Re: BIND question

2018-04-12 Thread Matus UHLAR - fantomas
On 12.04.18 08:29, Mark Andrews wrote: The domain system provides such a feature using the canonical name (CNAME) RR. A CNAME RR identifies its owner name as an alias, and specifies the corresponding canonical name in the RDATA section of the RR. If a CNAME RR is present at a node, no other dat

Re: BIND question

2018-04-11 Thread Mark Andrews
RFC 1034 The domain system provides such a feature using the canonical name (CNAME) RR. A CNAME RR identifies its owner name as an alias, and specifies the corresponding canonical name in the RDATA section of the RR. If a CNAME RR is present at a node, no other data should be present; this ensur

Re: BIND question

2018-04-11 Thread praveen via bind-users
I am seeing the below error when a zone is signed without an A record for zone. However there is a an CNAME record for the same top-level domain (zone), could this be causing the below error and why? dnssec-signzone: error: dns_master_load: :33: zonename: CNAME and other data dnssec-signzone: fa

Re: BIND question

2018-04-11 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wed, 2018-04-11 at 21:06 +, praveen via bind-users wrote: > Is an "A" record mandatory entry for top-level domain (zone) when > using DNSSEC, DKIM, SPF and DMARC configuration? No. I have zones with all of that, with no A record at the apex,

BIND question

2018-04-11 Thread praveen via bind-users
All, Operating BIND version "BIND 9.9.10-P1 (Extended Support Version)" DNSSEC signing in place. DKIM, SPF and DMARC records are also in place for top-level domain (zone). Is an "A" record mandatory entry for top-level domain (zone) when using DNSSEC, DKIM, SPF and DMARC configuration? Thanks _

Re: A newbies Bind question

2009-02-02 Thread Barry Margolin
In article , "Peter Arends" wrote: > In addition to these recommendation, you can use MAC filtering to restrict > users. > This is ofcourse if you have a iptables based firewall with MAC module. MAC filtering isn't much use if the clients are remote. MAC addresses don't leave the local LAN.

RE: A newbies Bind question

2009-02-01 Thread Peter Arends
Sent: den 1 februari 2009 15:16 To: Matthew Pounsett; Peter Privat Cc: bind-users@lists.isc.org Subject: RE: A newbies Bind question You can allow recursion (and caching)for specific (as opposed to all) IPs external to your setup but its generally not a good idea unless these IPs are static and

RE: A newbies Bind question

2009-02-01 Thread Jeff Lightner
ind-users-boun...@lists.isc.org] On Behalf Of Matthew Pounsett Sent: Saturday, January 31, 2009 1:37 PM To: Peter Privat Cc: bind-users@lists.isc.org Subject: Re: A newbies Bind question On 31-Jan-2009, at 13:24, Peter Privat wrote: > My question: > Is it possible for my friends out there some

Re: A newbies Bind question

2009-01-31 Thread Matthew Pounsett
On 31-Jan-2009, at 13:24, Peter Privat wrote: My question: Is it possible for my friends out there somewhere in cybespace to also use my DNS server by entering its IP their DNS settings? So far I haven't managed to make it work. If another computer somewhere out there in the cloud is ente

A newbies Bind question

2009-01-31 Thread Peter Privat
Hi, My first posting here! :) I have installed the Bind9 DNS server into an Debian (Ubuntu 8.04) server. I manged to make it work for all the computers that belongs to the same subnet, at a real internet IP subnet (not a private IP like 192 etc). It is also not behind a firewall. I have entered th