Re: statschannel assertion failure

2009-02-24 Thread JINMEI Tatuya / 神明達哉
At Tue, 24 Feb 2009 14:26:45 -0600, Timothy Holtzen wrote: > Hi guys I'm getting this assertion failure again under Bind 9.5.1-P1 on > RHEL 5.2. > > Feb 23 22:00:01 foo named[18476]: statschannel.c:696: INSIST(xmlrc >= 0) > failed > Feb 23 22:00:01 foo named[18476]: exiting (due to assertion fai

Re: File descriptors

2009-02-24 Thread JINMEI Tatuya / 神明達哉
At Tue, 24 Feb 2009 15:10:36 -0500, Todd wrote: > The servers in question are running a mix of BIND versions .. 9.2.3, > 9.2.4, 9.3.2, 9.3.4, 9.4.1, 9.4.2-p2, the majority are 9.3.4 and > 9.4.2-P2 Then are confused somehow. Among above, the only version that could cause the "too many open file

Re: Hostname Naming Compliance

2009-02-24 Thread Kevin Darcy
Eric C. Davis wrote: Are there plans for Bind to enforce hostname compliance according to RFC's or is this going to be left up to each DNS operator? I'm going to take an even more radical "con" position than most of the people in this thread. An A record maps a DNS name into a 32-bit value.

Re: EDNS - edns-udp-size and max-udp-size

2009-02-24 Thread Mark Andrews
In message <20090225002133.gb99...@isc.org>, Evan Hunt writes: > > The code just looks at the number of timeouts not at what > > size was sent in the initial query. triededns512() records > > when the DNS_FETCHOPT_EDNS512 has been set not when the > > initial query advertised a re

Re: EDNS - edns-udp-size and max-udp-size

2009-02-24 Thread Evan Hunt
> The code just looks at the number of timeouts not at what > size was sent in the initial query. triededns512() records > when the DNS_FETCHOPT_EDNS512 has been set not when the > initial query advertised a receive buffer of 512 bytes. But, if the initial query uses a rec

Re: EDNS - edns-udp-size and max-udp-size

2009-02-24 Thread Mark Andrews
In message <200902240828.n1o8slln027...@mail42.nsc.no>, Jan Arild =?iso-8859-1? Q?Lindstr=F8m?= writes: > How can it reduce it from 512 that is in the config, down to 512? The code just looks at the number of timeouts not at what size was sent in the initial query. triededns512(

Re: Hostname Naming Compliance

2009-02-24 Thread Mark Andrews
In message <49a3a09a.2000...@blue-labs.org>, David Ford writes: > Here's a question. Are we incapable of dealing with things like > underscores in hostnames? Is there any significant harm in adapting? When does it stop? What will be the next character you "just have to have"?

Re: File descriptors

2009-02-24 Thread Todd
I see there is a "files" directive for named.conf - does it override/set the OS files limit, or if I set it to 5000, and the OS says 256, am I stuck at 256? On Tue, Feb 24, 2009 at 3:10 PM, Todd wrote: > My apologies - that was silly of me. > > The servers in question are running a mix of BIND

Re: libbind 6.0b1 bug?

2009-02-24 Thread Jeremy C. Reed
On Tue, 24 Feb 2009, Andy Shellam wrote: > Is there also a separate mailing list for "implementors" using libbind in > applications, or should these questions also go to bind-users? Like Jack I > had a look on the website but couldn't see anything obvious. The public mailing list for discussing

Re: rndc reconfig issue

2009-02-24 Thread bsfinkel
"Ronni Jensen" wrote: >Hi, > >Every night I have a perl script generate a config file which contains >approximately 5000 zones at the moment, but this will vary in size as >zones are added/removed. > >However, when I put >>include "/etc/special-zones.conf";<< into >named.conf and do "rndc reconfi

statschannel assertion failure

2009-02-24 Thread Timothy Holtzen
Hi guys I'm getting this assertion failure again under Bind 9.5.1-P1 on RHEL 5.2. Feb 23 22:00:01 foo named[18476]: statschannel.c:696: INSIST(xmlrc >= 0) failed Feb 23 22:00:01 foo named[18476]: exiting (due to assertion failure) I posted about it once before. I understand that this is caused b

Re: Hostname Naming Compliance

2009-02-24 Thread John Wobus
It's an excellent idea to make your systems handle such hostnames without problems (e.g. not crashing) when they run across such a name on the Internet. It's unfriendly to propagate such hostnames when doing so impedes others' ability to do something. It's against your own interests to propagate

Re: File descriptors

2009-02-24 Thread Todd
My apologies - that was silly of me. The servers in question are running a mix of BIND versions .. 9.2.3, 9.2.4, 9.3.2, 9.3.4, 9.4.1, 9.4.2-p2, the majority are 9.3.4 and 9.4.2-P2 Cheers. On Tue, Feb 24, 2009 at 2:32 PM, JINMEI Tatuya / 神明達哉 wrote: > At Tue, 24 Feb 2009 13:14:27 -0500, > Todd

Re: File descriptors

2009-02-24 Thread JINMEI Tatuya / 神明達哉
At Tue, 24 Feb 2009 13:14:27 -0500, Todd wrote: > We ran into an issue this morning with some caching DNS servers. One > of the zones we heavily rely on was having DNS issues, which appears > to have been causing very slow responses to us. The servers in > question handle about 500queries/secon

Re: rndc reconfig issue

2009-02-24 Thread JINMEI Tatuya / 神明達哉
At Tue, 24 Feb 2009 14:47:17 +0100, "Ronni Jensen" wrote: > Every night I have a perl script generate a config file which contains > approximately 5000 zones at the moment, but this will vary in size as > zones are added/removed. > > However, when I put >>include "/etc/special-zones.conf";<< int

Re: libbind 6.0b1 bug?

2009-02-24 Thread Andy Shellam
Hi Evan, Evan Hunt wrote: libbind-b...@isc.org Is there also a separate mailing list for "implementors" using libbind in applications, or should these questions also go to bind-users? Like Jack I had a look on the website but couldn't see anything obvious. Thanks, Andy

File descriptors

2009-02-24 Thread Todd
Good day, We ran into an issue this morning with some caching DNS servers. One of the zones we heavily rely on was having DNS issues, which appears to have been causing very slow responses to us. The servers in question handle about 500queries/second. These particular servers are configured wit

Re: configuring not to send additional answers with bind

2009-02-24 Thread Kirk
karthik karthik wrote: Hello all, I am using BIND 9.2.4. Irrespective of flags fetch-glue no; recursion no; in "/etc/bindnamed.conf.options" and my named.conf also has reference to named.conf.options(entry exists like include "/etc/bind/named.conf.options ) my dns server sends responses with

Re: empty DoS queries

2009-02-24 Thread Frank Kirschner
10.48.0.19 is a WLAN Router with DNS Cache, WAN=> WLAN, LAN=>local network. Normally the Router should cache all queries coming from the LAN. I belive, the PC inside the LAN has a virus or trojan and floods the WRT router. I have contacted the user and after disconnet the PC behind, everything

configuring not to send additional answers with bind

2009-02-24 Thread karthik karthik
Hello all, I am using BIND 9.2.4. Irrespective of flags fetch-glue no; recursion no; in "/etc/bindnamed.conf.options" and my named.conf also has reference to named.conf.options(entry exists like include "/etc/bind/named.conf.options ) my dns server sends responses with additional answers. It will

rndc reconfig issue

2009-02-24 Thread Ronni Jensen
Hi, Every night I have a perl script generate a config file which contains approximately 5000 zones at the moment, but this will vary in size as zones are added/removed. However, when I put >>include "/etc/special-zones.conf";<< into named.conf and do "rndc reconfig", the named service is not ans

RE: libbind 6.0b1 bug?

2009-02-24 Thread Jack Tavares
Thank you > Actually, it is a compile time problem. > > Is there a place on the isc.org website to report a bug on libbind? > > I ddn't see it anywhere. libbind-b...@isc.org -- jack ___ bind-users mailing list bind-users@lists.isc.org https://lists.is

RE: ResendRE: ns_type question

2009-02-24 Thread Jack Tavares
> > > No, you're looking at the right place, and libbind isn't supposed to > > provide any new feature regarding the new DNSSEC spec. > > Ok. So is there a 'C' api for dealing with DNSSEC in this regard? >Hmm...I was wrong. There's actually a planned patch to introduce >newer types in nameser.h,

EDNS - edns-udp-size and max-udp-size

2009-02-24 Thread Jan Arild Lindstrøm
Hi, I am currently in the process of upgrading fro 9.4.3 to 9.6.0-P1, and because of that I now can see EDNS logging. Running "resperf", I see a lot of: --cut-- 24-Feb-2009 08:25:09.082 edns-disabled: success resolving 'sigev.com/A' (in 'sigev.com'?) after reducing the advertised EDNS UDP pac