Re: Reply Code 0x8083 vs 0x8080

2014-05-30 Thread Jiann-Ming Su
nodes depending upon the query type.  A search should always end > on the same node independent of query type. > > What is broken is putting a bare SRV prefix into res_search. > res_search was not designed for that type of searching and doing > so introduces the sort of security errors ta

Re: Reply Code 0x8083 vs 0x8080

2014-05-30 Thread Jiann-Ming Su
> On Friday, May 30, 2014 12:34 AM, Mark Andrews wrote: > > > In message <1401424053.51486.yahoomail...@web121604.mail.ne1.yahoo.com>, > Jiann- > Ming Su writes: >> >> >> Looking through the traces of the NXDomain vs NoError responses.  The >

Re: Reply Code 0x8083 vs 0x8080

2014-05-29 Thread Jiann-Ming Su
ores or changes the actual query with a "." lookup.  Hence the NoError response with the full list of root servers. > On Thursday, May 29, 2014 6:53 PM, Jiann-Ming Su wrote: > > > > > > > >> On Thursday, May 29, 2014 6:32 PM, Mark Andrews > w

Re: Reply Code 0x8083 vs 0x8080

2014-05-29 Thread Jiann-Ming Su
> On Thursday, May 29, 2014 6:53 PM, Jiann-Ming Su wrote: > > > > > > > >> On Thursday, May 29, 2014 6:32 PM, Mark Andrews > wrote: >> > >> In message <53879683.2080...@chrysler.com>, Kevin Darcy writes: >>>   Why the

Re: Reply Code 0x8083 vs 0x8080

2014-05-29 Thread Jiann-Ming Su
> On Thursday, May 29, 2014 6:32 PM, Mark Andrews wrote: > > > In message <53879683.2080...@chrysler.com>, Kevin Darcy writes: >> Why the different RCODES? See RFC 2308. Short version: the > "NODATA" >> response occurs when the QNAME exists, but no records match QTYPE. It >> will also

Reply Code 0x8083 vs 0x8080

2014-05-29 Thread Jiann-Ming Su
What could cause BIND to respond with reply code 0x8083 (no such name) vs 0x8080 (no error)? I have an app doing srv queries without the domain name appended.  One time, server will respond with no such name (flags 0x8083) which causes the app to query again with domain name appended.  Another

Which Forwarder Does Bind Pick?

2013-07-12 Thread Jiann-Ming Su
In a simple fowarding only name server config: options {     forward first;     forwarders {     10.220.0.34;     10.220.0.38;     }; } How does the named process determine when to use one forwarder or both forwarders?  I'm sniffing the traffic and on some queries, it goes for the fi

Re: Delayed Zone Transfers?

2012-08-06 Thread Jiann-Ming Su
> From: Phil Mayers > To: bind-users@lists.isc.org > Cc: > Sent: Monday, August 6, 2012 2:37 PM > Subject: Re: Delayed Zone Transfers? > > On 08/06/2012 05:33 PM, Jiann-Ming Su wrote: > >> Yeah, I've wondered about views.  We went to views to work around

Re: Delayed Zone Transfers?

2012-08-06 Thread Jiann-Ming Su
> From: Jiann-Ming Su > To: "bind-users@lists.isc.org" > Cc: > Sent: Monday, August 6, 2012 12:33 PM > Subject: Re: Delayed Zone Transfers? > >> From: Phil Mayers >> To: bind-users@lists.isc.org >> Cc: >> Sent: Monday, August 6, 2

Re: Delayed Zone Transfers?

2012-08-06 Thread Jiann-Ming Su
> From: Phil Mayers > To: bind-users@lists.isc.org > Cc: > Sent: Monday, August 6, 2012 12:07 PM > Subject: Re: Delayed Zone Transfers? > > On 06/08/12 17:03, Jiann-Ming Su wrote: > >> Here's an example of the zone file being updated, but BIND not serving

Re: Delayed Zone Transfers?

2012-08-06 Thread Jiann-Ming Su
> From: Jiann-Ming Su > To: "bind-users@lists.isc.org" > Cc: > Sent: Thursday, August 2, 2012 5:38 PM > Subject: Delayed Zone Transfers? > > What would cause a delay in zone transfers?  The notify go out immediately > when > the serial number c

Re: Delayed Zone Transfers?

2012-08-06 Thread Jiann-Ming Su
> From: J > To: "bind-users@lists.isc.org" > Cc: > Sent: Thursday, August 2, 2012 5:57 PM > Subject: Re: Delayed Zone Transfers? > > Jiann-Ming Su wrote: >> What would cause a delay in zone transfers?  The notify go out >> immediately when the seria

Delayed Zone Transfers?

2012-08-02 Thread Jiann-Ming Su
What would cause a delay in zone transfers?  The notify go out immediately when the serial number changes on the master, but some of the secondaries can take up to 10 minutes before initiating the zone transfer.  Also, even after the zone has been transferred, the secondary will not immediately

Re: undefined symbol: isc_commandline_index??

2012-08-02 Thread Jiann-Ming Su
I built statically linked binaries, and it fixed the problem. - Original Message - > From: Jiann-Ming Su > To: "bind-users@lists.isc.org" > Cc: > Sent: Thursday, August 2, 2012 3:50 AM > Subject: undefined symbol: isc_commandline_index?? > > Initiall

undefined symbol: isc_commandline_index??

2012-08-02 Thread Jiann-Ming Su
Initially sent this message to the dhcp-users list by mistake... Successfully building 9.8.3-P2 on a CentOS 5.x system with rpmbuild.  I can install the RPMs, but when I try to start the named process, I get the following: /usr/sbin/named-checkconf: symbol lookup error: /usr/sbin/named-checkcon

High Recv-Q Causing Slow Response

2011-02-22 Thread Jiann-Ming Su
Running 9.6.1-P1 on CentOS 5 with 8 CPU cores. We're anycasting our DNS service address. We observe the UDP Recv-Q get as high as 109540 and 2-4 second response times. The simplest fix is to simply restart the bind process. When the response time is slow on the DNS service address, I can do

Re: multi-master configuration?

2010-11-05 Thread Jiann-Ming Su
> On Nov 4, 2010, at 8:38 PM, Jiann-Ming Su wrote: > > So, to clarify my question. When I add the other two dhcp servers to the > > masters{} list and set "multi-master yes" will this allow all three dhcp >servers > > > to update the dyn.mydomain.com zon

multi-master configuration?

2010-11-04 Thread Jiann-Ming Su
How does multi-master configuration work? The scenario I have is three ISC DHCP servers configured for dynamic DNS, which also act as primary for the dynamic zone (dyn.mydomain.com): zone "dyn.mydomain.com" { type master; file "ddb.dyn.mydomain.com"; allow

Response Times on Different Virtual Interfaces

2010-10-06 Thread Jiann-Ming Su
I'm running BIND 9.6.1_P1. The server has multiple virtual interfaces that BIND listens on: listen-on { 127.0.0.1; 172.30.0.213; 192.168.43.98; }; Sometimes I can get quite a huge difference in response time depending on which virtual interface I query against. For example, most of our users