Re: DS records setup

2019-02-20 Thread Mark Andrews
Assuming it is a DNSSEC aware recursive server it asks the COM servers if it hasn’t cached it as part of the referral process. [beetle:~/git/bind9] marka% dig ds example.com @a.gtld-servers.net ; <<>> DiG 9.13.1+hotspot+add-prefetch+marka <<>> ds example.com @a.gtld-servers.net ;; global options

DS records setup

2019-02-20 Thread rams
Greetings.! how does recursive resolver get the information for a zone example.com in below setup when example.com has DS records in .com .com is tld zone example.com is sld zone Regards, Ramesh ___ Please visit https://lists.isc.org/mailman/listi

Re: Combining forward with master zone.

2019-02-20 Thread Grant Taylor via bind-users
On 02/20/2019 01:19 PM, King, Harold Clyde (Hal) wrote: Can I create a root zone to define a wildcard pointing to our warning page with one hostname defined going to a forward’ed DNS source? I could just give it an IP, but can I forward that one domain to outside DNS (Google or their NS reposit

Re: Combining forward with master zone.

2019-02-20 Thread Kevin Darcy
Delegate needs.example.com from example.com and you should be set. - Kevin On Wed, Feb 20, 2019 at 3:40 PM King, Harold Clyde (Hal) wrote: > Could I just define needs.example.com as a zone in a separate file so: > > > > zone "example.com" { type master; notify no; file "static/antip

Server can not resolve Domain

2019-02-20 Thread haidao
Greetings, we use a own nameserver on our System. I have install bind9 now ,and configure the zone files. At our Provider I have change the nameserver to our System. But the Server can not resolve the name. I have search a lot of time,but I can not see the problem. I have the following Setup: Forwa

Re: Combining forward with master zone.

2019-02-20 Thread King, Harold Clyde (Hal)
Could I just define needs.example.com as a zone in a separate file so: zone "example.com" { type master; notify no; file "static/antiphish.db"; }; zone "needs.example.com" { type forward; forwards{8.8.8.8;}; -- Hal ---

Re: Combining forward with master zone.

2019-02-20 Thread Kevin Darcy
As discussed in another thread, delegate the zone you want to forward, in addition to defining the zone as "type forward". If you already tried a "type forward" and it didn't work, it was probably because the delegation was missing. It's a non-obvious requirement, but named needs to see the zone cu

Combining forward with master zone.

2019-02-20 Thread King, Harold Clyde (Hal)
We have a URL phishing setup that causes URLs we detect to redirect to a warning page. We have run into a problem. One of our clients has scripts that he calls from a host in that domain. Needs.example.com when we block example.com. Can I create a root zone to define a wildcard pointing to our wa

Re:

2019-02-20 Thread Matus UHLAR - fantomas
On 20.02.19 10:48, Roberto Carna wrote: You tell me to do this: zone "." { type master; file "empty.db"; }; The root zone Is "type master" or "type hint" ??? The empty.db is really an empty file with no data at all ??? debian ships db.empty which contains everything an empty zone file

Re:

2019-02-20 Thread Kevin Darcy
"type master". It must contain the mandatory records that all zones require -- exactly 1 SOA and at least 2 NSes. You'll need some A/ records to resolve the NS names into addresses. What the NSes point to is pretty much irrelevant, if all of your clients are stub resolvers and only look up lea

Re: DNS load balancing: UDP or TCP ?

2019-02-20 Thread Alan Clegg
On 2/20/19 10:22 AM, Alan Clegg wrote: > On 2/20/19 7:55 AM, Roberto Carna wrote: > >> DNS clients send a UDP query to a DNS server, if no response is received >> until some seconds, then they try with UDP. >> You tell me this is not true, just clients try with UDP is the response >> is truncated.

Re: DNS load balancing: UDP or TCP ?

2019-02-20 Thread Alan Clegg
On 2/20/19 7:55 AM, Roberto Carna wrote: > DNS clients send a UDP query to a DNS server, if no response is received > until some seconds, then they try with UDP. > You tell me this is not true, just clients try with UDP is the response > is truncated. Tony is correct, the first paragraph above IS

Re: DNS load balancing: UDP or TCP ?

2019-02-20 Thread Matus UHLAR - fantomas
Roberto Carna wrote: Can you confirm thgis is true in 100% of clients??? On 20.02.19 14:11, Tony Finch wrote: It's true of clients that follow the spec. I would like to add that the spec mentions there mey be clients that use only TCP. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http:/

Re: DNS load balancing: UDP or TCP ?

2019-02-20 Thread Tony Finch
Roberto Carna wrote: > > Can you confirm thgis is true in 100% of clients??? It's true of clients that follow the spec. Tony. -- f.anthony.n.finchhttp://dotat.at/ Rattray Head to Berwick upon Tweed: South or southwest 4 or 5, occasionally 6 at first. Slight or moderate, occasionally rough a

Re:

2019-02-20 Thread Roberto Carna
Dear Crist, sorry but I can understand at all what you say.please I ned to ask you again: You tell me to do this: zone "." { type master; file "empty.db"; }; The root zone Is "type master" or "type hint" ??? The empty.db is really an empty file with no data at all ??? And where do

Re: DNS load balancing: UDP or TCP ?

2019-02-20 Thread Roberto Carna
Dear Tony, thanks for your response. I've read something I don't know if it's true or not: DNC clients send a UDP query to a DNS server, if no response is received until some seconds, then they try with UDP. You tell me this is not true, just clients try with UDP is the response is truncated. C