Re: PTR delegation

2009-06-03 Thread Michael Milligan
Scott Haneda wrote: > On Jun 3, 2009, at 11:53 AM, Scott Haneda wrote: >> >> 1) Is it possible to determine what ip range/space has been given to >> user of that IP space? For example, in a colocation environment, I am >> given say, a /24, and I want to look that up and see if it really is a >> /2

Re: zone transfers

2009-06-03 Thread Michael Milligan
Michael Di Martino wrote: > > I have a Master BIND9 server with 2 active (up) interfaces eth0 and eth1. > > I need my zone update notifications and zone transfer to use eth1 > instead of eth0 which is currently using. > > How can I change this behavior while still having the server listen on > e

Re: zone transfers

2009-06-03 Thread Barry Margolin
In article , Michael Di Martino wrote: > I have a Master BIND9 server with 2 active (up) interfaces eth0 and eth1. > I need my zone update notifications and zone transfer to use eth1 instead o= > f eth0 which is currently using. > How can I change this behavior while still having the server list

Re: Setting up tkey

2009-06-03 Thread Mark Andrews
In message <20090603165304.ga28...@csy.ca>, Shane Wegner writes: > Hello, > > I am looking at setting up tkey between master and slave > nameservers but have been unable to find documentation on > how to get this going properly. In the bind9 manual, there > is a whole section on TSIG and setting

Re: Problem with .org domain resolution

2009-06-03 Thread Mark Andrews
ORG uses NSEC3 rather than NSEC. It would be interesting to see if you can get responses from .SE or not with the setting enabled. SE uses NSEC which has been around years longer than NSEC3. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 211

Re: PTR delegation

2009-06-03 Thread Scott Haneda
Thank you for your other answers, I will read those and test them after this reply.. On Jun 3, 2009, at 12:02 PM, Jeremy C. Reed wrote: Hoping I can get a walk through in simple terms, but also a pointer to some docs where I can dive into the details. I think I am finding what I want in

Re: PTR delegation

2009-06-03 Thread Paul Ebersman
ScottH> Given an ip of 64.84.37.2 ScottH> $dig -x 64.84.37.2 ScottH> 2.37.84.64.in-addr.arpa. 3589 IN PTR capone.hostwizard.com. ScottH> $dig 37.84.64.in-addr.arpa NS ScottH> 37.84.64.in-addr.arpa. 3538IN NS ns1.nacio.com. ScottH> 37.84.64.in-addr

Re: PTR delegation

2009-06-03 Thread Paul Ebersman
ScottH> 1) Is it possible to determine what ip range/space has been ScottH> given to user of that IP space? For example, in a colocation ScottH> environment, I am given say, a /24, and I want to look that up ScottH> and see if it really is a /24. I have found the -x option which ScottH> is makin

Re: PTR delegation

2009-06-03 Thread Scott Haneda
On Jun 3, 2009, at 11:53 AM, Scott Haneda wrote: Hoping I can get a walk through in simple terms, but also a pointer to some docs where I can dive into the details. I think I am finding what I want in the docs, but those docs come up 404 since the isc site changed things a bit, from there,

Re: PTR delegation

2009-06-03 Thread Jeremy C. Reed
On Wed, 3 Jun 2009, Scott Haneda wrote: > Hoping I can get a walk through in simple terms, but also a pointer to > some docs where I can dive into the details. I think I am finding what > I want in the docs, but those docs come up 404 since the isc site > changed things a bit, from there, I ge

PTR delegation

2009-06-03 Thread Scott Haneda
Hoping I can get a walk through in simple terms, but also a pointer to some docs where I can dive into the details. I think I am finding what I want in the docs, but those docs come up 404 since the isc site changed things a bit, from there, I generally can not locate the old doc file. 1

RE: Problem with .org domain resolution

2009-06-03 Thread Juan Rodríguez
Thank both of you. Kevin, you're right. We have a Checkpoint firewall which is configured to do some kind of DNS protections using SmartDefense; it is called protocol enforcement and can be UDP or TCP. We have UDP protection enabled; its description is the following one (Copy&paste from chec

Re: Problem with .org domain resolution

2009-06-03 Thread Jeremy C. Reed
On Wed, 3 Jun 2009, Kevin Darcy wrote: > Kevin Darcy wrote: > > Since .org was recently DNSSEC-signed > > (http://www.afilias.info/afilias+signs+org+zone), my guess would be that you > > have a firewall, an intrusion-prevention device, or somesuch, that is > > dropping the packets because it doesn

Re: Problem with .org domain resolution

2009-06-03 Thread Kevin Darcy
Never mind, reading that press release more deeply, it looks like they're in a _limited_ testing phase right now. Shouldn't affect you directly. Possibly they're having problems with their testing that might have indirect effect on resolvability.

Re: Problem with .org domain resolution

2009-06-03 Thread Kevin Darcy
Since .org was recently DNSSEC-signed (http://www.afilias.info/afilias+signs+org+zone), my guess would be that you have a firewall, an intrusion-prevention device, or somesuch, that is dropping the packets because it doesn't understand the DNSSEC records contained in them.

Problem with .org domain resolution

2009-06-03 Thread Juan Rodríguez
Hello. In my company we have a name server BIND 9.6 running on RedHat 4.7 ES. We've realized it don't resolve any .org domain. For example: [r...@dnsint ~]# nslookup www.mirrorservice.org 10.20.29.22 ;; connection timed out; no servers could be reached [r...@dnsint ~]# nslookup www.madrid.org

Re: zone transfers

2009-06-03 Thread Jeremy C. Reed
> I have a Master BIND9 server with 2 active (up) interfaces eth0 and eth1. > I need my zone update notifications and zone transfer to use eth1 > instead of eth0 which is currently using. > How can I change this behavior while still having the server listen on > eth0? Have a look at the listen-o

RE: zone transfers

2009-06-03 Thread Todd Snyder
Checkout the "transfer-source" directive for the transfers, and the "notify-source" directive. I've not used the latter, so I'm not exactly sure if it fits, but I expect that it will. DNS and BIND @Google Books is a useful reference: http://books.google.com.hk/books?id=zkZN52WhG8sC&printsec=

zone transfers

2009-06-03 Thread Michael Di Martino
I have a Master BIND9 server with 2 active (up) interfaces eth0 and eth1. I need my zone update notifications and zone transfer to use eth1 instead of eth0 which is currently using. How can I change this behavior while still having the server listen on eth0? Michael DiMartino | Director of IT |