Re: baby steps...

2018-03-22 Thread Mark Andrews
You need to configure the DHCP client to override the DNS servers returned from upstream with only 127.0.0.1. If you are using ISC’s dhclient there is a supercede directive that you put in dhclient.conf. PPP client software should have a similar setting. Similarly you can change the search l

Re: baby steps...

2018-03-22 Thread Adam Hardy
I set up my SOHO server to be a router/gateway to the net, firewall, DHCP server, DNS server and backup server for my lan. I set up bind9 and isc-dhcp to support DDNS, but I am struggling to get hostname resolution working on the server for the lan clients. The server has two NICs - one for l

RE: Separate DNS slaves as internal and external

2018-03-22 Thread Lightner, Jeffrey
You can use views for internal and external. Just create a secondary IP on the same NIC you're using as primary on each hosts. Set the transfer hosts for the external view using the primary IP on the NIC and the ones for the internal view on the secondary NICs. You can set ACLs that say whic

Re: Separate DNS slaves as internal and external

2018-03-22 Thread McDonald, Daniel (Dan)
I've hidden those sort of things using response policy zones. On 3/19/18, 6:34 AM, "bind-users on behalf of King, Harold Clyde (Hal)" wrote: I have DNS slaves for internal and external entities. I don't know how to work the NS records so that outside users would only get the external slav

Re: GSS-TSIG update-policy clarification

2018-03-22 Thread Mark Andrews
This was noted in the release notes and in CHANGES. 4885. [security] update-policy rules that otherwise ignore the name field now require that it be set to "." to ensure that any type list present is properly interpreted.

Re: Odd behavior on a secondary server

2018-03-22 Thread Dave Warren
On Thu, Mar 22, 2018, at 11:01, @lbutlr wrote: > On 2018-03-22 (08:13 MDT), John Miller wrote: > > > > Is this normal or am I missing something. > > It is normal. It is confusing, but it is normal. Think of it as a "freshness" date rather than a "modified" date and it becomes intuitive. _

Re: Odd behavior on a secondary server

2018-03-22 Thread @lbutlr
On 2018-03-22 (08:13 MDT), John Miller wrote: > > Is this normal or am I missing something. It is normal. It is confusing, but it is normal. -- Traveling through hyperspace ain't like dusting crops, boy. ___ Please visit https://lists.isc.org/mailma

GSS-TSIG update-policy clarification

2018-03-22 Thread Nicholas Miller
With the latest update to bind our named.conf started reporting errors. I have figured it out but wanted to get clarification about the syntax. We had been using: deny DOMAIN.EDU krb5-subdomain DOMAIN.EDU CNAME MX SRV TXT; We are now using: deny DOMAIN.EDU krb5-subdomain . CNAM

Re: Odd behavior on a secondary server

2018-03-22 Thread Barry Margolin
In article , Matus UHLAR - fantomas wrote: > On 22.03.18 10:13, John Miller wrote: > >We are setting up a secondary server and seeing something that may be > >normal, but I wanted to check. The time stamp on each zone file on the > >secondary is changing with each refresh cycle, even if there ar

Re: baby steps...

2018-03-22 Thread Hika van den Hoven
Hoi Adam, Thursday, March 22, 2018, 3:53:45 PM, you wrote: > On Thursday, March 22, 2018 01:37 GMT, Mark Andrews wrote: >> > I set up my SOHO server to be a router/gateway to the net, firewall, DHCP >> > server, DNS server and backup server for my lan. >> > >> > I set up bind9 and isc-dhcp t

Re: baby steps...

2018-03-22 Thread Adam Hardy
On Thursday, March 22, 2018 01:37 GMT, Mark Andrews wrote: > > I set up my SOHO server to be a router/gateway to the net, firewall, DHCP > > server, DNS server and backup server for my lan. > > > > I set up bind9 and isc-dhcp to support DDNS, but I am struggling to get > > hostname resolutio

Re: Odd behavior on a secondary server

2018-03-22 Thread Matus UHLAR - fantomas
On 22.03.18 10:13, John Miller wrote: We are setting up a secondary server and seeing something that may be normal, but I wanted to check. The time stamp on each zone file on the secondary is changing with each refresh cycle, even if there are no changes to the file. Is this normal or am I missi

Odd behavior on a secondary server

2018-03-22 Thread John Miller
Hello there, We are setting up a secondary server and seeing something that may be normal, but I wanted to check. The time stamp on each zone file on the secondary is changing with each refresh cycle, even if there are no changes to the file. Is this normal or am I missing something. Th