Re: IPv6 hostname resolution not working

2009-07-15 Thread Mark Andrews
In message <644024.70777...@web31001.mail.mud.yahoo.com>, vikram writes: > hi, > > I am trying to setup BIND9 as a DNS server for local IPv6 name resolution > within a LAN. I've been reading through related threads on forums and > whatever documents Google comes up with. I am new to this and have

IPv6 hostname resolution not working

2009-07-15 Thread vikram
hi, I am trying to setup BIND9 as a DNS server for local IPv6 name resolution within a LAN. I've been reading through related threads on forums and whatever documents Google comes up with. I am new to this and haven't been able to get it to work so far and could really use some help. heres th

Re: about allow-update

2009-07-15 Thread Evan Hunt
> Besides TSIG key, I want to limit the source address also. That's to > say, I want the given address with specified key to execute the update > only. > > How can I do it? Is this syntax correct? > > allow-update {key "mykey"; 192.168.1.254;}; Alas, no. What you want is: allow-updat

Re: Bind 9.6.1: skipping zone transfer, but why ?

2009-07-15 Thread Danny Mayer
Chris Buxton wrote: > On Jun 30, 2009, at 6:15 AM, bind9 wrote: >> 1) "skipping zone transfer as master 213.173.250.146#53 (source >> 0.0.0.0#0) is unreachable >> (cached)" seem to indicate that the slave has cached a knowledge about >> the master being >> unreachable. It isn't. I can nslookup on t

about allow-update

2009-07-15 Thread Tech W.
Dear list, Currently I'm using TSIG key for dynamic update auth. allow-update {key "mykey";}; Besides TSIG key, I want to limit the source address also. That's to say, I want the given address with specified key to execute the update only. How can I do it? Is this syntax correct? allow-updat

Re: Truncated, retrying in TCP on Reverse lookup

2009-07-15 Thread Mark Andrews
In message <4a5e300c.7050...@gmail.com>, Dave Sparro writes: > --===2296683873387296090== > Content-Type: text/html; charset=ISO-8859-1 > Content-Transfer-Encoding: 7bit > > > > > > > > > > Matus UHLAR - fantomas wrote: > > > On Thu, Jul 09, 2009 at 05:50:02AM -0700,

ixfr-from-differences on rndc reload

2009-07-15 Thread t . maestas
BIND-9.5.1-P1. When "ixfr-from-differences yes;" is configured on a zone, and an edit is made to the zone file and the zone reloaded via "rndc reload foo.com " a journal file is not created. However, when an "rndc reload" of the whole configuration is done, then the journal is created. Is thi

Re: clearing local caches

2009-07-15 Thread Scott Haneda
On Jul 15, 2009, at 12:59 PM, Dave Sparro wrote: Scott Haneda wrote: On Jul 15, 2009, at 12:29 PM, Dave Sparro wrote: Scott Haneda wrote: ... However, I would like to just get DNS response times. Perhaps take the list of hosts and feed them to a iterative script calling dig, and fish out th

Re: clearing local caches

2009-07-15 Thread Dave Sparro
Scott Haneda wrote: On Jul 15, 2009, at 12:29 PM, Dave Sparro wrote: Scott Haneda wrote: ... However, I would like to just get DNS response times. Perhaps take the list of hosts and feed them to a iterative script calling dig, and fish out the response time? This does add the problem of re

ixfr-from-differences; journal not created on "rndc reload "

2009-07-15 Thread Tim Maestas
BIND-9.5.1-P1. When "ixfr-from-differences yes;" is configured on a zone, and an edit is made to the zone file and the zone reloaded via "rndc reload foo.com" a journal file is not created.  However, when an "rndc reload" of the whole configuration is done, then the journal is created.  Is this ex

Re: clearing local caches

2009-07-15 Thread Scott Haneda
On Jul 15, 2009, at 12:29 PM, Dave Sparro wrote: Scott Haneda wrote: ... However, I would like to just get DNS response times. Perhaps take the list of hosts and feed them to a iterative script calling dig, and fish out the response time? This does add the problem of redirects of course w

Re: How See what is Cached?

2009-07-15 Thread Dave Sparro
Gregory Hicks wrote: From: "Alans" Date: Sun, 5 Jul 2009 11:29:27 +0300 I run that command but nothing happened! And named.conf option is dump-file "/data/cache_dump.db"; , I checked that directory that file doesn't exist!! Do you think there is a problem in configuration? File / directory p

Re: Truncated, retrying in TCP on Reverse lookup

2009-07-15 Thread Dave Sparro
Matus UHLAR - fantomas wrote: On Thu, Jul 09, 2009 at 05:50:02AM -0700, Fr34k wrote a message of 119 lines which said: There should be one and only one PTR for that IP. On 10.07.09 22:40, Stephane Bortzmeyer wrote: No. No good reason fo

Re: clearing local caches

2009-07-15 Thread Dave Sparro
Scott Haneda wrote: ... However, I would like to just get DNS response times. Perhaps take the list of hosts and feed them to a iterative script calling dig, and fish out the response time? This does add the problem of redirects of course would not be followed, so I would have to pre-fetch a

Re: Issue with Two Views and Master/SLAVE Servers.

2009-07-15 Thread Jeremy C. Reed
See the FAQ Question: Q: How can I make a server a slave for both an internal and an external view at the same time? When I tried, both views on the slave were transferred from the same view on the master. (It has two different answers.) The FAQ is included with BIND source. Here it is in

Issue with Two Views and Master/SLAVE Servers.

2009-07-15 Thread Chuck.Payne
Guys, Please forgive me if this is a bit hard to follow, but I have two server that are both running bind bind-9.3.4, but I am having an issue with the way one zone file is being transferred from the master to the slave. The master server is set up like this with the zone having the issue...

BIND 9.6 freezing on update to signed zone (rare!)

2009-07-15 Thread Chris Thompson
We had an incident last night on the authoritative nameserver which is master for dnssec-test.csi.cam.ac.uk (a signed zone). At the time it was running BIND 9.6.1rc1 (but I doubt if 9.6.1 is going to make a difference). A script-generated update timed out, and it subsequently failed to respond to

Re: Adding first DNSKEY record with update (9.6.0 vs 9.6.1)

2009-07-15 Thread Chris Thompson
On Jul 15 2009, Mark Andrews wrote: In message , Chris Thompson writes: In BIND 9.6.0 one could take an unsigned zone and add an initial KSK and ZSK to it using nsupdate (and if the right files were in the key directory, it would sign everything correctly). In BIND 9.6.1 this no longer works: i

RE: A smarter stub resolver??

2009-07-15 Thread Taylor, Gord
I should mention, that I've looked at "options rotate", but the concern is that this will mean retransmits if ANY of the nameservers are down. So, any DNS outage would cause some level of impact to the application. It also makes it harder for applications to determine if slowdowns are due to D

A smarter stub resolver??

2009-07-15 Thread Taylor, Gord
I've frequently run into a problem that the stub resolver just isn't very dynamic in its selection of name servers - especially when dealing with time-sensitive apps. If the first DNS server in the list is down, the applications may slow down due to the constant retransmits. Given a resolv.conf li

Re: DNSKEY Validation

2009-07-15 Thread Chris Thompson
On Jul 14 2009, Mark Elkins wrote: On Tue, 2009-07-14 at 17:50 +1000, Mark Andrews wrote: In message <1247555725.13064.4.ca...@ilinux>, Mark Elkins writes: > OK - so I accept that the algorithm will change. > > What about some sort of validation of the base-64 part of the key? > Is there a ch

Re: clearing local caches

2009-07-15 Thread Dmitry Rybin
Hello. powerdns-recursor - the best. :)) Over 20k req/sec - feel good. As variant try to use small TTL like: bind: max-ncache-ttl 1; max-cache-ttl 1; powerdns-recursor cache-ttl=1 default-ttl=1 Scott Haneda wrote: Hello, this may not entirely be related to BIND/named, though I believe it is.

RE: How See what is Cached?

2009-07-15 Thread Agarwal Vivek-RNGB36
Thanks Its working now Regards Vivek Aggarwal +973-36583058  -Original Message- From: Alans [mailto:batpowe...@yahoo.co.uk] Sent: Wednesday, July 15, 2009 8:38 AM To: Agarwal Vivek-RNGB36 Cc: bind-users@lists.isc.org Subject: RE: How See what is Cached? You should create the file that