ed, Sep 21, 2016 at 5:03 PM, Sten Carlsen wrote:
> I assume you did increase the serial, if not this is what I would expect
> to happen.
>
> On 21/09/16 10:53, Tony Finch wrote:
>
> Frank Even wrote:
>
>
> Is there a way to add forwarders for specific zones without a res
None of that works. Nothing short of a restart of the daemon notices new
forwarders added to the config. That is inclusive of:
rndc reconfig
rndc reload
rndc flushname $nameofforwardersadded
rndc flush
A restart of the service however, that does work. That is far more
disruptive than I like th
quot; on EL6 and "service named-chroot restart" on EL7) works.
On Wed, Sep 21, 2016 at 1:53 AM, Tony Finch wrote:
> Frank Even wrote:
>
> > Is there a way to add forwarders for specific zones without a restart?
> > Everything I've read seems to indicat
that is higher up in the hierarchy will not
load until a full restart I've found (meaning you have "domain.com"
configured as a master zone and add "subdomain.domain.com" as a master zone
as well).
On Tue, Sep 20, 2016 at 5:56 PM, Benny Pedersen wrote:
> On 2016-09-2
Is there a way to add forwarders for specific zones without a restart?
Everything I've read seems to indicate an "rndc reconfig" or an "rndc
reload" should take care of this, but they do not. I add forwarders to
"named.conf" and neither will load the new forwarded zone until I do a full
daemon res
Thanks for the info. Also I'll have to note that I completely missed that
the "offending IP" is one of the .uk root servers so the next logical
conclusion is I've probably got a box in one of my environments driving an
amplification attack of some sort or something at those IPs that I need to
figu
I have a group of servers serving out multiple addresses via anycast. I've
been made aware that an IP outside of our network is hitting the boxes with
queries, and we're returning data to the client.
With allow-query and allow-recursion locked to our subnets, this outside
host is still getting re
s://github.com/dns-stats/hedgehog/wiki ("demo":
> http://stats.dns.icann.org/hedgehog/hedgehog.html )
>
> W
>
>
> On Fri, Nov 13, 2015 at 5:45 PM, Frank Even
> wrote:
>> What does everyone do for monitoring their DNS traffic, if anything?
>> I'v
What does everyone do for monitoring their DNS traffic, if anything?
I've come to a place where I need to have a good understanding of
general capacity. For example, how much traffic and types of traffic
individual servers are handling.
I'd also like to get a breakdown of raw # of queries, then t
On Mon, Apr 13, 2015 at 11:10 AM, Evan Hunt wrote:
> On Mon, Apr 13, 2015 at 11:05:05AM -0700, Frank Even wrote:
>> ...and where could I find info on what is stored in ADB and any other
>> particular items that flushname might not deal with? That's where my
>> frus
On Sat, Apr 11, 2015 at 6:49 AM, Tony Finch wrote:
> There was a bug in 9.9 and earlier that rndc flushtree only flushed the main
> cache, not adb or bad cache. This was fixed in 9.10 - see item 3606 in the
> CHANGES file.
...and where could I find info on what is stored in ADB and any other
pa
On Thu, Apr 9, 2015 at 1:48 PM, Matus UHLAR - fantomas
wrote:
> On 09.04.15 13:25, Frank Even wrote:
>>
>> Is there any place I can look to get a definitive answer in what cases
>> "flushname" will and will not work?
>
>
> it will work if you have old en
Is there any place I can look to get a definitive answer in what cases
"flushname" will and will not work? I've been digging around in lists
and docs and can't seem to find any definitive answers. I've been
having odd troubles clearing a name from a cache and after even
clearing the name and the
On Fri, Mar 27, 2015 at 8:25 AM, Barry Margolin wrote:
> In article ,
> /dev/rob0 wrote:
>
>> On Thu, Mar 26, 2015 at 11:34:42AM -0700, Frank Even wrote:
>> > In this particular instance, the masters ended up under maintenance
>> > shortly after these boxes
as saved on disk. Since BIND wasn't able to transfer newer
>>> versions, it continued providing old versions.
>
>
> On 26.03.15 12:48, Frank Even wrote:
>>
>> Yes, the old versions were provided on disk on initial load. But that
>> was then followed up with
On Thu, Mar 26, 2015 at 12:17 PM, Matus UHLAR - fantomas
wrote:
> On 26.03.15 11:34, Frank Even wrote:
>>
>> Zone files were in place for the necessary domains, but were outdated
>> (assuming one of our updates broke something somewhere, they were all
>> on average 3
The subject is about the only way I can think to describe a situation
we've run into recently. First here is the system:
[root@dns]# cat /etc/redhat-release
CentOS release 6.6 (Final)
[root@dns]# rpm -q bind
bind-9.8.2-0.30.rc1.el6_6.2.x86_64
So, we got bit by a chroot permissions issue (unsure
On Fri, Oct 26, 2012 at 7:27 AM, Barry Margolin wrote:
> In article ,
> Frank Even wrote:
>
>> I've recently had an issue that I'm having some issues finding
>> information on solving.
>>
>> I have internal DNS resolvers...they act as recursive name s
I've recently had an issue that I'm having some issues finding
information on solving.
I have internal DNS resolvers...they act as recursive name servers for
general internet queries, but we have forwarders explicitly defined
for specific internal zones being served by other name servers.
My conf
19 matches
Mail list logo