Re: how to generate the name of a .nzf file?

2012-03-20 Thread Tom Mueller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Jan-Piet, >> The question is: how to generate the name of a nzf file? >> Is there a tool or an easy way? > > Maybe something like this? (Untested) > > echo -n internal | shasum -a 256 | awk '{printf "%16.16s\n", $1}' > Great - it works. :-

Re: Loadbalance caching dns server

2012-03-20 Thread Daniel McDonald
On 3/20/12 7:15 AM, "trm asn" wrote: > > > On Tue, Mar 20, 2012 at 4:40 PM, Stefan Certic > wrote: >> Hi, >> >> That can be achieved using iptables: >> >> iptables -A PREROUTING -i eth0 -p tcp --dport 53 -m state --state NEW -m nth >> --counter 0 --every N --packet 0 -j DNAT --to-destina

Re: Name Resolution issue with one domain

2012-03-20 Thread Eliezer Croitoru
On 21/03/2012 00:23, Mark Andrews wrote: dig -b 0.0.0.0#53www.dubaiairport.com @svr-b003.dubaiairport.com well i do hope they will change it cause it's really a pain to see that. glad the mystery was found. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonpr

Re: Name Resolution issue with one domain

2012-03-20 Thread Mark Andrews
Stupid firewall rules in front of the nameservers. They block traffic sent from port 53 which is the port lots of nameservers used to send query traffic. When will firewall administrators learn that the source ports can be anything, that they are not significant, and that blocking traffic based

Re: Name Resolution issue with one domain

2012-03-20 Thread Eliezer Croitoru
On 20/03/2012 21:48, babu dheen wrote: Dear Anad, Thanks for the advise. Will follow these guidelines in future for sure. Kindly let me know how can i fix this problem? If its related remote domain NS issue, i shouldn't be able to resolve the domain from anywhere continously. But i am able to r

Re: Name Resolution issue with one domain

2012-03-20 Thread babu dheen
Dear Anad, Thanks for the advise. Will follow these guidelines in future for sure. Kindly let me know how can i fix this problem?  If its related remote domain NS issue, i shouldn't be able to resolve the domain from anywhere continously. But i am able to resolve it from internet without any i

Re: how to generate the name of a .nzf file?

2012-03-20 Thread Doug Barton
On 3/20/2012 7:26 AM, Tom Mueller wrote: > File-based backups of the old system are of course too old and a > recovery by this way requires zone updates since last backup time It would take you less work, and provide you more benefits, to properly back up your stuff in the first place. hth, Dou

Re: how to generate the name of a .nzf file?

2012-03-20 Thread Eliezer Croitoru
On 20/03/2012 16:26, Tom Mueller wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, perhaps my idea is quite stupid. I think about following scenario: A primary nameserver is script-managed via rdnc addzone/delzone and nsupdate with data from a database. I know, rndc generates nzf files,

Re: how to generate the name of a .nzf file?

2012-03-20 Thread Jan-Piet Mens
> The question is: how to generate the name of a nzf file? > Is there a tool or an easy way? The code is in lib/dns/view.c if (allow) { char buffer[ISC_SHA256_DIGESTSTRINGLENGTH + sizeof(NZF)]; isc_sha256_data((void *)view->name, strlen(view->name), buffer)

how to generate the name of a .nzf file?

2012-03-20 Thread Tom Mueller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, perhaps my idea is quite stupid. I think about following scenario: A primary nameserver is script-managed via rdnc addzone/delzone and nsupdate with data from a database. I know, rndc generates nzf files, which are named by hash values of the cor

Re: Loadbalance caching dns server

2012-03-20 Thread trm asn
On Tue, Mar 20, 2012 at 4:40 PM, Stefan Certic wrote: > Hi, > > That can be achieved using iptables: > > iptables -A PREROUTING -i eth0 -p tcp --dport 53 -m state --state NEW -m > nth --counter 0 --every N --packet 0 -j DNAT --to-destination > 192.168.1.98:53 > iptables -A PREROUTING -i eth0 -p tc

Re: Loadbalance caching dns server

2012-03-20 Thread Kevin Darcy
On 3/20/2012 5:19 AM, Matus UHLAR - fantomas wrote: On 20.03.12 14:41, trm asn wrote: Is there any mechanism to load balance Caching-DNS server. For example.. Cache-DNS1 : 192.168.1.98 Cache-DNS2: 192.168.1.99 Client : 192.168.1.199 When 192.168.1.199 send 10 request to query cache-dns then

Re: Loadbalance caching dns server

2012-03-20 Thread Stefan Certic
Hi, That can be achieved using iptables: iptables -A PREROUTING -i eth0 -p tcp --dport 53 -m state --state NEW -m nth --counter 0 --every N --packet 0 -j DNAT --to-destination 192.168.1.98:53 iptables -A PREROUTING -i eth0 -p tcp --dport 53 -m state --state NEW -m nth --counter 0 --every N --pack

Re: Loadbalance caching dns server

2012-03-20 Thread Amir Haris Ahmad
You also could try PF in BSD http://www.openbsd.org/faq/pf/pools.html -- "If someone feels that they had never made a mistake in their life, then it means they had never tried a new thing in their life" Regards, Amir Haris Ahmad M.Sc. in Computer Networking CNE6, MCP, GSEC, GCIH, LPIC1, CISE,

Re: Loadbalance caching dns server

2012-03-20 Thread Matus UHLAR - fantomas
On 20.03.12 14:41, trm asn wrote: Is there any mechanism to load balance Caching-DNS server. For example.. Cache-DNS1 : 192.168.1.98 Cache-DNS2: 192.168.1.99 Client : 192.168.1.199 When 192.168.1.199 send 10 request to query cache-dns then this 10 request will be send to each Cache-DNS server

Re: reverse dns for IPV6 ranges

2012-03-20 Thread Peter Andreev
2012/3/20 michoski > On 3/19/12 11:58 AM, "Peter Andreev" wrote: > > 2012/3/19 hugo hugoo > >> Jay, > >> > >> - Can you give me an example of such configuration? > >> > >> As anyone else some examples of IPV6 reverse configuration used in > >> production environment? > >> > >> Thanks for shari

Re: Name Resolution issue with one domain

2012-03-20 Thread babu dheen
Dear Michael,    If its related remote domain NS issue, i shouldn't be able to resolve the domain from anywhere continously. But i am able to resolve it from internet without any issue. Problem is with only from our company BIND DNS server only.   Below is the BIND GW Logs:   client 10.1.1.3#6358