Re: newb alert: how to make v4 and v6 "A" records resolve to same website

2010-07-14 Thread Karl Auer
On Wed, 2010-07-14 at 22:04 -0400, Joseph S D Yao wrote: > > but how we transform the A record in > There is no such translation. Rather, there used to be, but it has been > deprecated (that is, it's not supposed to be used any more). The IPv4-compatible IPv6 address is indeed deprecated, bu

Re: newb alert: how to make v4 and v6 "A" records resolve to same website

2010-07-14 Thread Joseph S D Yao
On Thu, Jul 15, 2010 at 03:05:32AM +0200, fakessh wrote: ... > yes this is theoretical. This is the standard reply to dig with the > correct > > but how we transform the A record in > > this is a mathematical formula, how simple and without RTFM > > I compile my kernel is only ipv4 is

Re: newb alert: how to make v4 and v6 "A" records resolve to same website

2010-07-14 Thread fakessh
On Wed, 14 Jul 2010 17:12:21 -0400, Alan Clegg wrote: > On 7/14/2010 4:47 PM, Bill Buhlman wrote: > >> I am just now playing with IPv6 and wondering about how to make an IPv6 >> record resolve to the same website as the IPv4 A record. Probably a >> simple thing but how? > > Assign the

Re: newb alert: how to make v4 and v6 "A" records resolve to same website

2010-07-14 Thread Alan Clegg
On 7/14/2010 4:47 PM, Bill Buhlman wrote: > I am just now playing with IPv6 and wondering about how to make an IPv6 > record resolve to the same website as the IPv4 A record. Probably a > simple thing but how? Assign the to the IPv6 address of the given host... ie: baremetal.wetworks.o

newb alert: how to make v4 and v6 "A" records resolve to same website

2010-07-14 Thread Bill Buhlman
Hi, I am just now playing with IPv6 and wondering about how to make an IPv6 record resolve to the same website as the IPv4 A record. Probably a simple thing but how?   Thanks, Bill ___ bind-users mailing list bind-users@lists.isc.org https:

Re: zone syntax question

2010-07-14 Thread Lyle Giese
You don't have an origin nor an A record for ns.example.com. I would replace example.com in the SOA with @ and you are missing the space between the authoritive name server and the email address. Also missing a period at the end of the email address. I kept my time periods in seconds since that is

Re: zone syntax question

2010-07-14 Thread Hauke Lampe
- Original message - > example.com.              IN SOA  [...] >                  IN          NS          ns.example.com. >                  IN          MX 10    ns.example.com. The A record for ns.example.com is missing from your zone. > Will my proposed set up work on the "old

zone syntax question

2010-07-14 Thread CT
old zone file --- $ORIGIN . $TTL 3600 example.com IN SOA ns.example.com. root.example.com ( 2010071402 ; serial 10800 ; refresh (3 hours) 3600 ; retry (1 hour)

recursing stop at about 1000 clients

2010-07-14 Thread Kebba Foon
Hi List i have been having issues with my dns server for a while now, my server suddently stops answering to queries. i notice that this happen when every my recursive clients is more that a thousand, as per the result of rndc status. any help about this will highly be welcome Thanks Kebba _

RE: Slowness and timeouts resolving qa.pay.gov

2010-07-14 Thread Lear, Karen (Evolver)
1. I run the recursive servers. 2. RHEL 4.0 running BIND 9.6.1-P3 3. timeouts or slow responses from dig qa.pay.gov occur maybe 1 in 3 or 4 tries. 4. Not having the same issue with other requests. Otherwise, the campus would be screaming about Internet slowness/timeouts. 5. I don't see anything s

Re: ad flag for RRSIG queries

2010-07-14 Thread Casey Deccio
I think the issue here is that the authenticity of an RRSIG RR doesn't really make sense without the RRset it covers, and RRSIG themselves are not signed (RFC 4035 section 2.2). The RRSIGs returned by the cache are there initially because they exist (as well as the RRsets they cover), but not beca

Re: Slowness and timeouts resolving qa.pay.gov

2010-07-14 Thread Warren Kumari
On Jul 14, 2010, at 9:54 AM, Lear, Karen (Evolver) wrote: My recursive DNS servers are intermittently timing out and giving slow responses to qa.pay.gov. I haven't noticed problems with any other sites. How can I nail down where the problem is? You are going to have to start by providing

Slowness and timeouts resolving qa.pay.gov

2010-07-14 Thread Lear, Karen (Evolver)
My recursive DNS servers are intermittently timing out and giving slow responses to qa.pay.gov. I haven't noticed problems with any other sites. How can I nail down where the problem is? From my home, on comast.net, I don't have slowness or timeouts resolving qa.pay.gov. Thx, k _

Re: ad flag for RRSIG queries

2010-07-14 Thread Kalman Feher
Using the ORG trust anchor from the ITAR yields the following result on 9.7.1 (no P1 patch). No initial time out. # dig +dnssec -t RRSIG www.forfunsec.org ; <<>> DiG 9.7.1 <<>> +dnssec -t RRSIG www.forfunsec.org ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ; EDNS: version

Re: ad flag for RRSIG queries

2010-07-14 Thread Tony Finch
On Wed, 14 Jul 2010, Chris Thompson wrote: > > With 9.7.1-P1 (and a trust anchor for dlv.isc.org) on a local workstation > > dig +dnssec -t RRSIG www.forfunsec.org @127.0.0.1 > > initially times out. But after doing > > dig +dnssec -t ANY www.forfunsec.org @127.0.0.1 > > the same command reports

Re: Bind 9.4.3-P3 on Solaris 10 Hang

2010-07-14 Thread Dennis Clarke
> hi. > > I'm satoshi. > > I use BIND 9.4.3. > > Same situation was generated in my DNS server. > > Did you solve this problem? > > I would like you to teach when doing because it solved it. > > Regards > Just upgrade to 9.7.1-P1 on Solaris. There are free packages ready to run at Blastwave.org

Re: ad flag for RRSIG queries

2010-07-14 Thread Kalman Feher
Using bind 9.7.1. w/ IANA test bed and not DLV: dig +dnssec rrsig www.iis.se ; <<>> DiG 9.7.1 <<>> +dnssec rrsig www.iis.se ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49621 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT

Re: ad flag for RRSIG queries

2010-07-14 Thread Chris Thompson
On Jul 13 2010, Doug Barton wrote: On Tue, 13 Jul 2010, Marco Davids (SIDN) wrote: Hi, Can anyone explain to me why the 'ad'-flag is set for this query? dig +dnssec -t RRSIG www.forfunsec.org I'm using 9.7.1-P1 with dlv and I'm not seeing the AD flag on that. What version of BIND are you

Re: ad flag for RRSIG queries

2010-07-14 Thread Marco Davids (SIDN)
On 07/14/10 00:43, Doug Barton wrote: Can anyone explain to me why the 'ad'-flag is set for this query? dig +dnssec -t RRSIG www.forfunsec.org >>> >> I use BIND 9.7.0rc1, configured to work with the IANA testbed. > I'd be interested to see what happens if you upgrade to the latest

Bind 9.4.3-P3 on Solaris 10 Hang

2010-07-14 Thread satoshi takano
hi. I'm satoshi. I use BIND 9.4.3. Same situation was generated in my DNS server. Did you solve this problem? I would like you to teach when doing because it solved it. Regards ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc