Re: Bind, dnssec, udp fragmentation woes.

2009-10-02 Thread Nicholas Wheeler
On Fri, 2009-10-02 at 13:22 +1000, Mark Andrews wrote: > You really want to work out what is being blocked, EDNS?, responses > bigger that 512 bytes? DNSSEC? fragmented responses? With a clean > path all of these should succeed but only the last one won't have > "tc" set. This does a plain DNS qu

Re: recursion on auth-only server

2009-10-02 Thread Peter Dambier
Matus UHLAR - fantomas wrote: > Hello, > > I have moved authoritative server to new IP address. I have changed the DNS > name pointing to it so the NS would point to the new IP. > > Now I looked at the traffic and it seems that there are ~4 of 1000 recursive > requests sent to it. > > Are there

Re: Query Refused problem

2009-10-02 Thread Sven Eschenberg
Matus UHLAR - fantomas schrieb: On 01.10.09 19:10, Sven Eschenberg wrote: Funny enough, I did not have any allow-query at all, but adding allow-query {any;} did indeed change the behavior. But allow-query-cache obviously defaults to localhost, localnets and was triggering the behavior that

Re: Query Refused problem

2009-10-02 Thread Sam Wilson
In article , Michael Monnerie wrote: > On Freitag 02 Oktober 2009 Mark Andrews wrote: > > if (set(allow-query-cache)) > > use allow-query-cache; > > else if (set(allow-recursion)) > > use allow-recursion; > > else if (set(allow-query)) > >

Re: Query Refused problem

2009-10-02 Thread Michael Monnerie
On Freitag 02 Oktober 2009 Mark Andrews wrote: > if (set(allow-query-cache)) > use allow-query-cache; > else if (set(allow-recursion)) > use allow-recursion; > else if (set(allow-query)) > use allow-query; > else if (se