Re: acache cleaning (not periodic)

2009-09-03 Thread JINMEI Tatuya / 神明達哉
At Wed, 19 Aug 2009 16:52:57 +0200, Matus UHLAR - fantomas wrote: > I have authoritative-only server with enough of memory to run with acache. > > I have set acache-cleaning-interval to 0 and I am wondering if it's safe > when there will not be any periodic cleaning. If a domain is changed or >

Re: I have a question concerning the spf

2009-09-03 Thread Matus UHLAR - fantomas
On 24.08.09 12:04, Faehl, Chris wrote: > You've specified your policy as "neutral" in your SPF record with "?all". > > Try "-all", or "+all" if you're not ready to put some meat on your SPF plate. I'd object against use of +all, I've read reports about spammers using that to "exploit" the SPF s

Re: OpenDNS.com howto

2009-09-03 Thread Matus UHLAR - fantomas
On 20.08.09 15:19, Michael Fuese wrote: > i need to know, how to setup a service like opendns.com. > > The opendns service is a free service where you can use > their dns entries, to filter web-contents. > They block bad domains or let users block their own domain-entries. > > What i need to know:

Re: query reply servfail

2009-09-03 Thread Matus UHLAR - fantomas
On 20.08.09 13:59, BBB Kee wrote: > We are using solaris x86 bind-9.5.1-P3. I tried that > when "rndc flushname www.hsbc.com.hk." and "dig a > www.hsbc.com.hk." a few times, sometimes our > nameserver reply servfail. It shouldn't be the memory > problem as the daemon just started. Any clue of it

Re: dig +trace failure

2009-09-03 Thread Chris Thompson
On Sep 3 2009, Mark Andrews wrote: In message <200909030037.raa27...@nasdaq.hpl.hp.com>, Andris Kalnozols writes: My 9.6.1-P1 dig programs (HP-UX and Linux) rather consistently fail when trying to trace the delegation of 231.84.192.IN-ADDR.ARPA. Out of curiousity, are others from different pla

Re: Disabling DNSSEC validation per zone?

2009-09-03 Thread Stephane Bortzmeyer
On Wed, Sep 02, 2009 at 01:18:33PM +0200, Hauke Lampe wrote a message of 95 lines which said: > What we try to achieve is: > > - Validate DNSSEC signatures on resolvers close to the clients, using > dlv.isc.org > - Keep internal name resolution functioning, even if the connection to > the out