Re: bind-users Digest, Vol 1769, Issue 1

2014-02-21 Thread Daniel McDonald
On 2/21/14 3:39 AM, "houguanghua" wrote: > kevin, > > How does the local name server learn where is the 'stealth' slave? For the > 'stealth' slave isn't in the NS records. Also-notify directive. Either in an options stanza or a zone stanza. > > thanks, > Guanghua -- Daniel J McDonald, C

Re: New warning message...

2013-07-23 Thread Daniel McDonald
On 7/23/13 7:36 AM, "Matus UHLAR - fantomas" wrote: >> In article , >> Matus UHLAR - fantomas wrote: >>> No, it does not. If a mail gets delivered to address, which is sending it >>> further ("forwarding it"), the envelope sender has to be changed, because >>> it's not the original sender who s

Re: Reverse address entries

2013-07-02 Thread Daniel McDonald
On 7/2/13 8:42 AM, "Sam Wilson" wrote: > There may be a subtle language thing going on here. I read the original > post above as saying, literally, "you need PTR records because various > software tries to match A and PTR records". It doesn't say "you need > PTR records because some systems req

Re: disabling lame server logging

2013-02-26 Thread Daniel McDonald
On 2/26/13 10:43 AM, "Sten Carlsen" wrote: > > > On 26/02/13 15:50, Robert Moskowitz wrote: > > >> >> I would expect that a namecaching server on the mailserver would reduce >> traffic and resources all the way around. >> >> I don't need my mailserver to constantly be asking my n

Re: Export / Import all zone data

2013-02-14 Thread Daniel McDonald
On 2/14/13 1:46 PM, "Mailinglists" wrote: > I'm looking to migrate all of the zone data from one installation of Bind to > another...hardware move. One machine is very old but running a pretty modern > version of Bind 9.6-ESV-R8. The other server is running Bind 9.8.2 and is in > use, so I'm mer

Re: transparent DNS load-balancing with a Cisco ACE

2012-10-19 Thread Daniel McDonald
On 10/19/12 1:25 PM, "John Miller" wrote: > Hello everyone, > > Perhaps a Cisco list is a better destination for this, but I've seen a > similar post here in the past couple of months, so posting here as well. > > I'm trying to get our Cisco ACE set up appropriately to handle DNS > traffic.

Re: Why does a non-delegated sub-domain work?

2012-05-07 Thread Daniel McDonald
On 5/7/12 11:32 AM, "M. Meadows" wrote: > > So ... if we have > > exacttarget.com delegated to ns1 and ns2.exacttarget.com nameservers > > and ... we manage the s6.exacttarget.com zone file from ns1 and > ns2.exacttarget.com > > but we don't delegate s6 in the exacttarget.com zone file

Re:

2012-05-07 Thread Daniel McDonald
On 5/7/12 8:29 AM, "hugo hugoo" wrote: > Dear all, > > I have the following situation in my zone migration for one server (A) to > another server (B) > > The zone is called toto.be and contains the following record: > > www.toto.be 86400 IN CNAME www.titi.be > > > ==> the zone titi.be is i

Re: Loadbalance caching dns server

2012-03-20 Thread Daniel McDonald
On 3/20/12 7:15 AM, "trm asn" wrote: > > > On Tue, Mar 20, 2012 at 4:40 PM, Stefan Certic > wrote: >> Hi, >> >> That can be achieved using iptables: >> >> iptables -A PREROUTING -i eth0 -p tcp --dport 53 -m state --state NEW -m nth >> --counter 0 --every N --packet 0 -j DNAT --to-destina

Re:

2012-03-13 Thread Daniel McDonald
On 3/13/12 8:20 AM, "hugo hugoo" wrote: > ==> do I have to create in zone "toto.be" the following NS record: > > titi.toto.be. TTL IN NSns1.xxx.be > > > I have found cases where this situation is present and other when it is not > present...and both cases seems

Re: about the additional section

2011-09-01 Thread Daniel McDonald
On 8/31/11 10:13 PM, "风河" wrote: > Hello, > > I found that some queries have got the response which has additional > section, but some haven't. > For example, this query with www.google.com got the answer with > additional section set: > > $ dig www.google.com > ;; MSG SIZE rcvd: 236 > $ dig w

Re: no servers could be reached

2011-07-28 Thread Daniel McDonald
On 7/28/11 3:16 AM, "uifid...@gmail.com" wrote: > my czj.zone > $TTL 86400 > czj. IN SOA localhost. root.localhost. ( > 1997022700 ; Serial > 28800 ; Refresh >

Re: bind version problem

2011-07-19 Thread Daniel McDonald
On 7/19/11 9:30 AM, "almah...@ranksitt.net" wrote: > Hi, > > If Bind version of primary dns is "bind-libs-9.3.6-16.P1.el5" and for > secondary dns "bind-9.5.0-29.b2.fc9.i386". > > Is there create any problem?? In general, it creates no problem. If you happen to use an RR for which support wa

Re: Disabling DNSSEC validation per zone?

2011-07-11 Thread Daniel McDonald
On 7/11/11 12:15 PM, "Tony Finch" wrote: > Daniel McDonald wrote: >> >> ; <<>> DiG 9.8.0-P4 <<>> @localhost ips.backscatterer.local ds >> ; (1 server found) >> ;; global options: +cmd >> ;; Got answer: >> ;; ->&g

Re: Disabling DNSSEC validation per zone?

2011-07-08 Thread Daniel McDonald
On 7/8/11 10:41 AM, "Phil Mayers" wrote: > On 08/07/11 15:13, Daniel McDonald wrote: >> I have a number of zones being served by rbldnsd, with bind as a >> front-end. The zones are defined as forward only in named.conf. >> >> When I enable dnssec valid

Disabling DNSSEC validation per zone?

2011-07-08 Thread Daniel McDonald
I have a number of zones being served by rbldnsd, with bind as a front-end. The zones are defined as forward only in named.conf. When I enable dnssec validatation, these zones report that they are insecure. 08-Jul-2011 08:55:58.700 dnssec: info: validating @0xb4260ad8: ips.backscatterer.local

Dig +topdown

2011-07-01 Thread Daniel McDonald
I set up a zone with dnssec, and wanted to verify that it was working properly. But I appear to have trouble with the root KSK. $ dig +dnssec danmcdonald.us +topdown ;; No trusted key, +sigchase option is disabled ; <<>> DiG 9.7.3-P1 <<>> +dnssec danmcdonald.us +topdown I appear to have the

Re: BIND 9.7 Serial Number Decrease Problem

2011-06-07 Thread Daniel McDonald
On 6/7/11 7:51 AM, "Barry Finkel" wrote: > There was a zone serial number mismatch, each zone expired three days > ago, and new zones were transferred from the master. But the zone > files on disk still have the higher serial numbers. There are no .jnl > files on the disk. A "dig" on the serve