Re: Sometimes DNS does not resolv domains

2015-02-08 Thread Eliezer Croitoru
Hey David, Do you have any logs enabled in your settings? The logs can help a lot to minimize the issues. There is a nice example of settings at: http://stackoverflow.com/a/12114139 Which can be a starter to give you more then you have now. Notice that the issue might come from something that is

Looking new RPMs for CentOS 6.

2015-02-08 Thread Eliezer Croitoru
I had some issues in some old versions of CentOS 6 for a caching server so I have compiled bind from sources. I wanted to use and RPM instead of the self compiled version and I have seen couple source such as: http://bkraft.fr/files/RPM%20stuff/ But I am not too familiar with the packager and

Re: A record of domain name must be name server ?

2014-09-10 Thread Eliezer Croitoru
Well this is a confusing point but it's rather an administrative decision to make. If indeed the network\server\domain administrator is not aware of his services he will either have or will not have decision to make. It will depend on whether he knows what he is doing. Mish-mosh or banana he wil

Re: A record of domain name must be name server ?

2014-09-10 Thread Eliezer Croitoru
Hey Kevin, This is not an issue at all. A PTR is different then a "A" record and can be used by two reverse domain names and only the owner of the IP addresses space can define them. I am not sure if two PTR records for two domains will be applied to one IP but it is possible for two IP address

Re: High recursive client counts

2014-03-27 Thread Eliezer Croitoru
Are you using logs on the bind machine\s? Eliezer On 03/25/2014 04:31 PM, Jason Brandt wrote: We recently migrated to BIND for our internal resolvers, and since the migration, we are experiencing periods of high recursive client counts, which will at times cause the BIND server to quit respondi

Re: RRL probably not useful for DNS IP blacklists, was Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-22 Thread Eliezer Croitoru
On 09/20/2013 05:12 PM, Vernon Schryver wrote: > The potential RRL problem is when you provide high volume DNSBL service > over the open Internet to DNS clients that are not authenticated. > However, that is unlikely to be a worry, because providing DNSBL > services over the open Internet is dubiou

Re: injecting a temp entry into dns cache

2013-02-02 Thread Eliezer Croitoru
it to the correct IP until the domain owner fixes the problem (poison my own cache so to speak). Is this something that can be done with bind without having to create a zone for the broken domain and make our servers act as authoritative for it? Thank you, Slava -- Eliezer Croitoru http://www1.ng

Re: Need to improve named performance

2012-11-12 Thread Eliezer Croitoru
yslog.conf. I'm trying to learn more about it but I'm swamped this am, just thought I'd post here to see if anyone knows a quick way to exclude named from the syslog completely. Ed It's not about excluding but to decide whether to even send then logs from bind to syslogd. Regards,

Question related to domain names and less to bind straight.

2012-09-04 Thread Eliezer Croitoru
c ? Thanks, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer ngtech.co.il ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind

Re: webmin Bind problem site not online A record missing mismatch error (network unreachable) resolving

2012-08-08 Thread Eliezer Croitoru
On 8/7/2012 3:18 PM, raj wrote: HI All what is the problem you was writing about?(sentence...) Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer ngtech.co.il ___ Please visit https

Re: Block some users with Bind9

2012-07-28 Thread Eliezer Croitoru
iezer Thanks for your time Eliezer Best regards. -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer ngtech.co.il ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from t

Re: Block some users with Bind9

2012-07-25 Thread Eliezer Croitoru
a lot off but you must install the local root-ca on all the clients computers. i suggest for you to first implement the basic allow\deny acls in squid for the intercepted traffic and later see what is the effect. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting fo

Re: Block some users with Bind9

2012-07-25 Thread Eliezer Croitoru
the world in any way he can just use some basic browser tricks to make this dns setup stupid. i think it's better to use a proxy\fw to block these sites. you can use let say squid and use some nice and good acls to do all your the tricks you need. Regards, Eliezer -- Eliezer Croitoru

Re: Restricting access & keeping identical data across views

2012-03-28 Thread Eliezer Croitoru
Niall O'Reilly ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Eliezer Croitoru https://www1.ngtech.co.il IT

Re: Name Resolution issue with one domain

2012-03-20 Thread Eliezer Croitoru
On 21/03/2012 00:23, Mark Andrews wrote: dig -b 0.0.0.0#53www.dubaiairport.com @svr-b003.dubaiairport.com well i do hope they will change it cause it's really a pain to see that. glad the mystery was found. Regards, Eliezer -- Eliezer Croitoru https://www1.ngtech.co.il IT consultin

Re: Name Resolution issue with one domain

2012-03-20 Thread Eliezer Croitoru
ason for this resolution failure. Regards, Anand Buddhdev RIPE NCC ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listin

Re: how to generate the name of a .nzf file?

2012-03-20 Thread Eliezer Croitoru
lease visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users -- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations elilezer ngtech.

every two days i'm getting a message from bind "no longer listening on X ip

2012-03-17 Thread Eliezer Croitoru
i have a problem on my bind server. every couple days i'm getting this error and the server responding with an error for all requests. [quote] 08-Mar-2012 14:15:51.958 no longer listening on 127.0.0.1#53 13-Mar-2012 20:28:38.283 no longer listening on 127.0.0.1#53 15-Mar-2012 20:12:57.869 no lo