Re: Adding records to a domain I don't control for anyone who uses my nameserver

2009-03-03 Thread Stephane Bortzmeyer
On Mon, Mar 02, 2009 at 01:07:36PM -0500, Matthew Huff wrote a message of 62 lines which said: > Spoofing the dns zones are the only solution. It won't work when (if) DNSSEC will be deployed (and I assume the banking sector will be one of the first to adopt it)... Why not using your own XMP

Re: how to create a private "test." zone?

2009-03-03 Thread Rui Lopes
Mark Andrews wrote: > Mark Andrews writes: > >> In message <49ac5d59.1010...@ruilopes.com>, Rui Lopes writes: >> >>> Hi, >>> >>> Ben Bridges wrote: >>> >>> [...] You could try creating example.test as a forward zone in named.conf on your sun server and specifying plesk as t

Re: Adding records to a domain I don't control for anyone who uses my nameserver

2009-03-03 Thread Alan Clegg
>> Spoofing the dns zones are the only solution. > Why not using your own XMPP server, that you control and where you can > activate logging? Actually, in a previous lifetime, we discovered that the MOST effective way to deal with this was to write it into the policy and procedures manual and ma

how to create a private "test." zone?

2009-03-03 Thread Rui Lopes
Hello, I'm trying to create a private "test." zone for use in my local "testing lab". I've setup an recursive DNS server that will serve the "test." zone (in Sun host; see the network diagram bellow). The resolution of a domain in the "test" zone works as expected, eg: dig sun.test ; <<>> D

BIND 9 and BIND 8 issue

2009-03-03 Thread bradonkuo
Dear all bind users, I am new to manage 3 BIND 9 servers, lately, I got some complains about users cannot connect to some websites while they use our BIND 9 servers, this issue will be solved if they use other ISP's BIND 8 servers, one example is as below. Can we modify any configurations of

Re: DNS server can resolve some domains - BIND 9.4.2-P1

2009-03-03 Thread Sergio Moscoso
Thank u for you response, i'll install the version that u recommend me, any consideration to follow up?, also I've assume that the problem that i had was for the general: error: socket: too many open but finally i've found that the domains that my server cannot resolve was for and ACL Bogon, t

Re: Change my primary DNS server safely...

2009-03-03 Thread Thomas Manson
Thanks Jeff and Robert, Robert's plan seems to be the best way to do the thing so I'll follow that plan ;) Thanks again, Thomas. On Fri, Feb 27, 2009 at 17:39, Jeff Lightner wrote: > In your case it sounds like you're going to have two external IPs.  If so I'd > leave the Apache server with B

Re: BIND 9 and BIND 8 issue

2009-03-03 Thread Stefan Schmidt
On Fri, Feb 27, 2009 at 11:39:40AM +0800, bradonkuo wrote: > Dear all bind users, Hi Brandon, > I am new to manage 3 BIND 9 servers, lately, I got some complains about users > cannot connect to > some websites while they use our BIND 9 servers, this issue will be solved if > they use other > I

BIND logging in a separate node

2009-03-03 Thread Prabhat Rana
Hello all, I'm running BIND 9.5.0-P1 on a Solaris 10. My question is I think a combination of BIND logging and the syslog in Solaris. Below is the logging as in the named.conf logging { channel my_syslog { syslog daemon; severity info; };

RE: BIND 9 and BIND 8 issue

2009-03-03 Thread Ben Bridges
Since you're not getting any response from your server (I'm assumimg dns.tp.edu.tw is your server), you might want to check and make sure there are no firewalls or ACL's blocking dns requests to your name servers. From: bind-users-boun...@lists.isc.or

Unable to resolve visitriverside.com

2009-03-03 Thread Scott Baker
I am unable to resolve visitriverside.com with my Bind 9 server. I don't have any problems resolving other domains, it just appears to be this host. http://www.perturb.org/code/dns-tool.php?host=visitriverside.com&type=A I can't resolve the name servers for this domain either. If I check my na

Re: BIND logging in a separate node

2009-03-03 Thread Jeremy C. Reed
> What I'm trying to do is log /var/bind/named.stats in a separate node. Note that file name is commonly used for the "rndc stats" statistics-file. It may be a good idea to use a different name so you don't cause confusion or conflict. > So my question is, can I specify the node IP address and

Re: BIND logging in a separate node

2009-03-03 Thread Prabhat Rana
Jeremy, Thanks for the response. Yes I need to change the file name to avoid confusion. Yes I can forward the syslog to a different node my making changes in the syslogger. But I'm not sure how to make such changes so that only named/bind related syslog will be forwarded and the rest will conti

RE: BIND logging in a separate node

2009-03-03 Thread Ben Bridges
Something like the following might work. BIND: ... channel my_syslog { syslog local6; severity info; }; ... syslog.conf: ... local6.* @remote-syslog-server // Forward all messages with local6 facility t

Re: Unable to resolve visitriverside.com

2009-03-03 Thread Stephane Bortzmeyer
On Tue, Mar 03, 2009 at 08:58:28AM -0800, Scott Baker wrote a message of 18 lines which said: > I am unable to resolve visitriverside.com with my Bind 9 server. I > don't have any problems resolving other domains, it just appears to > be this host. visitriverside.com is highly broken: it has

Re: BIND 9 and BIND 8 issue

2009-03-03 Thread Mark Andrews
In message <397019c15b5a45899bb02b1b212e1...@bradon>, "bradonkuo" writes: > Dear all bind users, > > I am new to manage 3 BIND 9 servers, lately, I got some complains about = > users cannot connect to=20 > > some websites while they use our BIND 9 servers, this issue will be = > solved if they u

Re: how to create a private "test." zone?

2009-03-03 Thread Mark Andrews
In message <49ace778.6040...@ruilopes.com>, Rui Lopes writes: > Mark Andrews wrote: > > Mark Andrews writes: > > > >> In message <49ac5d59.1010...@ruilopes.com>, Rui Lopes writes: > >> > >>> Hi, > >>> > >>> Ben Bridges wrote: > >>> > >>> [...] > You could try creating example.t

Re: named with DLZ

2009-03-03 Thread Josh Miller
Jeff Lightner wrote: I have been talked with getting named with DLZ support on Red Hat 5.2 Enterprise. I have never worked on Red Hat or with RPM, can someone point me to the rpm I need? Any other basic pointers? I was thinking to just build it out myself, but if there is a confident sta

RE: named with DLZ

2009-03-03 Thread Jeff Lightner
Jeff Lightner did NOT write that. Jeff Lightner has worked with RHEL for quite some time and responded to original author regarding packages available on RHEL 5.2. -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Josh Mill

Re: how to create a private "test." zone?

2009-03-03 Thread Kevin Darcy
Rui Lopes wrote: Mark Andrews wrote: Mark Andrews writes: In message <49ac5d59.1010...@ruilopes.com>, Rui Lopes writes: Hi, Ben Bridges wrote: [...] You could try creating example.test as a forward zone in named.conf on your sun server and specifying pl

Re: BIND 9 and BIND 8 issue

2009-03-03 Thread Kevin Darcy
hangan.org.tw is delegated to www.hangan.org.tw and mail.hangan.org.tw, the glue records that are provided resolve both of those names to the address 211.21.92.25. I believe BIND 8 considers a glue record to be "good enough" to serve as an answer, so it returns the glue record. BIND 9, however,

Re: [OT] Is it possible to set a ddns hostname to access a name-based virtual host?

2009-03-03 Thread Barry Margolin
In article , Michael Milligan wrote: > Danny Mayer wrote: > > Michael Milligan wrote: > >> Just being more general. A URL is a HTTP URI... Google has plenty of > >> explanations. > > > > That's nonsense. A URL was never just an HTTP URI. It's one example of > > one but there have always been m

Re: how to create a private "test." zone?

2009-03-03 Thread Barry Margolin
In article , Rui Lopes wrote: > Why isn't bind just following the "example.test. NS plesk.test." RR that > is inside the "test." zone without removing the forwarders? Because the point of configuring forwarders is to use them INSTEAD of following NS records. Forwarders are generally used when