Re: Verify raw data within slaves on 9.9.x

2012-06-14 Thread Mark Pettit
If what you want is the basic functionality of "cat", what's wrong with "named-compilezone -with -some -options"? On Jun 14, 2012, at 11:00 AM, Walter Smith wrote: > So essentially if I'm scripting on a slave and would like to check-into-svn > changes within any particular 'raw' zone - I'll sti

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Mark Pettit
On Jun 14, 2012, at 5:54 AM, Marian Roess wrote: > Thank you for your quick answer. > >> You've possibly checked all this, but let me ask anyway: >> >> 1. Are you monitoring named logs when reload the zones? Any errors? > > Yes, I do. > > zone cs.uni-dortmund.de/IN: loaded serial 11216

Re: about the non-authoritative CNAME

2012-06-14 Thread pangj
named is paranoid. It discards the rest of the response after processing the CNAME. thanks Mark, that sounds great. -- Email/Jabber/Gtalk: pa...@riseup.net Free DNS Hosting with www.DNSbed.com ___ Please visit https://lists.isc.org/mailman/listinfo

Re: about the non-authoritative CNAME

2012-06-14 Thread Mark Andrews
In message <4fda9b90.8040...@riseup.net>, pangj writes: > > > In message<4fda970e.9080...@riseup.net>, pangj writes: > >> Hi, > >> > >> If BIND is authoritative for zone a, and is not authoritative for zone > >> b, but zone b is configured in BIND's zone file, and x.zonea.com is > >> CNAME'd to y

Re: about the non-authoritative CNAME

2012-06-14 Thread pangj
In message<4fda970e.9080...@riseup.net>, pangj writes: Hi, If BIND is authoritative for zone a, and is not authoritative for zone b, but zone b is configured in BIND's zone file, and x.zonea.com is CNAME'd to y.zoneb.com. When DNS client queries to this BIND for x.zonea.com, it gets the autho

Re: about the non-authoritative CNAME

2012-06-14 Thread Mark Andrews
In message <4fda970e.9080...@riseup.net>, pangj writes: > Hi, > > If BIND is authoritative for zone a, and is not authoritative for zone > b, but zone b is configured in BIND's zone file, and x.zonea.com is > CNAME'd to y.zoneb.com. > > When DNS client queries to this BIND for x.zonea.com, it

about the non-authoritative CNAME

2012-06-14 Thread pangj
Hi, If BIND is authoritative for zone a, and is not authoritative for zone b, but zone b is configured in BIND's zone file, and x.zonea.com is CNAME'd to y.zoneb.com. When DNS client queries to this BIND for x.zonea.com, it gets the authoritative answers for both x.zonea.com and y.zoneb.com,

Re: How to handle zones that need to be the same in all views?

2012-06-14 Thread Rodrigo Renie Braga
Hi. I've been trying to find examples on how to use TSIG to replicate several differents views to a slave server, but I could only find with two views, and I just couldn't figure out how to adapt that example to 3 or more views. Could you send me example on how to accomplish that? Thanks! 2012/

Re: Verify raw data within slaves on 9.9.x

2012-06-14 Thread Walter Smith
So essentially if I'm scripting on a slave and would like to check-into-svn changes within any particular 'raw' zone - I'll still need to rsync that 'text' zone/file from master... I wish '/usr/bin/strings' act as '/bin/cat' on this new default 'raw' format Fr

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Alexander Gurvitz
Such problems usually end up in being something stupid, for example, does "pgrep named" return ONE pid ? Or maybe you are looking at log file on one server but dig another one. Did you try to stop named and start it over ? Maybe try to enable statistic-channel and see which serial BIND reports the

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Tony Finch
Marian Röß wrote: > > That is what bothers me. Even the debug messages show, that a change is > detected and the zone is loaded into the database. Are you running one copy of named on the server? It might be that you have an old instance of the server running and serving the old zone, and a new

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Marian Röß
> But his log message showed that it loaded the correct file, or at least > a file with the correct serial number. That is what bothers me. Even the debug messages show, that a change is detected and the zone is loaded into the database. > How about this: does the server use "views"? If the zo

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Barry Margolin
In article , Jan-Piet Mens wrote: > > The serialnumber in the SOA record is lower than the serial number BIND > > pretends to load in the logs. But why would BIND log to load the right > > zone, but use an old one? > > Because it's loading the wrong file? But his log message showed that it lo

RE: Delegation bit-rot detection?

2012-06-14 Thread Frank Bulk
For the domains that we're primary and authoritative we check the listing of each customer's WHOIS record to confirm they're using the right DNS servers and then query our upstream's DNS server (which is slaving it) to make sure they're responding authoritatively. We also query a public DNS server

Re: Delegation bit-rot detection?

2012-06-14 Thread Tony Finch
Phil Mayers wrote: > > I'm wondering if anyone knows of a script that will process our logs looking > for "refused" queries, and then post-process these by tracing the delegations > and telling me what the nearest enclosing zone is, the NS records that led > inbound queries to us, and (if any of t

Re: Delegation bit-rot detection?

2012-06-14 Thread Fr34k
We are exploring similar audits and opportunities for cleanup. For domains we delegate PTRs, we track NS hostnames (e.g. IN NS  ns1.bogus.customer.tld) that have gone NXDOMAIN. If ns1.bogus.customer.tld remains NXDOMAIN for 30+ days, we remove the delegation. The idea behind 30+ days is to allo

Delegation bit-rot detection?

2012-06-14 Thread Phil Mayers
All, Over the years, we have offered DNS secondary services to various organisations. Some of those organisations are (ahem) fairly small, and lots of the delegations and zone transfers have suffered bit-rot - there are zones delegated to us that I have no records on, and certainly can't AXFR

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Jan-Piet Mens
> The serialnumber in the SOA record is lower than the serial number BIND > pretends to load in the logs. But why would BIND log to load the right > zone, but use an old one? Because it's loading the wrong file? Have you (or somebody else) changed `directory' option or path to master zone file?

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Marian Roess
Thank you for your quick answer. > You've possibly checked all this, but let me ask anyway: > > 1. Are you monitoring named logs when reload the zones? Any errors? Yes, I do. zone cs.uni-dortmund.de/IN: loaded serial 1121661332 > 2. Have you run your generated zonefiles through `named

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Jan-Piet Mens
> We have a script that generates the zonefiles for bind. This script is > working correct, i.e. the files are correctly generated and have no > syntax errors. When adding e.g a CNAME to our database, the script > generates a correct file, including this CNAME. BIND reloads this file > with its cor

BIND ignores changes in zonefiles

2012-06-14 Thread Marian Roess
Hello List, please be lenient towards me, for it is my first post on this list. I am administrator at the computing faculty at the TU Dortmund and responsible for the nameservers. Since yesterday we have the problem, that BIND is ignoring the changes in our zonefiles. This happened after updati

Re: OT: cached memory

2012-06-14 Thread Michael Graff
On Jun 13, 2012, at 5:02 PM, Dan Letkeman wrote: > I understand the concept, as I have read many documents like that. I > am more interested in a real world example of how much free memory for > caching is recommended for an average server. > > Dan. It depends on many things, but what I'd do t