Fwd: Fwd: disabling "Any" requests

2012-07-17 Thread Dns Administrator
Hi I though that it was a bit drastic removing the requests with iptables I altered the code slightly - it appears to have the desired effect ns_query_start() from query.c if (dns_rdatatype_ismeta(qtype)) { switch (qtype) { case dns_rdatatype_any:

RE: DNSSEC for NS delegation record

2012-07-17 Thread Marc Lampo
Hello, (the “easiest” way) 1) The admins of sub1.testing.net. should generate ZSK and KSK. à The “parent” cannot do this for the “child” 2) You do not need the “key file*s*” of the child, in the parent. If, by using the plural form, you mean both public (.key) and private (.private)

rndc stats command

2012-07-17 Thread Ben
Hi, As per man page and my understanding rndc stats writes a current named statistics into defined file in named.conf so suppose, if i run rndc stats command and then i take required information from named statistics file. And after some time, ( after 5 minutes or approx.) when i do again r

Re: port 53 tcp/udp

2012-07-17 Thread Doug Barton
On 07/17/2012 03:07 PM, nex6 wrote: > I told them to unblock port 53 tcp then call me Good answer. :) ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.

Re: DNSSEC for NS delegation record

2012-07-17 Thread Mark Andrews
In message <349af545493290449749762c5f03929a0cf3bcc...@hq-mb-08.ba.ad.ssa.gov>, "Khuu, Linh Contractor" writes: > Hi, > > I have questions about how to configure the DNS with NS delegation record o= > nce it's signed. > > My DNS server is the parent zone, for example, "testing.net" and is signe

Re: port 53 tcp/udp

2012-07-17 Thread nex6
* Lance Bailey [2012-07-17 14:50:43 -0700]: > On Tuesday, July 17, 2012 2:43:34 PM UTC-7, Mark Andrews wrote: > > In message <20120717194840.GA3773@glasya2>, nex6 writes: > > > when does bind or dns in general use tcp and when does it use udp? > > > > When it needs to. TCP support is NOT option

Re: port 53 tcp/udp

2012-07-17 Thread nex6
* Mark Andrews [2012-07-18 07:43:34 +1000]: > > In message <20120717194840.GA3773@glasya2>, nex6 writes: > > when does bind or dns in general use tcp and when does it use udp? > > When it needs to. TCP support is NOT optional. > > > from what i have read, from the client intial request if un

Re: port 53 tcp/udp

2012-07-17 Thread Mark Andrews
In message <20120717194840.GA3773@glasya2>, nex6 writes: > when does bind or dns in general use tcp and when does it use udp? When it needs to. TCP support is NOT optional. > from what i have read, from the client intial request if under 512b > come in on UDP port 53, if and depending on the l

port 53 tcp/udp

2012-07-17 Thread nex6
when does bind or dns in general use tcp and when does it use udp? from what i have read, from the client intial request if under 512b come in on UDP port 53, if and depending on the local resolver in needs to retry it *could* be a tcp port 53 request? now thats client to name server; what abo

Fordwarder and stub records

2012-07-17 Thread nex6
when should you use forwarding records/zones or stub records/zones? and how does using them effect client lookups? or, effect the name server doing the forwarding? for example, say you have a two groups who both have the same parent... say: parent.com but group1 @ group1.parent.com owns all

redhat package versions [ was Re: 9.8.2 Assertion Failures ]

2012-07-17 Thread Michael Hoskins (michoski)
turning a dead horse into a wet spot on the ground (in-line)... -Original Message- From: Oscar Ricardo Silva Date: Tuesday, July 17, 2012 7:13 AM To: "'bind-users@lists.isc.org'" Subject: Re: 9.8.2 Assertion Failures >Bailey, Morgan [BT] wrote: >> Hi all >> >> >> >> We have recentl

Re: A lot of queries from a customer.

2012-07-17 Thread Paul Wouters
On Tue, 17 Jul 2012, Drunkard Zhang wrote: I don´t find the ways to limit of queries per minutes on this customer Is it possible in Bind9 a filtering these queries, to limit the responses We use iptables doing this, which works fine for us: iptables -A INPUT -p udp -m state --state NEW -m conn

Re: A lot of queries from a customer.

2012-07-17 Thread Drunkard Zhang
2012/7/17 Fr34k : > We have been monitoring the same. > > Google found an unrelated, yet similar, issue a few years ago: > http://pages.cs.wisc.edu/~plonka/netgear-sntp/#ToC16 > > >> Hi, >> >> Recently, I have been watching on one DNS server a lot of queries from a >> customer to ¨time-b.netgear.co

Re: A lot of queries from a customer.

2012-07-17 Thread Fr34k
We have been monitoring the same. Google found an unrelated, yet similar, issue a few years ago:  http://pages.cs.wisc.edu/~plonka/netgear-sntp/#ToC16 > > From: Rafael Molina >To: bind-users@lists.isc.org >Sent: Thursday, June 28, 2012 8:30 AM >Subject: A lo

DNSSEC for NS delegation record

2012-07-17 Thread Khuu, Linh Contractor
Hi, I have questions about how to configure the DNS with NS delegation record once it's signed. My DNS server is the parent zone, for example, "testing.net" and is signed with DNSSEC. My zone configuration is as follows: $TTL 36000 $INCLUDE /var/named9/dnssec-testing/Ktesting.net..+007+32934.

Re: 9.8.2 Assertion Failures

2012-07-17 Thread Oscar Ricardo Silva
Bailey, Morgan [BT] wrote: Hi all We have recently made some major changes to our DNS infrastructure. This involved consolidating servers and standardizing on a single RHEL6 platform. We currently running the latest RHEL6 packaged BIND release of 9.8.2 (9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6

Re: 9.8.2 Assertion Failures

2012-07-17 Thread Mark Andrews
In message , "Bailey, Morgan [BT]" writes: > > Hi all > > We have recently made some major changes to our DNS infrastructure. This i= > nvolved consolidating servers and standardizing on a single RHEL6 platform.= > We currently running the latest RHEL6 packaged BIND release of 9.8.2 (9.8= >

9.8.2 Assertion Failures

2012-07-17 Thread Bailey, Morgan [BT]
Hi all We have recently made some major changes to our DNS infrastructure. This involved consolidating servers and standardizing on a single RHEL6 platform. We currently running the latest RHEL6 packaged BIND release of 9.8.2 (9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6). Lately on one of our busier