Re: SERVFAIL for some domains on some servers

2010-03-07 Thread Florian Weimer
* Kevin Darcy: > I'm not sure those recommendations apply as strongly as they used > to. Now we have views and (if the original poster were to upgrade to > 9.4.x or higher) fine-grained control over access to cached data. Views are probably okay. Access control is insufficient, especially if you

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Mark Andrews
In message <4b8ce12b.4010...@imag.fr>, Oliver Henriot writes: > but nothing shows up when carrying out the failed request. I even tried=20 > debug level and it gave nothing when I did : > > dig www.labanquepostale.fr @129.88.30.10 > > ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>>=20 > www.l

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Oliver Henriot
Dear Kevin, Dans sa grande sagesse, Kevin Darcy a écrit, le 02/03/2010 20:08 : 1. DNS uses UDP primarily. My mistake, telnet is not sufficient as a test. 2. The nameservers for labanquepostale.fr appear to be on the same subnet. If true, then there are likely to be one or more points of fai

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Oliver Henriot
Dear Stan, Dans sa grande sagesse, Sten Carlsen a écrit, le 02/03/2010 18:43 : Hi Seen from here, I get a fast response to dig "labanquepostale.fr". When you query your own servers? I get a fast response from isis.imag.fr and imag.imag.fr; it's only brahma.imag.fr and cosmos.imag.fr who t

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Kevin Darcy
1. DNS uses UDP primarily. 2. The nameservers for labanquepostale.fr appear to be on the same subnet. If true, then there are likely to be one or more points of failure (e.g. switch, router, WAN link) for the whole zone. What you might be seeing are relatively-normal short, temporary outages, w

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Sten Carlsen
Hi Seen from here, I get a fast response to dig "labanquepostale.fr". Using your servers 1 - 4 shows only that they do not answer recursive queries, that is diferent from my first try but a good change. To have good resolution a nameserver must have access via: UDP from any local port to remote

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Oliver Henriot
nriot Sent: Saturday, February 27, 2010 7:52 PM To: bind-users@lists.isc.org Subject: SERVFAIL for some domains on some servers Dear list users, Maybe you can help me out here. Please bear with me if I'm stating the obvious, but my computing skills are scarce and I still have a lot to learn.

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Oliver Henriot
Dear Sten, I didn't give the domain I'm encountering problems with because it seemed irrelevant to me. As Stéphane Bortzmeyer says in his message of 01/03/10 11:44, it's best to give names, so here goes : x.fr is labanquepostale.fr "1" is imag.imag.fr "2" is brahma.imag.fr "3" is isis.imag.f

Re: SERVFAIL for some domains on some servers

2010-03-02 Thread Oliver Henriot
Cher Stéphane, Dans sa grande sagesse, Stephane Bortzmeyer a écrit, le 01/03/10 11:44 : On Sat, Feb 27, 2010 at 06:51:44PM +0100, Oliver Henriot wrote a message of 104 lines which said: but my computing skills are scarce and I still have a lot to learn. For instance, that you should alw

Re: SERVFAIL for some domains on some servers

2010-03-01 Thread Kevin Darcy
On 3/1/2010 5:44 AM, Stephane Bortzmeyer wrote: On Sat, Feb 27, 2010 at 06:51:44PM +0100, Oliver Henriot wrote a message of 104 lines which said: but my computing skills are scarce and I still have a lot to learn. For instance, that you should always use real names

Re: SERVFAIL for some domains on some servers

2010-03-01 Thread Stephane Bortzmeyer
On Sat, Feb 27, 2010 at 06:51:44PM +0100, Oliver Henriot wrote a message of 104 lines which said: > but my computing skills are scarce and I still have a lot to learn. For instance, that you should always use real names > - servers "2

RE: SERVFAIL for some domains on some servers

2010-03-01 Thread Cihan Subasi (Garanti Teknoloji)
-bounces+cihans=garanti.com...@lists.isc.org [mailto:bind-users-bounces+cihans=garanti.com...@lists.isc.org] On Behalf Of Oliver Henriot Sent: Saturday, February 27, 2010 7:52 PM To: bind-users@lists.isc.org Subject: SERVFAIL for some domains on some servers Dear list users, Maybe you can help me

Re: SERVFAIL for some domains on some servers

2010-02-27 Thread Sten Carlsen
Since you don't tell which domain is the problem and at least I get perfect answers for imag.fr (my only possible guess) from all listed servers, I can have no clue. Best guess is still some firewall doing something stupid. Oliver Henriot wrote: > Dear list users, > > Maybe you can help me out h

SERVFAIL for some domains on some servers

2010-02-27 Thread Oliver Henriot
Dear list users, Maybe you can help me out here. Please bear with me if I'm stating the obvious, but my computing skills are scarce and I still have a lot to learn. I have a series of name servers, some of which fail to resolve hosts in other domains whereas others don't have any problem. M