Large RPZ with a lot of views.

2014-10-17 Thread Matt Doughty
Hi, I have a configuration with a lot of views and I want all of them to use the same RPZ zone with is 100K+ entries. It takes far too long to load all the views when I include the RPZ zone in each view as a master zone. I have tried: 1. setting up the zone at the top level, but you can't do that

How does bind determine a query is duplicate?

2014-05-02 Thread Matt Doughty
I'm assuming it is a combination of host:port:query, but can anyone confirm that? -- --Matt ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists

Question about forwarders statements in 9.7

2012-04-16 Thread Matt Doughty
I was under the impression that bind would determine the best target forwarders to use, and send queries to those forwarders, but we had a situation over the weekend where one of the servers in the forwarder list was down, and bind continued to send queries to that forwarder even though it wasn't r

Re: Getting a formerr 'invalid response' for winqual.microsoft.com. but dig +trace works.

2012-02-09 Thread Matt Doughty
I would have to back port right now, and I have a work around that will work until the we bump our fleet to a newer version. I was mostly concerned about whether it was something in our network causing the problem. Thanks for all the help guys, --Matt On Thu, Feb 9, 2012 at 4:42 PM, Spain, Dr. J

Re: Getting a formerr 'invalid response' for winqual.microsoft.com. but dig +trace works.

2012-02-09 Thread Matt Doughty
, which happily serves up the data, and lodge a complaint with Microsoft to fix their servers, but I want to make sure there isn't something wrong somewhere in my network that is causing this problem. thanks, --Matt On Wed, Feb 8, 2012 at 8:05 PM, David Miller wrote: > On 2/8/2012 10:32

Getting a formerr 'invalid response' for winqual.microsoft.com. but dig +trace works.

2012-02-08 Thread Matt Doughty
I have spend the afternoon trying to figure this out. The response I get back from their nameserver looks fine to me, and dig +trace works fine, but a regular dig returns a servfail. I have looked at the code for invalid response, but I don't quite follow what is going on there, and the comment 're