Re: bind as a service on windows "-c" option not working

2011-12-14 Thread Danny Mayer
On 12/14/2011 2:35 PM, Vbvbrj wrote: > Bind 9.8.1 P1 installed in D:\bind9. > Config files and other zone files and log files in D:\bind_config > Service configuration: Path to executable" > "D:\bind9\bin\named.exe" -c "D:\bind_config\etc\named.conf" I haven't looked at this part of the code in a

Re: dig to a nameserver from a host in particular subnet fails

2011-12-14 Thread Barry Margolin
In article , blrmaani wrote: > Our email group have been complaining about a issue of email sent by > certain users bouncing and I started debugging and found out that > those users are using email-servers in subnet1. Emails sent out by > users in subnet2 were OK. > > The email-client-hosts use

dig to a nameserver from a host in particular subnet fails

2011-12-14 Thread blrmaani
Our email group have been complaining about a issue of email sent by certain users bouncing and I started debugging and found out that those users are using email-servers in subnet1. Emails sent out by users in subnet2 were OK. The email-client-hosts use dns-recursive-resolvers depending on their

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread Kevin Oberman
On Wed, Dec 14, 2011 at 3:51 AM, babu dheen wrote: > In this case, do you think that internal users trying to send emails > directly to internet? > > Email delivery is taken care by Email Gateway device, obviously, DKIM > verification (if enabled) can only be done by Email gateway of my > company

BIND for Active directory with secure update

2011-12-14 Thread Vbvbrj
Hello. I've setup BIND to serve the requests to lan instead of Microsoft DNS by first setting bind as a secondary dns server for Microsoft DNS, copy the zones, and making the BIND the master. In order for domain member hosts to update the records of the their names in dns, I allow unsecure up

bind as a service on windows "-c" option not working

2011-12-14 Thread Vbvbrj
Bind 9.8.1 P1 installed in D:\bind9. Config files and other zone files and log files in D:\bind_config Service configuration: Path to executable" "D:\bind9\bin\named.exe" -c "D:\bind_config\etc\named.conf" named.conf has the line: directory "D:\named.conf"; If the registry key HKEY_LOCAL_MACHINE

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread SM
At 03:51 14-12-2011, babu dheen wrote: In this case, do you think that internal users trying to send emails directly to internet? No. Email delivery is taken care by Email Gateway device, obviously, DKIM verification (if enabled) can only be done by Email gateway of my company... How does in

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread Matus UHLAR - fantomas
On 14.12.11 17:21, babu dheen wrote: In this case, do you think that internal users trying to send emails directly to internet? Maybe, maybe not. DNS queries can come from many other applications. Email delivery is taken care by Email Gateway device, obviously, DKIM verification (if enabled)

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread G.W. Haywood
Hi there, On Wed, 14 Dec 2011 babu dheen wrote: > Can you tell me list of URL which size exceed 514 bytes to verify > whether my internal server truncate/return failure code when query > such URL using UDP query? You really ought to be able to do this for yourself. Find any domain using DNSSEC

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread babu dheen
In this case, do you think that internal users trying to send emails directly to internet?   Email delivery is taken care by Email Gateway device, obviously, DKIM verification (if enabled) can only be done by Email gateway of my company... How does internal client make DKIM query which uses the