Re: Secondary DNS question...

2013-06-27 Thread Mark Andrews
In message , Chuck Peters writes: > > On Thu, Jun 27, 2013 at 9:48 AM, SH Development > wrote: > > > > I have now moved all of my secondary to BuddyNS with much better > > redundancy... > > > They don't appear to support secure zone transfers with TKEY/TSIG or > DNSSEC. http://www.buddyns.com

Re: Secondary DNS question...

2013-06-27 Thread Chuck Peters
On Thu, Jun 27, 2013 at 9:48 AM, SH Development wrote: > I have now moved all of my secondary to BuddyNS with much better > redundancy... They don't appear to support secure zone transfers with TKEY/TSIG or DNSSEC. http://www.buddyns.com/faq/#dns-extensions I haven't found any free or low c

Re: Secondary DNS question...

2013-06-27 Thread Matus UHLAR - fantomas
On 27.06.13 08:48, SH Development wrote: Turns out there were several things going on at the same time. The perfect storm so to speak. My ns2 was at another location locally that was having power issues, so the server wasn't even up some of the time. On top of that, my ns1 was having issues an

Re: Secondary DNS question...

2013-06-27 Thread SH Development
Turns out there were several things going on at the same time. The perfect storm so to speak. My ns2 was at another location locally that was having power issues, so the server wasn't even up some of the time. On top of that, my ns1 was having issues and overall my DNS was just erratic. I ha

Re: Secondary DNS question...

2013-06-27 Thread Matus UHLAR - fantomas
On 26.06.13 20:16, SH Development wrote: Whoa...slow down guys. I took ns2.starionhost.net offline and am in the middle of re-arranging my secondary services. Let me finish twiddling around with it in the next day or two, and I'll post a note when I'm done. THEN take a look at it. I'm curious

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Because it would be a waste of a machine. We only host about 30 domains. The load is negligible. Jeff On Jun 26, 2013, at 11:51 PM, Mike Hale wrote: > Dude, why aren't you running your authoritative name servers on a > dedicated box or VM using a dedicated server OS? Not asking to be a >

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
Interesting, the pcap that was posted previously showed some odd errors around udp checksums, some showed valid, some showed invalid. With modern NICs it's not uncommon to see them all invalid due to checksum offloading, but the mix of valid and invalid was odd. Doug On 06/26/2013 09:58 PM,

Re: Secondary DNS question...

2013-06-26 Thread SH Development
I am running a demo of the Canit anti-spam software from Roaring Penguin Software as an appliance (ISO) inside of Virtual Box for OSX. I was getting a lot of these errors in the system logs: 6/26/13 11:38:37 PM kernel in_delayed_cksum_offset: ip_len 48640 (190) doesn't match actual length

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
Yes, seems fine now. Can you share more information about what it was you turned off? Sounds odd, but the results speak for themselves. Doug On 06/26/2013 09:39 PM, SH Development wrote: Sure could use some direction about where to start looking. I "thought" I had everything working for the

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Sure could use some direction about where to start looking. I "thought" I had everything working for the last few years, but now I'm beginning to question how long I've had a problem. The setup is OSX running BIND 9.9.3-P1 on a static IP, no firewall, no router, just straight to the internet.

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
On 06/26/2013 06:50 PM, SH Development wrote: Okay, so I got to it sooner than I thought. So, could you take a look at: starionhost.net stariontech.com starionline.com Any one of those, but they should all be identical now and on some new secondary DNS. The delegations are now identical, an

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Okay, so I got to it sooner than I thought. So, could you take a look at: starionhost.net stariontech.com starionline.com Any one of those, but they should all be identical now and on some new secondary DNS. Jeff On Jun 26, 2013, at 8:16 PM, SH Development wrote: > Whoa...slow down guys.

Re: Secondary DNS question...

2013-06-26 Thread SH Development
Whoa...slow down guys. I took ns2.starionhost.net offline and am in the middle of re-arranging my secondary services. Let me finish twiddling around with it in the next day or two, and I'll post a note when I'm done. THEN take a look at it. I'm curious to know if you all see any changes at t

Re: Secondary DNS question...

2013-06-26 Thread Doug Barton
On 06/26/2013 07:54 AM, Matus UHLAR - fantomas wrote: All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one even decide that? As far as

Re: Secondary DNS question...

2013-06-26 Thread Lawrence K. Chen, P.Eng.
Oops, images were too bighere's links. - Original Message - > >> All very interesting, but I'm afraid at my level of expertise on > >> DNS, I'm > >> not following. If I'm broken, how do I attempt to fix? Someone > >> mentioned > >> that our ns1.starionhost.net was not authoritative.

Re: Secondary DNS question...

2013-06-26 Thread Matus UHLAR - fantomas
All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one even decide that? As far as I know I haven't had any issues until now... On Ju

Re: Secondary DNS question...

2013-06-25 Thread SH Development
bounces+frnkblk=iname@lists.isc.org > [mailto:bind-users-bounces+frnkblk=iname@lists.isc.org] On Behalf Of SH > Development > Sent: Tuesday, June 25, 2013 8:35 PM > To: bind-users@lists.isc.org > Subject: Re: Secondary DNS question... > > All very interesting, but I'm af

RE: Secondary DNS question...

2013-06-25 Thread Frank Bulk
: bind-users@lists.isc.org Subject: Re: Secondary DNS question... All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one e

Re: Secondary DNS question...

2013-06-25 Thread SH Development
All very interesting, but I'm afraid at my level of expertise on DNS, I'm not following. If I'm broken, how do I attempt to fix? Someone mentioned that our ns1.starionhost.net was not authoritative. How does one even decide that? As far as I know I haven't had any issues until now... Jeff

Re: Secondary DNS question...

2013-06-25 Thread Matus UHLAR - fantomas
On 24.06.13 07:41, Frank Bulk wrote: Interesting to note that querying for ANY does return an SOA. I can't explain that behavior. On 24.06.13 14:54, Matus UHLAR - fantomas wrote: I can guess a kind of DNS filter/firewall. Some l3 switches or load balancers tend to produce strange results too.

Re: Secondary DNS question...

2013-06-24 Thread Lawrence K. Chen, P.Eng.
Query time: 86 msec > ;; SERVER: 74.87.108.83#53(74.87.108.83) > ;; WHEN: Mon Jun 24 07:38:33 2013 > ;; MSG SIZE rcvd: 255 > > > C:\> > > > -Original Message- > From: bind-users-bounces+frnkblk=iname....@lists.isc.org > [mailto:bind-users-bounces+frnkbl

Re: Secondary DNS question...

2013-06-24 Thread Matus UHLAR - fantomas
iname@lists.isc.org [mailto:bind-users-bounces+frnkblk=iname@lists.isc.org] On Behalf Of Frank Bulk Sent: Saturday, June 22, 2013 8:56 PM To: 'SH Development'; bind-users@lists.isc.org Subject: RE: Secondary DNS question... stariononline.com has two NSes listed, ns1.starionhost.net [74

RE: Secondary DNS question...

2013-06-24 Thread Frank Bulk
age- From: bind-users-bounces+frnkblk=iname@lists.isc.org [mailto:bind-users-bounces+frnkblk=iname@lists.isc.org] On Behalf Of Frank Bulk Sent: Saturday, June 22, 2013 8:56 PM To: 'SH Development'; bind-users@lists.isc.org Subject: RE: Secondary DNS question... stariononline.com ha

RE: Secondary DNS question...

2013-06-22 Thread Frank Bulk
stariononline.com has two NSes listed, ns1.starionhost.net [74.87.108.83] and ns2.starionhost.net [64.136.200.138]. But the first one does not seem to want to respond (http://goo.gl/s41wN and http://dnscheck.iis.se/ and http://www.zonecut.net/dns/index.cgi are just a few examples) to a few of the

Re: Secondary DNS question...

2013-06-21 Thread Leonard Mills
om: SH Development >To: "bind-users@lists.isc.org" >Sent: Friday, June 21, 2013 6:30 AM >Subject: Re: Secondary DNS question... > > >No, there is definitely something going on.  I shut down our >ns2.starionhost.net this morning for a while.  Sure enough, emails started

Re: Secondary DNS question...

2013-06-21 Thread WBrown
> From: SH Development > No, there is definitely something going on. I shut down our > ns2.starionhost.net this morning for a while. Sure enough, emails > started bouncing from customers even though our ns1.starionhost.net > is up and on the faster machine. What exactly do the delivery fail

Re: Secondary DNS question...

2013-06-21 Thread Matus UHLAR - fantomas
On 21.06.13 08:30, SH Development wrote: No, there is definitely something going on. I shut down our ns2.starionhost.net this morning for a while. Sure enough, emails started bouncing from customers even though our ns1.starionhost.net is up and on the faster machine. depends on the error mess

Re: Secondary DNS question...

2013-06-21 Thread Steven Carr
Sounds more like your mailserver is misconfigured and not resolving DNS correctly or not failing over (what is your mail server?). Without seriously in-depth configuration/logs being posted there isn't much we can help with. Steve On 21 June 2013 14:30, SH Development wrote: > No, there is de

Re: Secondary DNS question...

2013-06-21 Thread SH Development
No, there is definitely something going on. I shut down our ns2.starionhost.net this morning for a while. Sure enough, emails started bouncing from customers even though our ns1.starionhost.net is up and on the faster machine. Jeff On Jun 21, 2013, at 5:38 AM, Matus UHLAR - fantomas wrote:

Re: Secondary DNS question...

2013-06-21 Thread Matus UHLAR - fantomas
On 20.06.13 23:02, SH Development wrote: I agree that the incoming and outgoing are different issues. I just mention it because I dealt with issues on both fronts today. The few claims that I had about email not being delivered were proved false by reviewing the logs that showed they had actual

Re: Secondary DNS question...

2013-06-20 Thread SH Development
I agree that the incoming and outgoing are different issues. I just mention it because I dealt with issues on both fronts today. The few claims that I had about email not being delivered were proved false by reviewing the logs that showed they had actually been delivered. So I don't think tha

Re: Secondary DNS question...

2013-06-20 Thread John Miller
Hi Jeff, You've pointed out two separate problems (incoming e-mail not coming in & outgoing e-mail not going out), so some more details about your environment would probably be useful here: - are you combining both authoritative and recursive DNS on the same servers? - Are you using different MXe