Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-11 Thread Jorge Fábregas
Thanks Tony for the feedback. -- Jorge ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-11 Thread Jorge Fábregas
On 06/08/2014 01:59 PM, Evan Hunt wrote: > The answer is still no. We do have "negative trust anchors" on the > roadmap for 9.11, but that's not scheduled for release until 2015. Thank you Evan. I'm glad to know this is coming. Regards, Jorge ___ Plea

Slightly Off-Topic: Dealing with DNSSEC Bogus Data

2014-06-08 Thread Jorge Fábregas
Hi everyone, I'm about to start DNSSEC validation on my resolvers (BIND 9.8) but wanted to know beforehand if there was a way to disable DNSSEC validation for particular domains. I searched the archives and found the answer to be "no" (at present time). This change is going to impact thousands o

Re: "clients-per-query" vs "max-clients-per-query"

2014-06-07 Thread Jorge Fábregas
On 06/07/2014 12:36 PM, Evan Hunt wrote: > Over time, as it runs, named tries to self-tune the clients-per-query > value. > > If you set clients-per-query to 10 and max-clients-per-query to 100 > (i.e., the default values), that means that the initial limit will be > 10, but if we ever actually hi

"clients-per-query" vs "max-clients-per-query"

2014-06-07 Thread Jorge Fábregas
Hi, I'm trying to understand the difference between clients-per-query & max-clients-per-query. I found a nice explanation by Mark Andrews here [1] but then I wondered about max-clients-per-query. Given a "clients-per-query" of 10, I assume that named will only queue up 10 clients before it start

Re: Forward Domain

2012-01-15 Thread Jorge Fábregas
On 01/15/2012 11:57 AM, Markus Braun wrote: > but what is the different between the DNSMASQ and bind9, that DNSMASQ run > correct and bind9 not? > I have the problem when halo.de is requestet that he only forward when i try > to access over my extern mobile device and when it is on the server th

Re: Forward Domain

2012-01-15 Thread Jorge Fábregas
On 01/15/2012 11:06 AM, Markus Braun wrote: > it shows my ip , but i think i must have the both nameserver from > my ISP in the resolv.conf because i have other domains? and > everything is now forwarded :(( No, you don't need your ISP's nameservers. It should work for other domains (if configu

Re: Forward Domain

2012-01-15 Thread Jorge Fábregas
On 01/15/2012 10:20 AM, Markus Braun wrote: > in my resolv.conf are only the 2 nameserver of my ISP, nothing more. > what must i change here? but i also like that my other domains are working :) > marcus ok, one more test : Try: dig @localhost hallo.de If that works you now know that your loca

Re: Forward Domain

2012-01-15 Thread Jorge Fábregas
On 01/15/2012 09:54 AM, Markus Braun wrote: > And when i put the my IP in my DNS setting from my handy, the handy should > send > the request to my server for this domain. e.g. google.de and give onother output. > I hope you understand what i mean :) Before using your local bind caching nameserve

Re: Forward Domain

2012-01-15 Thread Jorge Fábregas
On 01/15/2012 09:27 AM, Markus Braun wrote: > i restart bind, but nothing works :( Hi, Can you be more specific? Do you get any error when restarting? Anything on syslog? What are you using to perform the tests? dig? Can you show us the output? Does resolution for other domains work? or is it

Re: Auth Section & Forwarders

2012-01-14 Thread Jorge Fábregas
On 01/13/2012 07:30 PM, Mark Andrews wrote: > The nameserver is returning "the closest available" nameservers. These > are usually the nameservers for the zone but not always. Got it now. Thanks for the help Mark. Best regards, Jorge ___ Please visit

Auth Section & Forwarders

2012-01-13 Thread Jorge Fábregas
Hello everyone, I recently disabled "minimal-responses" (by setting it to 'no') in our caching nameservers. As I'm now able to see the authority & additional sections I noticed something strange: whenever I query our caching nameservers for one of our domains we get our parent nameservers under

Re: Request Redirect

2010-06-15 Thread Jorge Fábregas
On Tuesday 15 June 2010 07:52:34 sasa sasa wrote: > we have 2 network, when network 1 request www.example.com i want to reply > with x.x.x.x A record, and when network 2 request www.example.com i want > to reply with y.y.y.y A record. is that possible in Bind configuration? Hi, Sure. Check out Bi

Re: Any way to query/list "Negative" Records

2010-02-10 Thread Jorge Fábregas
On Wednesday 10 February 2010 20:14:06 Mark Andrews wrote: > You can see a cached negative response by looking at the TTL of the SOA > record. When that hits zero the cached negative response will be removed. > See RFC 2308. Arrgh thanks Mark! I had no idead about this. It was in my face all th

Any way to query/list "Negative" Records

2010-02-10 Thread Jorge Fábregas
Hello everyone, Today I had an issue with one of our caching nameservers (it wasn't presenting a recently created MX record). I didn't know whether the server had any problem requesting this record upstream or someone queried for this record before it was created causing the server to cache

Re: Can bind log the IP of clients requesting lookups to a domain?

2010-02-06 Thread Jorge Fábregas
On Friday 05 February 2010 19:16:12 Keith Christian wrote: > In other words, I'd like to know the IP of clients trying to resolve > app01.foocompany.net (for example.) I tried once to do this but couldn't find a any way to do it natively with Bind. It seems that, once you turn on query logging,