real BIND start time

2017-01-05 Thread Jonathan Reed
Hi, I'm running rndc stats and trying to determine how long the stats are good for. I'm querying the server start time by a couple methods but they're not the same. Which one should I rely on? $ date -r /var/run/named/named.pid Sun Jan 1 03:38:04 EST 2017 $ ps -C named -o lstart= Sat Dec 24 12:0

Re: stealth with views?

2013-11-07 Thread Jonathan Reed
where the master is located at the DR site. You don't have to put the hidden master in the public zone file. you're right, I was mixed up between zone file and named.conf. On Thu, Nov 7, 2013 at 2:23 PM, Barry Margolin wrote: > In article , > Jonathan Reed wrote: > > >

stealth with views?

2013-11-07 Thread Jonathan Reed
I'd like my global BIND server to slave a copy of my zone from the master being hosted on my LAN. It appears that this is called a stealth setup. I figured I'd achieve this by having the secondary on the internet slave a view, but I've read that this is not ideal from a security standpoint. The arg

Re: does zone trump forward?

2013-06-05 Thread Jonathan Reed
> > But then I just hate forwards. Burned 1000x times, lesson learned :) What are you referring to? Why are forwards such a bad idea? On Wed, Jun 5, 2013 at 4:54 PM, Dave Warren wrote: > On 2013-06-04 06:42, Alan Shackelford wrote: > > We have 2843 authoritative zones. We run a split brain D

does zone trump forward?

2013-06-02 Thread Jonathan Reed
I've only ever come across bind configs where forwarding is in place to locate certain zones, then all other queries are handled by either recursion or authoritatively. But what about the other way around, where I'm master for a few zones but forward the rest? Consider this: view "the-internet" {

Re: architecture question

2013-05-08 Thread Jonathan Reed
> > It would be a waste of money as their systems never leave the local > network, except through a NAT connection. Godaddy is selling .coms for $0.99 right now (US/Canada). In the spirit of an educational setting, it might be a viable exercise for students to understand how easy and affordable i

multiple ints: views or separate records?

2012-05-25 Thread Jonathan Reed
Hi, I have a few systems with multiple physical and virtual interfaces. One system has a single A record but im considering splitting it up. I'd like to persuade users to talk with a specific interface depending mostly on the app and sometimes from the subnet where their request originates. I want

Re: How does load balancing operate on >1 forwarders

2010-04-19 Thread Jonathan Reed
e on 'nearness'. > > You can see the SRTT value of nameservers in the ADB section of the > cache dump (from rndc dumpdb). Smaller values are preferred. > > What version are you using? > > > Jonathan Reed wrote: > > I have the forwarders statement to fwd quer

How does load balancing operate on >1 forwarders

2010-04-17 Thread Jonathan Reed
I have the forwarders statement to fwd queries to a few DNS servers on my LAN. forwarders { 10.0.0.1; 10.0.0.2; 10.0.0.3; } The bind documentation says that these fwders are queried "in turn", but what exactly does that mean? I understand it to mean tha

Re: logging forwarding reqs

2010-04-15 Thread Jonathan Reed
10 at 12:31 PM, Jonathan Reed wrote: > Hey all, > > I've setup bind9 to be a forwarder only. However I'm not understanding how > to confirm requests for queries are being sent through to the forwarded dns > servers. Even running in debug mode, I can see the req, but I do

logging forwarding reqs

2010-04-15 Thread Jonathan Reed
Hey all, I've setup bind9 to be a forwarder only. However I'm not understanding how to confirm requests for queries are being sent through to the forwarded dns servers. Even running in debug mode, I can see the req, but I dont see anything in the debug msg that says its been forwarded on to any of