Re: any requests

2013-06-03 Thread Phil Mayers
Leonard Mills wrote: >If your some of your clients are SMTP relays, then ANY is the default >lookup for an MX and is perfectly normal. > Not correct. This is only done by some brokenware. The vast majority of mtas do correct MX and a/ lookups. And as has been pointed out elsewhere in the t

Re: any requests

2013-06-03 Thread Novosielski, Ryan
Quite correct (sorry for the top post). I'm surprised, but glad to have learned something. The only difference in the cases I do are that they're MS DNS and the zones I normally use that trick for are forwarded. - Original Message - From: Barry Margolin [mailto:bar...@alum.mit.edu] Se

Re: any requests

2013-06-03 Thread Barry Margolin
In article , "Novosielski, Ryan" wrote: > If it were not already in the cache, I would not need to refresh the cache. > Are you absolutely certain? If so, it is possible that this is a difference > between BIND and AD DNS (I'm generally trying to refresh AD DNS caches), but > I'm nearly certa

Re: any requests

2013-06-03 Thread Novosielski, Ryan
If it were not already in the cache, I would not need to refresh the cache. Are you absolutely certain? If so, it is possible that this is a difference between BIND and AD DNS (I'm generally trying to refresh AD DNS caches), but I'm nearly certain I've used this to update a cached entry on a BIN

Re: any requests

2013-06-03 Thread Barry Margolin
In article , "Novosielski, Ryan" wrote: > Not in my experience -- in fact, I often do an ANY query to refresh the > cache. That will work if the name is not currently in the cache -- the caching server will query the auth server, and get everything from there. But if it already has the name

Re: any requests

2013-06-03 Thread Novosielski, Ryan
Not in my experience -- in fact, I often do an ANY query to refresh the cache. From: Chris Buxton [mailto:cli...@buxtonfamily.us] Sent: Monday, June 03, 2013 08:47 PM To: Leonard Mills Cc: bind-users@lists.isc.org Subject: Re: any requests If you have mail relays acting this way, you'd better

Re: any requests

2013-06-03 Thread Chris Buxton
If you have mail relays acting this way, you'd better give them a dedicated DNS server to use for recursive lookups, because otherwise that's going to periodically fail. If a host has both an MX record and an A record, and if the A record is in cache, the ANY lookup will just get the A record,

Re: any requests

2013-06-03 Thread Leonard Mills
If your some of your clients are SMTP relays, then ANY is the default lookup for an MX and is perfectly normal. Much better from the point of view of the mail servers to do one lookup instead of several. Len > > From: hugo hugoo >To: Vernon Schryver ; "bind

Re: Queries using forwarders

2013-06-03 Thread Warren Kumari
On Jun 3, 2013, at 4:31 PM, John Miller wrote: > Hi Mike, > > To keep my answer simple, if BIND is set up to allow recursion, and gets a > recursive query for a zone it's not authoritative for, it'll: > > 1) Answer from cache > 2) pass the query off to the configured forwarders > 3) If the fo

Re: Queries using forwarders

2013-06-03 Thread Kevin Darcy
The point of being authoritative is to have a full copy of the zone, so that one is basically autonomous, not dependent on anyone else to resolve names in the zone. In BIND terms, that means "type master" or "type slave". That's why authoritative zones "override" forwarding, since forwarding is

Re: Queries using forwarders

2013-06-03 Thread John Miller
Hi Mike, To keep my answer simple, if BIND is set up to allow recursion, and gets a recursive query for a zone it's not authoritative for, it'll: 1) Answer from cache 2) pass the query off to the configured forwarders 3) If the forwarders are unavailable, follow delegation itself to answer th

Re: any requests

2013-06-03 Thread Barry Margolin
In article , hugo hugoo wrote: > Hello, > > Thanks for your answer. > I see ANY queries from my clients (we do not use open resolvers) That's strange. Client applications shouldn't use ANY queries, because you can't be sure of which record types are in the resolver's cache. I recall reading

Re: Queries using forwarders

2013-06-03 Thread Steven Carr
If the records which are being requested are in the DNS server's cache then it may return the records directly from cache (depends on your configuration). If the record isn't in the cache it will attempt to fetch it and return it to the client, it will then be placed in the cache so subsequent quer

Re: does zone trump forward?

2013-06-03 Thread Kevin Darcy
Why would you use forwarding over links that are "neither fat nor reliable"? Are you a masochist? Replication of the data is much recommended over such links... As for your "pecking order", what distinction are you drawing between forwarding and recursion? Forwarding is recursive. The high-lev

Queries using forwarders

2013-06-03 Thread Ward, Mike S
Hello all, I was trying to follow the thread on the NXDOMAIN and got lost. :) I have a question about using forwarders. If the DNS that is using forwarders receives a query for a zone it's not authoritative for even if it's in the same network, does it go to the forwarders for zone information?

RE: any requests

2013-06-03 Thread hugo hugoo
Hello, Thanks for your answer. I see ANY queries from my clients (we do not use open resolvers) I do not see why these kind of queries are present. Moreover, the cache servers only anbswer with its cache content. Is this normal or must the cache query the authoritztive server to fetch all the

RE: does zone trump forward?

2013-06-03 Thread Alan Shackelford
I agree with Len. Whenever we merge a new location into our network, and the circuit is neither fat nor reliable, I make their DNS forward queries for our internal zones to us, keep authority for their own zones, and do recursion for everything else. This allows us to serve the users as we slowl