Re: Private IP address in A record

2014-06-26 Thread Ryan Novosielski
https://lists.isc.org/mailman/listinfo/bind-users > ___ Please visit > https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list bind-users@lists.isc.org > https://lists.isc.org/mailman/lis

Re: How to setup a backup NameServer?

2014-04-29 Thread Ryan Novosielski
dy been mentioned here). There are a lot of ugly things ISP's do to DNS; I loathe all of them. I suspect many customers do to. - -- *Note: UMDNJ is now Rutgers-Biomedical and Health Sciences* || \\UTGERS |-*O*- ||_// Biomedical

Re: Error Resolving / EDNS

2012-09-19 Thread Ryan Novosielski
3676]: command > channel listening on ::1#953 Sep 19 15:22:13 PROD55-DNS2 > named[3676]: the working directory is not writable - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med.

Re: Sunos 5.8 Error:EDNS not supported by your namesever

2012-09-05 Thread Ryan Novosielski
ugh... > > - Kevin ___ Please > visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users - -- - _

Re: Sunos 5.8 Error:EDNS not supported by your namesever

2012-09-05 Thread Ryan Novosielski
t; the >>>> EDNS0,</div><div><br></div><div&= >>>> gt;Where do I find this EDNS statem=3D > ent in >>>> Sunos</div><div><br><br><div >>>> class= =3D3D"gmail_quote">On Wed, Se

Re: Moving DNS out of non-cooperative provider

2012-06-18 Thread Ryan Novosielski
the ttl's timeout, resolvers with the old nameservers cached > will still query them. Once the ttl's time out the new servers will > be queried. > > Hope this helps, Incidentally I use NameCheap as a registrar, and have noted that their help pages are pretty easy to understa

Re: dns_zones_check

2012-05-16 Thread Ryan Novosielski
sting. - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -BEGIN PGP SIGNATURE- Version: GnuPG v1.

Re: DNSSEC made simple, is this possible?

2012-01-11 Thread Ryan Novosielski
__ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users - -- - _ _ _ _ ___ _ _ _ |Y

Re: load-balancing in DNS using two A records

2011-12-20 Thread Ryan Novosielski
one server and sometimes another. Generally with SSH you care what you're connecting to and will also have individual records for each host to use for that purpose. - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |_

Re: Not able to resolve a domain

2011-11-18 Thread Ryan Novosielski
n spoofing attacks. > > In fact, the BIND 9 documentation contains a sample blackhole ACL > which, until recently, specifically recommended filtering addresses > in that block. The advice is outdated but I think someone is still > following it. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |

Re: DNS Sinkhole in BIND

2011-10-27 Thread Ryan Novosielski
- and this makes bind slow to start, and > use more RAM. Do you know what version that arrived in? 9.8.0? - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922) \_

Re: DNS Sinkhole in BIND

2011-10-17 Thread Ryan Novosielski
I do this. There may now be a smarter way, but I have a small number so this is manageable for me: configure zones for each of the evil zones. Your server will appear authoritative and you can direct clients wherever you like. I direct some of mine to a virtualhost handing out 503 errors. -- Se

Re: better performance with 32 bit ! why?

2011-06-29 Thread Ryan Novosielski
gt; > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users - -- - -

Re: better performance with 32 bit ! why?

2011-06-28 Thread Ryan Novosielski
t. If bind is not going to be using over 4GB of RAM by itself, my understanding is that running 64-bit will merely add overhead. I realize that is a pretty big generalization, so feel free to correct me if you know better. - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novo

Re: please remove me from this mail list

2011-06-02 Thread Ryan Novosielski
ailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > > > ___ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-use

Re: Split DNS Configuration in BIND

2011-05-30 Thread Ryan Novosielski
k: > > http://www.howtoforge.com/two_in_one_dns_bind9_views > http://www.cyberciti.biz/faq/linux-unix-bind9-named-configure-views/ ...the end result of which (just to check my own knowledge) is the same as a split DNS, just without needing a second set of server

Re: Change Query Type on nslookup

2011-04-07 Thread Ryan Novosielski
'dig' is a better tool in every way, I think. dig  host.example.com I believe is the syntax there. -- Sent from my Palm Pre On Apr 7, 2011 1:02, mee thun wrote: Good Morning.. I am new member in this mailing list. I need help to change the query type in the nslookup

Re: dots in hostnames problem

2011-03-09 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 There are a lot of unfortunate practices one can find in DNS names. I'd personally recommend not doing anything that conflicts with the RFC. At my place of business, we slave a zone from a group that has underscores in the hostnames which is also not a

Re: [SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-23 Thread Ryan Novosielski
that: a: firewalls with ALGs are the devil b: this goes double for PIX / ASA and c: doubled again for putting them in front of servers, especially DNS servers W On Feb 23, 2011, at 1:13 PM, Ryan Novosielski wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A couple more gems: https

Re: [SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-23 Thread Ryan Novosielski
with a * the subtle difference between versions of that firewall firmware. I can't find that table anywhere -- was HTML, not in a PDF. On 02/23/2011 11:39 AM, Ryan Novosielski wrote: > Take a look at this. It is somewhat confusing, but it is helpful and > should tell you right

Re: [SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-23 Thread Ryan Novosielski
YrrV6GNslN5qicuHIehriQIMPdXs3/e2ZhB3h944kpymqL ag3tCg== >> >> ;; ADDITIONAL SECTION: >> vwall1a.nyc.gov.86400IN A161.185.1.3 >> vwall2a.nyc.gov.86400INA161.185.1.12 >> vwall3a.nyc.gov.86400INA167.153.130.12 >> vwall4a.nyc.g

Re: Please Help

2011-02-17 Thread Ryan Novosielski
> > -Original Message- > From: bind-users-bounces+xhuang=graphnet@lists.isc.org > [mailto:bind-users-bounces+xhuang=graphnet@lists.isc.org] On Behalf Of > Ryan Novosielski > Sent: Wednesday, February 16, 2011 5:47 PM > To: bind-users@lists.isc.org > Subject:

Re: Please Help

2011-02-16 Thread Ryan Novosielski
t; > > Xiao > > 2/16/2011 > > > > ___ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosiel

Re: multi-master with mysql backend

2011-02-14 Thread Ryan Novosielski
gt; not, you've got bigger problems. >>> >>> If you're not talking about a huge amount of data here (and from what >>> you've described in previous posts, you're not) then you are fairly >>> dramatically over-architecting your solution here. Per

[SOLVED] Re: BIND9 SERVFAIL on some .gov addresses

2011-02-11 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/11/2011 01:21 PM, Ryan Novosielski wrote: > On 02/10/2011 04:19 PM, Chuck Swiger wrote: >> On Feb 10, 2011, at 12:39 PM, Ryan Novosielski wrote: >>> health.nyc.gov query-errors: >>> >>> 10-Feb-2011 15:32:

Re: BIND9 SERVFAIL on some .gov addresses

2011-02-11 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/10/2011 04:19 PM, Chuck Swiger wrote: > On Feb 10, 2011, at 12:39 PM, Ryan Novosielski wrote: >> health.nyc.gov query-errors: >> >> 10-Feb-2011 15:32:30.682 query-errors: debug 1: client >> 130.219.34.129#55935:

Re: BIND9 SERVFAIL on some .gov addresses

2011-02-10 Thread Ryan Novosielski
servers which will > answer and claim no MX records exist: OK, thanks -- I did not carefully check other locations for that one. Good to know that's not just me. - -- - _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |_

Re: BIND9 SERVFAIL on some .gov addresses

2011-02-10 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/10/2011 03:23 PM, Chuck Swiger wrote: > On Feb 10, 2011, at 11:26 AM, Ryan Novosielski wrote: >> dig: isc_socket_create: address family not supported >> >> I've read that I shouldn't let this error message lead me

BIND9 SERVFAIL on some .gov addresses

2011-02-10 Thread Ryan Novosielski
ually works from my laptop against the server (but dig by itself returns no MX records). Thank you in advance for suggestions. This one is causing some nasty problems. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| |