Re: Named-checkzone stops silently

2025-01-04 Thread Nico CARTRON
On 04-Jan-2025 21:21 CET, wrote: > I'm setting up a new, non-recursive, authoritative secondary > nameserver using FreeBSD 12.2 and bind9.18.32. It works to the > extent that runs and answers queries correctly, but attempts to use > > bob@pelorus:/usr/local/etc/namedb/slave % named-checkzone -d

Re: dig +trace question

2019-06-20 Thread Nico Cartron
Are you sure it's not your setup? I have plenty of dig running on FreeBSD (with bind-utils 9.14) and also Debian and they work just fine. -- Nico > On 21 Jun 2019, at 09:14, Ronald F. Guilmette wrote: > > In message <9ba154cc-2272-46ec-a793-47ff31dca...@arin.net>, you wrote: > >> Hi Ronald,

Re: DNS load balancing: UDP or TCP ?

2019-02-19 Thread Nico CARTRON
On 19-Feb-2019 20:00 CET, wrote: > Agree with Tony on TCP not going to be tried. Have you looked at using > anycast? It is not true load balancing but it allows you to stand up > multiple DNS servers that “shares” a single IP address. or just use a software load-balancer which has been designed

Re: Unbound 1.9 release date

2019-01-23 Thread Nico CARTRON
Hi Ramesh, On 23-Jan-2019 07:03 CET, wrote: > Greetings, > Is anyone knows unbound 1.9 release date? > > Regards, > Ramesh Did you ask on the Unbound-users mailing list? https://nlnetlabs.nl/mailman/listinfo/unbound-users That would be more appropriated than a Bind mailing-list I believe. Ch

Re: RPZ zone update how to sync

2018-05-18 Thread Nico CARTRON
> > On 18 May 2018, at 16:16, Blason R wrote: > > why? is there any logic in this? > > yeah management does not want to allow direct syncing with master as they > dont want to expose any info to them. Interesting statement - especially since the slave servers will serve the exact same dat

Re: DNS primary and secondary receiveing queries at the same time

2018-05-17 Thread Nico CARTRON
Hi Roberto, > On 17 May 2018, at 16:25, Roberto Carna wrote: > > Dear Tony, so you say that it's impossible what I want... > > In this scenario that my two DNS servers respond queries at the same > time, suppose the primary server goes downhow do clients know that > they have to query the s

Re: DNS primary and secondary receiveing queries at the same time

2018-05-17 Thread Nico CARTRON
Hi Roberto, > On 17 May 2018, at 16:06, Roberto Carna wrote: > > Hi people, I've implemented two BIND9 servers for my company, one as > primary public DNS server and the other as secondary public DNS > server. > > I always believed that all the client queries coming from Internet go > to the DN

Re: BIND srtt algorithm not working as expected

2018-05-17 Thread Nico CARTRON
Hi Paul, > On 17 May 2018, at 13:46, Paul Roberts wrote: > > Good grief indeed! > > I would love to implement 'fetches-per-zone' but we need to get them onto > BIND 9.11 first, that's a few months away. > > Unfortunately I can't just block this traffic else I'll have the security > teams wan

Re: allow-transfer with distinct IP rejected

2017-04-26 Thread Nico CARTRON
Hi Lars, On 26-Apr-2017 09:10 CEST, wrote: > Am 26.04.2017 um 08:22 schrieb Steven Carr: > > On 26 April 2017 at 06:53, Dr. Lars Hanke wrote: > > > allow-transfer { 172.16.11.35; }; > > This IP ^^^ > > > > > transfer of '178.168.192.in-addr.arpa/IN' from 172.16.10.16#53: failed > > > while >

Re: views

2017-04-19 Thread Nico CARTRON
On 19-Apr-2017 16:47 BST, wrote: > On 19-Apr-2017 15:59 BST, wrote: > [...] > > I'd also like to see if it's possible to have dig send ECS info. > > +edns / +noedns , but you'll need a recent dig version. Of course I meant +subnet / +nosubnet -- Nico

Re: views

2017-04-19 Thread Nico CARTRON
Hi Grant, On 19-Apr-2017 15:59 BST, wrote: > On 04/19/2017 03:37 AM, Tony Finch wrote: > > This is what the EDNS client subnet option is about. You can use it in > > BIND by adding "ecs" clauses to your address match lists for views or > > acls. However it isn't documented in the ARM and it has

Re: debug SERVFAIL

2016-10-02 Thread Nico CARTRON
Hi Per, > On 2 Oct 2016, at 19:07, Per olof Ljungmark wrote: > > [...] > >> Just use the "hint" type configuration. This is just fine for most users. > > The interesting thing is why FreeBSD includes the recommendation in the > default named.conf if that is not good, and I thought it would be

Re: Option in named to turn off EDNS Globally

2016-08-05 Thread Nico CARTRON
On 5 August 2016 at 09:15:29, Harshith Mulky (harshith.mu...@outlook.com) wrote: Hello Nico, This was only for Testing between 2 devices, 1 supporting edns and the other not supporting edns and checking how the Application behaves(lwresd and named) OK. Better also answering on the mailing lis

Re: Option in named to turn off EDNS Globally

2016-08-05 Thread Nico CARTRON
Hi Harshith, > On 05 Aug 2016, at 08:47, Harshith Mulky wrote: > > I have tried enabling with the significant bits > > server 0.0.0.0/0 { edns no; }; > server ::/0 { edns no; }; > > But, I get the following Error > Error in named configuration: > /etc/named.conf:120: '{' expected near '/' > >

Re: Unable to understand why a different A record response being sent by bind

2016-06-20 Thread Nico CARTRON
Hi Harshith, On 20 June 2016 at 15:05:58, Harshith Mulky (harshith.mu...@outlook.com) wrote: I am Running bind (bind-9.9.5P1-2.2.2.x86_64) on Open Suse 13.2 I have the following Records in my Zone file $ORIGIN test1.com. $TTL 600 @  IN  SOA atlanta.test1.com. admin.test1.com.  (

Re: different answers from google's authoritative servers

2016-06-01 Thread Nico CARTRON
Hi Sotiris, On 1 June 2016 at 14:47:31, Sotiris Tsimbonis (sts...@forthnet.gr) wrote: On 1/6/16 15:30, Kevin Kretz wrote:  > There's also no reason to assume that the different responses have  > anything to do with the client network. They could, of course (with  > views), but that you get differe

Re: BIND 9.11 / edns-client-subnet

2016-05-09 Thread Nico CARTRON
Hi Bert, On 9 May 2016 at 21:24:42, bert hubert (bert.hub...@netherlabs.nl) wrote: On Mon, May 09, 2016 at 05:24:50PM +0200, Nico CARTRON wrote:  > > Perhaps you should tell us how it works for you, what your testing has   > > found, and contribute to the development of great open sou

Re: BIND 9.11 / edns-client-subnet

2016-05-09 Thread Nico CARTRON
Hi Bert, On 9 May 2016 at 17:11:54, bert hubert (bert.hub...@netherlabs.nl) wrote: On Mon, May 09, 2016 at 04:38:13PM +0200, Nico CARTRON wrote:  > I was wondering whether some folks on the mailing list had a look at the ECS > implementation in BIND 9.11,  > and if they had any feedback

BIND 9.11 / edns-client-subnet

2016-05-09 Thread Nico CARTRON
Hi everyone, I was wondering whether some folks on the mailing list had a look at the ECS implementation in BIND 9.11, and if they had any feedback to share? Cheers, --  Nico ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsub