Re: weight for RR

2009-06-04 Thread Jukka Pakkanen
Scott Haneda wrote: Maybe cheat with round robin? Add 3 copies of one record and 1 of the other. That should give you 75/25 roughly. BIND won't let you do that, it'll throw away the duplicates when it loads the zone. You need some other piece of software or hardware that can do that (insert ve

Re: Trying to understand DNSSEC and BIND versions better

2009-06-04 Thread Mark Andrews
In message , Chris Adams write s: > Since I read that the root is supposed to be signed by the end of the > year, I am just trying to understand DNSSEC support and the various > versions of BIND a little better here, so please don't throw too many > rocks if I ask something stupid... > > I run th

Re: weight for RR

2009-06-04 Thread Michael Milligan
Scott Haneda wrote: > Maybe cheat with round robin? Add 3 copies of one record and 1 of the > other. That should give you 75/25 roughly. BIND won't let you do that, it'll throw away the duplicates when it loads the zone. You need some other piece of software or hardware that can do that (insert v

Trying to understand DNSSEC and BIND versions better

2009-06-04 Thread Chris Adams
Since I read that the root is supposed to be signed by the end of the year, I am just trying to understand DNSSEC support and the various versions of BIND a little better here, so please don't throw too many rocks if I ask something stupid... I run the nameservers for an ISP. For the recursive se

Re: weight for RR

2009-06-04 Thread Scott Haneda
Maybe cheat with round robin? Add 3 copies of one record and 1 of the other. That should give you 75/25 roughly. I don't think it's a dead on exact thing bit it may be close enough for your needs. -- Scott Iphone says hello. On Jun 4, 2009, at 7:09 PM, "Tech W." wrote: Hi, Is it possibl

weight for RR

2009-06-04 Thread Tech W.
Hi, Is it possible to set weight for records? for example,I have these two A records: wwwIN A 192.168.1.100 IN A 192.168.1.101 But I want 192.168.1.100 take the weight of 75%, and 192.168.1.101 take the weight of 25%. That means, when clients query for www.domain.com, 1.100 h

RE: Bind is hanging on CentOS 4.4

2009-06-04 Thread Jeremy C. Reed
On Fri, 29 May 2009, Jesse Cabral wrote: > When I rerun ./configure --disable-threads the configure file does not > update. I guess you mean the config.h doesn't update. But probably the ./lib/isc/include/isc/platform.h file did change (so ISC_PLATFORM_USETHREADS is no longer defined). (In my c

Re: Doubts about BIND

2009-06-04 Thread Stephane Bortzmeyer
On Wed, Jun 03, 2009 at 12:42:28AM +0200, Christoph Weber-Fahr wrote a message of 29 lines which said: > Does it even compile with current bind versions? Yes and it is even now officially included in BIND (starting from 9.4, I believe), no need to patch. __

Drmatic slowdown and upgrading to bind 9.5.1P1 from 9.4.3b3

2009-06-04 Thread Hayward, Bruce
Hi On this server we upgraded from 9.4.3b3 to 9.5.1P1 Response time went from 3 ms to 900 ms What makes this server different is that it runs a wedge that checks for nxdomain Is there a security enhancement or something new that this version of bind deals differently with all querie

RE: PTR delegation

2009-06-04 Thread Frank Bulk
Just to add to the excellent comments already posted here, using +trace can be helpful in seeing how things are delegated. I use the paid version of DNSreports to provide a non-tech friendly version of the delegation, which has the added benefit of beings able to trace it down other "branches" as

Re: Setting up tkey

2009-06-04 Thread Niall O'Reilly
Shane Wegner wrote: Hello, I am looking at setting up tkey between master and slave nameservers but have been unable to find documentation on how to get this going properly. In the bind9 manual, there is a whole section on TSIG and setting up shared secrets between servers but how does one do it