Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2019-04-27 Thread Havard Eidnes via bind-users
>> I think there must be something wrong with the log message. It >> seems excessive to log this message about once per query, >> especially since it seems to (misleadingly?) indicate an error >> condition? I'm not intimate enough with the code to suggest what >> the exact problem is, though. >>

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2019-04-26 Thread Mukund Sivaraman
On Fri, Apr 26, 2019 at 10:08:43PM +0200, Havard Eidnes via bind-users wrote: > > (2) We'll look at tweaking this log message, but if you want to just not > > see this log message, just recompile after removing the offending CTRACE > > statement from bin/named/query.c. In fact, this code is normall

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2019-04-26 Thread Havard Eidnes via bind-users
Hi, I'm resurrecting an old thread: >> Is there a workaround/configuration-directive not to log every request with >> this "error"? One way would be using BIND 9.9.9-P2 (because this code was >> added in 9.10.x...), but I would prefer 9.10.x. > > (1) Don't use regular BIND 9.9 for RPZ. For using

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-09-06 Thread Tom
Hi Mukund Many thanks for your hint. In fact named was compiled with "--enable-querytrace". After recompiling 9.10.4-P2 without querytrace, the log looks good. Kind regards, Tom On 09/06/2016 09:32 AM, Mukund Sivaraman wrote: Hi Tom On Tue, Sep 06, 2016 at 07:37:50AM +0200, Tom wrote: I

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-09-06 Thread Mukund Sivaraman
Hi Tom On Tue, Sep 06, 2016 at 07:37:50AM +0200, Tom wrote: > Is there a workaround/configuration-directive not to log every request with > this "error"? One way would be using BIND 9.9.9-P2 (because this code was > added in 9.10.x...), but I would prefer 9.10.x. (1) Don't use regular BIND 9.9 fo

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-09-05 Thread Tom
Is there a workaround/configuration-directive not to log every request with this "error"? One way would be using BIND 9.9.9-P2 (because this code was added in 9.10.x...), but I would prefer 9.10.x. Kind regards, Tom On 08/31/2016 03:05 PM, Tony Finch wrote: Tom wrote: I have a bind-setup

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-08-31 Thread Tony Finch
Tom wrote: > > I have a bind-setup with activated response-policy-zones. For *each* > client-forward-query, which has a valid dns-response, I got an error in the > client-log (for NXDOMAIN-Reponses, I didn't have such errors... ex. "dig > @nameserver aasledkfjasdlkfjsadlf.asdlfkjsadlfkjasdjflk"):

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-08-29 Thread Tom
Sorry...wrong post. After a little bit more testing, the errors are still appearing. The masterfile-format didn't solved the errors Thank you, Tom On 08/30/2016 08:20 AM, Tom wrote: Hi list After some more troubleshooting, I was able to locate the problem: - One Spamhaus-Zone-File (dbl

Re: Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-08-29 Thread Tom
Hi list After some more troubleshooting, I was able to locate the problem: - One Spamhaus-Zone-File (dbl.rpz.spamhaus.org, ca. 180MB in "masterfile-format text;") is loaded correctly, but if this zone is loaded, then I got the mentioned errors. - Configuring the "masterfile-format map;" for thi

Latest BIND: Error "rpz_rewrite_name: mismatched summary data; continuing"

2016-08-29 Thread Tom
Hi list Using self-compiled latest bind (9.10.4-P2): I have a bind-setup with activated response-policy-zones. For *each* client-forward-query, which has a valid dns-response, I got an error in the client-log (for NXDOMAIN-Reponses, I didn't have such errors... ex. "dig @nameserver aasledkfja

Re: bind error

2011-10-10 Thread Mark Andrews
It's a known issue and the fix is part of the next maintence release. 3154. [bug] Attempting to print an empty rdataset could trigger an assert. [RT #25452] -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

bind error

2011-10-10 Thread Mosharaf
Dear Concern, I have running bind 9.7.3 on debian. I also running dump.db. While I am running dump.db for bind log it give error like that critical: masterdump.c:419: REQUIRE(result == 0) failed, back trace 11-Oct-2011 04:32:15.258 general: critical: #0 0x4259af in ?? 11-Oct-2011 04:32:15.2

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-08 Thread Mark Andrews
Amit Sood wrote: > > > There is no issue I have checked it. > > > > Regards > > Amit Sood > > > > - Original Message - > > *From:* kshitij mali > > *To:* Amit Sood > > *Sent:* Monday, June 06, 2011 4:46 PM > > *Subject:*

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-08 Thread kshitij mali
SIZE rcvd: 49 Please some one from the list will help me troubleshoot from my server Regards, Kshitij On Mon, Jun 6, 2011 at 5:35 PM, Amit Sood wrote: > There is no issue I have checked it. > > Regards > Amit Sood > > - Original Message - > *From:* kshitij m

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-06 Thread /dev/rob0
Please do not top-post your replies, and trim out irrelevant quotes. Thank you. On Mon, Jun 06, 2011 at 02:33:21PM +0530, kshitij mali wrote: > There are 2 more other domain giving same error below are the domain > > cherryhill.com.au > interfreightinternational.com.au > > will u please help me

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-06 Thread kshitij mali
gt; From: Mark Andrews > Date: Mon, Jun 6, 2011 at 1:19 PM > Subject: Re: BIND error: opcode: QUERY, status: SERVFAIL > To: kshitij mali > Cc: Leonard Mills , bind-us...@isc.org > > > > In message , kshitij > mali writes: > > Hi all , > > > > Please any o

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-06 Thread Mark Andrews
In message , kshitij mali writes: > Hi all , > > Please any one help me out to check bind caching resolver is working fine or > else can any one tell me how to improve the performance of DNS reslover > > Regards, > Kshitij goelexports.com depends on ns4.webcomindia.net and ns5.webcomindia.net

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-06 Thread kshitij mali
Hi all , Please any one help me out to check bind caching resolver is working fine or else can any one tell me how to improve the performance of DNS reslover Regards, Kshitij On Sun, Jun 5, 2011 at 8:16 PM, kshitij mali wrote: > But HOW can we prove this with technical details > > > Regards, >

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread Mark Andrews
goelexports is served by: goelexports.com.86400 IN NS ns5.webcomindia.net. goelexports.com.86400 IN NS ns4.webcomindia.net. ns4.webcomindia.net and ns5.webcomindia.net are served by: webcomindia.net.172800 IN NS ns9.hostsearchindia.com.

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread Lyle Giese
SERVFAIL means there was a failure to properly resolve something. Not necessarily a BIND error. Do this and analyze the output: dig +trace goelexports.com Also you are using an old version of DIG. You may want to consider updating BIND. It also appears that you are running a recursive

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread kshitij mali
Date: *Fri, 3 Jun 2011 17:50:24 +0530 > *To: * > *Cc: *; < > bind-us...@isc.org> > *Subject: *Re: BIND error: opcode: QUERY, status: SERVFAIL > > Hi All , > > Please find the dig details result below > > [root@D1OKH680RL ~]# dig goelexports.com > ; <<>&g

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread Doni Mediono
i, 3 Jun 2011 17:50:24 To: Cc: ; Subject: Re: BIND error: opcode: QUERY, status: SERVFAIL Hi All , Please find the dig details result below [root@D1OKH680RL ~]# dig goelexports.com ; <<>> DiG 9.2.4 <<>> goelexports.com ;; global options: printcmd ;; connection ti

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread kshitij mali
configuration of >> the domain into your bind server ? >> Sent from my BlackBerry® >> powered by Sinyal Kuat INDOSAT >> >> -Original Message- >> From: kshitij mali >> Sender: bind-users-bounces+mediono=gmail@lists.isc.org >> Date: Fri, 3 Jun 2011

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread kshitij mali
u place your configuration of the > domain into your bind server ? > Sent from my BlackBerry® > powered by Sinyal Kuat INDOSAT > > -Original Message- > From: kshitij mali > Sender: bind-users-bounces+mediono=gmail@lists.isc.org > Date: Fri, 3 Jun 2011 12:34:58 > To:

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread doni
Jun 2011 12:34:58 To: Mark Andrews Cc: Subject: Re: BIND error: opcode: QUERY, status: SERVFAIL ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users ___ bind

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-06-03 Thread kshitij mali
Hello ALL Please help me toubleshoot this bind ISSUE I am facing intermetent problem with some domains == [root@D1OKH680RL ~]# dig goelexports.com ; <<>> DiG 9.2.4 <<>> goelexports.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QU

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-04-28 Thread kshitij mali
goelexports.com is delegated to the following nameservers which do not exist. kshitij : may i know how you checked the delegation for the above domain Regards, Kshitij On Wed, Apr 27, 2011 at 7:17 PM, Mark Andrews wrote: > > In message , kshitij > mali w > rites: > > Hi everbody , > > > > w

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-04-27 Thread Mark Andrews
In message <4db829e3.5010...@mailclub.fr>, Laurent Bauer writes: > On 27/04/2011 15:03, Karl Auer wrote: > > On Wed, 2011-04-27 at 17:45 +0530, kshitij mali wrote: > >> we are unable to lookup the domain "goelexports.com" > >> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63082 > > > > A t

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-04-27 Thread Laurent Bauer
On 27/04/2011 15:03, Karl Auer wrote: > On Wed, 2011-04-27 at 17:45 +0530, kshitij mali wrote: >> we are unable to lookup the domain "goelexports.com" >> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63082 > > A trace shows the likely problem: > > dns2-rz-ap:[log]$ dig +trace goelexports.c

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-04-27 Thread Mark Andrews
In message , kshitij mali w rites: > Hi everbody , > > we are unable to lookup the domain "goelexports.com" goelexports.com is delegated to the following nameservers which do not exist. Mark goelexports.com.172800 IN NS ns.hostsearchindia.com. goelexports.com.172800

Re: BIND error: opcode: QUERY, status: SERVFAIL

2011-04-27 Thread Karl Auer
On Wed, 2011-04-27 at 17:45 +0530, kshitij mali wrote: > we are unable to lookup the domain "goelexports.com" > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63082 A trace shows the likely problem: dns2-rz-ap:[log]$ dig +trace goelexports.com [...] ;; Received 505 bytes from 192.58.128.30#

BIND error: opcode: QUERY, status: SERVFAIL

2011-04-27 Thread kshitij mali
Hi everbody , we are unable to lookup the domain "goelexports.com" [root@D1OKH680RL ~]# dig goelexports.com ; <<>> DiG 9.2.4 <<>> goelexports.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63082 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHO

Re: Bind error messages (DNSKEY)

2010-07-10 Thread Evan Hunt
> I have recently started getting the following pair of error messages from > bind: > [...] > Anyone know what these mean, and what I am suposed to do? In named.conf, you have a trusted-keys statement containing a key for the .bg domain, and it doesn't match the key that your resolver fetched from

Bind error messages (DNSKEY)

2010-07-10 Thread clemens
I have recently started getting the following pair of error messages from bind: bg DNSKEY: please check the 'trusted-keys' for 'bg' in named.conf.: 6 Time(s) bg DNSKEY: unable to find a DNSKEY which verifies the DNSKEY RRset and also matches one of specified trusted-keys for 'bg'

Re: Bind error when switching from NSEC to NSEC3

2009-08-13 Thread Evan Hunt
> dnssec-signzone incorrectly leaves NSEC records in a zone when "re-using" > the old signed zone when changing from NSEC to NSEC3. The resulting zone > file will contain both NSEC and NSEC3 records. Yes. Moreover, it does the same thing when changing from NSEC3 to NSEC, which you can do by accid

Bind error when switching from NSEC to NSEC3

2009-08-13 Thread Paul Wouters
Hi, dnssec-signzone incorrectly leaves NSEC records in a zone when "re-using" the old signed zone when changing from NSEC to NSEC3. The resulting zone file will contain both NSEC and NSEC3 records. Paul ___ bind-users mailing list bind-users@lists.isc