forwarder is ignored when authoritative zone is added

2012-10-25 Thread Frank Even
I've recently had an issue that I'm having some issues finding information on solving. I have internal DNS resolvers...they act as recursive name servers for general internet queries, but we have forwarders explicitly defined for specific internal zones being served by other name servers. My conf

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-25 Thread Mark Andrews
In message , jagan padhi writes: > > Hi, > > Is it possible to configure BIND for IPV4 and IPV6 in the same server? > > Regards, > Jagan Yes. listen-on-v6 { any; }; By default it use both IPv4 and IPv6 when recursing. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia P

Re: BIND 9.9.1-P4 is now available

2012-10-25 Thread Fr34k
Hello Jeremy, Thank you for your reply. >> Let me define what "hung" means in our experience:  We find that named is >> running but will not respond to queries, "rndc status" will respond with >> output but that output shows that named is not processing any queries (see >> below), other rndc com

Re: ISC Bind in Active Directory

2012-10-25 Thread Kevin Darcy
On 10/24/2012 6:02 PM, Phil Mayers wrote: Hell, if you've got WINS running and broadcast netbios, I think it's still possible to log in with *no* working DNS at all. At the risk of getting *totally* off-topic, no-one who cares about security or about broadcast traffic on their LANs would ev

Re: BIND 9.9.1-P4 is now available

2012-10-25 Thread Jeremy C. Reed
> Let me define what "hung" means in our experience:  We find that named is > running but will not respond to queries, "rndc status" will respond with > output but that output shows that named is not processing any queries (see > below), other rndc commands appear to work as well (e.g., "rndc dumpd

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-25 Thread Michael Hoskins (michoski)
-Original Message- From: jagan padhi Date: Thursday, October 25, 2012 1:21 PM To: DNS BIND Subject: Re: transparent DNS load-balancing with a Cisco ACE >Hi, > >Is it possible to configure BIND for IPV4 and IPV6 in the same server? > >Regards, >Jagan Yes, we've been doing that since w

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-25 Thread jagan padhi
Hi, Is it possible to configure BIND for IPV4 and IPV6 in the same server? Regards, Jagan On Thu, Oct 25, 2012 at 9:35 PM, John Miller wrote: > Thanks, Phil. This makes perfect sense--unlike TCP, there's nothing > inherent in UDP to make sure that packets come back from the right IP. > > T

Re: BIND 9.9.1-P4 is now available

2012-10-25 Thread Fr34k
Hello Again, I could have made my question a bit more clear as I try to understand the details behind what P4 addresses. Perhaps I am having an internal battle between logic vs. interpretation around "or".  Let me explain. I'm wondering if a named process affected by CVE-2012-5166 has sympto

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-25 Thread John Miller
Thanks, Phil. This makes perfect sense--unlike TCP, there's nothing inherent in UDP to make sure that packets come back from the right IP. Thank you also for explaining this in terms of the socket APIs. This is something I've only barely touched on--time for me to play around a bit and write

Re: BIND 9.9.1-P4 is now available

2012-10-25 Thread Fr34k
Hello, We are finding several of our recursive BIND 9.9.1-P3 servers (on Solaris 10 OS) hung and I want to be able to qualify the symptoms in order to convince others that P4 (or 9.9.2?) will (or will not) address this. Let me define what "hung" means in our experience:  We find that named is