compile 9.6.0p1 etc empty

2009-01-16 Thread GanGan
when I compile bind 9.6.0p1 I have nothing in etc mkdir /test . /configure - prefix = test make make install cd /test/etc is empty an explanation? I forget something? thanks in advance -- - GanGan - www.system-linux.eu ("> /\ V_V ___ bind-users

Re: DNS lookups getting blocked , cant trace where is the block

2009-01-16 Thread Stephane Bortzmeyer
On Fri, Jan 16, 2009 at 11:44:06AM +0530, ram wrote a message of 44 lines which said: > [r...@smtpout1 ~]# dig @localhost bsnl.in > ; <<>> DiG 9.3.3rc2 <<>> @localhost bsnl.in > ; (1 server found) > ;; global options: printcmd > ;; connection timed out; no servers could be reached Since you

Reverse DNS with delegation

2009-01-16 Thread Jérémie Grauer
Hello, I'm encountering a very strange behavior with our dns server since we moved to an other data center with *reverse request only.* Before, we had authority on a subnet xxx.yyy.zzz.0/24 but now our authority is only for the network 94.103.140.0/28... our provider has updated its upstream

Re: Reverse DNS with delegation

2009-01-16 Thread Stephane Bortzmeyer
On Fri, Jan 16, 2009 at 12:27:54PM +0100, Jérémie Grauer wrote a message of 282 lines which said: > I'm encountering a very strange behavior with our dns server No, it is dig behavior. You never indicate the Resource Record type so dig picks "A" (IPv4 address). If you indicate "ANY" or "PTR

Re: SERVFAIL issues

2009-01-16 Thread Fr34k
Hello, Has the "max-cache-size" setting in named.conf been considered? If not, note that in early releases of 9.5.x max-cache-size is 32M by default instead of unlimited as in 9.4.x >From the CHANGES file with the bind-9.5.0-P2 source: ""max-cache-size" defaults to 32M" Using: max-cache-size 0

Re: Multiple PTR records

2009-01-16 Thread Matus UHLAR - fantomas
> On Jan 15, 2009, at 6:33 AM, Halassy Zoltán wrote: > >I don't want to break forward <-> reverse mapping. > > > >www.example.com. A 1.2.3.4 > >mail.example.com. A 1.2.3.4 > >4.3.2.1.in-addr.arpa. PTR www.example.com. > >4.3.2.1.in-addr.arpa. PTR mail.example.com. > >Would this one break anything

Re: compile 9.6.0p1 etc empty

2009-01-16 Thread Jeremy C. Reed
On Fri, 16 Jan 2009, GanGan wrote: > when I compile bind 9.6.0p1 I have nothing in etc BIND doesn't install a configuration file. ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Unable to perform nslookup of local domains

2009-01-16 Thread Mark A. Moore
We are having a problem doing an nslookup locally from our BIND DNS Servers (Master & Secondary) for our own domains. However we can run nslookup on other domains (ie yahoo, google) with no problems. Even if we stop iptables we still get the same error. We see no errors when BIND starts. Below is

dns query process

2009-01-16 Thread jittinan suwanrueangsri
Hi all This is result of tracing www.google.com by dig 9.5.0 ; <<>> DiG 9.5.0-P1 <<>> +trace www.google.com ;; global options: printcmd . 9398IN NS E.ROOT-SERVERS.NET. . 9398IN NS G.ROOT-SERVERS.NET. .

Re: dns query process

2009-01-16 Thread Robert Stucke
Since they may have cached the NS records at any time, it's just a maximum of 345600. Once a device follows the delegation from the .com authority and queries ns1.google.com directly, the NS records in the cache that were learned from the .com level servers are overwritten with what was learned fro

DNS spoofing

2009-01-16 Thread Rob Z
Hello, we need to deliberately point some of our DNS clients to a host with a different IP. Basically, when a client on a certain subnet asks for a host.somedomain.comthey should get an address for host.mydomain.com. All other DNS information for somedomain.com must be valid for all of my clients.

Re: Multiple PTR records

2009-01-16 Thread Chris Buxton
On Jan 16, 2009, at 7:13 AM, Matus UHLAR - fantomas wrote: Actually, it doesn't matter which PTR record will remain, unless there will be any SPF record pointing to it. That is a common misconception. I have seen mail bounced because of a mismatch between SMTP greeting name and PTR record n

Re: Unable to perform nslookup of local domains

2009-01-16 Thread Josh Kuo
Looks like your DNS servers 192.243.130.42 and 192.243.160.18 are not responding to DNS queries (thus the SERFAIL message). When trying this from my house, this is what I get: First, get the name servers for your domain osmre.gov from the DNS server at 4.2.2.2: $ dig @4.2.2.2 osmre.gov ns ; <<>

Re: DNS spoofing

2009-01-16 Thread Josh Kuo
One of the ways you can try is to setup a zone for somedomain.com on your DNS server, assuming your users will query your DNS servers for any outbound recursive lookups. Just create the entries you want in somedomain.com, and your users will get those answers. If your main DNS server is different

Re: DNS spoofing

2009-01-16 Thread Ben Croswell
He states in his messasge that he only wants to change one host in the domain and that all other information for the domain needs to remain intact. If he loads or forwards the domain on his servers nothing other than what he loads will be resolved. -- -Ben Croswell On Fri, Jan 16, 2009 at 1:24 P

Re: Multiple PTR records

2009-01-16 Thread Matus UHLAR - fantomas
> On Jan 16, 2009, at 7:13 AM, Matus UHLAR - fantomas wrote: > >Actually, it doesn't matter which PTR record will remain, unless there > >will be any SPF record pointing to it. On 16.01.09 10:12, Chris Buxton wrote: > That is a common misconception. No, it is not. > I have seen mail bounced beca

Re: DNS spoofing

2009-01-16 Thread Josh Kuo
Oops, I missed that part. Sorry, yes, as Ben pointed out, my proposed solution will take over *ALL* records in somedomain.com, anything you don't list in your somedomain.com will NOT be resolved. ___ bind-users mailing list bind-users@lists.isc.org https:

Re: DNS spoofing

2009-01-16 Thread Gregory Hicks
> Date: Fri, 16 Jan 2009 10:47:27 -0800 > Subject: Re: DNS spoofing > From: Josh Kuo > To: Ben Croswell > Cc: bind-users@lists.isc.org > > Oops, I missed that part. Sorry, yes, as Ben pointed out, my proposed > solution will take over *ALL* records in somedomain.com, anything you > don't list i

Re: Multiple PTR records

2009-01-16 Thread sthaug
> > I have seen mail bounced because of a > > mismatch between SMTP greeting name and PTR record name. It's not as > > common as the simple "is there any PTR record" check, but it does > > happen. > > - it's clear violation of RFC 5321 (and former 2821, 821) - server MUST NOT > reject conn

Re: Multiple PTR records

2009-01-16 Thread David Ford
I see it all the time on both sides of the fence. I personally support it because even though I sometimes am impacted by it, the amount of actual spam I filter out because of this is significant. >> - it's clear violation of RFC 5321 (and former 2821, 821) - server MUST NOT >> reject connection

RE: SERVFAIL issues

2009-01-16 Thread Frank Bulk - iName.com
Yes, I read that last night before posting. I changed it to "256M". Is there a way using rndc to see if that "took"? And how do I see how much of the cache has been used? I don't want to provision more than necessary. This server acts as a secondary DNS entry for about 6000 broadband custome

version

2009-01-16 Thread The Test Case
Hello, How can I get the version of named? -Mike ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: version

2009-01-16 Thread Evan Hunt
> How can I get the version of named? This is cryptic. For "how can I get named to tell me its version", $ named -v Or if you prefer, $ dig +short @localhost txt chaos version.bind For "how can I get the *latest* version of named", http://www.isc.org/download/softwar

Re: version

2009-01-16 Thread Robert Stucke
And if you want know the version of a remote name server that you don't own, http://code.google.com/p/fpdns/ On Fri, Jan 16, 2009 at 7:41 PM, Evan Hunt wrote: > > > How can I get the version of named? > > This is cryptic. > > For "how can I get named to tell me its version", > >$ name

Re: version

2009-01-16 Thread The Test Case
On Fri, 16 Jan 2009, Robert Stucke wrote: And if you want know the version of a remote name server that you don't own, http://code.google.com/p/fpdns/ That is very cool. Thank you. -Mike ___ bind-users mailing list bind-users@lists.isc.org https:

Re: SERVFAIL issues

2009-01-16 Thread Thomas Schulz
In article , Frank Bulk - iName.com wrote: >Yes, I read that last night before posting. I changed it to "256M". Is >there a way using rndc to see if that "took"? Note that 9.5.1 reverts the limit to unlimited AND fixes the bug causing the failure. You should not be running 9.5.0 at all. > >

Re: Zone Transfer Problem - Keep getting not authoritative

2009-01-16 Thread Barry Margolin
In article , "Mark A. Moore" wrote: > We are having some issues with zone transfers b/t our Master & Slave. We > are using Redhat Linux 5.2 with Bind 9.3.4. In our slave server log, we > get "not authoritative" for all zones configured. How do we fix the not > authoritative issue? Any help wou

RE: SERVFAIL issues

2009-01-16 Thread Frank Bulk
Thanks for the info -- is there a way that there can be feature parity, at least in terms of stats reported, between ARM and "rndc stats"? Kind regards, Frank -Original Message- From: JINMEI Tatuya / 神明達哉 [mailto:jinmei_tat...@isc.org] Sent: Friday, January 16, 2009 4:21 PM To: frnk...@