On 2022-05-02 18:01, Timothe Litt wrote:
Still, overall DNS seems to generate more problems than fun, so if LOC
provides amusement, it's a good thing.
I know one of my users found them quite amusing. I can't recall what
location they picked or why, but it had some sort of personal
significanc
On 2022-05-03 06:31, Gaurav Kansal wrote:
Yup. But if the DNS infra is under my control, then definitely the keys (which
i have used for encryption) will also be with me. Am i missing something here ?
ð§
I'll see your privacy keys and raise you Perfect Forward Secrecy.
Although I'm not really
. There
is always another domain that crops up and will need to be exempted.
The option I was looking for, which doesn't seem to exist is turning
off named setting the check disable flag when forwarding to another
system. With that ability, we could have moved DNSSEC validation
to the c
> On Apr 13, 2022, at 12:00 AM, Grant Taylor via bind-users
> wrote:
>
> This Message Is From an External Sender
> This message came from outside your organization.
> On 4/12/22 7:18 PM, Duchscher, Dave J via bind-users wrote:
> > We are dropping this configurat
termittent issues
with Slack, Microsoft, and a growing list of domains. Even have one that
consistently fails. I am just posting this as a caution to others that
you may have problems with DNSSEC validation in this configuration.
--
Dave
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to
low-recursion { any; };
allow-query-cache { any; };
dnssec-validation auto;
};
--
Dave
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.or
On 2020-08-21 16:26, Marc Roos wrote:
Is it possible to use srv lookups, like eg cname. I do not want to
create SRV record, I just want to 'get' the ip addresses, that I would
get vai srv lookup.
I don't think so, nor does it seem to make sense to me that you would
want such a thing (in the ge
On 2019-04-25 17:57, @lbutlr wrote:
On 25 Apr 2019, at 06:10, Martin Meadows via bind-users
wrote:
Wondering if anyone is aware of a max file size or max nu=
mber of lines that a given BIND zone file can contain?=C2=A0Thanks,Marty-- Martin MeadowsMTA and=
DNS Administrator | Salesforce<=
/d
On 2019-01-17 08:03, Fumiya Obatake wrote:
Thank you for your reply.
Since it seems very difficult to realize, I will consider other solutions.
The obvious solution would be to use TCP.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-user
On 2019-01-11 11:55, Kevin Darcy wrote:
I don't believe there is any logging category for this, even when zones
are enabled for Dynamic Update, in which case the versioning is done
automatically. There used to be a "journalprint" utility that one could
run against the .jnl files to show the upd
On 2018-10-24 07:24, Timothy Metzinger wrote:
There's no security in obscurity. Automated port scanners will sweep
your system in a couple of seconds.
There is *limited* security in obscurity but it's a valid layer.
Obviously insufficient as an only layer...
As a trivial example, I get orde
On Sun, Sep 23, 2018, at 03:24, Ray Bellis wrote:
> On 22/09/2018 02:39, Danny Mayer wrote:
>
> > No, that's not true. Consider what you are doing. You are substituting
> > SRV records for CNAME records. There is nothing magical here. NTP can
> > use the CNAME records. Either way the records have
-users on behalf of
Dave Warren
*Sent:* 17 September 2018 19:01
*To:* bind-users@lists.isc.org
*Subject:* Re: ISC Bind stops answering queries
On Mon, Sep 17, 2018, at 06:07, Ian Collins wrote:
I have been runnig various versions of ISC Bind for a number of years
without any issues.
My current
On Mon, Sep 17, 2018, at 06:07, Ian Collins wrote:
> I have been runnig various versions of ISC Bind for a number of years
> without any issues.>
> My current server is a Windows 2012 R2 running 9.3.0
> <...> Does anyone have any idea what could be causing the server to
> stop answering querie
On 2018-08-23 14:15, Grant Taylor via bind-users wrote:
On 08/23/2018 01:20 PM, Barry S. Finkel wrote:
Somehow, under the covers, AD synchronizes the zones so that they have
the same content.
It's my understanding that MS-DNS servers hosting AD Integrated zones
are actually functioning as app
On Tue, Jun 26, 2018, at 11:54, Reindl Harald wrote:
>
>
> Am 26.06.2018 um 20:50 schrieb Dave Warren:
> > On Tue, Jun 26, 2018, at 11:47, Reindl Harald wrote:
> >>
> >> Am 26.06.2018 um 20:36 schrieb Dave Warren:
> >>> On Tue, Jun 26, 2018, at 11:27,
On Tue, Jun 26, 2018, at 11:47, Reindl Harald wrote:
>
> Am 26.06.2018 um 20:36 schrieb Dave Warren:
> > On Tue, Jun 26, 2018, at 11:27, Reindl Harald wrote:
> >>
> >>
> >> Am 26.06.2018 um 20:18 schrieb Dave Warren:
> >>> At the end of the
On Tue, Jun 26, 2018, at 11:27, Reindl Harald wrote:
>
>
> Am 26.06.2018 um 20:18 schrieb Dave Warren:
> > At the end of the day, I doubt there is much you can do legally, the only
> > real solutions are technical by returning answers that will discourage
> &g
On Tue, Jun 26, 2018, at 01:28, Matus UHLAR - fantomas wrote:
> On 25.06.18 09:06, Dave Warren wrote:
> >Absent a situation where the customer has agreed to purchase this service,
> > the only result sending an invoice would have is that you have increased
> > your loss
On Sun, Jun 24, 2018, at 15:48, Mukund Sivaraman wrote:
> On Sun, Jun 24, 2018 at 04:30:08PM -0400, Alex wrote:
> > Hi,
> > We had a former customer who parked about 300 domains with his
> > registry on our server but is no longer a customer and hasn't moved
> > his domains. There aren't any hosts
On Thu, Mar 22, 2018, at 11:01, @lbutlr wrote:
> On 2018-03-22 (08:13 MDT), John Miller wrote:
> >
> > Is this normal or am I missing something.
>
> It is normal. It is confusing, but it is normal.
Think of it as a "freshness" date rather than a "modified" date and it becomes
intuitive.
_
On 2018-02-28 10:57, G.W. Haywood via bind-users wrote:
Hi there,
On Wed, 28 Feb 2018, (Ing. Pedro Pablo Delgado Martell) wrote:
Good morning, I'm trying to make it more difficult for an attacker to
get my DNS server version.
Waste of time. The attacks are automated, and will be mounted any
On Fri, Feb 2, 2018, at 11:57, Warren Kumari wrote:
> Hopefully Lewis knows / understand that we are just squabbling amongst
> ourselves because we've know each other for a long time and this is in
> good humor.
Yes indeed :)
> The actual values used are open to tuning, but in the original
> post
On 2018-02-01 17:21, Lyle wrote:
Bind does default to seconds.
However this is not the SOA record.
Who said it was a SOA record?
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing l
On 2017-12-18 06:44, Timothe Litt wrote:
On 18-Dec-17 01:07, Dave Warren wrote:
On 2017-12-15 06:23, Petr MenÅ¡Ãk wrote:
Dne 15.12.2017 v 13:06 G.W. Haywood via bind-users napsal(a):
Hi there,
On Fri, 15 Dec 2017, Petr Men??k wrote:
... current time is not available or can be inaccurate
On 2017-12-15 06:23, Petr MenÅ¡Ãk wrote:
Dne 15.12.2017 v 13:06 G.W. Haywood via bind-users napsal(a):
Hi there,
On Fri, 15 Dec 2017, Petr Men??k wrote:
... current time is not available or can be inaccurate.
ntpdate?
Sure, of course. What would be default host after installation, that ca
On 2017-11-07 13:09, John Levine wrote:
In article you write:
I have issues emailing to certain domains. I use my own mail
server to deliver mail. It is currently not sending through SMTP
Relay. The failure says that I have a missing PTR record. For example:
I'm amazed that it w
On Fri, Apr 7, 2017, at 08:22, Thomas Leuxner wrote:
> * Mark Knight 2017.04.07 16:36:
>
> > masters {
> > 192.5.5.241;// F.ROOT-SERVERS.NET.
> > };
>
> Hi Mark,
>
> I had the same issue basically. Tracing the zone transfers with dig it
> turned out they work
On Tue, Nov 1, 2016, at 07:45, Ben Croswell wrote:
> The other option being having a master owned by your company and then
> setting both external providers to secondary from your master. You to
> maintain control over data and hqve diversity.
I use this approach here, it's proven to be very rob
On 2016-09-06 08:01, Bob Harold wrote:
I agree with one PTR per IP. But since you have 5 IP's, you can have
one PTR record on each, just be sure there is a matching forward "A"
record. Your list of 5 names looks good, but only if each service uses
the corresponding IP for its outgoing connectio
On Mon, Sep 5, 2016, at 09:46, John Levine wrote:
> >1. pick a primary domain from the list of virtual hosts (example2.com)
> >2. use the "real" host name of the server (juvat.example1.com)
> >3. the mail server name (mail.example1.com)
> >4. the dns server name (ns2.example1.com)
> >5. anothe
The easiest answer is: Whatever you want. Strictly speaking,
alphazulu.com can send mail on behalf of foxtrot.com using a
alphazulu.com DKIM selector, and that's perfectly valid under DKIM.
However, it won't have DMARC alignment, which is becoming more and more
important, so if alignment is relevan
On Sun, Aug 28, 2016, at 19:22, Paul Kosinski wrote:
> "... whatever else you use to failover from the primary to the
> secondary would automatically ensure BIND resolves too."
>
> That's the root of the problem: there is no automatic failover, and
> providing one is a lot of work. I was hoping th
On Sat, Aug 27, 2016, at 11:32, Paul Kosinski wrote:
> So my question is, is it possible to configure my forwarding BIND to
> have a primary and *secondary* path for sending out DNS queries? As far
> as I can tell, the "query-source address" option in named.conf only
> allows one outbound interface
> I am trying to understand why caching is required on the bind server,
> when the client receiving the responses would be caching based on TTL
> values.
>
> So,
> Is caching required on the server, if the client is not able to
> cache such responses? Isn't it a overhead on both the client and se
zones
soon after they move, whether they notify you or not.
Or, separate your resolver and authoritative roles, in which case this
won't be an issue. One should still monitor for zones for customers who
have departed, obviously, but it's not likely to cause any operational
issues.
the zone eventually expires?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users
wer, should
not be cached in such a way that they would ever be returned as
answers to a received query.
It'll also, irrespective of caching, break DNSSEC.
Whatever you're trying to do, this is not the right way to do it; you
cannot arbitrarily add data to zones that are not under
ively simple, other than the master, but renumbering the master
without any other changes is also moderately trivial as updating the
slaves can (and is) scripted.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visi
ot servers.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lis
On 2016-03-25 07:21, Barry Margolin wrote:
In article ,
Dave Warren wrote:
I'm more interested in the impact from the perspective of an
authoritative server operator and in some respects sites that use short
TTLs will increase the odds of my longer-TTL's records staying in the
ca
On 2016-03-24 18:28, Barry Margolin wrote:
In article ,
Dave Warren wrote:
On 2016-03-24 15:20, Tony Finch wrote:
Dave Warren wrote:
On 2016-03-24 09:46, Ray Bellis wrote:
On 24/03/2016 16:41, Tony Finch wrote:
When I changed our TTLs from 24h to 1h last year, it didn't have a
vi
On 2016-03-24 15:20, Tony Finch wrote:
Dave Warren wrote:
On 2016-03-24 09:46, Ray Bellis wrote:
On 24/03/2016 16:41, Tony Finch wrote:
When I changed our TTLs from 24h to 1h last year, it didn't have a visible
effect on authoritative server query load, much to my surprise.
I'
elf" that there are
missing records that need to be replaced, what would be the point of
keeping any records with a longer TTL? A resolver would still be sending
the same queries to refresh the entry with the shortest TTL anyway, so
it wouldn't reduce the query volume.
--
Dave Warre
his? For average resolvers, what
is the longest TTL that has any utility?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this lis
On 2016-03-19 19:03, Barry Margolin wrote:
In article ,
Dave Warren wrote:
My current logic is that I do a SOA query and check the serial number,
if it has changed, I query every needed hostname into a temp file, and
if every single query was successful, check the SOA again, and if it
still
Y, or a
way to keep that list up to date. It was just faster to code up a sloppy
/etc/hosts script to update a handful of critical records. Lame reasons,
but it works well enough and hasn't blown up in my face yet.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwa
fresh
value took care of it.
It's not perfect, it could be better, but it worked with a minimum of
hassle.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bin
in having your resolvers be as ignorant about internal
infrastructure as possible.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this l
NAME chain only violates a
"should", and later in that RFC it says that software "should not" fail
to handle chains, so even if you take a "should" as gospel, the "should
not" should be equally gospel, making CNAME chains supported (although
not advise
.myzone.com. in a separate zone entirely, allowing you to use
views for that that one zone?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from
On 2015-11-17 14:13, Mark Andrews wrote:
In message <564ba3e3.9060...@hireahit.com>, Dave Warren writes:
On 2015-11-16 18:09, Grant Taylor wrote:
It's my understanding that ALL of the root servers would have to
change all of their addresses at the same time for DNS to be impacted.
would only impact resolvers that
had outdated root hints, and also happened to try that particular IP
first, but it's at least a theoretical risk.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please v
esired, one would probably not enable this functionality.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailin
re at
least three different serial numbers being returned by those various
servers, with different TTLs on the NS records depending on which server
you query.
I wonder if they're in the process of updating and the records only
partially updated? Odd that it was served at all though.
--
D
nd so falling back
on the SOA's "minimum" field would seem to be a more sane choice than
making one up or refusing the zone, if only as a nod to the legacy use
of this field.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
__
using, but that's good enough for our typical
customer, and we can offer dynamic zones to customers that need it. I
don't think we have any of those left anymore.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
__
riation on "4.9.4-P1", with a
possible reference to Win98SE for some roles (depending on which system
manages their configuration), just in case anyone looks. Nobody seems to
care.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedi
anks very much for your responses, much appreciated. Sounds like
creating a home subdomain is the way to go (I've seen this mentioned
online), so I'll go down that path.
Cheers,
Dave
--
Dave Koelmeyer
http://blog.davekoelmeyer.co.nz
GPG Key ID: 0x238BFF87
_
On 09/08/15 16:44, Dave Koelmeyer wrote:
> - lookups to www.mydomain.co.nz fail, where www.mydomain.com is my
> public webserver defined in my domain registrar's zone file
Correction: this should obviously read "lookups to www.mydomain.co.nz
fail, where www.mydomain.co.nz is my
ail, where www.mydomain.com is my
public webserver defined in my domain registrar's zone file
- lookups to www.mydomain.co.nz work only if the host is configured to
use the public DNS server
Any advice please and pointers on how to best approach this would be
appreciated :)
--
Dave Koelmey
ASHA256 in any reasonable level of time, it would be equally
feasible to invest in 2x-8x the hardware and start breaking roots in
under 3 months.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please v
ot;v=DMARC1\; p=reject\;
rua=root@dns-test-1.\; aspf=s\; rf=afrf\; sp=reject"
http://www.dmarc.org/faq.html#s_12 has some information on what is
happening here.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
__
On Oct 22, 2014, at 5:56, Niall O'Reilly wrote:
> At Tue, 21 Oct 2014 22:31:28 -0500,
> Frank Bulk wrote:
>>
>> Dave,
>>
>> Thanks for the input, but what I was looking for was a dig command that
>> returns the IP(s) or a fail. It looks like the host
ig.ht in a dave.knig.ht in | egrep
'IN\t(A|)\t' | cut -f6
216.235.14.46
2001:4900:1:393::2
dave
signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubs
On 10/1/2014 3:45 PM, Tony Finch wrote:
(Sorry for straying off topic. I have less experience of Cisco PIX/ASA
breaking DNS than of them breaking SMTP.)
I can't resist either..
I specifically remember a PIX that bit me by "helpfully" changing the
payload of an axfr so that the A records that tr
ase your three wishes to an evil
genie. "CNAME the apex? As you wish, master... mwahahaha!"
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to un
mes, etc.
>> (especially since I'm using unix timestamp for zone serialavoids
>> issues of multiple admins incrementing serial without
>> noticing others and/or collisions with DNSSEC's
>> incrementing of serials.)
Dave Warren replied:
I wouldn't expect any
On 2014-05-08 15:09, Mark Andrews wrote:
In message <536bcced.8060...@hireahit.com>, Dave Warren writes:
On 2014-05-08 07:45, Barry Margolin wrote:
In article ,
Tony Finch wrote:
Dave Warren wrote:
DNSMadeEasy calls this an "ANAME" record, internally they just lookup t
On 2014-05-08 07:45, Barry Margolin wrote:
In article ,
Tony Finch wrote:
Dave Warren wrote:
DNSMadeEasy calls this an "ANAME" record, internally they just lookup the
destination's IP and cache it, updating it as needed.
It works, but it would be nice if this could be don
ion, I wouldn't expect zones drifting out of sync or
having minor differences to be a big factor since it happens in the wild
already.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.
l accounts to the CNAME site as you can't have a CNAME and SOA/NS
records at the same level.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubsc
of different methods. Anycasting within your network
might be a good choice in a large environment. If your connectivity is
so badly interrupted that you can't pull off DNS queries against
authoritative servers, there's little value to keeping DNS up since
everything else is b
u host, or things like Google?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc
ation that
wouldn't work with this configuration.
Switching BIND to use hints instead of acting as a root seems to work
around this (broken) local configuration.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
me, just leave the
forwarders list blank and Microsoft DNS does full recursion. The old DNS
setup wizards encouraged forwarders since they made a lot more sense in
the high-latency, well maintained DNS server worlds of yester-year, but
today, you'll probably do a better job of doing your own r
cts are based on one party
or the other doing something and the other promising to do something later.
Luckily registrars don't have much of an incentive to jerk people
around, saving themselves $9 isn't worth the lawsuit and potential loss
of accreditation.
--
Dave Warren
term shall not exceed ten years."
In reality, they'll probably issue the renewal automagically once you're
under the 9-year mark and the domain is renewal-eligible.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
__
re in those recently added/modified records,
so if you just plan for 15 minute update times for non-MS secondaries to
sync up and ignore the periodic "serial is lower than expected"
warnings, multi-mastering works fine in practice.
--
Dave Warren
http://www.hireahit.com/
http://ca.
On 2014-01-28 14:20, Mark Andrews wrote:
In message <52e8258e.3060...@hireahit.com>, Dave Warren writes:
On 2014-01-28 11:28, Matus UHLAR - fantomas wrote:
On 27.01.14 18:23, John Levine wrote:
A friend (really) asks this question: they have some DNSBLs, which get
a lot of queries. Som
NSBL operator knows that certain IPs are not candidates for
listing (or at least not candidates for automated listing), why not let
DNS caches keep that information for as long as possible?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
Usenet is like a herd of perf
closer anycast farms/points, it
can potentially assume that that query is part of an attack and rate
limit much more drastically than is normally done.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
The cigarette does the smoking, you
's an imperfect world.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc
-routable IP addresses outside of expected/predictable locations.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users
.
But this doesn't helps.
I want to ask is it possible to have a CNAME configuration by which I
can divert all queries for my xyz.gov.in domain to xyz.in domain.
That sounds roughly like a possible use for a DNAME record, I believe.
--
Dave Warren
http://www.hireahit.com/
so my memory recalls, there were so many minor disasters during
testing on that roll-out that I might have some details off in my brain,
but if this doesn't help, I'll ask around and see.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com
On 2013-11-06 06:08, Steven Carr wrote:
On 6 November 2013 11:19, Dave Warren wrote:
Perhaps you can point out where on that page RPZ is mentioned?
The Spamhaus news article announcing the "beta" RPZ service
(http://www.spamhaus.org/news/article/669/) indicates that the
Spamhaus DB
On 2013-11-06 01:04, Steven Carr wrote:
This is all explained clearly on their website...
http://www.spamhaus.org/organization/dnsblusage/
Perhaps you can point out where on that page RPZ is mentioned?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
On 2013-10-16 09:47, Manson, John wrote:
I would add that Windows PC OSs by default have the dns client cache set to
'enable'.
Yes. And like Windows Server's DNS cache, these honour TTLs too, so as
long as TTLs are set properly, it's not an issue.
--
Dave Warren
htt
On 2013-08-18 16:36, LuKreme wrote:
On 18 Aug 2013, at 14:06 , Dave Warren wrote:
Change the zones from master to slave in your named.conf? There really isn't
much more to it than that, assuming you have a new authoritative master is
already configured and serving the zones.
Oh, ther
ttle difference.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https:
pike unless it's disruptive to
performance)
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing
On 6/11/2013 7:12 PM, Gary Wallis wrote:
What really happens in the real world when 1 out of three
authoritative NSs are down for 30 minutes due to a datacenter outage?
For example, we have 3 NSs:
ns1.someisp.net 12.23.34.45
ns2.someisp.net 23.34.45.56
ns3.someisp.net 34.45.56.67
All in dif
t shared caches on powerful, well connected
boxes.
Either way, when you're playing with a single test domain,
experimentally, they'll absolutely expire just the way anybody else does.
--
Dave Warren
http://www.hireahit.com/
http://ca
e office where the
pipe is neither fat nor reliable. See #1 and #2 above.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ot; includes
things like routing and DNS. You're not taking over their territory just
yet, just adding yours to theirs.
Politics aside, it solves the technical issues without butchering DNS or
adding excessive unreliability.
But then I just hate forwards. Burned 1000x times, lesson l
On 2013-05-10 16:39, b...@bitrate.net wrote:
On May 10, 2013, at 01.18, Dave Warren wrote:
On 2013-05-08 11:13, btb wrote:
it's also mildly humorous that they used to quite religiously endorse .local, in some
documents even categorizing use of the same domain name on an interna
using a real domain.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://l
On 2013-05-09 11:27, Jeremy P wrote:
I certainly didn't intend to spark off such a firestorm with my
original question. I have learned a lot from the debate though.
On the question of what to use with students, it is a fine thing to
say "we should only do things the way they are done in real
, at least until they run
into enough problems to frustrate them into something more compatible
with current practice.
I made the same mistake many moons ago and I'm still stuck with it. I
wish I'd known better.
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/d
1 - 100 of 174 matches
Mail list logo
