Re: Secondary DNS question...

2013-06-25 Thread SH Development
No, the box is hanging right off the internet on a static IP. Jeff On Jun 26, 2013, at 12:38 AM, Frank Bulk wrote: > Do you have a box such as a firewall or load-balancer sitting in front of > ns1? > > Frank > > -Original Message- > From: bind-users-bounces+frnkblk=iname@lists.is

Re: servfail response message question

2013-06-25 Thread Ryan
I took out the ipv6 info in the zone DB file for this to work. I added it back into the file and it worked and then three queries later it gave the servfail response. It doesn't like the record. Thank you, Ryan On Jun 25, 2013, at 8:42 PM, Mark Andrews wrote: > > In message <13722061

RE: Secondary DNS question...

2013-06-25 Thread Frank Bulk
Do you have a box such as a firewall or load-balancer sitting in front of ns1? Frank -Original Message- From: bind-users-bounces+frnkblk=iname@lists.isc.org [mailto:bind-users-bounces+frnkblk=iname@lists.isc.org] On Behalf Of SH Development Sent: Tuesday, June 25, 2013 8:35 PM To:

Re: Secondary DNS question...

2013-06-25 Thread SH Development
All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one even decide that? As far as I know I haven't had any issues until now... Jeff

Re: servfail response message question

2013-06-25 Thread Mark Andrews
In message <1372206137.34187.yahoomail...@web161406.mail.bf1.yahoo.com>, RYAN C HERVENKA writes: > > I currently have a domain example.com authoritative on my Ubuntu server > and it is delegating gslb.example.com to my load balancer. > > www.example.com is a CNAME for www.gslb.example.com > Gslb.e

servfail response message question

2013-06-25 Thread RYAN CHERVENKA
I currently have a domain example.com authoritative on my Ubuntu server and it is delegating gslb.example.com to my load balancer.  www.example.com is a CNAME for www.gslb.example.com  Gslb.example.com has an NS record pointing to the LB Client sends query for www.example.com to Ubuntu DNS serve

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 17:20 +0100, Phil Mayers wrote: > On 25/06/13 16:53, John Horne wrote: > > > servers. However, there is a whole load of muttering that Microsoft and > > AD won't like that; it's all integrated with each other; running the DNS > > zone on Linux servers will be a problem with t

Re: Answers from cache or authority section?

2013-06-25 Thread Matus UHLAR - fantomas
On 25.06.13 15:32, John Horne wrote: If, however, you run a general query for the NS records: dig 163.141.in-addr.arpa ns then you will get an ANSWER section which lists several of our 'ils' servers: == ;; ANSWER SECTION: 163.141.in-addr.arpa. 3600 IN NSils022.uopnet.ply

Re: Answers from cache or authority section?

2013-06-25 Thread Chris Buxton
On Jun 25, 2013, at 7:32 AM, John Horne wrote: > Hello, > > I am having a bit of trouble understanding what happens when, in this > instance, a DNS reverse lookup occurs. Our site has the class-C > 141.163.0.0 address range. If I perform reverse lookups from inside or > outside our site, then th

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 17:07 +0100, Steven Carr wrote: > On 25 June 2013 16:53, John Horne wrote: > > So what I now do not understand is why (at home) I can do several > > reverse lookups for different IP addresses, and they all give me an > > answer. Likewise if I do something like: > > > >dig

Re: Answers from cache or authority section?

2013-06-25 Thread Phil Mayers
On 25/06/13 16:53, John Horne wrote: servers. However, there is a whole load of muttering that Microsoft and AD won't like that; it's all integrated with each other; running the DNS zone on Linux servers will be a problem with the MS servers etc etc. I'm sure you know this, but just in case -

Re: Answers from cache or authority section?

2013-06-25 Thread Steven Carr
On 25 June 2013 16:53, John Horne wrote: > So what I now do not understand is why (at home) I can do several > reverse lookups for different IP addresses, and they all give me an > answer. Likewise if I do something like: > >dig -x 141.163.99.16 @8.8.8.8 > > I get a non-authoritative answer. I

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 10:46 -0400, Barry Margolin wrote: > > In addition, the authoritative answer may contain an Authority section. > These nameservers take precedence over the NS records from the > delegation -- the assumption is that the authoritative server knows its > domain's nameservers m

Re: Answers from cache or authority section?

2013-06-25 Thread Barry Margolin
In article , John Horne wrote: > So I think my question is what is the resolver doing? Does it use cached > NS records seen in the AUTHORITY section, or does it use NS records seen > in an ANSWER section? Or is it working its way down until it receives an > authoritative answer ('aa' flag set),

Answers from cache or authority section?

2013-06-25 Thread John Horne
Hello, I am having a bit of trouble understanding what happens when, in this instance, a DNS reverse lookup occurs. Our site has the class-C 141.163.0.0 address range. If I perform reverse lookups from inside or outside our site, then they seem to work fine. However, we are currently investigating

Re: Secondary DNS question...

2013-06-25 Thread Matus UHLAR - fantomas
On 24.06.13 07:41, Frank Bulk wrote: Interesting to note that querying for ANY does return an SOA. I can't explain that behavior. On 24.06.13 14:54, Matus UHLAR - fantomas wrote: I can guess a kind of DNS filter/firewall. Some l3 switches or load balancers tend to produce strange results too.