Re: [bind-u] RE: This list's prefix

2013-06-26 Thread Narcis Garcia
I'm receiving e-mail from people who writes to comp-protocols-dns-b...@isc.org , but I don't remember to be subscribed to a list with that address. Without this list's prefix in the subject, I don't see if I'm receiving those messages because of my subscription to "bind-users" or it's spam. Al 0

Re: named in BIND 9.9.3-P1 needs libpkcs11.so ?

2013-06-26 Thread Dennis Clarke
> You don't need --with-pkcs11 unless you're planning to use a > cryptographic accelerator > or hardware service module, and you'd have had to build a special > version of OpenSSL > for that. Remove it from the configure options and you should be fine. Did a quick rebuild and yes Sir, runs lik

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Because it would be a waste of a machine. We only host about 30 domains. The load is negligible. Jeff On Jun 26, 2013, at 11:51 PM, Mike Hale wrote: > Dude, why aren't you running your authoritative name servers on a > dedicated box or VM using a dedicated server OS? Not asking to be a >

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
Interesting, the pcap that was posted previously showed some odd errors around udp checksums, some showed valid, some showed invalid. With modern NICs it's not uncommon to see them all invalid due to checksum offloading, but the mix of valid and invalid was odd. Doug On 06/26/2013 09:58 PM,

Re: Secondary DNS question...

2013-06-26 Thread SH Development
I am running a demo of the Canit anti-spam software from Roaring Penguin Software as an appliance (ISO) inside of Virtual Box for OSX. I was getting a lot of these errors in the system logs: 6/26/13 11:38:37 PM kernel in_delayed_cksum_offset: ip_len 48640 (190) doesn't match actual length

Re: named in BIND 9.9.3-P1 needs libpkcs11.so ?

2013-06-26 Thread Evan Hunt
> This build of OpenSSL 1.0.1e was fully tested and passed all tests so I am > thinking > that an option to the build of bind is the issue here. Probably > "--with-pkcs11" . > > If I don't have that option am I totally shafted for DNSSEC ? You don't need --with-pkcs11 unless you're plannin

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
Yes, seems fine now. Can you share more information about what it was you turned off? Sounds odd, but the results speak for themselves. Doug On 06/26/2013 09:39 PM, SH Development wrote: Sure could use some direction about where to start looking. I "thought" I had everything working for the

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Sure could use some direction about where to start looking. I "thought" I had everything working for the last few years, but now I'm beginning to question how long I've had a problem. The setup is OSX running BIND 9.9.3-P1 on a static IP, no firewall, no router, just straight to the internet.

named in BIND 9.9.3-P1 needs libpkcs11.so ?

2013-06-26 Thread Dennis Clarke
# /opt/adbs/sbin/named -u named -c /etc/opt/adbs/named/named.conf -4 -d 2 -f -g -n 1 27-Jun-2013 03:43:27.243 starting BIND 9.9.3-P1 -u named -c /etc/opt/adbs/named/named.conf -4 -d 2 -f -g -n 1 27-Jun-2013 03:43:27.246 built with '--build=sparc-sun-solaris2.10' '--host=sparc-sun-solaris2.10' '

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
On 06/26/2013 06:50 PM, SH Development wrote: Okay, so I got to it sooner than I thought. So, could you take a look at: starionhost.net stariontech.com starionline.com Any one of those, but they should all be identical now and on some new secondary DNS. The delegations are now identical, an

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Okay, so I got to it sooner than I thought. So, could you take a look at: starionhost.net stariontech.com starionline.com Any one of those, but they should all be identical now and on some new secondary DNS. Jeff On Jun 26, 2013, at 8:16 PM, SH Development wrote: > Whoa...slow down guys.

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Whoa...slow down guys. I took ns2.starionhost.net offline and am in the middle of re-arranging my secondary services. Let me finish twiddling around with it in the next day or two, and I'll post a note when I'm done. THEN take a look at it. I'm curious to know if you all see any changes at t

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
On 06/26/2013 07:54 AM, Matus UHLAR - fantomas wrote: All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one even decide that? As far as

Re: servfail response message question

2013-06-26 Thread Mark Andrews
In message , Barry Margolin writes: > P.S. I read this list through the comp.protocols.dns.bind newsgroup. > Does anyone know why some messages, like Ryan's, show up with control > characters replaced by weird characters (e.g. TAB turns into daggers)? > Can something be fixed in the mail-to-ne

Re: servfail response message question

2013-06-26 Thread Barry Margolin
In article , RYAN CHERVENKA wrote: > Barry, The Ubuntu server is delegating a sub-domain to the LB. The LB is > authoritative for the domain and is responding to client requests correctly. > I removed the @ ÝIN ::1 from the db file within the primary domain and > the response was sent b

Re: servfail response message question

2013-06-26 Thread RYAN CHERVENKA
Barry, The Ubuntu server is delegating a sub-domain to the LB. The LB is authoritative for the domain and is responding to client requests correctly. I removed the @   IN ::1 from the db file within the primary domain and the response was sent back to the client from the ubuntu server. Leav

Re: Secondary DNS question...

2013-06-26 Thread Lawrence K. Chen, P.Eng.
Oops, images were too bighere's links. - Original Message - > >> All very interesting, but I'm afraid at my level of expertise on > >> DNS, I'm > >> not following. If I'm broken, how do I attempt to fix? Someone > >> mentioned > >> that our ns1.starionhost.net was not authoritative.

Re: Res_query Seg Faulting for a FQDN

2013-06-26 Thread Leonard Mills
Hello Alok, Something may have changed at the name servers for bvt-rhe63-32s.ipv6domain.com.  Right now, both ns.addpac.co.kr (61.33.161.2) and ns.addpac.com (61.33.161.2) are returning NXDOMAIN for bvt-rhe63-32s.ipv6domain.com.  The IP happily returns the SOA for ipv6domain.com using either NS

Re: Secondary DNS question...

2013-06-26 Thread Matus UHLAR - fantomas
All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one even decide that? As far as I know I haven't had any issues until now... On Ju

Re: servfail response message question

2013-06-26 Thread Barry Margolin
In article , RYAN CHERVENKA wrote: > I currently have a domain example.com authoritative on my Ubuntu server and > it is delegating gslb.example.com to my load balancer.Ý www.example.com is a > CNAME for www.gslb.example.comÝ Gslb.example.com has an NS record pointing to > the LB Client sen

Res_query Seg Faulting for a FQDN

2013-06-26 Thread Alok Raj
Hi Guys, I have one query, while querying DNS for SOA record for FQDN it is segment-faulting in centos-6.3, any clue? Pasting below the trace: [Thread debugging using libthread_db enabled] [New Thread 0xb7fe3b70 (LWP 7093)] [New Thread 0xb75e2b70 (LWP 7094)] [New Thread 0xb6be1b70 (LWP 7095)] [N

[ANNOUNCE] Netmagis 2.2.0 is available

2013-06-26 Thread Pierre DAVID
Hi, we are proud to announce the new 2.2.0 release of Netmagis: http://netmagis.org This long awaited release includes, among other new features, support for DNS views, shorter DNS zone generation latency, and a new search facility. Database schema (tables and columns) have all been trans