Re: SPF/TXT records

2009-06-18 Thread Michael Milligan
Jeffrey Collyer wrote: > M$ has their own take on SPF called Sender ID, which uses a very similar > record - > > "v=spf2.0" rather than "v=spf1" To be clear, it's "spf2.0/" plus one of "mfrom", "pra", or "mfrom,pra", e.g., "spf2.0/mfrom" which is essentially the same as regular SPF. > > so be s

Re: Questions about DNAME records

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 02:12:07PM -0700, Chris Buxton wrote: ... > Yes, that will absolutely work. But the OP requested a method that did > not involve managing the public data in two places. ... Which is exactly what views are for. External data is kept in ONE file, as below. named.conf:

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Mark Andrews
There really isn't such a thing as a "static" zone. All zones are subject to change. You just have a choice in how you change them. Via UPDATE or via some other mechanism. If a zone was truely static you wouldn't need a serial number in the SOA. You wou

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Chris Buxton
On Jun 18, 2009, at 9:10 AM, Joseph S D Yao wrote: On Thu, Jun 18, 2009 at 07:50:49AM -0700, Chris Buxton wrote: ... Yes. Once a zone is dynamic, you're no longer allowed to edit the zone file directly (unless you make it static again, for example by use of ... For which reason, of course,

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Chris Buxton
On Jun 18, 2009, at 9:44 AM, Borgia, Joe A CTR USAF AFMC AFRL/RIOS wrote: Although, I should be able to add static data to a dynamic data zone either with nsupdate or with freezing and thawing the zone, correct? Yes, or with a third-party tool. Freezing and thawing is an ugly solution that

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Chris Buxton
On Jun 18, 2009, at 1:01 PM, Joseph S D Yao wrote: On Thu, Jun 18, 2009 at 11:25:29AM -0700, Gregory Hicks wrote: ... I'll bite! What is the difference between a sub*domain* and a sub*zone*? ... A subdomain can be within the same zone. For as many levels of child or sub-domains as you wa

Re: Questions about DNAME records

2009-06-18 Thread Chris Buxton
On Jun 18, 2009, at 9:08 AM, Joseph S D Yao wrote: On Thu, Jun 18, 2009 at 07:44:38AM -0700, Chris Buxton wrote: ... Setting aside the DNAME record, what you're trying to accomplish is something frequently requested - a private overlay on an otherwise public zone that doesn't obscure the public

Re: SPF/TXT records

2009-06-18 Thread Jeffrey Collyer
M$ has their own take on SPF called Sender ID, which uses a very similar record - "v=spf2.0" rather than "v=spf1" so be sure to read up on them both before publishing records for one or the other. http://www.openspf.org/SPF_vs_Sender_ID Hotmail in particular is picky about what it rejects a

Re: SPF/TXT records

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 03:06:14PM -0400, Jeff Lightner wrote: > I'm assuming you mean it would be rejected if you didn't have an SPF > record for the company mail server in addition to the record for the > home consultancy? In my example, you for some reason don't have control over that DNS reco

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 11:25:29AM -0700, Gregory Hicks wrote: ... > I'll bite! What is the difference between a sub*domain* and a > sub*zone*? ... A subdomain can be within the same zone. For as many levels of child or sub-domains as you want: zone example.edu { ... } zone system.subnet.stude

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 12:41:04PM -0400, Kevin Darcy wrote: ... > Surely you mean sub*zone* (?) ... Yes, Kevin. Thank you. ... > It's not always possible to arrange one's namespace between static and > dynamic, oftentimes there are other conventions and taxonomies which > dictate that "static

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 12:44:18PM -0400, Borgia, Joe A CTR USAF AFMC AFRL/RIOS wrote: > Although, I should be able to add static data to a dynamic data zone either > with nsupdate or with freezing and thawing the zone, correct? If you're using nsupdate, is it static data? ;-) But, yes. Stati

RE: SPF/TXT records

2009-06-18 Thread Jeff Lightner
I'm assuming you mean it would be rejected if you didn't have an SPF record for the company mail server in addition to the record for the home consultancy? I'll look into the SPF debate - I hadn't heard suggestions NOT to use it before - simply had never implemented it because it wasn't high prior

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Kevin Darcy
Kevin Darcy wrote: All subzones are subdomains. But a subdomain isn't a subzone unless it's delegated from the parent zone. Actually, it is possible to have an undelegated (sub)zone, but not considered a good practice, because then you have to explicitly define that zone on all nameservers th

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Kevin Darcy
All subzones are subdomains. But a subdomain isn't a subzone unless it's delegated from the parent zone. Also, subzones have "zone" definitions in named.conf. Undelegated subdomains do not. - Kevin Gregory Hicks wrote: Date: Thu, 18 Jun 2009 12:41:04 -0400 From: Kevin Darcy Joseph S D Yao

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Matthew Pounsett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18-Jun-2009, at 14:25, Gregory Hicks wrote: Kevin: I'll bite! What is the difference between a sub*domain* and a sub*zone*? I don't see how you could have the one w/o the other. But that could be because I'm feeling especially slow today.

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Gregory Hicks
> Date: Thu, 18 Jun 2009 12:41:04 -0400 > From: Kevin Darcy > > Joseph S D Yao wrote: > > On Thu, Jun 18, 2009 at 07:50:49AM -0700, Chris Buxton wrote: [...] > > For which reason, of course, dynamic data should always be in a > > separate subdomain from static data, which may someday need to be

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Kevin Darcy
Joseph S D Yao wrote: On Thu, Jun 18, 2009 at 07:50:49AM -0700, Chris Buxton wrote: ... Yes. Once a zone is dynamic, you're no longer allowed to edit the zone file directly (unless you make it static again, for example by use of ... For which reason, of course, dynamic data should

RE: Dynamic DNS and Slave Servers

2009-06-18 Thread Borgia, Joe A CTR USAF AFMC AFRL/RIOS
Although, I should be able to add static data to a dynamic data zone either with nsupdate or with freezing and thawing the zone, correct? Joseph A. Borgia, Jr. Sr. UNIX/SAN Engineer Team Rome IT - Rome Research Corporation U.S. Air Force Research Laboratory/Rom

Re: SPF/TXT records

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 12:22:26PM -0400, Jeff Lightner wrote: > We don't allow "all servers" to send email at all. They have to > specifically be configured to send and relay to the Exchange server > which itself must be configured to allow them. > > The domain, waterinvoice.com is not in genera

RE: SPF/TXT records

2009-06-18 Thread Jeff Lightner
We don't allow "all servers" to send email at all. They have to specifically be configured to send and relay to the Exchange server which itself must be configured to allow them. The domain, waterinvoice.com is not in general use but is used by one server (and a test server on occasion) to send a

Re: SPF/TXT records

2009-06-18 Thread Joseph S D Yao
It is all too easy for mail marked as from one of your domains to be forwarded out the other mail server, if your internal mail server lets every server inside forward mail (e.g., error messages) to it. Unless you personally set up mail on all servers, in which case you are a bottleneck. I have a

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 07:50:49AM -0700, Chris Buxton wrote: ... > Yes. Once a zone is dynamic, you're no longer allowed to edit the zone > file directly (unless you make it static again, for example by use of ... For which reason, of course, dynamic data should always be in a separate subdo

Re: Questions about DNAME records

2009-06-18 Thread Joseph S D Yao
On Thu, Jun 18, 2009 at 07:44:38AM -0700, Chris Buxton wrote: ... > Setting aside the DNAME record, what you're trying to accomplish is > something frequently requested - a private overlay on an otherwise > public zone that doesn't obscure the public zone. But it doesn't work > the way you wa

Re: SPF/TXT records

2009-06-18 Thread Matus UHLAR - fantomas
On 17.06.09 11:19, Jeff Lightner wrote: > Right my relay might want it but if so that would be in my internal > view. The Exchange and Sendmail servers only allow relay from specific > locations and neither is using SPF to authenticate so far as I know. > > My question was more related to external

Re: Dynamic DNS and Slave Servers

2009-06-18 Thread Chris Buxton
On Jun 18, 2009, at 6:59 AM, Borgia, Joe A CTR USAF AFMC AFRL/RIOS wrote: I’m trying to learn DDNS at break-neck speed over here. I guess I’m a little surprised that there are .jnl files on my slave server. I have no allow-update statements on that server, unless maybe these files are comin

Re: Questions about DNAME records

2009-06-18 Thread Chris Buxton
On Jun 17, 2009, at 3:51 AM, Braebaum, Neil wrote: What I was hoping to do was create, or perhaps more correctly, cater for a specific and small number of records for example.com. (by DNAME'ing to example2.com.) internally, by creating a very simple zone with the DNAME to example2.com. - mer

Re: bind 9.6.1 stats dump

2009-06-18 Thread Chris Thompson
On Jun 18 2009, R Dicaire wrote: Hi folks, while looking at a stats dump from bind 9.6.1 I see: ++ Per Zone Query Statistics ++ but there are no stats showing for this, how is this enabled (if at all)? Set "zone-statistics yes;" in options, or per-zone. This really isn't difficult to find in

Dynamic DNS and Slave Servers

2009-06-18 Thread Borgia, Joe A CTR USAF AFMC AFRL/RIOS
I'm trying to learn DDNS at break-neck speed over here. I guess I'm a little surprised that there are .jnl files on my slave server. I have no allow-update statements on that server, unless maybe these files are coming from zone transfer? Also, is it normal for the master zone tables to turn in

bind 9.6.1 stats dump

2009-06-18 Thread R Dicaire
Hi folks, while looking at a stats dump from bind 9.6.1 I see: ++ Per Zone Query Statistics ++ but there are no stats showing for this, how is this enabled (if at all)? Thanks -- aRDy Music and Rick Dicaire present: http://www.ardynet.com http://www.ardynet.com:9000/ardymusic.ogg.m3u

Re: SPF/TXT records

2009-06-18 Thread Michael Milligan
This is a bit OT, but... You specify in an SPF (TXT) record your outbound MTAs, the ones that everybody outside of your organization will see your mail sourced from. If it goes through a third-party outsourced provider, you put the provider's MTAs in your record (best via an include:). If your m