Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Leonardo Rodrigues Magalhães
Leonardo Rodrigues Magalhães escreveu: Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server, it

Re: Avoiding being used as DDoS reflector.

2009-01-19 Thread Leonardo Rodrigues Magalhães
Nathan Ollerenshaw escreveu: I have an Authoritative BIND server. It is configured to only allow recursive queries from localhost, with recursion disabled for any remote clients. If you attempt to perform a recursive query against this server, it will respond with a "query refused" packet

Re: negative cache TTLs

2009-01-10 Thread Leonardo Rodrigues Magalhães
JINMEI Tatuya / escreveu: I strongly recommend you to upgrade to 9.5.1-P1. 9.5.0-P2 has several known issues that can lead to SERVFAIL, and it's normally not very easy to identify the cause. If you still see the problem with 9.5.1, please report it again. i have updated to 9.5.1-P

negative cache TTLs

2009-01-09 Thread Leonardo Rodrigues Magalhães
Hi, Today, for some unknown reason, one of my servers which is running a local DNS caching server (bind 9.5.0-P2) was answering SERVFAIL for a specific host which i know exists and was working fine. Maybe it was some temporary fail, some temporary internet connection problem ..

Re: zone transfer problem

2009-01-02 Thread Leonardo Rodrigues Magalhães
Sener ATAS escreveu: Hi, I try to add slave dns server. But there is a problem about zone transfer. If I don't edit manually slave server's named.conf file, zone files don't transfer from master to slave. log file at slave dns is; 02-Jan-2009 16:40:03.226 notify: client 192.168.117.50#635

Re: bind memory usage

2008-12-17 Thread Leonardo Rodrigues Magalhães
Peter Dambier escreveu: I can confirm bind 9.4 does run on an (IBM, not Intel) 486-SCL/2 with 16 MB. That cpu can address no more than 16 MB. i have tried running 9.4.3 instead of 9.5.0-P2 and got odd results. 9.5.0-P2 right after start. Not a single query was made to it, just

Re: Where is the open recursion test?

2008-12-15 Thread Leonardo Rodrigues Magalhães
Gregory Hicks escreveu: Greetings: Seeing in my named.log entries for "too many timeouts resolving ''..." makes me wonder if my server is an open recursive server. Where is the test please for open recursion so I can check? http://dns.measurement-factory.com/cgi-bin/openresolvercheck.pl

Re: bind memory usage

2008-12-14 Thread Leonardo Rodrigues Magalhães
Peter Dambier escreveu: I can confirm bind 9.4 does run on an (IBM, not Intel) 486-SCL/2 with 16 MB. That cpu can address no more than 16 MB. $ cat /proc/meminfo total:used:free: shared: buffers: cached: Mem: 14540800 10596352 398 3194880 1003520 3518464 very

Re: bind memory usage

2008-12-14 Thread Leonardo Rodrigues Magalhães
JINMEI Tatuya / escreveu: question is is there something i can do to low bind's memory usage and successfully run it on those very low embedded devices ??? Admittedly, BIND9 tends to require a lot of memory. I'm not sure if it can reasonably function with a total system

bind memory usage

2008-12-13 Thread Leonardo Rodrigues Magalhães
Hi, i'm trying to run bind 9.5.0-P2 on a very low memory system. It's a RouterBoard 450 with 32Mb RAM running OpenWRT. r...@sede:~# cat /proc/meminfo MemTotal:29920 kB the problem is that bind seems to consume a LOT of memory ... well, a lot for low memory devices, i never