Getting BIND to forward a zone to other name servers

2024-12-08 Thread Mike via bind-users
not) and everything else from the interwebs (which they are). Most significantly though, I'm not just trying to resolve the issue but actually fix my understanding of BIND and learn where I am going wrong here. Kind regards, Mike. signature.asc Description: PGP signature -- Visit http

Re: Server crash on receiving query

2024-11-06 Thread Mike Hodson
packagers as stable. And now libuv is crashing macOS arbitrarily? Why is the bind project using such a library that seems to be perennially unstable? Mike -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid

RE: fixed rrset ordering - is this still a thing?

2024-03-01 Thread Mike Mitchell via bind-users
ections take too long and there must be a network error. Mike Mitchell -Original Message- From: bind-users On Behalf Of Ondrej Surý Sent: Thursday, February 29, 2024 4:40 PM To: BIND Users Mailing List Subject: fixed rrset ordering - is this still a thing? EXTERNAL Hey, BIND 9 suppor

RE: Bind listener to an IPv6 from AnyIP subnet

2023-03-12 Thread Mike Lewinski via bind-users
This doesn't appear to be an IPv6-specific issue. In principle named should also be capable of listening on all of 127/8, but I can't find any configuration syntax that will do more than listen on 127.0.0.1. I can ping 127.0.0.2 (and so on) but even explicitly adding listen-on 127.0.0.2 won't c

Something other than port 53 is blocking the LAN based BIND9 Servers

2023-03-05 Thread Mike Lieberman
Hi, I am new here, but have been using BIND since 1994. I am confused by the issue herein and maybe someone has an idea of at least what group I should be talking to. I have a Debian based operation and my BIND9 servers run on Debian. BUT... This is really about BIND as it interacts with my I

Re: Deprecation notice for BIND 9.18: Differentiated Services Code Point (DSCP) support

2023-01-05 Thread Mike Hodson
than getting any random service to do it for you. Mike On Thu, Jan 5, 2023 at 7:45 AM Matus UHLAR - fantomas wrote: > >> > On 5. 1. 2023, at 14:46, Robert M. Stockmann > wrote: > >> > This is like Mercedes Benz announcing they will only sell > >> > the Ba

Re: Dig -x +trace?

2022-10-03 Thread Mike Hodson
On Mon, Oct 3, 2022, 15:29 Greg Choules < gregchoules+bindus...@googlemail.com> wrote: > Hi Mike. > No need to shoot. I missed your first message to the list. > > Have you tried other popular open resolver services, to compare how they > each behave and see whether there ar

Re: Dig -x +trace?

2022-10-03 Thread Mike Hodson
On Mon, Oct 3, 2022 at 2:24 PM Greg Choules < gregchoules+bindus...@googlemail.com> wrote: > Hi Mike. > OK, let's try and do some practical things here. > > Firstly, please share your /etc/resolv.conf > nameserver 1.1.1.1 as I said in my first message to the list. &

Re: Dig -x +trace?

2022-10-03 Thread Mike Hodson
o please tone down on the snarkiness. I get it that you might be > frustrated, but this mailing list is not a place to vent off your > frustration. > I'm more frustrated by the answer to "stop obfuscating so we can help" ; I did not initially ask the question "

Re: Dig -x +trace?

2022-10-03 Thread Mike Hodson
d the entire text into an edit box at the bottom. But still. 12 tries to get different results and finally get the 1 result I expect is utterly crap. On Mon, Oct 3, 2022 at 1:11 PM Mike Hodson wrote: > On Thu, Sep 29, 2022 at 4:57 PM Mark Andrews wrote: > >> >> >> Hidi

Re: Dig -x +trace?

2022-10-03 Thread Mike Hodson
4 tries later, I get the results I expect. Now, for the delegation I was wondering about; it ONLY took THREE tries to get dig to return these results: mike@mike-pc:~$ dig -x 208.51.60.0 SOA +trace ; <<>> DiG 9.18.1-1ubuntu1.1-Ubuntu <<>> -x 208.51.60.0 SOA

Dig -x +trace?

2022-09-29 Thread Mike Hodson
ll I get is the root-servers instead of any sort of reverse looking up happening at all. What am I doing wrong? Thanks, Mike $ dig -x 208.x.x.x +trace ; <<>> DiG 9.18.1-1ubuntu1.1-Ubuntu <<>> -x 208.x.x.x +trace ;; global options: +cmd . 509

RE: ipv6 adoption

2022-02-16 Thread Mike Lewinski via bind-users
> HE has a lot of IPv6 educational materials (not bind-specific) that are quite > good. I wasn't aware, but this looks worthy and I'm going to do it: https://ipv6.he.net/certification/ Also to the OP here's another +1 that Debian 10 bind version does IPv6 just fine, and +1 upgrade it anyway be

Re: Expanding my Use of Option 82

2021-03-13 Thread Mike Hammett
Sorry, wrong list. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Mike Hammett" To: bind-users@lists.isc.org Sent: Saturday, March 13, 2021 8:57:34 AM Subject: Expanding my Use of Optio

Expanding my Use of Option 82

2021-03-13 Thread Mike Hammett
aren't in the same LAN anymore. However, the DSLAMs (currently) are. I assume this is less about Webmin and more about ISC-DHCP. Unfortunately, I don't remember much of when I set up that DHCP server to remember the nuances of ISC DHCP and option 82. Any guidance? -

nlabels == name->labels

2020-05-03 Thread mike tancsa
Hi,     We recently upgraded to 9.16.2 on FreeBSD 11.3 STABLE and after ~ week of use, it died this morning with the following assertion.  Any ideas what this might be about ? May  3 05:36:27 ns named[845]: name.c:1738: INSIST(nlabels == name->labels) failed, back trace May  3 05:36:27 ns nam

BIND 9.16.1: unable to set effective uid to 0: Operation not permitted

2020-03-30 Thread Mike Lewinski
=/bin/kill -TERM $MAINPID PrivateTmp=true [Install] WantedBy=multi-user.target I've been trying to track down a (probably) unrelated dnssec issue resolving theoptimalfinancialgroup.com and this error has distracted me from my investigation.

loopback

2020-02-18 Thread Ward, Mike S
Hello all, I have a small problem, and I was wondering if someone could help me. My bind9 dns gets a query for loopback. I have tried and tried to define the word loopback in the dns as a forward zone with reverse loopkup, but doesn't seem to take. I have tried to CNAME it using localhost, but

set bind-users mail

2020-02-13 Thread Ward, Mike S
set bind-users mail == This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to which it is addressed. If you have received this email in error, please notify the system manager. This message contains c

Re: rpz using a forward zone

2019-06-05 Thread Mike Woods
I was afraid that would be the answer, time to try some other solutions then. Thanks. On 05/06/2019 12:03, Tony Finch wrote: > Mike Woods wrote: >> >> So, the long and short of things, is it actually possible to point the >> response policy at a forward zone > > N

rpz using a forward zone

2019-06-05 Thread Mike Woods
r this it fails to start and it's not clear from the documentation if this needs to be a physical zone file or not. So, the long and short of things, is it actually possible to point the response policy at a forward zone or am I pissing my time up th

Re: SPF and domain keys

2016-08-29 Thread Mike Ragusa
alphazulu send as @foxtrot.com. > > Would @alphazulu.com appear anywhere in the headers? > > On Mon, Aug 29, 2016 at 9:34 AM, Mike Ragusa wrote: > >> Glad to help! If you need a low cost DMARC reporting service, I would >> recommend www.dmarcian.com >> >> On Mo

Re: SPF and domain keys

2016-08-29 Thread Mike Ragusa
Glad to help! If you need a low cost DMARC reporting service, I would recommend www.dmarcian.com On Mon, Aug 29, 2016 at 10:33 AM project722 wrote: > Thanks guys - very helpful information indeed. > > On Mon, Aug 29, 2016 at 9:08 AM, Mike Ragusa wrote: > >> Ideally it i

Re: SPF and domain keys

2016-08-29 Thread Mike Ragusa
Ideally it is best to use both technologies and then put DMARC on top to ensure reporting and enforcement of the policies. DKIM cryptographically signs your messages and SPF informs receiving mail servers of who is allowed to send on your behalf. You should not think of using only one or the other

Re: Recursive bind becomes unresponsive with high load

2016-04-01 Thread Mike Mitchell
etc/sysctl.conf net.netfilter.nf_conntrack_udp_timeout_stream = 45 net.nf_conntrack_max = 50 net.ipv4.neigh.default.gc_thresh1 = 512 net.ipv4.neigh.default.gc_thresh2 = 1024 net.ipv4.neigh.default.gc_thresh3 = 2048 net.ipv4.tcp_max_syn_backlog = 4096 net.ipv4.tcp_fin_timeout = 30 net.ipv4.tcp_tw_recycle = 1

Re: Recursive bind becomes unresponsive with high load

2016-03-31 Thread Mike Hoskins (michoski)
If you are crawling lots of new names, the cache size won't have much impact. Each new query will require recursing vs hitting the cache. Try "rndc recursing" and look at what you have sitting around waiting for answers. Hopefully that provides some clues. This can be all sorts of things like u

RE: BIND started replying to queries for .com with .COM

2016-03-30 Thread Mike Bernhardt
ailto:ma...@isc.org] Sent: Tuesday, March 29, 2016 5:19 PM To: Mike Bernhardt Cc: bind-us...@isc.org Subject: Re: BIND started replying to queries for .com with .COM Your monitoring probe is broken. STD 13 says that that the DNS is case preserving. The problem is that lots of servers aren't ca

BIND started replying to queries for .com with .COM

2016-03-29 Thread Mike Bernhardt
I rebooted one of our BIND VMs this morning. It's running BIND 9.10.3-P3. We noticed that queries for domains with domain.com were answered with domain.COM with the .COM in capital letters. Other high-levels like .org were not changed. It caused a monitoring probe to complain because it wasn't gett

RE: PCS, Corosync, Pacemaker, and Bind

2016-03-19 Thread Mike Bernhardt
there also to see if it's possible to build a virtual interface for the IP, but I doubt it. -Original Message- From: Tony Finch [mailto:d...@dotat.at] Sent: Tuesday, March 15, 2016 5:40 PM To: Mike Bernhardt Cc: bind-users@lists.isc.org Subject: Re: PCS, Corosync, Pacemaker, and Bi

RE: PCS, Corosync, Pacemaker, and Bind

2016-03-19 Thread Mike Bernhardt
My apologies, never mind :-{ I don't know what the problem was, BIND seems to load up just fine today, even when the option addresses don't match the virtual address. I must have screwed up something else. ___ Please visit https://lists.isc.org/mailman

RE: PCS, Corosync, Pacemaker, and Bind

2016-03-18 Thread Mike Bernhardt
.@dotat.at] Sent: Tuesday, March 15, 2016 5:40 PM To: Mike Bernhardt Cc: bind-users@lists.isc.org Subject: Re: PCS, Corosync, Pacemaker, and Bind Mike Bernhardt wrote: > > I'm setting up a new CentOS 7 DNS server cluster to replace our very > old CentOS 4 cluster. The old one us

PCS, Corosync, Pacemaker, and Bind

2016-03-15 Thread Mike Bernhardt
an IP address that is not on an interface, or 2) There is a way to tell corosync (hopefully using pcsd) to create a virtual interface, not just a virtual address, so BIND can find it. Mike Bernhardt ___ Please visit https://lists.isc.org/mailman/listi

Re: DNS Server goofiness

2016-02-04 Thread Mike Hoskins (michoski)
Do you really want to return RFC1918 to the Internet? Not the end of the world, but some consider it unnecessary information disclosure. :-) I've seen this on various WAN/fw/router used at home over the years (arris, cisco, linksys, etc) and unlike the commands Reindal shared which are geared

Re: What is the use of having a chroot path during installation of Bind

2016-01-14 Thread Mike Hoskins (michoski)
Yes you can run without the chroot. Years ago it was considered best practice to chroot and most power users would have said you were insane not to do so. Now there are increasingly many who say it's not worth the effort (fairly easy to get around in many cases) -- do a bit of google engineeri

Re: Bind9 on VMWare

2016-01-13 Thread Mike Hoskins (michoski)
On 1/13/16, 4:02 PM, "bind-users-boun...@lists.isc.org on behalf of Reindl Harald" wrote: >Am 13.01.2016 um 19:54 schrieb Mike Hoskins (michoski): >> I've ran several large DNS infras over the years. Back in 2005/6 I >> finally drank the koolaid and

Re: Bind9 on VMWare

2016-01-13 Thread Mike Hoskins (michoski)
On 1/13/16, 10:28 AM, "bind-users-boun...@lists.isc.org on behalf of Reindl Harald" wrote: > > >Am 13.01.2016 um 16:19 schrieb Lightner, Jeff: >> We chose to do BIND on physical for our externally authoritative >>servers. >> >> We use Windows DNS for internal. >> >> One thing you should do if yo

RE: Cloud DNS providers for secondary DNS

2015-12-30 Thread Diggins Mike
I believe that's called a LAME nameserver, correct? What happens? Does it answer the query regardless? Does specifying the NS record in the zone simply confirm to the remote site that this is a valid nameserver for this zone? -Mike -Original Message- From: bind-users-boun...@lists.is

Cloud DNS providers for secondary DNS

2015-12-29 Thread Diggins Mike
S ns2.d-zone.ca <== Addition What happens if I do one without the other? I guess I don't fully understand the relationship between the name servers listed in the zone versus the ones found in my domain record. I'm running BIND locally, if

Re: Query on ignoring additional section returned in replies

2015-11-18 Thread Mike Hoskins (michoski)
On 11/18/15, 1:19 PM, "bind-users-boun...@lists.isc.org on behalf of Carl Byington" wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > >On Wed, 2015-11-18 at 10:47 -0500, Barry Margolin wrote: >> While that's the pedantically correct answer, in practice it doesn't >> work well when your us

Re: Query on ignoring additional section returned in replies

2015-11-18 Thread Mike Hoskins (michoski)
On 11/18/15, 10:47 AM, "bind-users-boun...@lists.isc.org on behalf of Barry Margolin" wrote: >In article , > Reindl Harald wrote: > >> when a result looks like below it needs to be fixed and "Are there any >> BIND specific workarounds?" is the wrong question becaus even if - the >> domain owner

BIND Views advice please

2015-10-09 Thread Diggins Mike
type master; file "data/ext_test.mydomain.com"; }; # other slave zones zone "yyy.mydomain.com" { type slave; file "data/yyy.mydomain.com"; masters { 172.26.1.1; }; }; }; -Mike ___

Re: Installing bind is not very clear for me

2015-09-04 Thread Mike Hoskins (michoski)
On 9/4/15, 9:29 PM, "bind-users-boun...@lists.isc.org on behalf of Noel Butler" wrote: >On 05/09/2015 04:49, Reindl Harald wrote: > >> mostly people who are throwing as much as possible appliances and >> firewalls in front of their machines doing that because missing >> knowledge > >and falling

Re: Installing bind is not very clear for me

2015-09-04 Thread Mike Hoskins (michoski)
On 9/4/15, 1:12 PM, "bind-users-boun...@lists.isc.org on behalf of /dev/rob0" wrote: >On Thu, Sep 03, 2015 at 11:02:23PM +0200, Reindl Harald wrote: >> Am 03.09.2015 um 22:59 schrieb Robert Moskowitz: >> >On 09/03/2015 04:35 PM, Leandro wrote: >> >>Ok ... >> >>I got BIND 9.10.2-P3 working. >> >

Re: Installing bind is not very clear for me

2015-09-03 Thread Mike Hoskins (michoski)
Few points for clarification: With rhel/centos you're not getting the major version as reported. You need to look at the changlog for the package to see what fixes/features have been backported. That effort including associated QA is part of what you're paying for with rhel or getting for free a

Re: what's DNSaaS standard?

2015-08-24 Thread Mike Hoskins (michoski)
On 8/24/15, 6:40 AM, "bind-users-boun...@lists.isc.org on behalf of Reindl Harald" wrote: > >Am 24.08.2015 um 12:29 schrieb Ken Peng: >> I know it's DNS as a service. >> But what's the standard? how to implement it? > >it's just a buzzword for DNS hosting You could also say "SaaS" is just a buz

Re: first time setting bind

2015-07-01 Thread Mike Hoskins (michoski)
DNS and BIND is the de facto standard: http://shop.oreilly.com/product/9780596100575.do Getting stale, but some good info: https://www.cymru.com/Documents/secure-bind-template.html Good reference: http://www.zytrax.com/books/dns/ ...and of course the ARM for your BIND version: https://kb.isc

Re: file descriptor exceeds limit

2015-06-19 Thread Mike Hoskins (michoski)
On 6/19/15, 4:07 PM, "bind-users-boun...@lists.isc.org on behalf of /dev/rob0" wrote: >On Fri, Jun 19, 2015 at 02:55:23PM -0500, I wrote: >> On Thu, Jun 18, 2015 at 11:11:16PM +, >>Mike Hoskins (michoski) wrote: >snip >> Note that connection tracking

Re: file descriptor exceeds limit

2015-06-19 Thread Mike Hoskins (michoski)
On 6/19/15, 1:16 PM, "bind-users-boun...@lists.isc.org on behalf of Reindl Harald" wrote: >Am 19.06.2015 um 18:44 schrieb Mike Hoskins (michoski): >> I suppose the only way to avoid any "intermediate" firewalls would be to >> place everything you run on a LA

Re: file descriptor exceeds limit

2015-06-19 Thread Mike Hoskins (michoski)
x27;dmesg' about connection tracking tables being full? You >>>may >>>need some 'NOTRACK' rules in your iptables. > >On 18.06.15 23:11, Mike Hoskins (michoski) wrote: >>Just following along, for the record... On our side, iptables is >>completely

Re: file descriptor exceeds limit

2015-06-18 Thread Mike Hoskins (michoski)
Inline... On 6/18/15, 9:22 AM, "Cathy Almond" wrote: >On 18/06/2015 12:00, Matus UHLAR - fantomas wrote: >> On 17.06.15 22:39, Shawn Zhou wrote: >>> BIND on my resolvers reaches the max open file limit and I am getting >>> lots >>> of SERVFAILs >>> http://pastebin.com/SxRsHLff >> >>> After I i

Re: file descriptor exceeds limit

2015-06-18 Thread Mike Hoskins (michoski)
On 6/18/15, 7:09 PM, "Stuart Browne" wrote: >Just wondering. You mention you're using RHEL6; are you also getting >messages in 'dmesg' about connection tracking tables being full? You may >need some 'NOTRACK' rules in your iptables. Just following along, for the record... On our side, iptabl

Re: file descriptor exceeds limit

2015-06-18 Thread Mike Hoskins (michoski)
Inline...responding to each of these including Kathy's soon (thanks to the community for the responses). Following with interest as we've seen this for awhile, though we are possibly a special case which I'll describe more in another response. On 6/18/15, 7:00 AM, "Matus UHLAR - fantomas" wrote

Re: timeouts and negative caching

2015-06-11 Thread Mike Hoskins (michoski)
I'm not sure if BIND has a separate tunable for the "timeout vs true negative answer" scenario you seem to describe, but have you tried setting max-ncache-ttl very low to see if it affects this? On 6/11/15, 9:27 AM, "Gerd v. Egidy" wrote: >Hi, > >I've got a bind running as recursive resolver be

Re: random latency in named

2015-05-26 Thread Mike Hoskins (michoski)
FWIW as another data point we've seen the same in the wild across RHEL/CentOS 5.x and 6.x on "large" (32 core) Xeon based servers (E5-2650's), including 6.6 with the 2.6.32-504.16.2.el6.x86_64 kernel. Observed while debugging other things, and haven't had time to follow up. -Original Message--

RRL settings that work for you

2015-05-26 Thread Mike Hoskins (michoski)
Hi folks, I've read about RRL with interest since its inception, but just now getting around to rolling it out. That is partially because we run a very small authoritative infrastructure serving mostly as Akamai EDNS origins. However, since it is exposed externally, used by a few tenants and RRL

Re: shutting up logs

2015-05-14 Thread Mike Hoskins (michoski)
Another option might be changing 'file' to 'syslog' then using stuff like ":msg, contains, 'skipping nameserver' stop" (or whatever pattern you want to match) in your rsyslog configuration. http://www.rsyslog.com/doc/rsyslog_conf_filter.html -Original Message- From: Reindl Harald Organiz

Re: com.google how did they do that

2015-04-01 Thread Mike Hoskins (michoski)
-Original Message- From: Reindl Harald Organization: the lounge interactive design Date: Wednesday, April 1, 2015 at 2:44 PM To: "bind-users@lists.isc.org" Subject: Re: com.google how did they do that >Am 01.04.2015 um 20:42 schrieb Thomas Schulz: >> As of the time I am sending this, yo

Re: incoming tcp query

2015-02-24 Thread Mike Hoskins (michoski)
The answer is BIND does accept TCP queries by default (it's required to be RFC compliant), but a lot of times upstream firewalls/ACLs/etc block TCP, munge UDP packet size, etc... Just firing up BIND with basic configuration and checking netstat will show you TCP 53 listening. If it's not working

Re: SRV records etc

2015-02-10 Thread Mike Hoskins (michoski)
-Original Message- From: John Date: Tuesday, February 10, 2015 at 7:29 PM To: "bind-users@lists.isc.org" Subject: SRV records etc >How useful are SRV records? Are they worth installing? What are their >benefits, and pitfalls? >Similar question about HINFO. In my limited experience, this

Re: Mentor Required

2015-01-29 Thread Mike Hoskins (michoski)
The other thing is, you mention having tried and failed (agreed that isn't a bad thing, we've all failed countless times and it's how we learn)...how have you failed? What I think you'll find is you have a list (many lists and other resources really) of mentors. BIND much like many other Inter

Re: Problem with BIND 9.10.1-P1 recursion limits

2014-12-09 Thread Mike Hoskins (michoski)
Thanks for digging in so fast. Our mitigation will be sticking to 9.9.6-P1, since we like ESV anyway. Wanted to point out that (perhaps sadly) this isn't so crazypants...or at least not uncommon. The *edge* and *aka* references speak Akamai DNS+CDN. From my last overview, this has gotten cleane

Re: Again question about edns (like swupdl.adobe.com)

2014-10-22 Thread Mike Hoskins (michoski)
For what little it's worth, I've seen this somewhat even on 9.8 (it's not new), though increasingly on 9.9...not saying it's BIND specific, just that I've hit these kind of annoyances with remote servers awhile now. I've tried explaining this on numerous internal email threads, tickets, webex (

RE: BIND resource requirements

2014-10-20 Thread Mike Bernhardt
Anyone have some input on this? No one has commented so far. -Original Message- From: Mike Bernhardt [mailto:bernha...@bart.gov] Sent: Tuesday, October 14, 2014 11:59 AM To: bind-users@lists.isc.org Subject: BIND resource requirements We are currently using 9.8. We have had it on the

BIND resource requirements

2014-10-14 Thread Mike Bernhardt
We are currently using 9.8. We have had it on the radar to move to 9.9 but it's been low priority since 9.8 is still supported for now. But in reading about all of the alleged issues with 9.10.x as well as possible increased resource use starting with 9.9.5, I would like to ask a question: We have

Re: Diagnostic help part 2

2014-10-03 Thread Mike Hoskins (michoski)
-Original Message- From: Dave Sparro Date: Friday, October 3, 2014 at 1:04 PM To: "bind-users@lists.isc.org" Subject: Re: Diagnostic help part 2 >On 10/1/2014 3:45 PM, Tony Finch wrote: >> (Sorry for straying off topic. I have less experience of Cisco PIX/ASA >> breaking DNS than of them

Re: Diagnostic help part 2

2014-10-01 Thread Mike Hoskins (michoski)
-Original Message- From: Doug Barton Date: Wednesday, October 1, 2014 at 2:07 PM To: "bind-users@lists.isc.org" Subject: Re: Diagnostic help part 2 >On 10/1/14 8:17 AM, Barry Margolin wrote: >> In article , >> Eli Heady wrote: >> >>> With response sizes growing (dnssec, ipv6), answers

Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Mike Hoskins (michoski)
-Original Message- From: Doug Barton Date: Friday, September 12, 2014 at 2:15 PM To: Mike Hoskins , Thomas Schulz , "bind-us...@isc.org" Subject: Re: bind-9.10.0-P2 memory leak? >On 9/12/14 11:07 AM, Mike Hoskins (michoski) wrote: >> I do have a lot of interest in th

Re: bind-9.10.0-P2 memory leak?

2014-09-12 Thread Mike Hoskins (michoski)
-Original Message- From: Thomas Schulz Date: Friday, September 12, 2014 at 11:47 AM To: "bind-us...@isc.org" Subject: Re: bind-9.10.0-P2 memory leak? >> Mike Hoskins wrote: >> >> Do you guys have max-cache-size set? I didn't see it in the >>

Re: bind-9.10.0-P2 memory leak?

2014-09-09 Thread Mike Hoskins (michoski)
Do you guys have max-cache-size set? I didn't see it in the borderworlds named.conf. I've seen similar growth problems when testing 9.x before setting that (experiment at the time just to see what would happen, and confirmed this behavior). Set sensible resource limits based on available resourc

Re: Logs problem with Bind 9.9.4

2014-08-11 Thread Mike Hoskins (michoski)
-Original Message- From: Reindl Harald Organization: the lounge interactive design Date: Friday, August 8, 2014 at 6:33 AM To: "bind-users@lists.isc.org" Subject: Re: Logs problem with Bind 9.9.4 >so if you have nothing to say go back from where you came abusive >why do you reply off-l

Re: Metazones or Something Else?

2014-08-04 Thread Mike Hoskins (michoski)
-Original Message- From: Evan Hunt Date: Monday, August 4, 2014 at 1:26 PM To: John Anderson Cc: "bind-users@lists.isc.org" Subject: Re: Metazones or Something Else? >> So to the best of your knowledge this functionality is still on drawing >> board, unless implemented out-of-band? (i.

Re: rndc (and now nsupdate too)

2014-08-01 Thread Mike Hoskins (michoski)
-Original Message- From: Reindl Harald Organization: the lounge interactive design Date: Friday, August 1, 2014 at 9:23 AM To: "bind-users@lists.isc.org" Subject: Re: rndc (and now nsupdate too) > >Am 01.08.2014 um 15:14 schrieb Mike Hoskins (michoski): >> Fro

Re: rndc (and now nsupdate too)

2014-08-01 Thread Mike Hoskins (michoski)
-Original Message- From: Tony Finch Date: Friday, August 1, 2014 at 5:31 AM To: Reindl Harald Cc: "bind-users@lists.isc.org" Subject: Re: rndc (and now nsupdate too) >Reindl Harald wrote: >> Am 31.07.2014 um 21:08 schrieb /dev/rob0: >> > >> > The proper tool to manage zone data is nsup

Re: Tools to automatically test the resolution speed ...

2014-07-21 Thread Mike Hoskins (michoski)
I haven't used those, but not sure if smokeping's DNS plugin would do what you want. -Original Message- From: Barry Greene Date: Monday, July 21, 2014 at 11:59 PM To: "bind-users@lists.isc.org" Subject: Tools to automatically test the resolution speed ... >Hi Team, > >I'm going to get m

Re: initial lookup fails every time

2014-07-13 Thread Mike Hoskins (michoski)
-Original Message- From: Matus UHLAR - fantomas Date: Sunday, July 13, 2014 at 6:24 AM To: "bind-users@lists.isc.org" Subject: Re: initial lookup fails every time >On 12.07.14 01:19, Tony Publiski wrote: >> I'm hoping someone has seen this before. I'm running a couple of BIND >> 9.8.2 DN

Re: Public facing authoritative NS all masters

2014-07-13 Thread Mike Hoskins (michoski)
-Original Message- From: Gary Wallis Date: Sunday, July 13, 2014 at 12:11 PM To: "bind-users@lists.isc.org" Subject: Public facing authoritative NS all masters >Hello, > >What are the drawbacks, if any, of running only master name servers for >the set of authoritative NSs? > >For example

Re: Caching Nameserver and BIND RPM Compatibility

2014-07-11 Thread Mike Hoskins (michoski)
-Original Message- From: Mark Andrews Date: Friday, July 11, 2014 at 8:41 PM To: Mike Hoskins Cc: "bind-users@lists.isc.org" Subject: Re: Caching Nameserver and BIND RPM Compatibility >Not every *important* fix is a *security* fix. > >OS vendor that just backport

Re: Caching Nameserver and BIND RPM Compatibility

2014-07-11 Thread Mike Hoskins (michoski)
-Original Message- From: Asai Date: Friday, July 11, 2014 at 12:56 PM To: "bind-users@lists.isc.org" Subject: Caching Nameserver and BIND RPM Compatibility >Greetings, > >We're setting up caching-nameserver on an existing BIND instance. The >version of BIND is 9.7. Is there a specific co

Re: In BIND 8.2 running on Solaris 8, how to start logging

2014-06-27 Thread Mike Hoskins (michoski)
-Original Message- From: Samad Agha Date: Friday, June 27, 2014 at 1:07 PM To: "bind-users@lists.isc.org" , DNS BIND Subject: In BIND 8.2 running on Solaris 8, how to start logging >Hi All, >I have two Solaris 8 servers running BIND 8.2. I'd like to retire them >both and transfer everyth

Re: SPF RR type

2014-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Nicholas F Miller Date: Thursday, June 5, 2014 at 10:25 AM To: "bind-users@lists.isc.org" Subject: SPF RR type >Are SPF RR types finally dead or not? I¹ve read through rfc7208 it >appears that they are: > > "SPF records MUST be published as a DNS TXT (type 16)

Re: Enterprise IPAM/DNS Solutions

2014-04-28 Thread Mike Hoskins (michoski)
Cisco (apply liberal amounts of salt considering my FROM) has a product suite called Prime, one piece of which is CNR (unless it's been renamed again this week) -- Cisco Network Registrar, which handles the IPAM piece and has DHCP and DNS components as well. CNR can integrate with BIND (as well as

Re: Clients Matching Multiple Views

2014-04-09 Thread Mike Meredith
iew axfr from the other? What I did in testing (and not very much at that) was to define the zones twice with different file names. Seemed to work fine ... at least the zone files and the journal files were created for both file names. -- Mike Meredith, University of Portsmouth Principal Syst

Clients Matching Multiple Views

2014-04-09 Thread Mike Meredith
ve somehow messed up? Or perhaps there's some option I've missed? Or am I out of luck? -- Mike Meredith, University of Portsmouth Principal Systems Engineer, Hostmaster, Security, and Timelord! ___ Please visit https://lists.isc.org/mail

Re: Delegation of part of a zone to a global server load balancer

2014-04-07 Thread Mike Hoskins (michoski)
In the past when doing this with Cisco GSS I followed Akamai's example, and had success with stuff like (gdns* were the CSS): ; delegation of gslb.domain.com $TTL 172800 ; 2 days gdns1.domain.com. A a.b.c.d gdns2.domain.com. A e.f.g.h gdns3.domain.com. A i.j.k.l g

Re: High recursive client counts

2014-03-25 Thread Mike Hoskins (michoski)
Hi Jason, I've experienced similar things in the past on 9.8. Since then we've moved to the latest 9.9, but don't think this is at all version specific (that said, you could obviously try upgrading). I don't have an exact solution for you, but some ideas of things to check and personal experienc

Re: Difference between BIND 9.8 and 9.9

2014-02-19 Thread Mike Hoskins (michoski)
From: , Frank Date: Wednesday, February 19, 2014 at 12:41 PM To: "bind-users@lists.isc.org" Subject: Difference between BIND 9.8 and 9.9 >Hello > >is there a link to a documentation that lists the main differences >between BIND 9.8 and 9.9 ? > >I would like to read it before swiching from 9.

Re: Upgrading from 9.8.3 to 9.9.4

2014-01-23 Thread Mike Hoskins (michoski)
-Original Message- From: Thomas Schulz Date: Thursday, January 23, 2014 at 9:50 AM To: "bind-users@lists.isc.org" Subject: RE: Upgrading from 9.8.3 to 9.9.4 >> I just remembered there was also the change to the db file >> having a default raw format on slaves unless specified. > >Interes

Re: Upgrading from 9.8.3 to 9.9.4

2014-01-22 Thread Mike Hoskins (michoski)
-Original Message- From: Mike Bernhardt Date: Wednesday, January 22, 2014 at 3:25 PM To: "'Lawrence K. Chen, P.Eng.'" , "bind-users@lists.isc.org" Subject: RE: Upgrading from 9.8.3 to 9.9.4 >Thanks for that. I just remembered there was also the change

RE: Upgrading from 9.8.3 to 9.9.4

2014-01-22 Thread Mike Bernhardt
: Upgrading from 9.8.3 to 9.9.4 On 01/16/14 16:39, Mike Hoskins (michoski) wrote: > -Original Message- > From: Mike Bernhardt > Date: Thursday, January 16, 2014 4:09 PM > To: "bind-users@lists.isc.org" > Subject: RE: Upgrading from 9.8.3 to 9.9.4 > >>

Re: Upgrading from 9.8.3 to 9.9.4

2014-01-16 Thread Mike Hoskins (michoski)
-Original Message- From: Mike Bernhardt Date: Thursday, January 16, 2014 4:09 PM To: "bind-users@lists.isc.org" Subject: RE: Upgrading from 9.8.3 to 9.9.4 >Sorry for the double post, but I forgot to ask this: >And if it is indeed enabled regardless of my RFC1918 ranges,

RE: Upgrading from 9.8.3 to 9.9.4

2014-01-16 Thread Mike Bernhardt
cing server which of course has no RFC1918, I would leave it to the default setting? -Original Message- From: Mike Bernhardt [mailto:bernha...@bart.gov] Sent: Thursday, January 16, 2014 1:03 PM To: 'bind-users@lists.isc.org' Subject: RE: Upgrading from 9.8.3 to 9.9.4 Am I correct in

RE: Upgrading from 9.8.3 to 9.9.4

2014-01-16 Thread Mike Bernhardt
ny defined or not. On 01/14/14 12:16, Mike Bernhardt wrote: > Is there anything I need to know regarding changes in default > operation when upgrading from 9.8.3 to 9.9.4? I'm specifically looking > for changes that must be addressed in named.conf options in order to > keep a

Re: Upgrading from 9.8.3 to 9.9.4

2014-01-14 Thread Mike Hoskins (michoski)
ect: Re: Upgrading from 9.8.3 to 9.9.4 >IIRC, The main change I ran into when I upgraded to 9.9.2-P1 (from >9.7.6-P4) was the change in default for empty-zones. All are enabled by >default, including RFC1918 ranges whether you have any defined or not. > >On 01/14/14 12:16, Mike Be

Upgrading from 9.8.3 to 9.9.4

2014-01-14 Thread Mike Bernhardt
Is there anything I need to know regarding changes in default operation when upgrading from 9.8.3 to 9.9.4? I'm specifically looking for changes that must be addressed in named.conf options in order to keep an upgrade as transparent as possible. Thanks,

Re: Adding DS records

2013-12-20 Thread Mike Hoskins (michoski)
-Original Message- From: Warren Kumari Date: Friday, December 20, 2013 12:15 PM To: "bind-users@lists.isc.org" Subject: Re: Adding DS records >On Dec 20, 2013, at 10:38 AM, /dev/rob0 wrote: > >> On Fri, Dec 20, 2013 at 10:04:59AM -0500, Thomas Schulz wrote: >>> Has anyone been able to g

Re: Delegation and Forwarding

2013-12-11 Thread Mike Hoskins (michoski)
-Original Message- From: Bob McDonald Date: Wednesday, December 11, 2013 7:10 AM To: "bind-users@lists.isc.org" Subject: Delegation and Forwarding >I'm a bit confused on the need for a blank forwarders statement inside of >a zone statement in the named.conf file. Given an internal zone

Re: RHEL 6 CPU load

2013-11-20 Thread Mike Hoskins (michoski)
-Original Message- From: Blake Hudson Date: Wednesday, November 20, 2013 11:03 AM To: "bind-users@lists.isc.org" Subject: Re: RHEL 6 CPU load >Daniel, what do you see the load as? I see 4.6% CPU usage (100% possible >- 95.4% idle). Wondering the same. Don't consider 0.00 high load. ;

Re: Size boundaries for zones of IPv6 rDNS

2013-11-14 Thread Mike Hoskins (michoski)
-Original Message- From: Listas Date: Thursday, November 14, 2013 12:57 PM To: "bind-users@lists.isc.org" Subject: Size boundaries for zones of IPv6 rDNS >Hi! > >Are there size limits for zones of IPv6 reverse DNS ? > >For example, is this a valid zone? > >5.a.8.3.4.f.3.0.c.a.d.f.ip6.arp

Re: logging query time

2013-11-13 Thread Mike Hoskins (michoski)
-Original Message- From: Birta Levente Date: Wednesday, November 13, 2013 3:29 PM To: "bind-users@lists.isc.org" Subject: logging query time >Hi > >I have a caching nameserver (bind 9.8.2) and I curious if I can log the >duration of queries to the forwarders? not that i know of easily (

Re: Bind server crashing (lots of EAGAIN, ENOENT, ...). With strace log.

2013-11-05 Thread Mike Hoskins (michoski)
-Original Message- From: Alan Clegg Date: Tuesday, November 5, 2013 9:28 PM To: "bind-users@lists.isc.org" Subject: Re: Bind server crashing (lots of EAGAIN, ENOENT, ...). With strace log. > >On Nov 5, 2013, at 7:31 AM, K L wrote: > >> Here is a strace log from when it happens: >>

  1   2   3   >