Re: DNS can be a subdomain

2018-06-26 Thread Grant Taylor via bind-users
On 06/26/2018 10:21 PM, Mark Andrews wrote: And if you are not using AD you can use SIG(0) and KEY records to allow hosts to authenticate updates to the DNS for their own records. I'm not quite following. Do you mean that you can allow hosts to update their own RRs without requiring AD and us

Re: DNS can be a subdomain

2018-06-26 Thread Mark Andrews
And if you are not using AD you can use SIG(0) and KEY records to allow hosts to authenticate updates to the DNS for their own records. Instead of registering a host with AD you add a KEY record into the DNS which has the public key of the host which is to be used to sign the UPDATE requests. Unf

Re: DNS can be a subdomain

2018-06-26 Thread Grant Taylor via bind-users
On 06/26/2018 06:21 PM, Elias Pereira wrote: yes. :) https://wiki.samba.org/index.php/Active_Directory_Naming_FAQ#Why_This_Matters Hum. After reading that section of the page you linked to, I'm not convinced that the DNS /must/ be on the Samba server. How would this work in the scenario I

Re: DNS can be a subdomain

2018-06-26 Thread Elias Pereira
> > Is that truly a requirement? > Is this not the same with Samba? Is there something specific about > Samba that does require it to be authoritative for the zone? yes. :) https://wiki.samba.org/index.php/Active_Directory_Naming_FAQ#Why_This_Matters But I know that Windows servers just > need

Re: DNS can be a subdomain

2018-06-26 Thread Grant Taylor via bind-users
On 06/26/2018 05:20 PM, Elias Pereira wrote: since the samba needs to be authoritative on its own dns. Is that truly a requirement? I've not messed with AD on Samba. But I know that Windows servers just need the ability to update DNS. They do not need to be authoritative for it. Is this

Re: DNS can be a subdomain

2018-06-26 Thread Elias Pereira
Spammers on the bind list? Lol @Reindl Harald Thanks for the answer!! I'll take a look! @John Miller compay.intra is a example domain. :) In our institution we have a valid domain and we belong to an educational institution group. The institution is company.intra and that will provision a samba4

Re: Stopping name server abuse

2018-06-26 Thread Paul Kosinski
Most of your replies seem not to address the (immediately preceding) paragraph they appear to be responding to. On Mon, 25 Jun 2018 22:15:07 +0200 Reindl Harald wrote: > > > Am 25.06.2018 um 22:01 schrieb Paul Kosinski: > > Somebody who has irresponsibly (and apparently wantonly, given his >

Re: DNS can be a subdomain

2018-06-26 Thread John Miller
Hi Elias, Generally not. Unless .intra is a valid top-level-domain, and company.intra is registered with the .intra registrars, your external DNS will need to be different. And in any case, you probably want your public Internet presence to reflect your actual company name and be in a TLD that p

DNS can be a subdomain

2018-06-26 Thread Elias Pereira
Hello, My external DNS can be a subdomain of my root domain? Eg: root domain: company.intra external dns: named.company.intra -- Elias Pereira ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-user

Re: Stopping name server abuse

2018-06-26 Thread Dave Warren
On Tue, Jun 26, 2018, at 11:54, Reindl Harald wrote: > > > Am 26.06.2018 um 20:50 schrieb Dave Warren: > > On Tue, Jun 26, 2018, at 11:47, Reindl Harald wrote: > >> > >> Am 26.06.2018 um 20:36 schrieb Dave Warren: > >>> On Tue, Jun 26, 2018, at 11:27, Reindl Harald wrote: > > > Am

Re: Domain name based multihome routing?

2018-06-26 Thread Dale Mahalko
On Tue, Jun 26, 2018 at 12:45 PM, Grant Taylor via bind-users < bind-users@lists.isc.org> wrote: > > Are you saying that you want to dynamically update routes to IPs resolved > in real time to specific host / domain names? Such that traffic to > specific hosts / domain names is routed over DSL? W

Re: Stopping name server abuse

2018-06-26 Thread Dave Warren
On Tue, Jun 26, 2018, at 11:47, Reindl Harald wrote: > > Am 26.06.2018 um 20:36 schrieb Dave Warren: > > On Tue, Jun 26, 2018, at 11:27, Reindl Harald wrote: > >> > >> > >> Am 26.06.2018 um 20:18 schrieb Dave Warren: > >>> At the end of the day, I doubt there is much you can do legally, the onl

Re: Stopping name server abuse

2018-06-26 Thread Hika van den Hoven
Hi All, I doubt any legal action would have any chance, of cause depending on the country's law your using. The server is publicly accessible. It's like prosecuting somebody for knocking on your public front door to ask the way. (or for that matter salespeople) You only might have a chance to put

Re: Stopping name server abuse

2018-06-26 Thread Dave Warren
On Tue, Jun 26, 2018, at 11:27, Reindl Harald wrote: > > > Am 26.06.2018 um 20:18 schrieb Dave Warren: > > At the end of the day, I doubt there is much you can do legally, the only > > real solutions are technical by returning answers that will discourage > > resolvers from asking as frequently

Re: Domain name based multihome routing?

2018-06-26 Thread Warren Kumari
On Tue, Jun 26, 2018 at 12:45 PM Grant Taylor via bind-users < bind-users@lists.isc.org> wrote: > On 06/25/2018 11:08 PM, Dale Mahalko wrote: > > * The secondary program looks up the domain in a database, which also > > includes the multihome destination for each domain. If a match is found, > > a

Re: Stopping name server abuse

2018-06-26 Thread Dave Warren
On Tue, Jun 26, 2018, at 01:28, Matus UHLAR - fantomas wrote: > On 25.06.18 09:06, Dave Warren wrote: > >Absent a situation where the customer has agreed to purchase this service, > > the only result sending an invoice would have is that you have increased > > your loss by adding wasted time, toner

Re: Domain name based multihome routing?

2018-06-26 Thread Grant Taylor via bind-users
On 06/25/2018 11:08 PM, Dale Mahalko wrote: * The secondary program looks up the domain in a database, which also includes the multihome destination for each domain. If a match is found, a route is created to that multihome destination. Aliased acceleration domains such as Akamai will be matche

Re: cyberia.net.sa

2018-06-26 Thread ozgur
  26.06.2018, 16:31, "Mohammed Ejaz" :I  am using bind I have problem in resolving my domain cyberia.net.sa over the internet. Whereas it is working fine internally. Any clue would be  highly appeicated.  Hello, I don't seen problem, DNS resolution is being done and which do you use DNS resolver? R

Re: Stopping name server abuse

2018-06-26 Thread Barry Margolin
In article , Paul Kosinski wrote: > Somebody who has irresponsibly (and apparently wantonly, given his > refusal to fix it) delegated his domain(s) to your DNS server is > essentially causing a (modest bandwidth) distributed denial of service > attack on your server. I don't think that the "resp

Re: cyberia.net.sa

2018-06-26 Thread Stephane Bortzmeyer
On Tue, Jun 26, 2018 at 03:36:25PM +0200, Matus UHLAR - fantomas wrote a message of 19 lines which said: > Some web DNS checkers do great job. And some are really bad and/or broken. Let's mention the right ones: https://dnsviz.net/ https://zonemaster.net/ ___

Re: cyberia.net.sa

2018-06-26 Thread Matus UHLAR - fantomas
On 26.06.18 14:08, Mohammed Ejaz wrote: I am using bind I have problem in resolving my domain cyberia.net.sa over the internet. Whereas it is working fine internally. Any clue would be highly appeicated. try doing internet search for "dns checker" and try put your domain into two-three of them

Re: cyberia.net.sa

2018-06-26 Thread Peter DeVries
You're going to have to provide more information than that. What isn't working from your internet perspective? Looks fine from where I'm sitting. ; <<>> DiG 9.11.2-P1 <<>> cyberia.net.sa ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4586 ;; flags: qr

cyberia.net.sa

2018-06-26 Thread Mohammed Ejaz
I am using bind I have problem in resolving my domain cyberia.net.sa over the internet. Whereas it is working fine internally. Any clue would be highly appeicated. Thanks, Mohammed Ejaz Asst. Operation Director of Systems. Cyberia SAUDI ARABIA P.O.Box: 301079, Riyadh 11372 Phone: (+966)

Re: Domain name based multihome routing?

2018-06-26 Thread Dale Mahalko
I should also mention that I am not a formally trained programmer. I am mostly an end-user looking for a readymade solution that doesn't require understanding the source and recompiling it. I can dabble, but I do not know all the intricacies of C/C++ to implement with any level of stability or qua

Re: Stopping name server abuse

2018-06-26 Thread Matus UHLAR - fantomas
On Sun, Jun 24, 2018 at 04:30:08PM -0400, Alex wrote: > We had a former customer who parked about 300 domains with his > registry on our server but is no longer a customer and hasn't moved > his domains. There aren't any hosts behind the domains. > > Is there anything more I can do to block/preven

Re: Domain name based multihome routing?

2018-06-26 Thread Mark Andrews
Why send it to a secondary program? Just have named look the name up in the database directly and then use a route socket to inject the route. Named already uses a route socket to track interfaces coming and going. Note: CDN’s use the same machine for multiple names so you may not always get the