Re: Validating a DNSSEC installation

In message <69beb178-f30d-4ac2-8e7a-b13c1f5f8...@menandmice.com>, Chris Buxton writes: > On Jun 13, 2009, at 4:59 AM, Erik Lotspeich wrote: > > Is it normal that a validating resolver can't validate a domain it is > > authoritative for? > > Absolutely. As Alan Clegg wrote not long ago on this li

Re: queries with no RD bit set are truncating

Well, the biggest mystery here, in my mind, is why are you getting an actual *answer* (specifically, 5 records in the Answer Section, with another 3 records associated with those answers in the Additional Section) when you query recursively, but no answer when you query non-recursively (?) Sinc

Re: Configuration for "hostname.bind."

In message , Chris Hills writes: > On 15/06/09 11:29, Andrey G. Sergeev (AKA Andris) wrote: > > There is no need for _any_ patch to use the built-in functionality. > > The patch makes queries for "id.server. ch txt" report the value set by > the version option /by default/ without any additional

Re: queries with no RD bit set are truncating

Showing just the header is not very useful. Please show the FULL question and the FULL answer. Mark In message , Peter Andreev writes: > > Because there is nothing in server's logs. > While client sees following: > > (query with no RD bit) > - Flags: Query, Opcode

Re: Validating a DNSSEC installation

On Jun 13, 2009, at 4:59 AM, Erik Lotspeich wrote: Is it normal that a validating resolver can't validate a domain it is authoritative for? Absolutely. As Alan Clegg wrote not long ago on this list, this is why a DNSSEC validating resolver should not be authoritative for any signed zones.

Re: weird bind cache server behaviour - unexpected root hint delegation on forward only zone

> Does it matter? Not really, I was just being too picky - wasn't expecting bind to look for authority for forward zones and then got into a red herring with root NS' cached on just two servers when all four are heavily utilised (but turns out our mail servers are only using the first two). Thank

Re: weird bind cache server behaviour - unexpected root hint delegation on forward only zone

Does it matter? Two of the servers happened to have root NS records cached. You could verify this with rndc dumpdb -cache. The other two servers, apparently, had no root NS records cached. But if the client is just a stub resolver, or set up to forward, it doesn't care about the NS records in

weird bind cache server behaviour - unexpected root hint delegation on forward only zone

I have 4 bind cache servers running with config close to what is listed at the bottom of this post. All 4 servers have identical bind configuration, running same bind version (9.5.1-P1), almost identical system layouts. The issue is that on two of the four servers, requests for records in the 'dn

Re: Questions about DNAME records

On Jun 15, 2009, at 2:37 AM, Braebaum, Neil wrote: I just have a couple of questions about DNAME records:- Say I have:- example.com.IN DNAME example2.com. If I catered for the names in example2.com. that I want to be able to use from example.com., would subdomains and resour

RE: Windows AD, Windows DHCP, BIND, and DDNS

First a small correction: in DHCP MMC right click on DHCP server, then Properties (not option) Yes, unchecking all three options in the DNS tab will stop dynamic DNS updates by the DHCP server. Things to consider/test: - rDNS cleanup may have issues when clients power down a system improperly

RE: Windows AD, Windows DHCP, BIND, and DDNS

I'm not an AD guy at all, so I have to ask the following: Will un-checking that still allow the host to register itself in the AD namespace? Joseph A. Borgia, Jr. Sr. UNIX/SAN Engineer Team Rome IT - Rome Research Corporation U.S. Air Force Research Laboratory

RE: Windows AD, Windows DHCP, BIND, and DDNS

Joe, On your Windows DHCP server, use DHCP MMC, right click on DHCP server name, and select options. In Options, select DNS tab and uncheck the required DNS registration options. Best, Frank -Original Message- From: bind-users-boun...@lists.isc.org on behalf of Borgia, Joe A CTR USAF

Windows AD, Windows DHCP, BIND, and DDNS

Folks, I need some help. At my site, I am running Windows AD, Windows DHCP, and BIND version 9.6.0-P1. The AD namespace that my customer implemented is different from the BIND namespace. The majority of the clients here are Windows XP/Vista-based systems that receive their IP via Window

Re: Clients sometimes get wrong view

I got this figured out. Thanks for the ideas everyone. I discovered my slave server was replicating the wrong data. I didn't realize that it would only grab stuff from it's own particular view. _ Corey - Original Message - From: "Kal Feher" To: bind-users@lists.

Re: Configuration for "hostname.bind."

On 15/06/09 11:29, Andrey G. Sergeev (AKA Andris) wrote: There is no need for _any_ patch to use the built-in functionality. The patch makes queries for "id.server. ch txt" report the value set by the version option /by default/ without any additional configuration. Regards, Chris ___

Questions about DNAME records

I just have a couple of questions about DNAME records:- Say I have:- example.com.IN DNAME example2.com. If I catered for the names in example2.com. that I want to be able to use from example.com., would subdomains and resource records be allowed? And secondly, if the name enq

Re: Configuration for "hostname.bind."

Greetings Chris, Sun, 14 Jun 2009 12:01:50 +0200 Chris Hills wrote: On 13/06/09 16:23, Andrey G. Sergeev (AKA Andris) wrote: Also, is it possible to configure BIND to respond on version.server. chaos txt and id.server. chaos txt in the same manner as version.bind. and hostname.bind. (i.e. aut

Re: queries with no RD bit set are truncating

Because there is nothing in server's logs. While client sees following: (query with no RD bit) - Flags: Query, Opcode - QUERY (Standard query), Rcode - Success QR:(0...) Query Opcode:(....) QUERY (Standard query) 0 AA: