Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Barry Margolin
In article , Kevin Darcy wrote: > Re-use of source ports for DNS queries is a bad security practice. I > cast my vote in favor of penalizing it, in the default configuration of > any device that responds to DNS requests. It's really not the job of a load balancer or server to force clients to

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Mark Andrews
In message <4bb4ed5a.20...@chrysler.com>, Kevin Darcy writes: > On 4/1/2010 12:37 AM, Mark Andrews wrote: > > In message<4bb1c63b.30...@ies.etisalat.ae>, Abdulla Bushlaibi writes: > > > >> We are facing query drops by using dnsperf tool from ISC testing the DNS > >> service via load balancer.

Re: how to read and answer to this mailing list

2010-04-01 Thread Matthew Pounsett
On 2010/03/31, at 04:08, Markus Feldmann wrote: > Matthew Pounsett schrieb: >> On 2010/03/30, at 19:04, Markus Feldmann wrote: >>> Warren Kumari schrieb: In the footer of every message lurks the following link: https://lists.isc.org/mailman/listinfo/bind-users >>> Yes ... i read this bu

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Kevin Darcy
On 3/30/2010 5:36 AM, Abdulla Bushlaibi wrote: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the load balancer and as per the load balancer vendor feed back, this is a

Re: Same source port queries dropped by ServerIron load balancer

2010-04-01 Thread Kevin Darcy
On 4/1/2010 12:37 AM, Mark Andrews wrote: In message<4bb1c63b.30...@ies.etisalat.ae>, Abdulla Bushlaibi writes: We are facing query drops by using dnsperf tool from ISC testing the DNS service via load balancer. Multiple queries from the same source port are being dropped partially by the lo

Re: MX records for new additional domain on existing authoritative name servers

2010-04-01 Thread Mark Andrews
In message <2aa71bedebcf80449e35b7b640700be42f8513a...@email4.uspto.gov>, "Lear , Karen (Evolver)" writes: > I'm adding a new domain to my existing authoritative name servers, and need t > o add an MX record for a device on the existing domain. That device will ser > ve both domains until we get

RE: problem with notifies

2010-04-01 Thread Lightner, Jeff
The CentOS stuff is built from RHEL sources so the basic repositories wouldn't have a newer BIND base package than RHEL. However, as noted previously the RHEL provided package includes backports of later BIND base versions for bug and security fixes. Of course you can always install a later BIND

Re: problem with notifies

2010-04-01 Thread Matus UHLAR - fantomas
On 30.03.10 23:23, fddi wrote: > CentOS 5.4 has bind version 9.3.6 and that's it. > Before I had a CentOS 4.0 which was still using 9.2.x oh. Is there any possibility to upgrade centos? And are you sure there is no possibility in upgrading BIND within centos? Otherwise I'm afraid I can recommend y

Re: how to read and answer to this mailing list

2010-04-01 Thread Chris Hills
On 30/03/2010 23:43, Markus Feldmann wrote: > normally i am using the gmane mailing list server to post and read mails > from mailing lists, but this mailing list doesn't appear in gmane. The group you are looking for is gmane.network.dns.bind.user. Posted through gmane.