RE: 9.10.2-P2 not receiving/logging inbound queries. {REP=5.6}

2015-07-09 Thread Neil
Yes -Original Message- From: Tony Finch [mailto:fa...@hermes.cam.ac.uk] On Behalf Of Tony Finch Sent: Thursday, 9 July 2015 7:50 PM To: Neil Cc: bind-users@lists.isc.org Subject: Re: 9.10.2-P2 not receiving/logging inbound queries. {REP=5.6} Neil wrote: > > What would cause a query to no

Re: dig @server foobar +trace +recurse

2015-07-09 Thread John Miller
Even after flushing Google's cache ( >> https://developers.google.com/speed/public-dns/cache), I still get the >> same response. Does anyone have insight on +showsearch, other than the >> following ;-) >> >> ... > > "showsearch" has nothing to do with iteration or recursion. "showsearch" > is rel

RE: dig @server foobar +trace +recurse

2015-07-09 Thread Darcy Kevin (FCA)
I concur – if the requirement is to access a “special” version of the zone, which has different data than the version which is found by following the regular delegation hierarchy, then “stub” or “static-stub” is the way to go. That really is the whole _raison_d’etre_ for stub/static-stub – to ov

Re: dig @server foobar +trace +recurse

2015-07-09 Thread Tony Finch
John Miller wrote: > We use stub zones for this purpose - a forwarding zone is what you want if > you're forwarding to another _recursive_ nameserver (say for caching > purposes), but if you're just telling your recursors which authoritative > NSs to use, then stub zones are what you want. The d

Re: dig @server foobar +trace +recurse

2015-07-09 Thread John Miller
> > It's by tracing the queries down from the root zone several > times with "dig +trace" that it finally hit me what was going > on, and in retrospect it's obvious. At first I had been looking > for some kind of race condition with delegation data from the > grandparent zone getting cached, and t

Re: dig @server foobar +trace +recurse

2015-07-09 Thread Tony Finch
Anne Bennett wrote: > > But my parent (call it "example.com") *has* an A record; > they use it for their web server, I believe. Will the above > internally configured A RR not interfere with getting the > correct data for "host -t a example.com"? Or does the sentence > "These records are interna

Re: dig @server foobar +trace +recurse

2015-07-09 Thread Anne Bennett
Tony Finch recommends: >> As for the problem itself, I'll probably fix it by setting up >> a forwarding zone for my parent zone on my resolvers, to make >> sure that I always get the internal view for their data. > > Note that the target server of a forward zone should offer recursive > service

Re: dig @server foobar +trace +recurse

2015-07-09 Thread Bob Harold
On Wed, Jul 8, 2015 at 11:55 PM, John Miller wrote: ... > > > dig @8.8.8.8 trombone.org +showsearch > > ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> @8.8.8.8 > trombone.org +showsearch > ; (1 server found) > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, statu

Re: dig @server foobar +trace +recurse

2015-07-09 Thread Tony Finch
Anne Bennett wrote: > > As for the problem itself, I'll probably fix it by setting up > a forwarding zone for my parent zone on my resolvers, to make > sure that I always get the internal view for their data. Note that the target server of a forward zone should offer recursive service. You will h

Re: Single Bind (nameserver) for multiple domains (zones)

2015-07-09 Thread Tony Finch
Matthew Ceroni wrote: > > The problem I am running into is if I query that domain (devdomain.com) for > say test1.devdomain.com (which isn't present in the zone file) it ends up > query test1.devdomain.com.domain1.com. And our company domain (domain1 in > this example) returns a default IP for any

Re: 9.10.2-P2 not receiving/logging inbound queries.

2015-07-09 Thread Tony Finch
Neil wrote: > > What would cause a query to not show in any logs on BIND 9.10.2-p2, seems > 9.10.2-p2 is not receiving Is your server able to make queries over TCP? Tony. -- f.anthony.n.finchhttp://dotat.at/ Viking, North Utsire: Northwesterly 5 to 7, occasionally gale 8 at first, decreasin