clarification on AXFR

2010-06-02 Thread rams
Hi, During AXFR of a zone, the zone.dbfile is not created till the AXFR completes. Till AXFR completes, the file name will be some value as 456eefwfc. Is it correct behavior? Thanks & Regards, Ramesh ___ bind-users mailing list bind-users@lists.isc.org h

Re: multiple PTR RRs [dnsviz]

2010-06-02 Thread Joseph S D Yao
On Wed, Jun 02, 2010 at 03:40:31PM +, Paul Vixie wrote: > Chris Thompson writes: > > > Nothing that I can see. Maybe dnsviz can't cope with multiple PTR > > records in an RRset, as your first case has? (On the other hand it > > handles multiple A records in forward zones OK.) > > to be fair,

Re: max-cache-size query

2010-06-02 Thread Doug Barton
On 06/02/10 01:31, Techi wrote: but, my question is still not answered. Why on earth such huge defference in the number of connections on the firewall with the max-cache-size on and off? I still don't get it. Imagine the cache as a bucket. With a large bucket the chances of the answer that any

Re: DNSSEC / DLV for 2001:8b0:151:1:e2cb:4eff:fe26:6481

2010-06-02 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/06/2010 18:49:44, Casey Deccio wrote: > This has been fixed. The problem had to do with establishing a canonical > ordering of RRs within an RRset for the purposes of verifying an RRSIG. > dnspython's default comparison operators don't follow ca

Re: DNSSEC / DLV for 2001:8b0:151:1:e2cb:4eff:fe26:6481

2010-06-02 Thread Casey Deccio
On Wed, Jun 2, 2010 at 7:44 AM, Chris Thompson wrote: > On Jun 2 2010, Matthew Seaman wrote: > > I'm DNSSEC enabling the .ip6.arpa zone for my IPv6 allocation and >> registering it with dlv.isc.org. Using bind-9.7.0-p2 dnssec tools. >> >> Everything seems to be working well, but when I test usi

Re: Clarification on bind result

2010-06-02 Thread Kevin Darcy
What exactly are you expecting to see there? NS records for the root zone? Is this *non-recursive* nameserver obligated to give out NS and/or SOA records for the root zone in the Authority Section? I think not.

Re: DNSSEC / DLV for 2001:8b0:151:1:e2cb:4eff:fe26:6481

2010-06-02 Thread Casey Deccio
On Wed, Jun 2, 2010 at 8:40 AM, Paul Vixie wrote: > Chris Thompson writes: > > > Nothing that I can see. Maybe dnsviz can't cope with multiple PTR > > records in an RRset, as your first case has? (On the other hand it > > handles multiple A records in forward zones OK.) > > to be fair, multiple

[no subject]

2010-06-02 Thread Paul Vixie
Chris Thompson writes: > Nothing that I can see. Maybe dnsviz can't cope with multiple PTR > records in an RRset, as your first case has? (On the other hand it > handles multiple A records in forward zones OK.) to be fair, multiple PTR RRs is something we added in BIND gethostbyaddr() in more or

About NAT-PT

2010-06-02 Thread Lingfeng Xiong
hi all, I am trying to build a pure IPv6 network for my university. Now I wanna to build a Bind-based DNS server. Because I am using NAT-PT for IPv4 accessing, I must get the A record from my ISP's DNS server and add a special prefix to it. Could you tell me how to config my bind to do this? thx! _

Re: DNSSEC / DLV for 2001:8b0:151:1:e2cb:4eff:fe26:6481

2010-06-02 Thread Chris Thompson
On Jun 2 2010, Matthew Seaman wrote: I'm DNSSEC enabling the .ip6.arpa zone for my IPv6 allocation and registering it with dlv.isc.org. Using bind-9.7.0-p2 dnssec tools. Everything seems to be working well, but when I test using the Sandia Labs dnsviz.net tool I get inconsistent results. My m

DNSSEC / DLV for 2001:8b0:151:1:e2cb:4eff:fe26:6481

2010-06-02 Thread Matthew Seaman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm DNSSEC enabling the .ip6.arpa zone for my IPv6 allocation and registering it with dlv.isc.org. Using bind-9.7.0-p2 dnssec tools. Everything seems to be working well, but when I test using the Sandia Labs dnsviz.net tool I get inconsistent result

Re: Choosing authoritative nameservers

2010-06-02 Thread Matus UHLAR - fantomas
On 02.06.10 16:20, Elias wrote: > Does anyone know how BIND chooses which authoritative server to refer to? > When a referal returns ns1.abc.com, ns2.abc.com and ns3.abc.com, will the > recursive server randomly send out a request to either ns1, ns2 or ns3 or > is there a selection algorithm? t

Re: max-cache-size query

2010-06-02 Thread Techi
On Wed 02 of Jun 2010 00:45:42 you wrote: > One obvious solution to keeping the firewall guys happy would just be > to make them not burn state entries for the nameserver at all > Firewalls in front of nameservers cause an ungodly amount of issues > for no real benefit... I will transfer that

Choosing authoritative nameservers

2010-06-02 Thread Elias
Hi guys, Does anyone know how BIND chooses which authoritative server to refer to? When a referal returns ns1.abc.com, ns2.abc.com and ns3.abc.com, will the recursive server randomly send out a request to either ns1, ns2 or ns3 or is there a selection algorithm? I've got a problem resolving