Re: Silently drop queries for AAAA records

2010-12-07 Thread Niobos
On 2010-12-07 23:31, David A. Evans wrote: > > I'm in the mood to prove a point. I have a very poorly written > application that is generating a few hundred queries per second of > completely bogus records before attempting a lookup of the correct > A records. This is because the a

Re: Troubleshooting slow DNS lookup

2010-12-07 Thread Rianto Wahyudi
Hi Mark, Thanks for your quick response ! > Standards Track. > RFC 2671 Extension Mechanisms for DNS (EDNS0) > RFC 3226 DNSSEC and IPv6 A6 aware server/resolver message size requirements Unfortunately RFC is not considered as good enough ... unless if we can find an actual proof that can be repl

Re: Troubleshooting slow DNS lookup

2010-12-07 Thread Mark Andrews
In message , Rian to Wahyudi writes: > Our network team are quite reluctant to make any changes on the FWSM > in regards to DNS inspection. > So it seems that we are stuck with maximum UDP packet of 512 byte. > > Unfortunately, I do not have much evidence (ie user complains) to > escalate this iss

Re: Troubleshooting slow DNS lookup

2010-12-07 Thread Rianto Wahyudi
Our network team are quite reluctant to make any changes on the FWSM in regards to DNS inspection. So it seems that we are stuck with maximum UDP packet of 512 byte. Unfortunately, I do not have much evidence (ie user complains) to escalate this issue much further except from few number of users w

Re: Black berry

2010-12-07 Thread John Payne
I can guarantee that ns1.nameserver.net was not provided to this user by anyone in a position to do so authoritatively. On Dec 7, 2010, at 10:23 AM, Greg Whynott wrote: > i'm wondering if domain.net and ns1.nameserver.net are defaults which haven't > been configured yet. but he is a senior

Re: Silently drop queries for AAAA records

2010-12-07 Thread Karl Auer
On Tue, 2010-12-07 at 16:31 -0600, David A. Evans wrote: > I would like to silently drop the record lookups instead > of responding back with NXDOMAIN. Thusly generating a performance hit > as the application waits 2 seconds for the reply. Responding with NXDOMAIN will have a defini

Silently drop queries for AAAA records

2010-12-07 Thread David A. Evans
I'm in the mood to prove a point. I have a very poorly written application that is generating a few hundred queries per second of completely bogus records before attempting a lookup of the correct A records. This is because the application was compiled with a IPv6 interface enab

Re: Private Zones and Deligation bind9.7.2

2010-12-07 Thread Jay Ford
On Mon, 6 Dec 2010, Barry Margolin wrote: In article , Jay Ford wrote: On Mon, 6 Dec 2010, Martin McCormick wrote: the config for this private zone is: zone "r.ds" { type master; file "/etc/namedb/master/r.ds.zone"; allow-update { key updsrv; }; allow-query

Re: Black berry

2010-12-07 Thread Greg Whynott
i'm wondering if domain.net and ns1.nameserver.net are defaults which haven't been configured yet. but he is a senior sysadmin, i'm sure he considered that already… -g On Dec 7, 2010, at 7:37 AM, Matus UHLAR - fantomas wrote: > On 07.12.10 11:06, Ejaz wrote: >> We have problem in sending mai

Re: Black berry

2010-12-07 Thread Matus UHLAR - fantomas
On 07.12.10 11:06, Ejaz wrote: > We have problem in sending mail emails when using black berry device, > problem is like user cannot send emails either inside or outside the domain > when some one connected to our ISP and use our DNS server, > > Does it require any special configuration of bind i

Re: Fwd: Problems with Bind-Kerberos-Windows-Linux

2010-12-07 Thread Phil Mayers
On 12/07/2010 07:53 AM, Jürgen Dietl wrote: Hello Sergiu, I tried to put in 2 credential Entries in the named.conf: tkey-gssapi-credential "DNS/test.loc"; (that was in before) tkey-gssapi-credential "USER/test.loc", (new entry) tkey-domain "TEST.LOC"; This is all wrong. There are two principa

Black berry

2010-12-07 Thread Ejaz
Hello all We have problem in sending mail emails when using black berry device, problem is like user cannot send emails either inside or outside the domain when some one connected to our ISP and use our DNS server, Does it require any special configuration of bind in named.conf file for