Re: 9.9.1 continues to sign with inactive KSK

2012-05-25 Thread Axel Rau
Am 25.05.2012 um 14:16 schrieb Tony Finch: > Axel Rau wrote: >> >> The tags of the KSKs with their dates are (set with dnssec-settime): >> --- >> [framail.de/KSK/1699/8(A:2012-05-23T17:55:02, I:2012-05-27T17:55:02, >> D:2012-05-28T17:55:02)] >> [framail.de/KSK/46210/8(A:2012-05-20T16:55:03, I:

RE: multiple ints: views or separate records?

2012-05-25 Thread Lightner, Jeff
As far as influence it seems you could restrict the connections on virtual IPs to specific subnets so that they don’t have a choice. This can be done via ACLs in the views and/or via firewall rules (e.g. in iptables if this were a Linux host). From: bind-users-bounces+jlightner=water@lists

multiple ints: views or separate records?

2012-05-25 Thread Jonathan Reed
Hi, I have a few systems with multiple physical and virtual interfaces. One system has a single A record but im considering splitting it up. I'd like to persuade users to talk with a specific interface depending mostly on the app and sometimes from the subnet where their request originates. I want

Re: different between views and having multiple instances

2012-05-25 Thread Barry Margolin
In article , "Spain, Dr. Jeffry A." wrote: > Rather than running multiple bind instances on one server, is virtualization > an option for you? Thus you could build multiple virtual machines each > running a single bind instance. Seems like overkill if BIND is the only thing you're running on

Re: 9.9.1 continues to sign with inactive KSK

2012-05-25 Thread Tony Finch
Axel Rau wrote: > > The tags of the KSKs with their dates are (set with dnssec-settime): > --- > [framail.de/KSK/1699/8(A:2012-05-23T17:55:02, I:2012-05-27T17:55:02, > D:2012-05-28T17:55:02)] > [framail.de/KSK/46210/8(A:2012-05-20T16:55:03, I:2012-05-24T16:55:03, > D:2012-05-25T16:55:03)] > ---

Re: Operation cancelled Error

2012-05-25 Thread Ben
Hi, I tried all things to avoid current problem, but still same.Can we have information that why bind shows "Operation canceled" error in named.run file? and why bind does not take full power?when i do load test and same time watching rndc status command , it only tries to reach to 6000-6500

9.9.1 continues to sign with inactive KSK

2012-05-25 Thread Axel Rau
Hi all, there is a KSK roll over running for framail.de. Its a inline-signing maintain configuration, upgraded fron 9.9.0. The tags of the KSKs with their dates are (set with dnssec-settime): --- [framail.de/KSK/1699/8(A:2012-05-23T17:55:02, I:2012-05-27T17:55:02, D:2012-05-28T17:55:02)] [framail

RE: different between views and having multiple instances

2012-05-25 Thread Spain, Dr. Jeffry A.
>> I need to understand the difference between configuring bind views and >> having multiple instances of bind. I have 5 network interfaces on my >> server and I want to have 2 instances of DNS server (just for testing) >> and I don't know which one to do ? > BIND views are powerful, but config