Re: Significant memory usage

2025-06-09 Thread Sten Carlsen
Actually it does https://bind9.readthedocs.io/en/v9.20.9/reference.html#term-sizeval -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" > On 9 Jun 2025, at 06.47, Philip Prindeville via bind-users > wrote: > > I read: > >

Re: DNS hiccups

2025-04-15 Thread Sten Carlsen
> On 15 Apr 2025, at 18.03, Alessandro Vesely wrote: > > On Tue 15/Apr/2025 15:54:05 +0200 Stephane Bortzmeyer via bind-users wrote: >> On Tue, Apr 15, 2025 at 02:54:33PM +0200, >> Alessandro Vesely wrote >> a message of 46 lines which said: >>> last night I sent 4 complaint messages to vod

Re: DNS hiccups

2025-04-15 Thread Sten Carlsen
Thanks Sten > On 15 Apr 2025, at 14.54, Alessandro Vesely wrote: > > Sorry for cross-posting -- mind it before replying. > > > Hi, > > last night I sent 4 complaint messages to vodafone.com. The first one > bounced like so: > > Your message to the following recipients cannot be delivered

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Sten Carlsen
I am running this setup, it works. My 2 zones are internal and external, so testing from outside can only show one side. Thanks Sten > On 18 Oct 2024, at 18.07, Bob Harold wrote: > > > On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users > mailto:bind-users@lists.isc.org>> wrote: >

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Sten Carlsen
-- Best regards Sten Carlsen A pessimist is a person that can find a problem for every solution. > On 18 Oct 2024, at 18.50, Bowie Bailey via bind-users > wrote: > > On 10/18/2024 12:07 PM, Bob Harold wrote: >> >> On Fri, Oct 18, 2024 at 11:33 AM Bow

Re: MDLZ user activation

2024-06-07 Thread Sten Carlsen
I got one of those mails too, your explanation is correct. Nothing sofisticated here. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" > On 7 Jun 2024, at 12.11, Marco Moock wrote: > > Am 07.06.2024 um 10:58:27 Uhr s

Re: Observation: BIND 9.18 qname-minimization strict vs dig +trace

2024-04-26 Thread Sten Carlsen
Trace from my location dies even earlier: ;; Received 915 bytes from 2001:503:c27::2:30#53(j.root-servers.net) in 17 ms ;; connection timed out; no servers could be reached Again just a data point. > On 24 Apr 2024, at 22.03, tale via bind-users > wrote: > > Hmm, I wonder if qname-minimisat

Re: Possibility of using views to properly return appropriate IP address for hostname based on requestor subnet?

2023-06-29 Thread Sten Carlsen
> On 29 Jun 2023, at 15.59, Ubence Quevedo wrote: > > Hi Greg, > > Here's the most recent config that I tried that seemed to work, but > ultimately broke resolution for the main zone domain.com > , even though I set it to match-clients { any; }. Please remember that ONLY

Re: migration to new isp - now private addresses showing up publicly?

2023-05-23 Thread Sten Carlsen
> On 23 May 2023, at 19.46, Kaya Saman wrote: > > > > On 5/23/23 18:07, Sten Carlsen wrote: >> >>> On 23 May 2023, at 19.00, Kaya Saman >>> <mailto:kayasa...@gmail.com> wrote: >>> >>>  >>>> On 5/23/23 12:

Re: migration to new isp - now private addresses showing up publicly?

2023-05-23 Thread Sten Carlsen
> > On 23 May 2023, at 19.00, Kaya Saman wrote: > >  >> On 5/23/23 12:47, Matus UHLAR - fantomas wrote: >>> On 23.05.23 12:22, Kaya Saman wrote: >>> I've got a very strange problem that has emerged somehow after migrating my >>> isp. >>> >>> >>> My setup previously used 2x servers in maste

Re: address/prefix length mismatch

2022-08-24 Thread Sten Carlsen
l would do that by first rejecting (! - means reject) the offending addresses (all have to be listed separately) before doing the above pattern matching. > > Cheers, Greg > > On Wed, 24 Aug 2022 at 15:40, Sten Carlsen <mailto:st...@s-carlsen.dk>> wrote: > I think you w

Re: address/prefix length mismatch

2022-08-24 Thread Sten Carlsen
I think you want something like this: (!10.60.0.0; !10.60.0.255; 10.60.0.0/24) First deny the two addresses you want not to be part of the ACL and then accept the whole network. First match is used, so 10.60.0.0 would match !10.60.0.0 and be rejected before the next are tested. Thanks Sten

Re: High memory consumption in bind 9.18.2

2022-08-01 Thread Sten Carlsen
-- Best regards Sten Carlsen -- Aoccdrnig to rseerach at Cmabrigde Uinervtisy, it deosn't mttaer in waht oredr the ltteers in a wrod are, the olny iprmoatnt tihng is taht the frist and lsat lteter be at the rghit pclae. The rset can be a

Re: resolving www.ecb.europa.eu tages ages

2022-06-20 Thread Sten Carlsen
0.00s user 0.01s system 0% cpu 8.609 total With dig +trace it takes longer: dig +trace www.ecb.europa.eu 0.01s user 0.02s system 0% cpu 1:24.75 total -- Best regards Sten Carlsen Don't be impressed with unintelligible stuff said condescendingly . -- Radia Perlman. > On 20 Ju

Re: test - ignore

2022-01-26 Thread Sten Carlsen
Thanks Sten > On 26 Jan 2022, at 17.14, Matus UHLAR - fantomas wrote: > >>> On Jan 25, 2022, at 8:50 AM, Benny Pedersen wrote: >>> Authentication-Results: lists.isc.org; >>> dkim=fail reason="signature verification failed" (1024-bit key; >>> unprotected) header.d=isc.org header.i=@isc.or

Re: Found the bug (was: ERROR: Failed to create fetch for DNSKEY update)

2021-11-21 Thread Sten Carlsen
? -- Best regards Sten Carlsen "No trees were killed in the making of this e-mail... however, a large number of electrons were terribly inconvenienced." > On 19 Nov 2021, at 11.52, Peter wrote: > > > Hija, > > I finally found the cause of the error! As soon as I stop

Re: Multisite deployment issue

2021-07-26 Thread Sten Carlsen
rent server names - with split horizon I can use the same name always. -- Best regards Sten Carlsen A pessimist is a person that can find a problem for every solution. > On 26 Jul 2021, at 15.55, Daniel A. Rodriguez > wrote: > > Hi there, > > Currently have a public DNS

Re: Need Help with BIND9

2021-06-11 Thread Sten Carlsen
gards Sten Carlsen -- Aoccdrnig to rseerach at Cmabrigde Uinervtisy, it deosn't mttaer in waht oredr the ltteers in a wrod are, the olny iprmoatnt tihng is taht the frist and lsat lteter be at the rghit pclae. The rset can be a ttoal mses and you

Re: Bind9.16 zone SOA record issue.

2021-05-23 Thread Sten Carlsen
> On 23 May 2021, at 16.24, Thomas Strike wrote: > > ZONE FILE: > $ttl 3600 > ORIGIN ancienttom.us . > @IN SOA ancienttom.us . > thomas\.strike.sleepyvalley.net . ( The "\" above is what I would sus

Re: Preventing a particular type of nameserver abuse

2021-04-14 Thread Sten Carlsen
Thanks Sten > On 14 Apr 2021, at 19.47, Carl Byington via bind-users > wrote: > > Signed PGP part > On Wed, 2021-04-14 at 12:58 -0400, Paul Kosinski via bind-users wrote: > > Interesting, although we host different domains, in and from different > > geographic areas, we got the same queries a

Re: underscore in A or PTR records

2021-02-17 Thread Sten Carlsen
> On 17 Feb 2021, at 12.34, ONRUBIA AVILES Carlos (CCS/MST) > wrote: > > Hello, > > Indeed my question was on A record but the issue is on PTR record. > I can configure the following line: > > _ptr.dekil.nl. 3600IN PTR > _81.99-129-109.adsl-dyn.isp.dekil.nl > > It works..

Re: Serial number question..

2020-12-17 Thread Sten Carlsen
The modulo arithmetic comes if you need it to be lower than in the slaves since they will consider a lower numbered transfer to be out of date and refuse to update. Meaning you will need to go to the top and round back to where you need to be. -- Best regards Sten Carlsen "No trees

Re: Dynamic update rejected within a view

2020-07-14 Thread Sten Carlsen
-- Best regards Sten Carlsen For every problem, there is a solution that is simple, elegant, and wrong. HL Mencken > On 14 Jul 2020, at 16.25, Mark Andrews wrote: > > Include the update keys in the view selection. > > -- > Mark Andrews > >> On 14 Jul 2

Re: Hints for forwarding a subdomain on a authoritative server

2020-07-06 Thread Sten Carlsen
Thanks Sten > On 6 Jul 2020, at 16.03, Tom wrote: > > Hi list > > Our BIND (9.16.4) is authoritative for zone "example.com". Now I need to > forward a subzone "sub.example.com" to another nameserver instance on the > same server, running for example under port 5353: > > A few years ago, th

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Sten Carlsen
Thanks Sten > On 6 May 2020, at 22.28, Grant Taylor via bind-users > wrote: > > On 5/6/20 2:18 PM, Sten Carlsen wrote: >> I believe the answer must lie in the lookup of a named DNS server, which >> will be resolved to different IPs depending on your location.

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Sten Carlsen
-- Best regards Sten Carlsen For every problem, there is a solution that is simple, elegant, and wrong. HL Mencken > On 6 May 2020, at 22.10, Grant Taylor via bind-users > wrote: > > On 5/6/20 1:44 PM, Bob Harold wrote: >> Good questions. > > :-) > >>

Re: What is the proper way to delegate to a private / hidden sub-domain?

2020-05-06 Thread Sten Carlsen
s. -- Best regards Sten Carlsen For every problem, there is a solution that is simple, elegant, and wrong. HL Mencken > On 6 May 2020, at 19.01, Grant Taylor via bind-users > wrote: > > Hi, > > What is the proper way to delegate to a private / hidden sub-domain? >

Re: DoH plugin for BIND

2020-05-02 Thread Sten Carlsen
On 03-05-2020 01.59, Noel Butler wrote: > > On 03/05/2020 02:17, Sten Carlsen wrote: > >> About mail servers from residential IPs. I have done that for a >> number of years, very rarely any issue. >>   >   > Most SP's do this >   >   >> The major

Re: DoH plugin for BIND

2020-05-02 Thread Sten Carlsen
taste for an ISP to block anything, its not their business. -- Best regards Sten Carlsen For every problem, there is a solution that is simple, elegant, and wrong. HL Mencken > On 2 May 2020, at 17.11, Michael De Roover wrote: > > I'm sure that most of the list members her

Re: "lame-servers: info: no valid RRSIG resolving ..."

2020-04-17 Thread Sten Carlsen
I see lots of lines like this. They all come from people trying to break into my SSH. -- Best regards Sten Carlsen For every problem, there is a solution that is simple, elegant, and wrong. HL Mencken > On 17 Apr 2020, at 17.24, btb via bind-users wrote: > > hi- > > i&#x

Re: DNSSEC zones not updated

2020-01-22 Thread Sten Carlsen
Just a basic question, are you querying the master or a slave. If a slave, it could be the notify/transfer. Thanks Sten > On 22 Jan 2020, at 12.11, Jukka Pakkanen wrote: > > > Running BIND 9.14.9 Windows. The zone data is not updated for some reason > anymore, and same problem in all our

Re: Zones-unable-update

2020-01-06 Thread Sten Carlsen
> On 6 Jan 2020, at 09.16, MEjaz wrote: > > > 1. My primary name server, /etc/named.conf, and here am forcing transfer > to only few trusted servers, as mentioned in the below clause. > > > transfers-out 2000; > > allow-transfer {212.119.93.5;213.230.0.10; 212.119.93.10; 212.119.9

Re: What is wrong in the view matching below

2019-12-05 Thread Sten Carlsen
> > zone "internal.nixcraft.com " IN { > type master; > file "lan.master.nixcraft.com "; > }; > }; Looks like the file lan.master.nixcraft.com has no data. > > Dec 05 17:51:54 sataradnsVM1 named[4038]: zone internal.nixc

Re: Bind 9 with Views: zone transfer refused from master to slave

2019-07-03 Thread Sten Carlsen
On 03/07/2019 22.14, Grant Taylor via bind-users wrote: > On 7/3/19 2:04 PM, Lightner, Jeffrey wrote: >> You have to use separate IPs for the separate views on the master and >> the slave. > > I thought you could use different TSIG keys to identify different > zones with a single IP at each end.

Re: [External] Re: Request assistance configuring RPZ

2019-05-28 Thread Sten Carlsen
To me this looks like it could be done with a bit of programming. If the addresses of the two hosts needed in 192.168.x.x don't change too often, a cron job could read those addresses and set them in zurg as dynamic entries using nsupdate. The time for cron would be smaller than the TTL of the RRs

Re: Malicious-DNS

2019-02-18 Thread Sten Carlsen
; >     unless @ARGV == 1; > > my $name = shift; > > my @name = unpack 'C*', $name; > > printf "%s\n", join ', ', @name; > > ___ > Please visit https://lists.isc.org/mailman/listin

Re: Question about visibility

2018-10-11 Thread Sten Carlsen
s not have a link to my mynewsite, they do not know that there is something to look at. This has worked for me as well for quite some time, again if it hits a search in any search engine, you're done. > > > Just to say thank you so much for people commenting.  I do appreciate >

Re: Question about visibility

2018-10-11 Thread Sten Carlsen
I have done this some time ago, I made sure that there was no link from any pages to the new site, Google stayed away until somebody typed the address into the search field, then it was known. This is no guarantee of course as mentioned in other place but it worked for about 6 months. On 11/10/20

Re: unable to resolve evisa.dgdi.ga FQDN

2018-10-09 Thread Sten Carlsen
157 On 09-10-2018 04.21, Kuo Loon Pang via bind-users wrote: > dig evisa.dgdi.ga <http://evisa.dgdi.ga> -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://lists.i

Re: need two Domain in Named.local, but not resolv

2018-10-08 Thread Sten Carlsen
Also be aware that .local is reserved. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" On 9 Oct 2018, at 00.40, Kevin Darcy mailto:kevin.da...@fcagroup.com>> wrote: > Offhand, it looks like 192.168.201.92 is giving SERVF

Re: BIND and UDP tuning

2018-09-27 Thread Sten Carlsen
On 27/09/2018 16.53, Alex wrote: > Hi, > >>> I reported a few weeks ago that I was experiencing a really high >>> number of "SERVFAIL" messages in my bind-9.11.4-P1 system running on >>> fedora28, and I haven't yet found a solution. This is all now running >>> on a 165/35 cable system. >>> >>> I

Re: How to avoid to listen on specific interfaces

2018-09-06 Thread Sten Carlsen
listen for all addresses. On 06/09/2018 15.24, He Zhe wrote: > > On 2018年09月06日 21:06, Sten Carlsen wrote: >> >> On 06/09/2018 14.33, He Zhe wrote: >>> On 2018年09月06日 20:26, Sten Carlsen wrote: >>>> On 06/09/2018 12.36, He Zhe wrote: >>>>> Hi, &

Re: How to avoid to listen on specific interfaces

2018-09-06 Thread Sten Carlsen
On 06/09/2018 14.33, He Zhe wrote: > > On 2018年09月06日 20:26, Sten Carlsen wrote: >> >> On 06/09/2018 12.36, He Zhe wrote: >>> Hi, >>> >>> How can I config to let named NOT listen on specific interfaces? Any >>> negation config in options l

Re: How to avoid to listen on specific interfaces

2018-09-06 Thread Sten Carlsen
On 06/09/2018 12.36, He Zhe wrote: > Hi, > > How can I config to let named NOT listen on specific interfaces? Any negation > config in options like below? Currently it listens on all interfaces and > compete with other DNS daemons in the same system. > > options { > listen-on { ! 10.0.1.1; }; >

Re: Creating CNAME Resource Records (RR) to Redirect Readers to My Wordpress and Blogspot Blogs Don't Work

2018-08-08 Thread Sten Carlsen
On 08/08/2018 10.28, Turritopsis Dohrnii Teo En Ming wrote: > Good afternoon from Singapore, > > I have 2 redundant blogs, one at wordpress.com (example.wordpress.com) and > another at blogspot.sg (example.blogspot.sg). > > I have a Domain Name Service (DNS) server (ns1 and ns2) at home in Singa

Re: slave-not-updated

2018-08-01 Thread Sten Carlsen
Don’t forget both UDP and TCP port 53 must be open. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" > On 1 Aug 2018, at 13.09, Niall O'Reilly wrote: > >> On 1 Aug 2018, at 10:01, Mohammed Ejaz wrote: >> &g

Re: My IXFR/AXFR stopped suddenly

2018-07-06 Thread Sten Carlsen
g. > > Blason, try debugging by using "dig" on the slave to manually transfer > the zone from the master. Maybe that will give you a clue to the problem. > > Anand > ___ > Please visit https://lists.isc.org/mailman/listinfo/bin

Re: My IXFR/AXFR stopped suddenly

2018-07-06 Thread Sten Carlsen
Hi On 06/07/2018 15.46, Blason R wrote: > Hi Team, > > Any clue how do I troubleshoot why master to Slave IXFR/AXFR stopped? > It was working before even my logs shows notifies..I can connect to my > slave on customised port that NOTIFY messages are sent but then PULL > from slave to master is not

Re: Data exfiltration using DNS RPZ

2018-06-17 Thread Sten Carlsen
> > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://lists.isc

Re: extranet.aro.army.mil - not resolving

2018-05-31 Thread Sten Carlsen
: NS1.csd.disa.mil.    21597    IN    A    152.229.110.235 NS.JTFGNO.mil.        21597    IN    A    214.3.125.231 NS.CYBERCOM.mil.    21597    IN    A    131.77.60.235 ;; Query time: 4576 msec ;; SERVER: 192.168.16.20#53(192.168.16.20) ;; WHEN: Thu May 31 21:59:28 CEST 2018 ;; MSG SIZE  rcvd: 307 -- Best

Re: DNSSEC validation without current time

2017-12-18 Thread Sten Carlsen
is ~ one min/month.  Typical crystals can be 100 ppm or > more (depending on temperature & PCB layout), so 5 min/month.  TSIG > fudge is nominally 5 min, so resyncing every 1-2 weeks is close > enough.  And also close enough for sane DNSSEC configurations.  You > can resync more often,

Re: DNS-Format-Eroor

2017-12-18 Thread Sten Carlsen
mat error from > > >> 46.105.221.247#53 resolv ing ns2.mumbai-m.site/: reply has no > > >> answer > > >>  > > >> Dec 17 09:58:41 ns20 named[1530]: DNS format error from > > >> 46.105.221.247#53 resolv ing ns1.mumbai-m.site/: repl

Re: response-policy zones from spamhaus.org

2017-10-07 Thread Sten Carlsen
_ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come fro

Re: NOAA.GOV domain not working

2017-09-18 Thread Sten Carlsen
>>> memstatistics-file "/var/named/data/named_mem_stats.txt"; >>> >>> >>> >>> dnssec-enable no; >>> >>> dnssec-validation no; >>> >>> dnssec-lookaside auto; >>> >>>

Re: Different forwarder for certain response ip (result ip )

2017-09-16 Thread Sten Carlsen
; Address: 8.8.8.254 > > Non-authoritative answer: > Name:newsroom.fb.com > Addresses: 1.2.3.4 > 1.2.3.4 > > Note:1.2.3.4 is not what they really return . I've changed it for privacy . > But it is one fixed ip address which returns in case of manipulation

Re: Different forwarder for certain response ip (result ip )

2017-09-16 Thread Sten Carlsen
ution is needed. The use of port 443 is an obvious idea, however DNS uses UDP and HTTPS uses TCP. Your ISP appears to be paranoid enough to block also port 443 UDP, so that might be one issue. Would there be any UDP ports open, like streaming services or games? If so they may provide a possibility

Re: designing the DNS from the scratch

2017-07-09 Thread Sten Carlsen
low that > is completly worthless > Thinking about this, the only solution that seems remotely possible is to let the customer have the DNS server on his premises. That way all queries that come from cache could be fast enough. Those it needs to resolve from the Internet, will take longer ti

Re: restarting bind fixes some resolution issues

2017-07-09 Thread Sten Carlsen
> On 9 Jul 2017, at 17:04, Matus UHLAR - fantomas wrote: > > On 09.07.17 14:36, Dario Corti wrote: >> Hi, I occasionally have issues updating some packages, with the package >> manager saying that it cannot resolve deb.nodesource.com. I'm using >> 1:9.9.5.dfsg-9+deb8u11 and I verified that a b

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Sten Carlsen
___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlse

Re: dnssec key events too often?

2017-01-27 Thread Sten Carlsen
Right, thank you so much. I now will look at logging to reduce the clutter in the syslog since this does not call for any attention on my side. Thanks. On 27/01/2017 20:53, Mark Andrews wrote: > In message , Sten Carlsen > writes: >> Hi all >> >> I have recently st

dnssec key events too often?

2017-01-27 Thread Sten Carlsen
? -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lis

Re: view problem

2016-10-18 Thread Sten Carlsen
available to the client. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" -- Best regards Sten Carlsen No improvements come from shouting:

Re: adding zone forwards without restart

2016-09-21 Thread Sten Carlsen
king at the srpm I think you might have to > run `/usr/libexec/setup-named-chroot.sh /var/named/chroot on`. OBVIOUSLY. > > Tony. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Plea

Re: Postgresql 8.4 optimize heavy load

2016-09-17 Thread Sten Carlsen
You may want to explore the explain command and think about which indexes are missing. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!"

Re: writeable file 'domain.com': already in use

2016-06-16 Thread Sten Carlsen
___ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >> unsubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org >> htt

Re: Questions about .ro domain

2016-02-15 Thread Sten Carlsen
;http://ns02.ebsromania.ro>. > ebsromania.ro <http://ebsromania.ro>. 86400 IN NS > ns01.ebsromania.ro <http://ns01.ebsromania.ro>. > ;; Received 112 bytes from 192.162.16.18#53(primary.rotld.ro > <http://primary.rotld.ro>) in 147 ms > >

Re: A tale of two nameservers - resolution problems

2015-09-01 Thread Sten Carlsen
lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!

Re: Setup our OWN DNS Server

2015-01-30 Thread Sten Carlsen
faster in normal use in terms of resolution speed. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: can't-resolve

2014-12-28 Thread Sten Carlsen
point of interest. My 0.02$ -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" > On 28 Dec 2014, at 09:09, Ejaz wrote: > > Thanks for the suggestion > > I am sure No firewall at all. Also See I now I have reassigned the

Re: Digging to the final IP

2014-10-19 Thread Sten Carlsen
Would "host" be closer to what you want? -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" > On 19 Oct 2014, at 08:05, Karl Auer wrote: > >> On Sun, 2014-10-19 at 00:26 -0500, Frank Bulk wrote: >> Is the

Re: test bind before moving to production

2014-07-03 Thread Sten Carlsen
o reason you could not put everything in place even public facing servers - nobody will use them until referenced properly. > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org >

Re: Promoting a slave to master gives syntax error

2014-04-29 Thread Sten Carlsen
r.arpa/IN: not loaded due to errors. >>> >>> I know I must be doing something fundamentally wrong here but I >>> couldn't >>> find a guide how to do this properly. Any ideas? >>> >>> I am using bind version 9.9.5-3-Ubuntu

Re: Zone transfer doesn't work when I set allow-update statement

2014-04-29 Thread Sten Carlsen
tems Consortium, Inc. > > > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/li

Re: Bind vs flood

2014-02-27 Thread Sten Carlsen
__ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org <mailto:bind-users@lists.isc.org> > https://lists.isc.org/mailman/listinfo/bind-users >

Re: using views, normal to see non-authoritative for the views?

2014-02-21 Thread Sten Carlsen
irrelevant parts deleted... > > > > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > ht

Re: SERVFAIL @google

2014-02-10 Thread Sten Carlsen
Did you check the serial? and double check. I mean the serial of your uploaded new data. I have once missed that to the effect that no updates happened. On February 10, 2014 12:29:41 PM CET, Lucio Crusca wrote: >In data lunedì 10 febbraio 2014 11:25:59, Steven Carr ha scritto: >> On 10 February

Re: DNS passthrough on no explicit result?

2014-01-31 Thread Sten Carlsen
ch appreciated. Thanks! >> Steve >> >> ___ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >> unsubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org <mailto:

Re: Generic reasons for recursive performance not to peg CPU?

2014-01-12 Thread Sten Carlsen
tps://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this l

Re: Slowing down bind answers

2014-01-07 Thread Sten Carlsen
sit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVI

Re: Slowing down bind answers ?

2014-01-05 Thread Sten Carlsen
d cut off access for all that is not a life support system - that is also a kind of gun point? -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://lists.isc.org/mailman/

Re: Slowing down bind answers ?

2014-01-05 Thread Sten Carlsen
___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from

Re: DNS with several ip adessess

2013-12-30 Thread Sten Carlsen
me domain-name? > > I'm running BIND 9.9.2 > > BR > Mons > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.or

Re: Forward zone giving SERVFAIL

2013-11-28 Thread Sten Carlsen
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from shouting: "MALE

Re: script - automatic change A record

2013-11-25 Thread Sten Carlsen
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come f

Re: stealth with views?

2013-11-07 Thread Sten Carlsen
/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___

Re: Install DNS Server

2013-10-10 Thread Sten Carlsen
*Manikandan.C* > *System Administrator* > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Best regards Sten Car

Re: moving DNSSEC to a hidden master

2013-10-03 Thread Sten Carlsen
Convert the old master server into a slave. >> >> Update the other slaves to talk to a new master. >> > _______ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users ma

Re: moving DNSSEC to a hidden master

2013-10-01 Thread Sten Carlsen
> > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman

Re: Who is right?

2013-09-06 Thread Sten Carlsen
__ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Be

Re: Bind99 and a slave named server

2013-08-18 Thread Sten Carlsen
nsider whether you will be happy with the new binary file format at the slave or you need to specify the text format. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please visit https://

Re: Troubleshooting DNSSEC issue w/ ic.fbi.gov

2013-07-17 Thread Sten Carlsen
ts. > > Anyone have any tips as to where to start "digging" next based on what > I'm seeing above? > > Thanks, > Ray > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > fro

Re: Reverse address entries

2013-07-02 Thread Sten Carlsen
ect the other > websites I am serving using the same ip address? Thanks everyone for > this wealth discussion! > > Eduardo -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___

Re: Discover Unreferenced Zones/Records

2013-07-01 Thread Sten Carlsen
intent is to delete everything we don't need. > Bryan > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org >

Re: PTR files

2013-06-17 Thread Sten Carlsen
wer. I have to wade into it > all again. I hope I am still welcome to ask questions here as I have seen > others do, since I subscribed to this list in an effort to learn about BIND > and DNS, a number of years ago. > > Norman > __

Re: DNS Amplification Attacks... and a trivial proposal

2013-06-13 Thread Sten Carlsen
g older versions of the SW will respond to that? If they silently discard the packet, no problem. If however they respond with refused or anything else, you create your own storm. -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" __

Re: Help on NXDOMAIN to try next forwarder in the list

2013-05-30 Thread Sten Carlsen
list > > bind-users mailing list > bind-users@lists.isc.org <mailto:bind-users@lists.isc.org> > https://lists.isc.org/mailman/listinfo/bind-users > > > > > -- > Ashok > > > > > -- > Ashok > > >

Re: Negative zones; NXDOMAIN responses

2013-05-19 Thread Sten Carlsen
cify there NXDOMAIN >>> values for SOA and A RRs? How should be the content of the zone sheet? >>> >>> -- Best regards Sten Carlsen No improvements come from shouting: "MALE BOVINE MANURE!!!" ___ Please vi

Re: Mailing list "reply-to" setting

2013-05-09 Thread Sten Carlsen
gt;> unsubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users t

Re: BIND Configuration

2013-05-08 Thread Sten Carlsen
ubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe >

Re: architecture question

2013-05-08 Thread Sten Carlsen
gt; > bind-users mailing list > bind-users@lists.isc.org <mailto:bind-users@lists.isc.org> > https://lists.isc.org/mailman/listinfo/bind-users > > > > > ___ > Please visit https://lists.isc.org/mailman/listinfo

  1   2   3   >