how to ignore external queries?

2010-03-19 Thread ic.nssip
Hello everyone, I'm currently using an ACL for allow-query statement, which I thought it's fine. Recently I did a spoofability test on: https://www.grc.com/dns/dns.htm and the results came up with a statement that "External Queries are REJECTED" and "It would be better for it to ignore extern

Re: T_ANY

2010-03-19 Thread Glenn English
On Mar 19, 2010, at 3:35 PM, Kevin Oberman wrote: > PIX, you say? They used to have a problem with DNS UDP packets over 512 > bytes. (Well, it didn't have a "problem", it just blocked them. I'm not > sure what, if any code version fixes this. (I don't have any these days.) 6.3 fixed it. The comm

Re: T_ANY

2010-03-19 Thread Kevin Oberman
> From: Glenn English > Date: Fri, 19 Mar 2010 15:15:38 -0600 > Sender: bind-users-bounces+oberman=es@lists.isc.org > > > On Mar 19, 2010, at 2:30 PM, Lightner, Jeff wrote: > > > Maybe it's a difference between udp and tcp in your firewall? > > > > For most queries udp 53 is used but for

Re: T_ANY

2010-03-19 Thread Glenn English
On Mar 19, 2010, at 2:30 PM, Lightner, Jeff wrote: > Maybe it's a difference between udp and tcp in your firewall? > > For most queries udp 53 is used but for long packets it might switch to > tcp 53 - since you're doing an any you're going to get a lot more data. Don't think so. The router's

RE: T_ANY

2010-03-19 Thread Lightner, Jeff
Maybe it's a difference between udp and tcp in your firewall? For most queries udp 53 is used but for long packets it might switch to tcp 53 - since you're doing an any you're going to get a lot more data. -Original Message- From: bind-users-bounces+jlightner=water@lists.isc.org [m

T_ANY

2010-03-19 Thread Glenn English
I posted this to the postfix users list: One of my users had problems receiving from Yahoo a couple days ago. The sender (in FLA) got this: >> From: "mailer-dae...@yahoo.com" >> To: xx...@yahoo.com >> Sent: Sun, March 7, 2010 5:51:09 PM >> Subject: failure notice >> >> Hi. This is the qmail-se

Re: bind 9.6.2 with threads hangs

2010-03-19 Thread Chris Thompson
On Mar 19 2010, David Ford wrote: BIND has long had issues with threading since it started supporting threaded operation. I recommend you simply recompile without thread support. I retry compiling with thread support about twice a year and as of late last year, BIND still hung soon after resta

Re: bind 9.6.2 with threads hangs

2010-03-19 Thread David Ford
BIND has long had issues with threading since it started supporting threaded operation. I recommend you simply recompile without thread support. I retry compiling with thread support about twice a year and as of late last year, BIND still hung soon after restart with threading enabled. -david O

bind 9.6.2 with threads hangs

2010-03-19 Thread Fabien Seisen
Hi, We have several recursive cache bind servers and experiencing weird things when named is compiled with-threads: In 4 steps: 1) everything goes ok 2) for ~1h named began to answer slower (0,5ms to >100ms) and with symptoms: - load increase on the server (from 0,3 to >4) - number of recur