Re: Preparing for upcoming DNSSEC changes on 5/5

2010-05-01 Thread Noel Butler
On Sat, 2010-05-01 at 13:10 -0400, Server Administrator wrote: > I tried OARC's DNS Reply Size Test on two of my name servers, both on > the same network, behind the same firewall & router. > > Both came back and reported "DNS reply size limit is at least 3843" > (results below). > I'd image s

Re: Bind 9.7.0-P1 socket: file descriptor exceeds limit / assertion failure

2010-05-01 Thread Ezra Taylor
Dale: Sorry I emailed you directly. I"m sending my response to the group. Dale: The limits.conf file will only set the high and low limit when you log in. Once you log out, the open file limit will go back to its default vaule. Read the man page for limits.conf. T

Re: Master slave configuration of DNSSEC

2010-05-01 Thread Rick Dicaire
On Sat, May 1, 2010 at 11:32 AM, Sajeev Ramakrishnan wrote: > I have a question regarding configuration of DNSSEC. If I intend to sign a > particular zone which has master and a slave, would I have to sign both? No. Assuming you've correctly setup zone xfers from master to slave, the actual zone

Preparing for upcoming DNSSEC changes on 5/5

2010-05-01 Thread Server Administrator
I tried OARC's DNS Reply Size Test on two of my name servers, both on the same network, behind the same firewall & router. Both came back and reported "DNS reply size limit is at least 3843" (results below). Is 3843 close enough to 4096 to keep me safe next Wednesday (May 5th)? If not, do the re

Master slave configuration of DNSSEC

2010-05-01 Thread Sajeev Ramakrishnan
Hi all, I have a question regarding configuration of DNSSEC. If I intend to sign a particular zone which has master and a slave, would I have to sign both? If yes , how would I accomplish this? Will I have to sign both the master and the slave zone with the same set of keys (public and priv

Re: Misconfigured slave?

2010-05-01 Thread Sten Carlsen
On 01/05/10 15:24, Matus UHLAR - fantomas wrote: > On 29.04.10 18:23, Sten Carlsen wrote: > >> Delegation is not in order as I see it: >> > >> ;; ANSWER SECTION: >> letharion.se.172800INNS85.227.194.156.letharion.se. >> letharion.se.172800INNSns1

DNS + DHCP cooperation

2010-05-01 Thread marco.borsat...@libero.it
Hi to all. Sorry for my bad english. For pure self-educational, not professional, purposes, I am studying how to configure a server with several services operating on it. For my experiment I'm using VirtualBox 3.1.x on a WinXP host with 3 FreeBSD guests; one acts as a DHCP + DNS server; the othe

Re: Misconfigured slave?

2010-05-01 Thread Matus UHLAR - fantomas
On 29.04.10 18:23, Sten Carlsen wrote: > Delegation is not in order as I see it: > ;; ANSWER SECTION: > letharion.se.172800INNS85.227.194.156.letharion.se. > letharion.se.172800INNSns1.letharion.se. someone thought putting an IP addres after NS is correct.