Re: adding zone forwards without restart

2016-09-29 Thread Frank Even
ed, Sep 21, 2016 at 5:03 PM, Sten Carlsen wrote: > I assume you did increase the serial, if not this is what I would expect > to happen. > > On 21/09/16 10:53, Tony Finch wrote: > > Frank Even wrote: > > > Is there a way to add forwarders for specific zones without a res

Re: adding zone forwards without restart

2016-09-29 Thread Frank Even
None of that works. Nothing short of a restart of the daemon notices new forwarders added to the config. That is inclusive of: rndc reconfig rndc reload rndc flushname $nameofforwardersadded rndc flush A restart of the service however, that does work. That is far more disruptive than I like th

Re: adding zone forwards without restart

2016-09-29 Thread Frank Even
quot; on EL6 and "service named-chroot restart" on EL7) works. On Wed, Sep 21, 2016 at 1:53 AM, Tony Finch wrote: > Frank Even wrote: > > > Is there a way to add forwarders for specific zones without a restart? > > Everything I've read seems to indicat

Re: adding zone forwards without restart

2016-09-20 Thread Frank Even
that is higher up in the hierarchy will not load until a full restart I've found (meaning you have "domain.com" configured as a master zone and add "subdomain.domain.com" as a master zone as well). On Tue, Sep 20, 2016 at 5:56 PM, Benny Pedersen wrote: > On 2016-09-2

adding zone forwards without restart

2016-09-20 Thread Frank Even
Is there a way to add forwarders for specific zones without a restart? Everything I've read seems to indicate an "rndc reconfig" or an "rndc reload" should take care of this, but they do not. I add forwarders to "named.conf" and neither will load the new forwarded zone until I do a full daemon res

Re: allow-query does not seem to be working

2016-08-08 Thread Frank Even
Thanks for the info. Also I'll have to note that I completely missed that the "offending IP" is one of the .uk root servers so the next logical conclusion is I've probably got a box in one of my environments driving an amplification attack of some sort or something at those IPs that I need to figu

allow-query does not seem to be working

2016-08-06 Thread Frank Even
I have a group of servers serving out multiple addresses via anycast. I've been made aware that an IP outside of our network is hitting the boxes with queries, and we're returning data to the client. With allow-query and allow-recursion locked to our subnets, this outside host is still getting re

Re: monitoring/graphing/tracking named queries

2015-11-13 Thread Frank Even
s://github.com/dns-stats/hedgehog/wiki ("demo": > http://stats.dns.icann.org/hedgehog/hedgehog.html ) > > W > > > On Fri, Nov 13, 2015 at 5:45 PM, Frank Even > wrote: >> What does everyone do for monitoring their DNS traffic, if anything? >> I'v

monitoring/graphing/tracking named queries

2015-11-13 Thread Frank Even
What does everyone do for monitoring their DNS traffic, if anything? I've come to a place where I need to have a good understanding of general capacity. For example, how much traffic and types of traffic individual servers are handling. I'd also like to get a breakdown of raw # of queries, then t

Re: rndc flushname not working

2015-04-13 Thread Frank Even
On Mon, Apr 13, 2015 at 11:10 AM, Evan Hunt wrote: > On Mon, Apr 13, 2015 at 11:05:05AM -0700, Frank Even wrote: >> ...and where could I find info on what is stored in ADB and any other >> particular items that flushname might not deal with? That's where my >> frus

Re: rndc flushname not working

2015-04-13 Thread Frank Even
On Sat, Apr 11, 2015 at 6:49 AM, Tony Finch wrote: > There was a bug in 9.9 and earlier that rndc flushtree only flushed the main > cache, not adb or bad cache. This was fixed in 9.10 - see item 3606 in the > CHANGES file. ...and where could I find info on what is stored in ADB and any other pa

Re: rndc flushname not working

2015-04-09 Thread Frank Even
On Thu, Apr 9, 2015 at 1:48 PM, Matus UHLAR - fantomas wrote: > On 09.04.15 13:25, Frank Even wrote: >> >> Is there any place I can look to get a definitive answer in what cases >> "flushname" will and will not work? > > > it will work if you have old en

Re: rndc flushname not working

2015-04-09 Thread Frank Even
Is there any place I can look to get a definitive answer in what cases "flushname" will and will not work? I've been digging around in lists and docs and can't seem to find any definitive answers. I've been having odd troubles clearing a name from a cache and after even clearing the name and the

Re: BIND not loading into memory on first transfer

2015-04-01 Thread Frank Even
On Fri, Mar 27, 2015 at 8:25 AM, Barry Margolin wrote: > In article , > /dev/rob0 wrote: > >> On Thu, Mar 26, 2015 at 11:34:42AM -0700, Frank Even wrote: >> > In this particular instance, the masters ended up under maintenance >> > shortly after these boxes

Re: BIND not loading into memory on first transfer

2015-03-26 Thread Frank Even
as saved on disk. Since BIND wasn't able to transfer newer >>> versions, it continued providing old versions. > > > On 26.03.15 12:48, Frank Even wrote: >> >> Yes, the old versions were provided on disk on initial load. But that >> was then followed up with

Re: BIND not loading into memory on first transfer

2015-03-26 Thread Frank Even
On Thu, Mar 26, 2015 at 12:17 PM, Matus UHLAR - fantomas wrote: > On 26.03.15 11:34, Frank Even wrote: >> >> Zone files were in place for the necessary domains, but were outdated >> (assuming one of our updates broke something somewhere, they were all >> on average 3

BIND not loading into memory on first transfer

2015-03-26 Thread Frank Even
The subject is about the only way I can think to describe a situation we've run into recently. First here is the system: [root@dns]# cat /etc/redhat-release CentOS release 6.6 (Final) [root@dns]# rpm -q bind bind-9.8.2-0.30.rc1.el6_6.2.x86_64 So, we got bit by a chroot permissions issue (unsure

Re: forwarder is ignored when authoritative zone is added

2012-10-26 Thread Frank Even
On Fri, Oct 26, 2012 at 7:27 AM, Barry Margolin wrote: > In article , > Frank Even wrote: > >> I've recently had an issue that I'm having some issues finding >> information on solving. >> >> I have internal DNS resolvers...they act as recursive name s

forwarder is ignored when authoritative zone is added

2012-10-25 Thread Frank Even
I've recently had an issue that I'm having some issues finding information on solving. I have internal DNS resolvers...they act as recursive name servers for general internet queries, but we have forwarders explicitly defined for specific internal zones being served by other name servers. My conf