initial lookup fails every time

2014-07-11 Thread Tony Publiski
Hello, I'm hoping someone has seen this before. I'm running a couple of BIND 9.8.2 DNS servers and having an issue with them for some reason. The servers end up failing to lookup on the initial lookup of a domain that hasn't been previously cached every time. If you immediately retry, the loo

Re: slave zone files unreadable

2014-07-11 Thread Alan Clegg
On 7/11/14, 9:41 PM, Reindl Harald wrote: > i am one of that people because no other software > is flexible enough or comes with dependency hell nsupdate If BIND is installed, no dependencies and about as flexible as you can get. AlanC signature.asc Description: OpenPGP digital signature ___

Re: Caching Nameserver and BIND RPM Compatibility

2014-07-11 Thread Mike Hoskins (michoski)
-Original Message- From: Mark Andrews Date: Friday, July 11, 2014 at 8:41 PM To: Mike Hoskins Cc: "bind-users@lists.isc.org" Subject: Re: Caching Nameserver and BIND RPM Compatibility >Not every *important* fix is a *security* fix. > >OS vendor that just backport security fixes are doin

Re: slave zone files unreadable

2014-07-11 Thread Reindl Harald
Am 12.07.2014 03:08, schrieb Mark Andrews: > If we could get people away from wanting to use a editor on master > files directly we would. The practice is highly error prone even > for experts. uhm people wrote interfaces to generate them :-) i am one of that people because no other software is

Re: slave zone files unreadable

2014-07-11 Thread Mark Andrews
In message , Barry Margolin writes: > In article , > Evan Hunt wrote: > > > On Fri, Jul 11, 2014 at 12:12:22PM -0400, John Wobus wrote: > > > In cases analogous to this, software often saves both > > > text and binary, and when initializing, uses mtime to > > > decide whether it can safely use

Re: slave zone files unreadable

2014-07-11 Thread Evan Hunt
On Fri, Jul 11, 2014 at 08:23:34PM -0400, Barry Margolin wrote: > BIND already assumes mtime is reliable -- if you do "ndc reload", it > only reloads zone files whose mtimes are newer than when the zone was > previously loaded. Of course, but it *checks them for validity* when it loads them. If

Re: Caching Nameserver and BIND RPM Compatibility

2014-07-11 Thread Mark Andrews
Not every *important* fix is a *security* fix. OS vendor that just backport security fixes are doing their customers a disservice. We issue -P's because security issues require timely fixes. We expect OS maintainers to actually include our maintainence fixes in their maintainence releases. BIN

Re: slave zone files unreadable

2014-07-11 Thread Barry Margolin
In article , Evan Hunt wrote: > On Fri, Jul 11, 2014 at 12:12:22PM -0400, John Wobus wrote: > > In cases analogous to this, software often saves both > > text and binary, and when initializing, uses mtime to > > decide whether it can safely use the binary. Some resources > > are spent storing t

Re: own IPv6 zones but no IPv6 uplink

2014-07-11 Thread Alan Clegg
On 7/11/14, 7:19 PM, Mark Andrews wrote: > For the record it isn't the zone. It's enabling IPv6 locally without > having a working upstream link. You would get that message without > the zone being configured. Or you could run named with the "-4" option, but I do like the idea of a tunnel bette

Re: own IPv6 zones but no IPv6 uplink

2014-07-11 Thread Mark Andrews
In message <53c009d4.4000...@imperial.ac.uk>, Phil Mayers writes: > On 11/07/14 16:45, Steffen Sledz wrote: > > We have a local DNS server providing local IPv6 zones (fd44:...). > > > > The server itself is reachable via IPv4 and IPv6 but has no IPv6 uplink. > > > > With our current configuration

Re: slave zone files unreadable

2014-07-11 Thread Evan Hunt
On Fri, Jul 11, 2014 at 12:12:22PM -0400, John Wobus wrote: > In cases analogous to this, software often saves both > text and binary, and when initializing, uses mtime to > decide whether it can safely use the binary. Some resources > are spent storing the extra file and admins have yet > another

Re: Caching Nameserver and BIND RPM Compatibility

2014-07-11 Thread Mike Hoskins (michoski)
-Original Message- From: Asai Date: Friday, July 11, 2014 at 12:56 PM To: "bind-users@lists.isc.org" Subject: Caching Nameserver and BIND RPM Compatibility >Greetings, > >We're setting up caching-nameserver on an existing BIND instance. The >version of BIND is 9.7. Is there a specific co

Caching Nameserver and BIND RPM Compatibility

2014-07-11 Thread Asai
Greetings, We're setting up caching-nameserver on an existing BIND instance. The version of BIND is 9.7. Is there a specific compatible version of caching-nameserver RPM that's compatible with 9.7? The latest one available in the yum repos on this particular server (CentOS 5.8) is 9.3.6-20.P

Re: slave zone files unreadable

2014-07-11 Thread John Wobus
In cases analogous to this, software often saves both text and binary, and when initializing, uses mtime to decide whether it can safely use the binary. Some resources are spent storing the extra file and admins have yet another way to screw things up, but the strategy does have benefits. John W

Re: own IPv6 zones but no IPv6 uplink

2014-07-11 Thread Phil Mayers
On 11/07/14 16:45, Steffen Sledz wrote: We have a local DNS server providing local IPv6 zones (fd44:...). The server itself is reachable via IPv4 and IPv6 but has no IPv6 uplink. With our current configuration everything works well, but we've a lot of errors in the logfile: "Jul 11 17:39:48 z

own IPv6 zones but no IPv6 uplink

2014-07-11 Thread Steffen Sledz
We have a local DNS server providing local IPv6 zones (fd44:...). The server itself is reachable via IPv4 and IPv6 but has no IPv6 uplink. With our current configuration everything works well, but we've a lot of errors in the logfile: "Jul 11 17:39:48 zk223 named[5383]: error (network unreachab

Re: recover missing journal files from running server

2014-07-11 Thread Tony Finch
Phil Pennock wrote: > > Seeing little things like this: > > deleting db.spodhuis.org.signed.jnl > deleting db.spodhuis.org.signed > deleting db.spodhuis.org.jnl > deleting db.spodhuis.org.jbk > > worry me. > > Is there any way to get back the on-disk state files for the > auto-main

Re: DLV dnssec setup

2014-07-11 Thread Wolfgang Rosenauer
Hello all, first let me thank you for your patience. On Fri, Jul 11, 2014 at 10:47 AM, Mark Andrews wrote: > > In message > > , Wolfgang Rosenauer writes: >> All but one request succeeded: >> s15418965:~ # dig dnskey org +dnssec @199.19.56.1 +ignore +norec >> >> ; <<>> DiG 9.9.4-rpz2.13269.14

Re: DLV dnssec setup

2014-07-11 Thread Mark Andrews
In message , Wolfgang Rosenauer writes: > On Fri, Jul 11, 2014 at 1:32 AM, Mark Andrews wrote: > > > > Then all of the following should succeed. Please let the > > list know how you go. > > > > dig soa . @198.41.0.4 +norec > > dig soa . @198.41.0.4 +dnssec +norec