Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Tobias Krais
Hi together, thanks for these many hints. Wow! So many mistakes in a few lines. Here ist now my config file: -%<- @ IN SOA localhost. root.localhost. ( 2012050900 7200

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Tobias Krais
Hi Jan-Piet, > What's the hash doing there? ...^ > > That's not a comment. Thanks. I continue learning... > Replace that whole line by > > nosslsearch.google.com. IN A 216.239.32.20 Zone is www.google.com. That won't work here > Assuming you've configured the z

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Joseph S D Yao
On Tue, Apr 17, 2012 at 02:24:48PM +0200, Tobias Krais wrote: > Hi all together, > > very interesting this discussion. For I am a newbie I understood only half. > > Thus I detected 2 ways to continue: > > > I believe you can use response policy (RPZ) to achieve this. Or you can use > > just abo

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread /dev/rob0
Sundry nitpicks. Not much of interest here, sorry. On Tue, May 08, 2012 at 05:38:55PM +0200, Jan-Piet Mens wrote: > > -%<- > > @ IN SOA localhost root@localhost. ( > > 2012041100 > > 7200 >

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Chris Thompson
On May 8 2012, Barry Margolin wrote: In article , Tobias Krais wrote: Hi Phil, > 4. Create a zone for "www.google.com" and instead of CNAME, put an A > record at the apex with the same IP as "nosslsearch.google.com". Run a > script FREQUENTLY to re-resolve the host, as Google do short-TTL >

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Jan-Piet Mens
> -%<- > @ IN SOA localhost root@localhost. ( > 2012041100 > 7200 > 1800 > 1209600 >

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Barry Margolin
In article , Tobias Krais wrote: > Hi Phil, > > > 4. Create a zone for "www.google.com" and instead of CNAME, put an A > > record at the apex with the same IP as "nosslsearch.google.com". Run a > > script FREQUENTLY to re-resolve the host, as Google do short-TTL > > DNS-based loadbalancing. >

Re: Configuring CNAME for nosslsearch.google.com

2012-05-08 Thread Tobias Krais
Hi Phil, > 4. Create a zone for "www.google.com" and instead of CNAME, put an A > record at the apex with the same IP as "nosslsearch.google.com". Run a > script FREQUENTLY to re-resolve the host, as Google do short-TTL > DNS-based loadbalancing. For unbound has no solution Inow want to try your

Re: Configuring CNAME for nosslsearch.google.com

2012-04-17 Thread Tobias Krais
Hi Phil, >> 1. Don't use bind but e.g. unbound instead. First: here the link to follow on the unbound mailing list: http://unbound.nlnetlabs.nl/pipermail/unbound-users/2012-April/002329.html >> Any other ideas I missed? > > 3. Use RPZ, as per Chris' suggestion > > 4. Create a zone for "www.goo

Re: Configuring CNAME for nosslsearch.google.com

2012-04-17 Thread Phil Mayers
On 17/04/12 13:24, Tobias Krais wrote: Hi all together, very interesting this discussion. For I am a newbie I understood only half. Thus I detected 2 ways to continue: I believe you can use response policy (RPZ) to achieve this. Or you can use just about any non-BIND resolver (e.g. unbound) t

Re: Configuring CNAME for nosslsearch.google.com

2012-04-17 Thread Tobias Krais
Hi all together, very interesting this discussion. For I am a newbie I understood only half. Thus I detected 2 ways to continue: > I believe you can use response policy (RPZ) to achieve this. Or you can use > just about any non-BIND resolver (e.g. unbound) to achieve this. 1. Don't use bind bu

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Chris Buxton
On Apr 15, 2012, at 3:40 PM, Tobias Krais wrote: > Hi Ben, > > hmm. How can I manage what google suggests: > "Information for school network administrators about the No-SSL option > > To utilize the no SSL option for your network, configure the DNS entry > for www.google.com to be a CNAME for no

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Matthew Huff
Behalf Of Alan Clegg > Sent: Monday, April 16, 2012 9:53 AM > To: bind-users@lists.isc.org > Subject: Re: Configuring CNAME for nosslsearch.google.com > > On 4/16/2012 9:40 AM, Matthew Huff wrote: > > Actually, this can be done. > > > > Create a zone file for &q

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread /dev/rob0
On Mon, Apr 16, 2012 at 09:40:16AM -0400, Matthew Huff wrote: > Actually, this can be done. > > Create a zone file for "www.google.com", not "google.com". The zone file > should like this (replace THIS_HOSTNAME with the name of your nameserver: > > > @ IN SOA localhost

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Ben Croswell
+mhuff=ox@lists.isc.org [mailto:bind-users- > > bounces+mhuff=ox@lists.isc.org] On Behalf Of Lyle Giese > > Sent: Monday, April 16, 2012 8:50 AM > > To: bind-users@lists.isc.org > > Subject: Re: Configuring CNAME for nosslsearch.google.com > > > > On 4/1

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Alan Clegg
On 4/16/2012 9:40 AM, Matthew Huff wrote: > Actually, this can be done. > > Create a zone file for "www.google.com", not "google.com". The zone file > should like this (replace THIS_HOSTNAME with the name of your nameserver: > > > @ IN SOA localhost root@localhost. ( >

RE: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Matthew Huff
ind-users-bounces+mhuff=ox@lists.isc.org [mailto:bind-users- > bounces+mhuff=ox@lists.isc.org] On Behalf Of Lyle Giese > Sent: Monday, April 16, 2012 8:50 AM > To: bind-users@lists.isc.org > Subject: Re: Configuring CNAME for nosslsearch.google.com > > On 4/16/2012 3:30 AM, Phil Maye

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Lyle Giese
On 4/16/2012 3:30 AM, Phil Mayers wrote: On 04/15/2012 11:40 PM, Tobias Krais wrote: Hi Ben, hmm. How can I manage what google suggests: "Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for www.google.

Re: Configuring CNAME for nosslsearch.google.com

2012-04-16 Thread Phil Mayers
On 04/15/2012 11:40 PM, Tobias Krais wrote: Hi Ben, hmm. How can I manage what google suggests: "Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for www.google.com to be a CNAME for nosslsearch.google.c

Re: Configuring CNAME for nosslsearch.google.com

2012-04-15 Thread Tobias Krais
Hi Ben, hmm. How can I manage what google suggests: "Information for school network administrators about the No-SSL option To utilize the no SSL option for your network, configure the DNS entry for www.google.com to be a CNAME for nosslsearch.google.com." Source: http://support.google.com/websear

Re: Configuring CNAME for nosslsearch.google.com

2012-04-15 Thread Ben Croswell
What you are asking for can't be done. If you load the google.com zone everything you don't load in the zone will be black holed and not resolve. If you try to load WWW.Google.com you will not be able to make WWW a cname due to the no cname and other data rule. On Apr 15, 2012 5:39 PM, "Tobias Kra