RE: Stub Zone Behavior?

Forwarding is a different beast from "stub" (recursive rather than iterative resolution). I'd look at "static-stub", if your NS list is overgrown with useless/unreachable stuff. It's configured basically the same way as forwarding, but without making the paradigm shift (and possible unforeseen

Re: stub zone

On Jul 26, 2011, at 10:51 PM, Feng He wrote: > On Wed, Jul 27, 2011 at 8:51 AM, Chris Buxton > wrote: >> >> On Jul 25, 2011, at 10:33 PM, Feng He wrote: >> >>> On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: Would like to use the BIND stub zone function, however, heard that ISC con

Re: stub zone

On Wed, Jul 27, 2011 at 8:51 AM, Chris Buxton wrote: > > On Jul 25, 2011, at 10:33 PM, Feng He wrote: > >> On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: >>> Would like to use the BIND stub zone function, however, heard that ISC >>> considers stopping support to stub zone in the future, is that

Re: stub zone

On 25/07/11 20:55, ju wusuo wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? I think we may have confused some people in the past about support for this because of what's written in the ARM abou

Re: stub zone

On Jul 25, 2011, at 12:55 PM, ju wusuo wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? I've heard that rumor from my customers, too. But I haven't heard anything from ISC about not supporting

Re: stub zone

esday, July 26, 2011 1:33 AM Subject: Re: stub zone On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo <juwu...@yahoo.com> wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? > _

Re: stub zone

On Jul 25, 2011, at 10:33 PM, Feng He wrote: > On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: >> Would like to use the BIND stub zone function, however, heard that ISC >> considers stopping support to stub zone in the future, is that true? >> ___ >

Re: stub zone

Thanks Mark .. I think that probably is the misunderstanding of the "delegation" usage part. From: Mark Andrews To: ju wusuo Cc: "bind-users@lists.isc.org" Sent: Monday, July 25, 2011 9:57 PM Subject: Re: stub zone In message <131

Re: stub zone

On Tue, Jul 26, 2011 at 3:55 AM, ju wusuo wrote: > Would like to use the BIND stub zone function, however, heard that ISC > considers stopping support to stub zone in the future, is that true? > ___ Hi, what's the use of stub zone? I never used it, tha

Re: stub zone

In message <1311623708.59385.yahoomail...@web44803.mail.sp1.yahoo.com>, ju wusuo writes: > > Would like to use the BIND stub zone function, however, heard that ISC cons= > iders stopping support to stub zone in the future, is that true?=A0 No. There are no plans to remove support for stub zone

Re: Stub zone vs forward zone

> On Mon, Mar 14, 2011 at 09:16:13PM -0400, Kevin Darcy wrote: > > As a general rule, use "type forward" zones only if you have some > > connectivity issue you need to work around, e.g. trying to resolve > > Internet names from behind a restrictive firewall. On 18.03.11 10:15, Marc Haber wrote

Re: Stub zone vs forward zone

On 18.03.2011 10:17, Marc Haber wrote: > Which it doesn't in the "forward" setup, it just immediately returns NXDOMAIN. Do you include zones.rfc1918 in your configuration? What SOA RR does the NXDOMAIN return? | zone "0.10.in-addr.arpa" { | type forward; | forwarders { 10.0.0.2; }; | };

Re: Stub zone vs forward zone

On Mon, Mar 14, 2011 at 01:36:10PM +0100, Jan-Piet Mens wrote: > A stub zone tells BIND to load SOA and NS records from its masters {}. > (forwarders {} is, I belive, both useless and incorrect here.) From that > point onwards, your BIND will use the data in the stub to recursively > find answers t

Re: Stub zone vs forward zone

Hi, On Mon, Mar 14, 2011 at 09:16:13PM -0400, Kevin Darcy wrote: > Stub zones: only available as a single level beyond one's "authoritative > core", i.e. the stub server must be able to talk directly to one or more > authoritative servers for the zone. > Forward zones: can be daisy-chained an

Re: Stub zone vs forward zone

Stub zones: only available as a single level beyond one's "authoritative core", i.e. the stub server must be able to talk directly to one or more authoritative servers for the zone. Forward zones: can be daisy-chained an arbitrary number of levels from the authoritative core (but this is not rec

Re: Stub zone vs forward zone

On Mon, 14 Mar 2011, Jan-Piet Mens wrote: > > A stub zone tells BIND to load SOA and NS records from its masters {}. > (forwarders {} is, I belive, both useless and incorrect here.) From that > point onwards, your BIND will use the data in the stub to recursively > find answers to queries for that

Re: Stub zone vs forward zone

In message <20110314104330.ga29...@torres.zugschlus.de>, Marc Haber writes: > Hi, > > I am running a local instance of bind on my notebook to spare myself > some rather annoying reconfiguration orgies that are bound to happen > when changing networks. > > On my biggest customer's network, I am t

Re: Stub zone vs forward zone

Marc, A stub zone tells BIND to load SOA and NS records from its masters {}. (forwarders {} is, I belive, both useless and incorrect here.) From that point onwards, your BIND will use the data in the stub to recursively find answers to queries for that zone. The forwarder on the other hand, instr

Re: stub zone and dnssec processing fails?

On Fri, 2 Oct 2009, Mark Andrews wrote: zone "ca." IN { type stub; masters { 192.228.22.190; 192.228.22.189; }; }; To make the test signed ca work you need to replace the NS RRet with the names of the nameservers that serve the signed CA zone. At the moment you end up with t

Re: stub zone and dnssec processing fails?

In message , Paul Wou ters writes: > > Hi, > > I've been trying to configure bind to use a stub zone, for which I > have keys configured. When I do this, I see a ServFail, with the > logs pointing to: > > 01-Oct-2009 11:00:03.053 lame-servers: info: not insecure resolving 'xeleranc > e.ca/DNSKE

Re: stub zone

On Thu, Mar 05, 2009 at 02:06:18PM +0100, squid proxy wrote a message of 13 lines which said: > Howto create a stub zone instead of slave zone on BIND 9.3.4-P1.1? Read the documentation ? zone zone_name [class] { type stub; [ a