BIND statistics

2015-04-16 Thread nor masri sahri
Hi all, currently im doing network research and have to involve DNS in my simulation. I go through the BIND 9 Administrator Reference documentation and found very useful stats info for my research area. I have one question, for example, QryDuplicate field. According to documentation, this is type o

Re: Suppress log entry...

2015-04-16 Thread SH Development
On 26 zones I don’t think the load will be a problem. A few seconds on reload time won’t affect me one way or the other. Regardless, I have changed the webmin command to rndc reload. Jeff > On Apr 14, 2015, at 6:05 PM, Stuart Browne > wrote: > >> On 14.04.15 07:36, SH Development wrote: >

Re: DNS anycast node monitor

2015-04-16 Thread Bob Harold
We use ExaBGP to query the DNS process locally and advertise/withdraw routes. We use BFD between the server and the router to detect link failure (or server crash): The BFD (Bidirectional Forwarding Detection) protocol is designed to provide rapid detection of communication failures between two de

Re: RPZ Question

2015-04-16 Thread Bob McDonald
Requested information: options { directory "/opt/incontrol/dns/db"; allow-query { 127.0.0.1; rfc1918-nets; }; also-notify { 172.26.100.10 port 5053 ; 172.26.100.11 ; }; listen-on { 127.0.0.1; }; listen-on { 172.26.99.160; }; listen-on-v6 { none; }; masterfile-format tex

Re: RPZ Question

2015-04-16 Thread Mukund Sivaraman
Hi Bob On Thu, Apr 16, 2015 at 12:26:41PM -0500, Bob McDonald wrote: > I'm using RPZ to return "fake" addresses for hosts. Although it seems > to work well for A records, I'm questioning the way it processes CNAME > records. > > Shown below is the output from DIG. Both records are in RPZ. However

RPZ Question

2015-04-16 Thread Bob McDonald
I'm using RPZ to return "fake" addresses for hosts. Although it seems to work well for A records, I'm questioning the way it processes CNAME records. Shown below is the output from DIG. Both records are in RPZ. However, you'll notice that the first DIG returns a NXDOMAIN response. The CNAME targe