproduce the problem (I guess so according to the > above), an experimental patch to diagnose such errors may help. It > will be available in the next versions of BIND9 (9.6.1 etc), but if > you're willing t

Re: Inconsistent failure to resolve

2009-02-05 Thread JINMEI Tatuya / 神明達哉
At Thu, 05 Feb 2009 12:13:15 -0500, David Ford wrote: > The hostname is: emailimage2.howtoburndvd.net > > I have two nameservers running 9.6.0-p1. If I query ns{1,2}.linkyo.com > directly I always get an answer. If I use my own nameservers I get > mostly failures of NXDOMAIN of linkyo.net or S

Re: Unexpected error question

2009-02-05 Thread Mark Andrews
In message <200902051556.n15ftxrx004...@metis.hicks-net.net>, Gregory Hicks wri tes: > > > Subject: RE: Unexpected error question > > Date: Thu, 5 Feb 2009 09:51:05 -0500 > > From: "Cherney John-CJC030" > > To: > > > > I see. I was assuming that the second line was caused by the first > line

Re: Unexpected error question

2009-02-05 Thread Mark Andrews
In message , "Ch erney John-CJC030" writes: > Yes, I normally use svcadm disable dns/server to stop named. Also, I've > modified the dns/server stop method from the usual "kill:" to > "/usr/sbin/rndc stop". I did that because I want to make sure the cache > gets written to the db files, which an r

Re: SERVFAIL from validating nameservers for advocaat.pro & advocaten.pro

2009-02-05 Thread Chris Thompson
On Feb 5 2009, I wrote: DLV records for advocaat.pro & advocaten.pro are among the recent additions to dlv.isc.org. Using validating recursive nameservers running BIND 9.5.1-P1 (configured to trust dlv.isc.org), I get SERVFAILs looking things up in them, although not consistently. This doesn't h

Re: Inconsistent failure to resolve

2009-02-05 Thread David Ford
My nameservers have nothing to do with authority. They simply fail to resolve it most of the time. 72.34.249.230, 198.106.134.21. Some DNS testors report things like: CheckDNS.NET is asking root servers about authoritative NS for domain Got DNS list for 'emailimage2.howtoburndvd.net' from ns1

Re: Inconsistent failure to resolve

2009-02-05 Thread Andy Shellam
David, What are the hostnames/IPs addresses of your nameservers? Can you post the relevant sections of your named.conf and/or zone files for howtoburndvd.net? I can query the hostname fine, and as you see it comes from linkyo.com's nameservers. ;; ANSWER SECTION: emailimage2.howtoburndvd.

Re: Microsoft Exchange Installer.

2009-02-05 Thread Niall O'Reilly
On Thu, 2009-02-05 at 15:13 +, Dean, Barry wrote: > One of my colleagues is convinced my DNS config is "broken", [ ... ] Barry, There are some details you neglected to mention. In particular, it's left to the reader's best guess that your colleagues

Inconsistent failure to resolve

2009-02-05 Thread David Ford
The hostname is: emailimage2.howtoburndvd.net I have two nameservers running 9.6.0-p1. If I query ns{1,2}.linkyo.com directly I always get an answer. If I use my own nameservers I get mostly failures of NXDOMAIN of linkyo.net or SERVFAIL for the hostname. DNS testers yield similar but without e

RE: Unexpected error question

2009-02-05 Thread Cherney John-CJC030
Yes, I normally use svcadm disable dns/server to stop named. Also, I've modified the dns/server stop method from the usual "kill:" to "/usr/sbin/rndc stop". I did that because I want to make sure the cache gets written to the db files, which an rndc stop does. It seems that named is having a proble

RE: Unexpected error question

2009-02-05 Thread Gregory Hicks
> Subject: RE: Unexpected error question > Date: Thu, 5 Feb 2009 09:51:05 -0500 > From: "Cherney John-CJC030" > To: > > I see. I was assuming that the second line was caused by the first line, > and that if I could get more info on the first line, I could take care > of both of them. I have a

SERVFAIL from validating nameservers for advocaat.pro & advocaten.pro

2009-02-05 Thread Chris Thompson
DLV records for advocaat.pro & advocaten.pro are among the recent additions to dlv.isc.org. Using validating recursive nameservers running BIND 9.5.1-P1 (configured to trust dlv.isc.org), I get SERVFAILs looking things up in them, although not consistently. This doesn't happen with non-validating

Microsoft Exchange Installer.

2009-02-05 Thread Dean, Barry
At my site we use BIND to host our DNS, we currently use Sun's version 9.3.5-P1 on Soalris 10 Intel. Our domain is liv.ac.uk, and we have a Windows AD domain called livad.liv.ac.uk and the DNS for that is delegated. One of my colleagues is convinced my DNS config is "broken", because when he i

RE: Unexpected error question

2009-02-05 Thread Cherney John-CJC030
I see. I was assuming that the second line was caused by the first line, and that if I could get more info on the first line, I could take care of both of them. I have a "named" user that the named process is run as. However, I see these errors even when I use rndc stop as root. Is there any reso