Re: slow lookup to non-existent host

2010-10-15 Thread Barry Margolin
In article , Eric Ritchie wrote: > When doing a nslookup of a non-existent host on the same network as > the bind servers, there is a delay. If I do the same nslookup from a > host on a different network, the response is immediate. My guess is that the server allows recursion for clients on

Re: Reverse Configuration

2010-10-15 Thread Barry Margolin
In article , João Alberto Kuchnier wrote: > Ari, > > I fixed it to use only one reverse file. Like this below: > > zone "0-15.101.198.200.in-addr.arpa" { > type master; > file "/etc/bind/rev"; > allow-transfer { slave; }; > }; > > The rev file is like this: > > ; 101

slow lookup to non-existent host

2010-10-15 Thread Eric Ritchie
When doing a nslookup of a non-existent host on the same network as the bind servers, there is a delay. If I do the same nslookup from a host on a different network, the response is immediate. host a is on the same network as bind servers, host b is on different network: hostb$ nslookup dev

Re: more flexible serial number handling in dnssec-signzone

2010-10-15 Thread Niobos
On 2010-10-15 20:23, Jukka Pakkanen wrote: > 15.10.2010 20:54, Niobos kirjoitti: >> What's the advantage of using a date anyway? I too can see when a zone >> was last edited, even down to the second, by watching the RRSIG(SOA) >> timing. > > Time usually goes to one direction only, forward... so

Re: more flexible serial number handling in dnssec-signzone

2010-10-15 Thread Jukka Pakkanen
15.10.2010 20:54, Niobos kirjoitti: What's the advantage of using a date anyway? I too can see when a zone was last edited, even down to the second, by watching the RRSIG(SOA) timing. Time usually goes to one direction only, forward... so using date/time makes sure you are always incrementing

Re: more flexible serial number handling in dnssec-signzone

2010-10-15 Thread Ben McGinnes
On 16/10/10 4:54 AM, Niobos wrote: > > What's the advantage of using a date anyway? I too can see when a zone > was last edited, even down to the second, by watching the RRSIG(SOA) timing. Python 2.6.5 (r265:79359, Mar 24 2010, 01:32:55) [GCC 4.0.1 (Apple Inc. build 5493)] on darwin Type "help",

Re: Reverse Configuration

2010-10-15 Thread Niobos
On 2010-10-15 17:14, João Alberto Kuchnier wrote: > Dispite of that, I'm having some problems with reverse DNS. MxToolBox, > for example, is saying that my reverse DNS is not configured. That's because it isn't: if I query for 3.101.198.200.in-addr.arpa (i.e. the reverse lookup for IP 200.198.101.

Re: more flexible serial number handling in dnssec-signzone

2010-10-15 Thread Niobos
On 2010-10-15 19:38, Jay Ford wrote: > I found myself in need of more flexibility in the way dnssec-signzone > handled SOA serial numbers, so I hacked in a way to have the new serial > number generated by calling strftime(3) with a user-specified time > format. I was on the verge of doing something

more flexible serial number handling in dnssec-signzone

2010-10-15 Thread Jay Ford
I found myself in need of more flexibility in the way dnssec-signzone handled SOA serial numbers, so I hacked in a way to have the new serial number generated by calling strftime(3) with a user-specified time format. For example dnssec-signzone -N '%Y%m%d1' ... will generate a serial number

Re: Reverse Configuration

2010-10-15 Thread João Alberto Kuchnier
Ari, I fixed it to use only one reverse file. Like this below: zone "0-15.101.198.200.in-addr.arpa" { type master; file "/etc/bind/rev"; allow-transfer { slave; }; }; The rev file is like this: ; 101.198.200.in-addr.arpa $ORIGIN 0-15.101.198.200.IN-ADDR.ARPA. $TTL864

Re: Reverse Configuration

2010-10-15 Thread Ari Constancio
2010/10/15 João Alberto Kuchnier : > Hello Everyone! > > I have 6 domains configured in only one server. Is this a problem? Is > bether to create one file for each domain or can I create one file for > all of them? > > Dispite of that, I'm having some problems with reverse DNS. MxToolBox, > for exa

Reverse Configuration

2010-10-15 Thread João Alberto Kuchnier
Hello Everyone! I have 6 domains configured in only one server. Is this a problem? Is bether to create one file for each domain or can I create one file for all of them? Dispite of that, I'm having some problems with reverse DNS. MxToolBox, for example, is saying that my reverse DNS is not config

Re: No cache for NS RR in public DNS

2010-10-15 Thread Mark Andrews
In message <912627.28306...@web15706.mail.cnb.yahoo.com>, "Tech W." writes: > =0A=0A--- On Fri, 15/10/10, Mark Andrews wrote:=0A=0A> From= > : Mark Andrews =0A> Subject: Re: No cache for NS RR in publi= > c DNS=0A> To: "Tech W." =0A> Cc: bind-us...@isc.org= > =0A> Received: Friday, 15 October, 20

Re: No cache for NS RR in public DNS

2010-10-15 Thread Tech W.
--- On Fri, 15/10/10, Mark Andrews wrote: > From: Mark Andrews > Subject: Re: No cache for NS RR in public DNS > To: "Tech W." > Cc: bind-us...@isc.org > Received: Friday, 15 October, 2010, 9:21 PM > > In message <811222.51900...@web15706.mail.cnb.yahoo.com>, > "Tech W." writes: > > Hello, >

RE: No cache for NS RR in public DNS

2010-10-15 Thread Lightner, Jeff
You're saying its getting the records because they are cached at org? -Original Message- From: bind-users-bounces+jlightner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Mark Andrews Sent: Friday, October 15, 2010 9:21 AM To: Tech W. Cc

Re: DNS Propagation

2010-10-15 Thread João Alberto Kuchnier
Stephane, I have three bind servers. One internal and two (master and slave) for external queries. On master named.conf.options, slave is in forwarders list with OpenDNS e my ISP DNS servers. This option is causing this issues? João K. Em Qui, 2010-10-14 às 21:21 -0600, Stephane Bortzmeyer escre

Re: No cache for NS RR in public DNS

2010-10-15 Thread Mark Andrews
In message <811222.51900...@web15706.mail.cnb.yahoo.com>, "Tech W." writes: > Hello, > > like this domain: > > blogchina.org > > I can't get its NS RR in public DNS: > > dig blogchina.org ns @8.8.8.8 > > get nothing. > > But it does work correctly. > for example, query the record: > > dig u

Re: No cache for NS RR in public DNS

2010-10-15 Thread Niobos
On 2010-10-15 10:52, Tech W. wrote: > Hello, > > like this domain: > > blogchina.org > > I can't get its NS RR in public DNS: > > dig blogchina.org ns @8.8.8.8 > > get nothing. >From my perspective, blogchina.org has 12 authoritative name servers (as reported by a0.org.afilias-nst.info). ns1.d

Re: Integrating BIND9 with external graphing like Cacti

2010-10-15 Thread Phil Mayers
On 13/10/10 15:50, Phil Mayers wrote: On 13/10/10 15:16, Eivind Olsen wrote: Has anyone here made use of the XML statistics interface in BIND9, to get some numbers into Cacti (or another similar tool)? If so, how, and which numbers did you feel were worth turning into graphs? Yes. We have a s

No cache for NS RR in public DNS

2010-10-15 Thread Tech W.
Hello, like this domain: blogchina.org I can't get its NS RR in public DNS: dig blogchina.org ns @8.8.8.8 get nothing. But it does work correctly. for example, query the record: dig udb.yy.blogchina.org works! How to setup Bind for this? Thanks! __