Re: Akadns and Bind

2011-02-03 Thread Tory M Blue
On Thu, Feb 3, 2011 at 5:23 PM, Barry Margolin wrote: > In article SNIPPED< > www.yahoo.com.    300   IN CNAME fp.wg1.b.yahoo.com. > > And even when they did, it didn't get involved until you followed the > CNAME returned for www.yahoo.com.  Your log message above indicates an > issue just with th

Re: Akadns and Bind

2011-02-03 Thread Barry Margolin
In article , Tory M Blue wrote: > Second email in a single day, crazy. But I've had issues backing up > and just need to resolve them > > Again Bind bind-9.7.2-P3 behind F5 Loadbalancers. > > I'm running into an issue where one of the 2 servers will resolve > www.yahoo.com but the other will

Re: bind-9.7.2-P3 linux how to debug/troubleshoot query failures?

2011-02-03 Thread Barry Margolin
In article , Tory M Blue wrote: > Is there a documented method to troubleshoot, debug why a system > believes that they were unable to get an acceptable results from the > primary DNS server? Capture the DNS packets and see if you're sending to the primary in the first place and what the respo

Akadns and Bind

2011-02-03 Thread Tory M Blue
Second email in a single day, crazy. But I've had issues backing up and just need to resolve them Again Bind bind-9.7.2-P3 behind F5 Loadbalancers. I'm running into an issue where one of the 2 servers will resolve www.yahoo.com but the other will not (Same network), but both will resolve yahoo.c

RE: Again Crashed Bind

2011-02-03 Thread Juan O
Thank you very much Mark. > To: cut...@hotmail.com > CC: bind-us...@isc.org > From: ma...@isc.org > Subject: Re: Again Crashed Bind > Date: Fri, 4 Feb 2011 07:23:23 +1100 > > > Upgrade as recommended in CVE-2010-3613. > > Mark > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117,

bind-9.7.2-P3 linux how to debug/troubleshoot query failures?

2011-02-03 Thread Tory M Blue
Hey all, Well I'm reaching out as I'm at a loss. I have a distributed DNS architecture with 2 bind-9.7.2-P3 servers behind an F5 Loadbalancer. I then have another 2 behind another F5 at another location. My app servers are configured with their resolv.conf looking like: (please ignore the domain

Re: Again Crashed Bind

2011-02-03 Thread Mark Andrews
Upgrade as recommended in CVE-2010-3613. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.o

Again Crashed Bind

2011-02-03 Thread Juan O
Hello. In my company we'd got a bind v9.6.0-P1 running on a RHEL 5.4 server. Last November the named process stopped. I revised the logs and I could see: 19-Nov-2010 13:21:32.572 query.c:1769: INSIST(!dns_rdataset_isassociated(sigrdataset)) failed 19-Nov-2010 13:21:32.572 exiting (due t

Re: Please upgrade validators to at least BIND-9.7.2 before .com is signed

2011-02-03 Thread Chris Thompson
On Feb 2 2011, Evan Hunt wrote: I believe that to be the case here. I think you've found a relative of the bug that came up last April when .ARPA was signed. I blogged about that one at: http://www.isc.org/community/blog/201004/dnssec-transitions-and-signing-arpa The bug was fixed in all BIN