got "BAD (HORIZONTAL) REFERRAL" error

hi all, i have setup a bind server,  host the zone faisco.com, and work fine several daysbut one of my new client said that they can't resolve my domain, meanwhile they can resolve other web site without any problem.i run 'dig' on their machine, this is the result:; <<>> DiG 9.4.0 <<>> www.fais

MySQL BIND SDB

Hello, Is mysql Bind SDB suitable for a production application? We have many dozens of domains in the bind servers, what's the best way to maintain the zones and records? Thanks. ___ bind-users mailing list bind-users@lists.isc.org https://lis

Re: DNSSEC with 9.7.2-P2

In message <20101115140938.ga17...@evileye.atkac.brq.redhat.com>, Adam Tkac wri tes: > On Sat, Nov 13, 2010 at 11:35:57AM +1100, Mark Andrews wrote: > > > > In message <4cdd6467.9050...@imperial.ac.uk>, Phil Mayers writes: > > > On 12/11/10 15:45, Lightner, Jeff wrote: > > > > > > > For Producti

Re: error (broken trust chain) resolving

On Mon, Nov 15, 2010 at 6:31 AM, Casey Deccio wrote: > > Well, I'm curious as to why you're not getting the AD bit set for the > negative proof of existence for bondedsender.org/DS. After a review of NSEC3 showed that this particular behavior is expected because org has been signed using NSEC3 wi

RE: how to see ALL NS records in a zone file with dig

Jay, I see what you're saying. I was missing the difference in the feedback from the recurse / no recurse options. Makes sense. Thanks very much for the excellent help! Marty > Date: Mon, 15 Nov 2010 10:57:40 -0600 > From: jay-f...@uiowa.edu > To: sun-g...@live.com > Subject: RE: how

Re: one remaining error message in named log startup messages

On Fri, 12 Nov 2010, Stewart Dean wrote: > "adjusted limit on open files from 1024 to 1048576" > The named service works just fine. > which says to add a line: > named soft nofile 4096 > to /etc/security/limits.conf > > Did that, then tried both restarting named and rebooting

Re: error (broken trust chain) resolving

On Mon, Nov 15, 2010 at 6:31 AM, Casey Deccio wrote: > On Mon, Nov 15, 2010 at 3:36 AM, Brian J. Murrell > wrote: >> >> Was any of that information I posted in the previous message useful?  If not, >> I'd be happy to gather some more. >> > > Well, I'm curious as to why you're not getting the AD

Re: error (broken trust chain) resolving

On Mon, Nov 15, 2010 at 3:36 AM, Brian J. Murrell wrote: > > Was any of that information I posted in the previous message useful?  If not, > I'd be happy to gather some more. > Well, I'm curious as to why you're not getting the AD bit set for the negative proof of existence for bondedsender.org/D

Re: DNSSEC with 9.7.2-P2

On Sat, Nov 13, 2010 at 11:35:57AM +1100, Mark Andrews wrote: > > In message <4cdd6467.9050...@imperial.ac.uk>, Phil Mayers writes: > > On 12/11/10 15:45, Lightner, Jeff wrote: > > > > > For Production (RPM based system) you should use RHEL or CentOS which > > > has a much longer life cycle. (Sp

Re: DNSSEC with 9.7.2-P2

On Fri, 12 Nov 2010, Phil Mayers wrote: On 12/11/10 12:49, David Forrest wrote: and, on checking named.conf, I found the entry for br. as: trusted-keys { "br." 257 3 5 "AwEAAdDoVnG9CyHbPUL2rTnE22uN66gQCrUW5W0NTXJBNmpZXP27w7PMNpyw3XCFQWP/XsT0pdzeEGJ400kdbbPqXr2lnmEtWMjj3Z/ejR8mZbJ/6OWJQ

Re: error (broken trust chain) resolving

Brian J. Murrell interlinx.bc.ca> writes: > > Casey Deccio deccio.net> writes: > > > > Do you get a NOERROR response with the AD bit set? > > Yup: > ... Was any of that information I posted in the previous message useful? If not, I'd be happy to gather some more. _

Re: libbind error

On 12/11/2010 22:46, Jack Tavares wrote: I believe I found a bug in the libbind code. Is this the correct place to report that? Thanks Jack, According to http://www.isc.org/software/libbind (found via search): Bug reports may be sent to libbind-b...@isc.org