Re: Zoneformat

2019-10-28 Thread Kevin Darcy
[ Classification Level: PUBLIC ] It's not like "speed dialing" consists of prepending a bunch of more-or-less arbitrary area codes and exchanges and hoping that eventually you'll get the right combination of numbers to reach the intended recipient. THAT would be the proper analogy for suffix-searc

Re: Zoneformat

2019-10-28 Thread Ondřej Surý
Neither analogy would work to the detail here. But search domains is the butt dial of DNS… You are better if you don’t use it as it works well until it doesn’t and you send your data to the wrong party. Ondrej > On 28 Oct 2019, at 17:01, Paul Kosinski via bind-users > wrote: > > "... long

Re: Zoneformat

2019-10-28 Thread Paul Kosinski via bind-users
"... long ago adapted to using full numbers, including area codes, for pretty much *all* phone dialing ..." Except that that proved to be so onerous that people often use "speed dialing" for commonly dialed numbers. (Not to mention the fact that people usually address their friends and coworkers b

Re: per-zone query-source on recursive resolver

2019-10-28 Thread Tony Finch
Erich Eckner wrote: > > I'm undecided whether they're authoritative or not. On one hand, they are > distributed via DHCP as default DNS servers, speaking for "recursive", on > the other hand, they have matching SOA records (and I think, that means, > they're authoritative) - maybe they're both? I

Re: per-zone query-source on recursive resolver

2019-10-28 Thread Erich Eckner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Mon, 28 Oct 2019, Tony Finch wrote: Erich Eckner wrote: RPZ rewrites responses as they are going out of your nameserver, so you can't use RPZ to change the way the nameserver's resolver works (because the resolver depends on incoming r

Re: Zoneformat

2019-10-28 Thread Kevin Darcy
[ Classification Level: PUBLIC ] My opinion? It's better to wean your users away from shortnames than to try to cobble together kludges, on the client side or the BIND side, to support a bad habit. Shortnames introduce ambiguity, lead to nasty surprises, are inefficient and insecure. Just like we

Re: Zoneformat

2019-10-28 Thread Warren Kumari
On Mon, Oct 28, 2019 at 6:08 AM MEjaz wrote: > > > > > > From: MEjaz [mailto:me...@cyberia.net.sa] > Sent: Monday, October 28, 2019 10:27 AM > To: 'bind-users-boun...@lists.isc.org' > Subject: Zoneformat > > > > Hi all, > > > > Is ther any way I can create the zone without the (.) I mean non full

Re: Zoneformat

2019-10-28 Thread Matus UHLAR - fantomas
On 28.10.19 15:49, MEjaz wrote: Noxexistent domain error . Here is my configuration. === zone "crm365app" { type master; file "crm365app.cyberia.net.sa.hosts"; allow-query {any;}; }; [root@ns1 named]# host crm365app Host crm365app not found: 3(NXDOMAIN) [root@ns1 name

RE: Zoneformat

2019-10-28 Thread MEjaz
Noxexistent domain error . Here is my configuration. === zone "crm365app" { type master; file "crm365app.cyberia.net.sa.hosts"; allow-query {any;}; }; File [root@ns1 ~]# cat /var/named/crm365app.cyberia.net.sa.hosts $TTL 3600 ;

Re: per-zone query-source on recursive resolver

2019-10-28 Thread Tony Finch
Erich Eckner wrote: > > 1. Set a custom query-source (the one of the vpn interface) for that > second-level domain. (This would also be applied to all subdomains thereof, > right?) > > 2. Overwrite (by rpz?) the name-servers for that domain to the (somehow > obtained) internal nameservers (they di

Re: Zoneformat

2019-10-28 Thread Reindl Harald
Am 28.10.19 um 11:01 schrieb MEjaz: > *From:* MEjaz [mailto:me...@cyberia.net.sa] > *Sent:* Monday, October 28, 2019 10:27 AM > *To:* 'bind-users-boun...@lists.isc.org' > *Subject:* Zoneformat > > Is ther any way I can create the zone without the (.) I mean non fully > qualified domain name ju

RE: Zoneformat

2019-10-28 Thread MEjaz
From: MEjaz [mailto:me...@cyberia.net.sa] Sent: Monday, October 28, 2019 10:27 AM To: 'bind-users-boun...@lists.isc.org' Subject: Zoneformat Hi all, Is ther any way I can create the zone without the (.) I mean non fully qualified domain name just as "example" instead "example.com"'

per-zone query-source on recursive resolver

2019-10-28 Thread Erich Eckner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, I'm running bind as a recursive resolver. This box also has a vpn tunnel to another network (not mine) with split-horizon dns (internal clients see different NS entries than external clients; those in turn resolve different addresses). I wou