Guidelines for role separations forwarding vs authoritative

2016-07-07 Thread Mik J
Hello, I have a bind DNS that is authoritative for many zones and that same system is also forwarding.I plan to split these two functions on two different systems. Have some of you done this task ? Do you have any guidelines or advices ? I'm thinking about migrating the forwarding functionality to

no valid signature found - but where do the queries come from?

2016-07-07 Thread lejeczek
hi users, I'm getting lot of below in log: validating @0x7f53140149a0: ccnr-winsrv1.xxx.private.other.dom.my.dom A: bad cache hit (uk.my.dom/DS) validating @0x7f5314015630: ccnr-winsrv1.xxx.private.other.dom.my.dom : bad cache hit (uk.my.dom/DS) error (broken trust chain) resolving 'ccn

Re: bind issue

2016-07-07 Thread Vlad Shpolyanskiy
On Thu, Jul 7, 2016 at 5:28 PM, Tony Finch wrote: > Vlad Shpolyanskiy wrote: > > > Yep, I'm able to query servers directly, so it's not a network problem. > > Are you running dig on the resolver itself? > Yep. ___ Please visit https://lists.isc.org/mai

Re: bind issue

2016-07-07 Thread Tony Finch
Vlad Shpolyanskiy wrote: > Yep, I'm able to query servers directly, so it's not a network problem. Are you running dig on the resolver itself? Tony. -- f.anthony.n.finchhttp://dotat.at/ - I xn--zr8h punycode Biscay: Variable becoming west or northwest, 3 or 4, occasionally 5 later. Sligh

Re: bind issue

2016-07-07 Thread Vlad Shpolyanskiy
Hi Tony. Yep, I'm able to query servers directly, so it's not a network problem. On Thu, Jul 7, 2016 at 1:56 PM, Tony Finch wrote: > Vlad V. Shpolyanskiy wrote: > > > > I have problems resolving zone retn.net. > > It works for me... > > > I guess that bind does not like name server's IP ending

Re: bind issue

2016-07-07 Thread Tony Finch
Vlad V. Shpolyanskiy wrote: > > I have problems resolving zone retn.net. It works for me... > I guess that bind does not like name server's IP ending with zero. > But that's only my suggestion. Are you able to query the authoritative servers directly? If not, you have a network problem not a DN

bind issue

2016-07-07 Thread Vlad V. Shpolyanskiy
Hi All! I have FreeBSD 10.3-RELEASE + Bind 9.9/9.10/9.11 (just checked all versions, the issue reproduces for all of them) installed, firewall disabled. I have problems resolving zone retn.net. The dig returns: dig +trace +additional retn.net ; <<>> DiG 9.10.4-P1 <<>> +trace +additional retn.n