Re: Monitoring Zonefiletransfer

2014-02-27 Thread Carsten Strotmann
Hi Markus, "Markus Weber" writes: >> >> Choose sane SOA values. refresh and retry << expire > > I will check these values, i thought they were kind of standard values > the default SOA values on a MS DNS Server are well and good for dynamic, internal, AD integrated DNS zones. For use in

Re: Monitoring Zonefiletransfer

2014-02-25 Thread Lawrence K. Chen, P.Eng.
Hmmm, so that explains what I'm seeing in my logs of my nameservers getting hammered by AD. Should I be worried? Is there anything that could be done on my end to help reduce the impact? On our campus, we have always allowed delegation of subdomains to department nameservers, with the requ

Re: Monitoring Zonefiletransfer

2014-02-25 Thread Markus Weber
Hey guys, sorry for the delay, i urgently had to take some days off last week. Anyways, thanks for all your help, i appreciate this a lot. I will now try to use only one DC as a master. a last question, Do you also run monitoring software on bind? and if so, what or how do you monitor? Am

Re: Monitoring Zonefiletransfer

2014-02-19 Thread Barry S. Finkel
On 2014-02-19 16:06, Barry S. Finkel wrote: >See MS KB article 282826, where MS documents the handling of zone >serial numbers in an AD environment. And Dave Warren replied: My experience is that it tends to work pretty well if BIND only points to one particular MS DNS server at a time, with

Re: Monitoring Zonefiletransfer

2014-02-19 Thread Dave Warren
On 2014-02-19 16:06, Barry S. Finkel wrote: See MS KB article 282826, where MS documents the handling of zone serial numbers in an AD environment. My experience is that it tends to work pretty well if BIND only points to one particular MS DNS server at a time, with a failover script that de

Re: Monitoring Zonefiletransfer

2014-02-19 Thread Warren Kumari
On Tue, Feb 18, 2014 at 10:34 PM, /dev/rob0 wrote: > On Tue, Feb 18, 2014 at 11:44:15PM +0100, markus weber wrote: >> I am new to administer a Bind server and after a few problems i ran >> into i need to monitor the zonefile transfers of my slave server. > > I think the terminology you use shows a

Re: Monitoring Zonefiletransfer

2014-02-19 Thread Barry S. Finkel
>Only transfer from one AD master. Microsoft AD doesn't maintain >consistent serials across the servers. The serials should be >monotonically increasing from a individual server. Oh, i didn't know that. Thats weird behavior isn't it? I will give it definitely a try, I just added 3

Re: Re: Monitoring Zonefiletransfer

2014-02-19 Thread Barry S. Finkel
A few problems i discovered: >- sometimes have a higher serial then all masters have, is this normal on >an AD DNS? or am I doing something wrong i thought this could not happen. Only transfer from one AD master. Microsoft AD doesn't maintain consistent serials across the ser

Re: Monitoring Zonefiletransfer

2014-02-18 Thread Markus Weber
Am 19.02.2014, 04:34 Uhr, schrieb /dev/rob0 : On Tue, Feb 18, 2014 at 11:44:15PM +0100, markus weber wrote: I am new to administer a Bind server and after a few problems i ran into i need to monitor the zonefile transfers of my slave server. I think the terminology you use shows a part of the

Re: Monitoring Zonefiletransfer

2014-02-18 Thread Markus Weber
Am 19.02.2014, 01:48 Uhr, schrieb Doug Barton : On 02/18/2014 04:39 PM, Mark Andrews wrote: Only transfer from one AD master. Microsoft AD doesn't maintain consistent serials across the servers. The serials should be monotonically increasing from a individual server.

Re: Monitoring Zonefiletransfer

2014-02-18 Thread Markus Weber
Am 19.02.2014, 01:39 Uhr, schrieb Mark Andrews : In message , markus weber writes: --===2070182502041634286== Content-Type: multipart/alternative; boundary=001a1134888407910a04f2b6036d --001a1134888407910a04f2b6036d Content-Type: text/plain; charset=UTF-8 Hey Guys, I am n

Re: Monitoring Zonefiletransfer

2014-02-18 Thread /dev/rob0
On Tue, Feb 18, 2014 at 11:44:15PM +0100, markus weber wrote: > I am new to administer a Bind server and after a few problems i ran > into i need to monitor the zonefile transfers of my slave server. I think the terminology you use shows a part of the confusion. Zone *data* is transferred to sla

Re: Monitoring Zonefiletransfer

2014-02-18 Thread Doug Barton
On 02/18/2014 04:39 PM, Mark Andrews wrote: Only transfer from one AD master. Microsoft AD doesn't maintain consistent serials across the servers. The serials should be monotonically increasing from a individual server. Also try to determine what the "primary" master i

Re: Monitoring Zonefiletransfer

2014-02-18 Thread Mark Andrews
In message , markus weber writes: > --===2070182502041634286== > Content-Type: multipart/alternative; boundary=001a1134888407910a04f2b6036d > > --001a1134888407910a04f2b6036d > Content-Type: text/plain; charset=UTF-8 > > Hey Guys, > > I am new to administer a Bind server and after

Monitoring Zonefiletransfer

2014-02-18 Thread markus weber
Hey Guys, I am new to administer a Bind server and after a few problems i ran into i need to monitor the zonefile transfers of my slave server. I have searched on google and nagios plugin sites but could not find anything that fits my needs entirely. Here is the Setup: - MS ActiveDirectory as pri