Re: high volume from outside our networks question

2013-01-31 Thread Dmitri Tarkhov
d block it from the outside. On Thu, Jan 31, 2013 at 12:41 AM, Dmitri Tarkhov wrote: One very simple question - do you filter spoofed IPs at your firewalls? And, BTW, a lot of other must be stuff, like ports 135-139 ... (but that's another story) Personally I reject spoofed IPs even

Re: high volume from outside our networks question

2013-01-30 Thread Dmitri Tarkhov
e visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Best regards, Dmitri Tarkhov ___ Please visit https://lists.is

Re: reverse zone of type forward when /28 subnet

2012-12-29 Thread Dmitri Tarkhov
"0.0.127.in-addr.arpa" IN { type master; file "localhst.rev"; }; }; And Happy New Year! Dmitri Tarkhov wrote: Hi, all, thank you very much for discussion. It was interesting and very useful. You can pretty well imagine that I am not much dns involved, I am rather u

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Dmitri Tarkhov
https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Best regards, Dmitri Tarkhov ___ Please visit https://lists.isc.org/ma

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Dmitri Tarkhov
ation from its master zones cutting severely any unnecessary functionality or anything else? What is a bad idea and why? In fact I want to do so because I want to protect it from cache poisoning and any other attack of forge nature. Peter Andreev wrote: 2012/12/27 Dmitri Tarkhov : Hi,

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Dmitri Tarkhov
ere your resolver get authoritative data (I'd recommend this one). Actually, I'm afraid you won't be able to achieve your goal without needless overcomplication. 2012/12/27 Dmitri Tarkhov : Well, it's Ok with that. I indeed am the owner of small reverse zone "255-241.z.y.

Re: reverse zone of type forward when /28 subnet

2012-12-27 Thread Dmitri Tarkhov
er wherever it forwards the request or from where it gets the PTR records. Peter Andreev wrote: Please correct me if I'm wrong: you'd like to edit PTR records for your part of the /24 zone? If so, what you ISP says about rfc2317? 2012/12/27 Dmitri Tarkhov : Hi, I've searched t

reverse zone of type forward when /28 subnet

2012-12-27 Thread Dmitri Tarkhov
solution than digging in subtleties of traces provided that I don't need to allow recursion and forward in general options section for my external dns. I look forward for any suggestions, working examples, corrections, sources of indepth information. TIA. -- Best regards, Dmitri Tarkhov ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users