Re: how to log client MAC address?

2016-08-06 Thread Frank Pikelner
For a local subnet, enable BIND logging, then write a script that scans the BIND logs for client IP addresses and match those against your BIND server's ARP cache (arp -a). Run the script periodically to get your MAC addresses. Again only for clients on a local subnet. - Original Message --

Re: how to log client MAC address?

2016-08-06 Thread Dennis Clarke
On 08/06/2016 10:01 PM, Frank Pikelner wrote: MAC addresses are layer 2 and you only see those on your subnet, i.e. most likely your default gateway, etc. So the answer is no. Unless he only cares about internal clients on a local subnet. dc ___ Pl

Re: how to log client MAC address?

2016-08-06 Thread Frank Pikelner
MAC addresses are layer 2 and you only see those on your subnet, i.e. most likely your default gateway, etc. So the answer is no. Frank From: "Fima Leshinsky" To: bind-users@lists.isc.org Sent: Saturday, 6 August, 2016 17:42:59 Subject: how to log client MAC address? I'd like to log t

Re: how to log client MAC address?

2016-08-06 Thread Paul Kosinski
If the client is at all remote (i.e. the request passes through a router), the MAC address isn't preserved. On Sat, 6 Aug 2016 17:42:59 -0700 Fima Leshinsky wrote: > I'd like to log the client's MAC address. Is this possible? Could > someone point me in the right direction? > > Thank you! > Fi

how to log client MAC address?

2016-08-06 Thread Fima Leshinsky
I'd like to log the client's MAC address. Is this possible? Could someone point me in the right direction? Thank you! Fima ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-use

Re: help

2016-08-06 Thread Mark Andrews
The server is validating. It asks whether mi-testq03.pt/DS exists and gets back a answer that says "no there is no DS record and by the way there is no zone either" via the hdq view. If you want the softlayer view to see mi-testq03.pt add it to the view as a full blown zone (slave, master) or us

Re: allow-query does not seem to be working

2016-08-06 Thread S Carr
On 6 August 2016 at 21:41, Frank Even wrote: > If an IP is not allowed as part of an "allow-query" statement, should the > name server still be returning any responses? I would have expected the response to be one of REFUSED. ___ Please visit https://li

allow-query does not seem to be working

2016-08-06 Thread Frank Even
I have a group of servers serving out multiple addresses via anycast. I've been made aware that an IP outside of our network is hitting the boxes with queries, and we're returning data to the client. With allow-query and allow-recursion locked to our subnets, this outside host is still getting re

forcing clients to TCP

2016-08-06 Thread Fima Leshinsky
I'd like to force clients to use TCP. The closest I've come to a solution is a patch shared by another member back in 2013: http://lists.redbarn.org/pipermail/ratelimits/2013-May/000418.html It seems like setting the TC flag is what I'm after but curious if there's a way to do this via configurati

RE: help

2016-08-06 Thread RAM MOHAN, Hari Ganesh
We are using BIND 9.9.1-P2 version. [dns@ncldl38036 ~]$ named -v BIND 9.9.1-P2 Thanks & Regards, Hari Ganesh Ram Mohan -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of S Carr Sent: Saturday, August 06, 2016 5:13 PM To: bind-users@lists.isc.org S

Re: help

2016-08-06 Thread S Carr
On 6 August 2016 at 09:07, RAM MOHAN, Hari Ganesh wrote: > The flow is working for mi-testw03.pt but not working for mi-testq03.pt. I > really puzzled with such behaviour. That's simple to answer, mi-testw03.pt is registered in the .pt zone, mi-testq03.pt is not. For some reason BIND is ignoring

RE: help

2016-08-06 Thread RAM MOHAN, Hari Ganesh
Hi, Let me tell about my configuration. I have two DNS views "softlayer" and "hdq". The softlayer DNS view has only one zone (Marriott.com) and the HDQ has entire set of internal DNS zones. (mi-testq03.pt , mi-testw03.pt ... etc) Softlayer DNS view has forwarder as loopback. When client