Re: Dig Hangs during axfr request when not on localhost.

2019-06-14 Thread John Horne
On Fri, 2019-06-14 at 10:05 +, John Horne wrote: > On Fri, 2019-06-14 at 08:53 +0100, Pete Fry via bind-users wrote: > > Hi > > > > versions: > > BIND 9.9.4-RedHat-9.9.4-74.el7_6.1 (Extended Support Version) > > CentOS Linux release 7.6.1810 (Core) >

Re: Dig Hangs during axfr request when not on localhost.

2019-06-14 Thread John Horne
o bind-9.9.4-73.el7_6.x86_64 and the zone transfers are working again. John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK [http://www.plymouth.ac.uk/image

Re: How to get memory statistics?

2018-02-15 Thread John Horne
On Thu, 2018-02-15 at 12:47 +, Tony Finch wrote: > John Horne wrote: > > > > Running BIND 9.9.4, we have set the 'memstatistics-file' option in our > > named config file. My understanding is that memory stats will be dumped to > > this file when named ex

How to get memory statistics?

2018-02-15 Thread John Horne
named log files and the general server logs, and can find no error message or the like. So, my question is how do we get memory stats from named? Thanks, John. -- John Horne | Senior Operations Analyst | Technology and Information Services University of Plymouth | Drake Circus | Plymouth | Devon

Re: Rate-limiting - working? How to test?

2014-01-17 Thread John Horne
On 17/01/14 14:22, Rich Goodson wrote: > You need a rate-limit log stanza to see rate limiting information (rate limiting from IP address, no longer > limiting from IP address, etc), and the individual queries that are not responded to are logged either in > your querylog or query-errors (can’

Rate-limiting - working? How to test?

2014-01-17 Thread John Horne
Hello, I have BIND 9.9.4 installed on a server, and have included in the global options: rate-limit { responses-per-second 5; log-only yes; }; However, if I run from a client: for n in `seq 1 10`; do dig +short jhorne.csd.plymouth.ac.uk a @1

Re: Reverse address entries

2013-07-02 Thread John Horne
On Tue, 2013-07-02 at 12:02 -0700, Eduardo Bonsi wrote: > On 7/2/13 9:35 AM, John Horne wrote: > > > > We were alerted to the problem because we got long delays (around 20 > > seconds) when accessing a site doing a reverse lookup. That service > > then, no doubt

Re: Reverse address entries

2013-07-02 Thread John Horne
oing a reverse lookup. That service then, no doubt the same as with SMTP, then proceeded but without the reverse lookup answer. John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Please visit https:/

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 17:20 +0100, Phil Mayers wrote: > On 25/06/13 16:53, John Horne wrote: > > > servers. However, there is a whole load of muttering that Microsoft and > > AD won't like that; it's all integrated with each other; running the DNS > > zone on Li

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
On Tue, 2013-06-25 at 17:07 +0100, Steven Carr wrote: > On 25 June 2013 16:53, John Horne wrote: > > So what I now do not understand is why (at home) I can do several > > reverse lookups for different IP addresses, and they all give me an > > answer. Likewise i

Re: Answers from cache or authority section?

2013-06-25 Thread John Horne
that the internal servers should be just that - internal. Ideal would be moving the reverse zone onto the Internet-facing Linux servers. However, there is a whole load of muttering that Microsoft and AD won't like that; it's all integrated with each other; running the DNS zone on Linux servers w

Answers from cache or authority section?

2013-06-25 Thread John Horne
essed. This is bound to lead to problems. Does anyone listen though...? John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to uns

Re: RPZ - how to modify NS records in answer?

2013-06-21 Thread John Horne
On Fri, 2013-06-21 at 17:11 +0100, John Horne wrote: > > My understanding is that RPZ can do this, but I just cannot seem to > configure the RPZ zone file to enable this. The zone file contains: > = > $TTL 1H > @ SOA LOCALHOST. hostmaster.plymouth.ac.

RPZ - how to modify NS records in answer?

2013-06-21 Thread John Horne
ill returns both 'dns0' and 'dns1'. Likewise using just '.' as the rdata made no difference. So, I'm wondering what the RPZ zone file should contain to enable an NS record to be omitted from the reply? Thanks, John. -- John Horne, Plymouth University, UK Tel

Re: 9.3.3 - SPF record checks

2013-05-30 Thread John Horne
On Fri, 2013-05-31 at 06:53 +1000, Mark Andrews wrote: > In message <1369923655.1952.6.camel@jhorne.config>, John Horne writes: > > Hello, > > > > I noticed in the 9.3.3 announcement the following new SPF check: > > > >Adds a new configuratio

9.3.3 - SPF record checks

2013-05-30 Thread John Horne
t=1 If it is being deprecated, then checking for an SPF record and finding no corresponding TXT record makes sense, but finding a TXT record and warning that there is no SPF record would seem a little pointless. John. -- John Horne, Plymouth University, UK Tel:

Re: Split view - differing SOA serial number

2010-07-09 Thread John Horne
f whether inside the campus, outside, or at one of the remote secondaries, and they remain consistent after an update. Many thanks to people for the replies. John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 _

Re: Split view - differing SOA serial number

2010-07-08 Thread John Horne
On Thu, 2010-07-08 at 07:34 -0400, Alan Clegg wrote: > On 7/8/2010 7:26 AM, John Horne wrote: > > > However, when checking the SOA serial number of our reverse zone we are > > seeing different values depending on whether we are inside or outside of > > the campus.

Re: Split view - differing SOA serial number

2010-07-08 Thread John Horne
t. Thanks, John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Split view - differing SOA serial number

2010-07-08 Thread John Horne
On Thu, 2010-07-08 at 07:34 -0400, Alan Clegg wrote: > On 7/8/2010 7:26 AM, John Horne wrote: > > > However, when checking the SOA serial number of our reverse zone we are > > seeing different values depending on whether we are inside or outside of > > the campus.

Split view - differing SOA serial number

2010-07-08 Thread John Horne
ad the zone for each view it appears in. As such since this zone is in both the internal and external views, I would expect the serial number to always be the same. I am a little confused as to where the difference is coming from. I assume I am missing something obvious!? Thanks, John. -- John Ho

Re: Split view logging?

2009-11-23 Thread John Horne
On Thu, 2009-11-19 at 14:55 -0800, Gregory Hicks wrote: > > From: Chris Buxton > > Date: Tue, 17 Nov 2009 08:16:18 -0800 > > > > On Nov 17, 2009, at 7:02 AM, John Horne wrote: > > > > > Hello, > > > > > > Using BIND 9.5.1, is it po

Split view logging?

2009-11-17 Thread John Horne
Hello, Using BIND 9.5.1, is it possible to configure split view logging - that is, a separate logging channel/category for different views? I'm trying to separate out the queries of our local clients from the external ones. Thanks, John. -- John Horne, University of Plymouth, UK Tel

Re: Nslookup not showng TTL

2009-10-15 Thread John Horne
ot;.) Don't get me wrong here - I've been using dig for years, and only use nslookup if I have to on my Windows laptop at work, on the Linux/UNIX systems dig is only used. If nslookup was no longer present in the BIND distribution then that doesn't bother me at all. John. -- Jo

Re: Nslookup not showng TTL

2009-10-15 Thread John Horne
On Thu, 2009-10-15 at 10:47 +0200, Adam Tkac wrote: > On Thu, Oct 15, 2009 at 09:06:56AM +0100, John Horne wrote: > > > > How can I see the TTL value using nslookup? > > I'm not sure how force nslookup to show TTL but the `dig` utility is > far more better tool for g

Nslookup not showng TTL

2009-10-15 Thread John Horne
.uk internet address = 141.163.177.1 www.plymouth.ac.uk canonical name = extranet.plymouth.ac.uk. Name: extranet.plymouth.ac.uk Address: 141.163.163.185 > == How can I see the TTL value using nslookup? Thanks, John.

Re: problem with bind book example

2009-09-24 Thread John Horne
On Wed, 2009-09-23 at 15:17 -0700, Linda W wrote: > > In my main config it's in the section: > root "." IN { > type hint; > file "root.hint"; > }; > I don't have the BIND book to hand, but that should be: zone "." I

Re: Invalid lan. and local. TLDs

2009-08-31 Thread John Horne
LD unless it had only one NS and that was changed). John. -- ------ John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001 ___ bind-users mailing list bind-users@lists.isc.

Re: Invalid lan. and local. TLDs

2009-08-29 Thread John Horne
On Sat, 2009-08-29 at 13:24 +1000, Mark Andrews wrote: > In message , "Bill Larson" writes: > > John Horne said: > > > > > Hello, > > > > > > I noticed one of the root servers stats > > > ( http://stats.l.root-servers.org/cgi-bi

Invalid lan. and local. TLDs

2009-08-28 Thread John Horne
te of stats by accident, but can't seem to find stats from other root servers. Anyone know if there are other stats available? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287