norecursion on external zone, but how do I allow CNAMEs to be fully resolved?

2011-05-20 Thread Tory M Blue
So I'm been having dns issues for a while, differing issues that pop up and I knock them down , but another just came to my attention which has me stumped. My external zone config has allow-recursion ( none; ); However I have some 3rd party sites that I CNAME too. Akamai for example, yes CNAME to

Re: [dns-operations] Bind 9.8.0 intermittent problem with non-recursive responses

2011-05-19 Thread Tory M Blue
On Thu, May 19, 2011 at 7:44 PM, Evan Hunt wrote: >> Odds are good this is a software bug in BIND. > > I can absolutely confirm that this is a bug in BIND 9; we're aware of > it and have been trying to reproduce it for some time.  Unfortunately > it seems to be triggered by some environmental cond

Re: Akadns and Bind

2011-02-04 Thread Tory M Blue
> So that was the trace between the client and the nameserver.  What > about the trace between the nameserver and the rest of the world? > > The log message is trigger by multiple queries from your nameserver > not being answered and named falling back simpler queries in a > attempt to get them ans

Re: Akadns and Bind

2011-02-04 Thread Tory M Blue
On Fri, Feb 4, 2011 at 5:37 AM, Florian Weimer wrote: > * Tory M. Blue: > >> [tblue@mx3 ~]$ dig @problemserver.net  www.yahoo.com  +trace > > Please use "dig @problemserver.net www.yahoo.com +trace +norecurse > +dnssec", to match more closely the queires that BIND

Re: Akadns and Bind

2011-02-03 Thread Tory M Blue
On Thu, Feb 3, 2011 at 5:23 PM, Barry Margolin wrote: > In article SNIPPED< > www.yahoo.com.    300   IN CNAME fp.wg1.b.yahoo.com. > > And even when they did, it didn't get involved until you followed the > CNAME returned for www.yahoo.com.  Your log message above indicates an > issue just with th

Akadns and Bind

2011-02-03 Thread Tory M Blue
Second email in a single day, crazy. But I've had issues backing up and just need to resolve them Again Bind bind-9.7.2-P3 behind F5 Loadbalancers. I'm running into an issue where one of the 2 servers will resolve www.yahoo.com but the other will not (Same network), but both will resolve yahoo.c

bind-9.7.2-P3 linux how to debug/troubleshoot query failures?

2011-02-03 Thread Tory M Blue
Hey all, Well I'm reaching out as I'm at a loss. I have a distributed DNS architecture with 2 bind-9.7.2-P3 servers behind an F5 Loadbalancer. I then have another 2 behind another F5 at another location. My app servers are configured with their resolv.conf looking like: (please ignore the domain

Re: No such Name, and 5second dns delay.

2010-02-28 Thread Tory M Blue
On Sun, Feb 28, 2010 at 4:16 PM, Barry Margolin wrote: > > There are probably at least a half dozen queries that occur in > performing that command.  Which of these resulted in the "No such name" > response? > > What was in the Question section of that response, i.e. specifically > which name did

Re: No such Name, and 5second dns delay.

2010-02-28 Thread Tory M Blue
On Sun, Feb 28, 2010 at 8:36 AM, Barry Margolin wrote: > In article , >  Tory M Blue wrote: > >> I've running into some issues and trying to diagnose, so maybe folks >> on here can help me with steps to troubleshoot. >> >> Bind 9.6.1-P1 >> Fedora Cor

No such Name, and 5second dns delay.

2010-02-27 Thread Tory M Blue
I've running into some issues and trying to diagnose, so maybe folks on here can help me with steps to troubleshoot. Bind 9.6.1-P1 Fedora Core What I am experiencing and led to my investigation is a random 5 second delay in name resolution. Now I know that nslookup/dig resolver has a default 5 se