Zone not showing us as authority

2008-11-16 Thread Steve Koon
We have moved a zone from UltraDNS to our DNS server 1 week ago and it is still not showing us as authority. Can anyone help me as to why this might be happening and how to fix it? I have included a dig below using a public dns server (4.2.2.1) and our dns server (69.25.129.117) where is shows no a

Re: ISC launches new website and mailing list manager

2008-11-16 Thread Mark Andrews
https://www.isc.org/software/bind/documentation which is in the bullet list as Documentation and external links (Reference manuals, FAQ, etc) on https://www.isc.org/software/bind In message <[EMAIL PROTECTED]>, Scott Haneda writ es: > Very nice, I am also cc'ing webmaster@ as per the email. > >

Secondary and TLD not updating

2008-11-16 Thread Jeff Justice
I recently moved our DNS from QuickDNS to BIND 9.5.0-P2 on OSX. Everything appears to be responding correctly when the server is queried, however our secondary is not updating (secondary is hosted by another provider) and the TLD's keep showing the old ns IP after a week. I deleted the zon

Re: nsupdate ACL based on a key AND ip-subnet

2008-11-16 Thread Chris Thompson
On Nov 14 2008, blrmaani wrote: I use BIND 9.2 on Linux. Horribly old. But I doubt whether anything has changed in the ACL logic since then. I was experimenting with a feature to allow dynamic updates based on BOTH the following: 1. Secret key ( TSIG ) 2. Subnet.

Re: Secondary and TLD not updating

2008-11-16 Thread Jeff Justice
Well, first part solved. I forgot to change the IP address of our nameserver at the registrar. Secondary is still not updating though. Jeff J. On Nov 16, 2008, at 3:16 PM, Jeff Justice wrote: I recently moved our DNS from QuickDNS to BIND 9.5.0-P2 on OSX. Everything appears to be respondi

Re: Secondary and TLD not updating

2008-11-16 Thread Bill Larson
Can you run "dig @MASTER_DNS_SERVER_ADDR YOUR_ZONE axfr" and get anything? Can you do this from the slave? If not, you have zone transfers disabled in your configuration. Your clip of your configuration would say that transfers are allowed but without seeing the whole thing we can't say

Re: nsupdate ACL based on a key AND ip-subnet

2008-11-16 Thread Mark Andrews
acl address_allow { 10/8; }; acl address_reject { !address_allow; any; }; allow-update { !reject; key ""; }; In message <[EMAIL PROTECTED]>, Chris Buxton writes: > On Nov 14, 2008, at 12:40 PM, blrmaani wrote: > > All, > > I use BIND 9.2 on Linux. I was expe

Re: nsupdate ACL based on a key AND ip-subnet

2008-11-16 Thread Chris Thompson
On Nov 14 2008, blrmaani wrote: I use BIND 9.2 on Linux. Horribly old. But I doubt whether anything has changed in the ACL logic since then. I was experimenting with a feature to allow dynamic updates based on BOTH the following: 1. Secret key ( TSIG ) 2. Subnet.

Re: nsupdate ACL based on a key AND ip-subnet

2008-11-16 Thread Jonathan Petersson
On Sun, Nov 16, 2008 at 1:28 PM, Chris Thompson <[EMAIL PROTECTED]> wrote: > On Nov 14 2008, blrmaani wrote: > > I use BIND 9.2 on Linux. >> > > Horribly old. But I doubt whether anything has changed in the ACL logic > since then. > > I was experimenting with a feature

Secondary and TLD not updating [Solved]

2008-11-16 Thread Jeff Justice
Seems there were two problems. Part one, my failure to update the IP address to our new NS at the registrar. Duh! Second, the serial number on the secondary was higher than the master. How it got that way, I'm not sure, but I suspect it is because I was using incremental and the seconda

Creating an SPF record

2008-11-16 Thread Jeff Justice
Can anyone point me to a good tutorial/explanation (preferably in newbie language of course) of how an SPF record works and how to create a correct one? Jeff J. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listi

Re: nsupdate ACL based on a key AND ip-subnet

2008-11-16 Thread Chris Buxton
On Nov 16, 2008, at 5:22 PM, Jonathan Petersson wrote: allow-update { !{!10/8;any;}; key update-key; }; Wouldn't this still permit any client on the 10/8 subnet to update the zones? No. It says: 1. Deny anyone who isn't in 10/8. 2. Allow anyone using this key. The first item in the list

Re: Creating an SPF record

2008-11-16 Thread ram
http://www.openspf.org/ They have a wizard you could use for SPF On Sun, 2008-11-16 at 20:45 -0600, Jeff Justice wrote: > Can anyone point me to a good tutorial/explanation (preferably in > newbie language of course) of how an SPF record works and how to > create a correct one? > > Jeff J.

Re: Creating an SPF record

2008-11-16 Thread James
Jeff Justice wrote: Can anyone point me to a good tutorial/explanation (preferably in newbie language of course) of how an SPF record works and how to create a correct one? http://www.openspf.org/ ___ bind-users mailing list bind-users@lists.isc.org