Re: Responses erroneously marked "invalid response"?

2012-10-04 Thread Havard Eidnes
>> So I'm sitting here scrathing my head even more confused than >> usual. Anyone have any insights? > > The SOA has the wrong owner name. Bind followed a referral for > map.media6degrees.com but the SOA wrongly says the zone apex is > media6degrees.com. > > https://lists.isc.org/pipermail/bind-us

Re: issues with BIND since a change of server

2012-10-04 Thread Thomas Manson
Hi John, Thanks... checking the syslog show me a permission issue on the rndc.key... it was bind:bind, I change it to root:bind and it works successfully now, and I don't have the 53 port issue... Many THanks John for making me check the obvious lol ;)) Regards, Thomas. On Thu, Oct 4, 2012

Re: issues with BIND since a change of server

2012-10-04 Thread Thomas Manson
Yes, firewall was checked, I've tryed without, and remote access with telnet and I could connect. Thanks for your help. Thomas. On Thu, Oct 4, 2012 at 6:27 PM, Lightner, Jeff wrote: > Have you checked the host level firewall (e.g. iptables)? > > > > > > -Original Message- > From: bind-

RE: issues with BIND since a change of server

2012-10-04 Thread Lightner, Jeff
Have you checked the host level firewall (e.g. iptables)? -Original Message- From: bind-users-bounces+jlightner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of John Miller Sent: Thursday, October 04, 2012 12:01 PM To: bind-users@list

Re: issues with BIND since a change of server

2012-10-04 Thread John Miller
Hi Thomas, Since this is Ubuntu, what does /var/log/syslog have to say about the matter? Do you have any specific configuration for rndc controls, or are you primarily using the stock Ubuntu named.conf.local and named.conf.options? John On 10/04/2012 11:27 AM, Thomas Manson wrote: Hi,

issues with BIND since a change of server

2012-10-04 Thread Thomas Manson
Hi, I had to change of server because the previous was getting old, and I had to do it very fast because of a mis-communication of my host... I'm on Ubuntu 12.04 server, x86_64. root@ns0:/etc/bind# aptitude show bind9 Package: bind9 New: yes State: installed Automatically installed: no Versi

Re: Responses erroneously marked "invalid response"?

2012-10-04 Thread Tony Finch
Havard Eidnes wrote: > So I'm sitting here scrathing my head even more confused than > usual. Anyone have any insights? The SOA has the wrong owner name. Bind followed a referral for map.media6degrees.com but the SOA wrongly says the zone apex is media6degrees.com. https://lists.isc.org/piperm

Responses erroneously marked "invalid response"?

2012-10-04 Thread Havard Eidnes
Hi, I've semi-recently updated a public resolver to running a bit newer version of BIND, currently at 9.8.4-P3. I've noticed that quite a number of query responses it receives are logged with "DNS format error" ... "invalid response". Some semi-random examples picked from the log: apis.markets.

rndc protocol

2012-10-04 Thread Matthew Horsfall (alh)
Hello, I was curious if the underlying protocol used by the rndc command was well documented and if writing clients against it (rather than using the rndc utility) was advisable or not. Thanks, -- Matthew Horsfall (alh) ___ Please visit https://lis

Re: format error: CNAME response for DNSKEY RR

2012-10-04 Thread Tony Finch
Mark Andrews wrote: > > Why does named complain in this manner? > > It's fallout from the type code roll from KEY to DNSKEY. KEY can > exist beside CNAME so the CNAME is not followed for KEY, the same > is not supposed to be true for DNSKEY. I'll open a bug ticket for > this. Thanks! Tony. --