Re: Last transfer time?

2010-12-03 Thread Mark Andrews
In message <20101203163608.ga47...@2bithacker.net>, Chip Marshall writes: > On 03-Dec-2010, Barry Margolin sent: > > In article , > > Chris Buxton wrote: > > > > > On Dec 1, 2010, at 12:46 PM, Chip Marshall wrote: > > > > Just curious if there's an official and accurate way to > > > > determin

Re: ZSK syntax problems bind9.7.1P2

2010-12-03 Thread Alan Clegg
On 12/3/2010 10:14 PM, Martin McCormick wrote: > Alan Clegg writes: >> dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu okstate.edu >> >> Nothing else needed since you are using the defaults... > > Thank you. I was trying to make things difficult, I guess. Yep. BIND 9.7 makes everythi

Re: ZSK syntax problems bind9.7.1P2

2010-12-03 Thread Evan Hunt
On Fri, Dec 03, 2010 at 02:55:22PM -0600, Martin McCormick wrote: > I am signing a test zone of okstate.edu and am having some > trouble with the command. The KSK went fine but when I try: > > dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu -s 7 RSASHA1 -b > 1024 -n ZONE okstate.edu

Re: ZSK syntax problems bind9.7.1P2

2010-12-03 Thread Martin McCormick
Alan Clegg writes: > dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu okstate.edu > > Nothing else needed since you are using the defaults... Thank you. I was trying to make things difficult, I guess. ___ bind-users mailing list bind-users@l

Re: Category for refused recursive queries

2010-12-03 Thread Kevin Oberman
> Date: Fri, 03 Dec 2010 13:08:23 -0800 > From: "Kevin Oberman" > Sender: bind-users-bounces+oberman=es@lists.isc.org > > I would really like to get the huge number of rejected recursive > quieries out of my logs, but I have failed, so far. I am referring to: > Dec 3 13:04:58 nsx named[67170

Re: ZSK syntax problems bind9.7.1P2

2010-12-03 Thread Alan Clegg
On 12/3/2010 9:55 PM, Martin McCormick wrote: > dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu -s 7 RSASHA1 -b > 1024 -n ZONE okstate.edu [..] > So, what should I have in that particular command to make it generate the ZSK? dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.

Category for refused recursive queries

2010-12-03 Thread Kevin Oberman
I would really like to get the huge number of rejected recursive quieries out of my logs, but I have failed, so far. I am referring to: Dec 3 13:04:58 nsx named[67170]: client xxx.yyy.68.18#39734: query (cache) '6.185.zzz.www.in-addr.arpa/PTR/IN' denied As I don't run an open resolver, I seem to

ZSK syntax problems bind9.7.1P2

2010-12-03 Thread Martin McCormick
I am signing a test zone of okstate.edu and am having some trouble with the command. The KSK went fine but when I try: dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu -s 7 RSASHA1 -b 1024 -n ZONE okstate.edu I get: dnssec-keygen: fatal: extraneous arguments Originally, the

Re: Last transfer time?

2010-12-03 Thread Chip Marshall
On 03-Dec-2010, Barry Margolin sent: > In article , > Chris Buxton wrote: > > > On Dec 1, 2010, at 12:46 PM, Chip Marshall wrote: > > > Just curious if there's an official and accurate way to > > > determine the last sucessful transfer time of a slave zone > > > from a BIND server. > > > > You

Re: Last transfer time?

2010-12-03 Thread Barry Margolin
In article , Chris Buxton wrote: > On Dec 1, 2010, at 12:46 PM, Chip Marshall wrote: > > > Just curious if there's an official and accurate way to > > determine the last sucessful transfer time of a slave zone from > > a BIND server. > > You can see the last successful refresh, whether it invo

Re: out of place mx records.

2010-12-03 Thread Matus UHLAR - fantomas
> In message <20101112143542.ga23...@fantomas.sk>, Matus UHLAR - fantomas > writes: > > what about check-mx setting, can it be also affected by this setting? On 13.11.10 10:56, Mark Andrews wrote: > As I said it is a easy fix. This just copies what the srv check does. shall this be included in