Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread G.W. Haywood
Hi there, On Fri, 21 Jun 2013, Brian Cuttler wrote: # /usr/bin/nslint -ddd -c /etc/dns-source/named.conf-test nslint: doconf: opened /etc/dns-source/named.conf-test nslint: doconf: opened nslint.conf nslint: 0/131072 items used, 0 errors Problem - I know there are errors. It's late and I hav

Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread Brian Cuttler
Len, Following up on a hunch - I removed the "view" statement and the second view from the named.conf. I get a screen full of errors when I ran nslint. Was headed for the release notes... but my machine was out of service for several hours. Hope that I do not have to maintain a separate non-vi

Re: RPZ - how to modify NS records in answer?

2013-06-21 Thread Vernon Schryver
> From: John Horne > > dns1.plymouth.ac.uk.rpz-nsdomainCNAME *. > But the example zone file further down the page has the example: > >ns.domain.com.rpz-nsdname CNAME . > > So is 'rpz-nsdomain' wrong then in the zone file and 'rpz-nsdname' > should be used instead? "rpz-nsdomai

Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread Matus UHLAR - fantomas
On 21.06.13 13:35, Brian Cuttler wrote: # /usr/bin/nslint -ddd -c /etc/dns-source/named.conf-test nslint: doconf: opened /etc/dns-source/named.conf-test nslint: doconf: opened nslint.conf nslint: 0/131072 items used, 0 errors Looking at "nslint" output on my machine, the nslint seems to have ma

Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread Brian Cuttler
Len, Fair enough. When I mispoint the -c option or misname the file I get an error that its not found. When I change the name of a database file in in the named.conf zone definition it doesn't seem to notice. So, yes, I agree that we are reading no data, but it seems to know if its finding the

Re: How to suppress ADDITIONAL SECTION per zone

2013-06-21 Thread Lawrence K. Chen, P.Eng.
I thought I had read somewhere (which I can't locate), that additional-from-auth can be used in global or view scope. - Original Message - > On 21.06.13 02:00, blrmaani wrote: > >The additional-from-auth yes_or_no ; option is a global option. I > >would > > like to know if there is a per-

Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread Leonard Mills
Hi Brian, I don't understand why you would expect to see errors, when nslint says:     nslint: 0/131072 items used, 0 errors Zero items used/checked strongly implies zero errors can be detected. hth, Len > > From: Brian Cuttler >To: bind-users@lists.isc.org

Re: Secondary DNS question...

2013-06-21 Thread Leonard Mills
OK, Jeff, would it be possible for you to share the entire non-delivery notification as seen by one of your customers?  (You might have to establish an account at Y!, gmail, etc. for your customer to use in sending the NDN, in which case have the customer include the full headers from the NDN in

Re: DDoS or Hijacking? Some tips for you delete poisoned cache

2013-06-21 Thread Lawrence K. Chen, P.Eng.
- Original Message - > https://www.isc.org/blogs/hijacking-dns-error-ddos-what-happened-and-what-you-can-do/ > > From ISC Support Engineering staff Yeah...yesterday I did an 'rndc flush' on all my caching servers. I have a script to do 'rndc flushname ' on all our servers, but at the t

bind 2.1a3 on centos 6.4

2013-06-21 Thread Brian Cuttler
Please let me know if there is a more appropriate list. Here is a question you probably don't hear every day. Background: We are moving our DNS from a Solaris platform to Centos Action: I installed BIND 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 nslint-2.1a3-1.el6.rf.x86_64.rpm rcs sudo etc on

Re: SPF record with include:

2013-06-21 Thread Chris Buxton
On Jun 20, 2013, at 7:30 PM, Julie Xu wrote: > Hi Steven, Jason, Ged and Bind expert > > Thanks for the reply. It is great help. > > However, I need ask more. > > For this include clause to be added in, I have also need to add DKIM records. SPF and DKIM are unrelated. There is no way to refe

Re: RPZ - how to modify NS records in answer?

2013-06-21 Thread John Horne
On Fri, 2013-06-21 at 17:11 +0100, John Horne wrote: > > My understanding is that RPZ can do this, but I just cannot seem to > configure the RPZ zone file to enable this. The zone file contains: > = > $TTL 1H > @ SOA LOCALHOST. hostmaster.plymouth.ac.uk (1 1h > 15m 30d 2

RPZ - how to modify NS records in answer?

2013-06-21 Thread John Horne
Hello, Using BIND 9.9.3 I have been trying to do a little testing to see if we can modify the response for NS records. I have a test server which is a stealth secondary for our 'plymouth.ac.uk' zone. The name servers for the zone are 'dns0.plymouth.ac.uk' and 'dns1.plymouth.ac.uk'. So, 'dig plymo

Re: Secondary DNS question...

2013-06-21 Thread WBrown
> From: SH Development > No, there is definitely something going on. I shut down our > ns2.starionhost.net this morning for a while. Sure enough, emails > started bouncing from customers even though our ns1.starionhost.net > is up and on the faster machine. What exactly do the delivery fail

Re: Secondary DNS question...

2013-06-21 Thread Matus UHLAR - fantomas
On 21.06.13 08:30, SH Development wrote: No, there is definitely something going on. I shut down our ns2.starionhost.net this morning for a while. Sure enough, emails started bouncing from customers even though our ns1.starionhost.net is up and on the faster machine. depends on the error mess

Re: Secondary DNS question...

2013-06-21 Thread Steven Carr
Sounds more like your mailserver is misconfigured and not resolving DNS correctly or not failing over (what is your mail server?). Without seriously in-depth configuration/logs being posted there isn't much we can help with. Steve On 21 June 2013 14:30, SH Development wrote: > No, there is de

Re: Secondary DNS question...

2013-06-21 Thread SH Development
No, there is definitely something going on. I shut down our ns2.starionhost.net this morning for a while. Sure enough, emails started bouncing from customers even though our ns1.starionhost.net is up and on the faster machine. Jeff On Jun 21, 2013, at 5:38 AM, Matus UHLAR - fantomas wrote:

Re: Secondary DNS question...

2013-06-21 Thread Matus UHLAR - fantomas
On 20.06.13 23:02, SH Development wrote: I agree that the incoming and outgoing are different issues. I just mention it because I dealt with issues on both fronts today. The few claims that I had about email not being delivered were proved false by reviewing the logs that showed they had actual

Re: How to suppress ADDITIONAL SECTION per zone

2013-06-21 Thread Matus UHLAR - fantomas
On 21.06.13 02:00, blrmaani wrote: The additional-from-auth yes_or_no ; option is a global option. I would like to know if there is a per-zone configuration to do the same in BIND9 configuration? I couldn't find it in BIND9 ARM. What is the point of your question? -- Matus UHLAR - fantomas, u

How to suppress ADDITIONAL SECTION per zone

2013-06-21 Thread blrmaani
The additional-from-auth yes_or_no ; option is a global option. I would like to know if there is a per-zone configuration to do the same in BIND9 configuration? I couldn't find it in BIND9 ARM. Thanks! Blr ___ Please visit https://lists.isc.org/mailm