Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Kevin Darcy
The rule of thumb is: BIND instances need access to a root zone. Either a) you forward for it, or b) you are authoritative (master or slave) for it, or c) you're set up as a "stub" for it, d) you prime it via the contents of an explicitly-configured "hints" zone, or e) you use the compiled-in In

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Mark Andrews
In message <20130521140821.gb11...@h.detebe.org>, "Elmar K. Bins" writes: > Re Mark, > > > > Oh, I forgot to mention that all master zones have "notify explicit;" set. > > > (Is there a global setting for that?) > > > > What about the slave zones? They also send notify messages. > > Which slav

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Elmar K. Bins
Re Mark, > > Oh, I forgot to mention that all master zones have "notify explicit;" set. > > (Is there a global setting for that?) > > What about the slave zones? They also send notify messages. Which slave zones? This server is auth-only, master-only. That's it. No slaves, no recursion, no look

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Mark Andrews
In message <20130521134214.ga11...@h.detebe.org>, "Elmar K. Bins" writes: > Re Mark, > > thanks for your answer (and good morning!), > > ma...@isc.org (Mark Andrews) wrote: > > > > > Recursion is off, and the root hints file has been removed from the local > > > zone config. No effect. > > >

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Elmar K. Bins
Re Mark, thanks for your answer (and good morning!), ma...@isc.org (Mark Andrews) wrote: > > Recursion is off, and the root hints file has been removed from the local > > zone config. No effect. > > Authoritative nameservers still need to lookup address of nameservers > to send NOTIFY messages

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Mark Andrews
In message <20130521085732.gh23...@h.detebe.org>, "Elmar K. Bins" writes: > ... these annoying root lookups: > error (host unreachable) resolving './DNSKEY/IN': 192.112.36.4#53 > error (host unreachable) resolving './NS/IN': 192.36.148.17#53 > ... > > > Hi guys, > > I guess a few of you have se

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Elmar K. Bins
Re Bryan, bryanlhar...@me.com (Bryan Harris) wrote: >> Recursion is off, and the root hints file has been removed from the local >> zone config. No effect. >   > Do you have a line like this?  Hope it helps. > allow-recursion { none;  }; Would that help more than options { recursion no; } ? Any

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread Bryan Harris
On May 21, 2013, at 03:57 AM, "Elmar K. Bins" wrote: Recursion is off, and the root hints file has been removed from the local zone config. No effect. Do you have a line like this?  Hope it helps.allow-recursion { none;  };Bryan ___ Please visit https:/

Re: Authoritative internal server - how do I get rid of...

2013-05-21 Thread jsdy
On 2013-05-21 04:57, Elmar K. Bins wrote: ... these annoying root lookups: error (host unreachable) resolving './DNSKEY/IN': 192.112.36.4#53 error (host unreachable) resolving './NS/IN': 192.36.148.17#53 ... Hi guys, I guess a few of you have seen and mitigated this before. We're running a fe