Re: [DNSSEC] SERVFAIL when resolving ".gov" through DLV

2009-05-06 Thread Mark Elkins
On Tue, 2009-05-05 at 13:45 -0500, Jeremy C. Reed wrote: > On Tue, 5 May 2009, Stephane Bortzmeyer wrote: > > > This is a BIND 9.5.1-P1, Debian package. It is configured to use ISC's > > DLV: > > https://www.isc.org/node/437 Question on using "trusted-keys": There are two public sources of "tru

Re: [DNSSEC] SERVFAIL when resolving ".gov" through DLV

2009-05-06 Thread Mark Andrews
In message <1241593258.1629.60.ca...@ilinux>, Mark Elkins writes: > On Tue, 2009-05-05 at 13:45 -0500, Jeremy C. Reed wrote: > > On Tue, 5 May 2009, Stephane Bortzmeyer wrote: > > > > > This is a BIND 9.5.1-P1, Debian package. It is configured to use ISC's > > > DLV: > > > > https://www.isc.org/

Re: tcp versus udp

2009-05-06 Thread Sam Wilson
In article , Danny Mayer wrote: > Peter Dambier wrote: > > Hello Martin, > > > > since a major outage at my provider, dtag.de or Deutsche Telecom AG, I have > > trouble > > with f.root-servers.net. Sometimes "dig ... +vc" does help me to see > > f.root-servers.net. > > > > The real problem i

Re: tcp versus udp

2009-05-06 Thread Sam Wilson
In article , Mark Elkins wrote: > One place that TCP may make sense - if you are involved in a registry > system and the process involves actually checking the information that > you are given, including nameservers (do they exist, do they serve that > zone - correctly?) - it may make a lot of s

Re: Bind Statistics questions

2009-05-06 Thread Nuno Ribeiro
Hi, Comments inline. Thanks in any advance. Best Regards, NR 2009/5/5 JINMEI Tatuya / 神明達哉 > At Tue, 5 May 2009 11:11:13 +0100, > Nuno Ribeiro wrote: > > > I have some doubts and I would like clarify them: > > - Bind ( version 9.5) provides lots of statistics information and > provides > >

child zone not forwarded

2009-05-06 Thread Cihan Subasi (Garanti Teknoloji)
Hi, I have a authorative zone xxx.com and its child as a FORWARD zone to a local dns...But child is not working, seems like the requests are not forwarded at all and locally ansvered...Why? thank you zone "child.xxx.com" { type forward; forward only; forwarders { 10.129

Re: child zone not forwarded

2009-05-06 Thread Ben Croswell
You have to make sure that you actually have NS delegations in xxx.com for child.xxx.com. That has bitten me on occasion. If you load the parent and the parent has no NS delegation for a child, it assumes the child doesn't really exist and ignores the zone forward. -- -Ben Croswell 2009/5/6 Ci

NXRRSET

2009-05-06 Thread Thilanka Samarasekera
Hello, I am running BIND version 9.2.3 on a Solaris 9 box. Every now and then I will see the following in my DNS cache: domain.com. 458 \- ;-$NXRRSET If I force a MX record lookup it does get the correct MX records for " domain.com". The explanation I have for "NXRRSET" is "Its th

Re: NXRRSET

2009-05-06 Thread Chris Buxton
On May 6, 2009, at 7:49 AM, Thilanka Samarasekera wrote: Hello, I am running BIND version 9.2.3 on a Solaris 9 box. Every now and then I will see the following in my DNS cache: domain.com. 458 \- ;-$NXRRSET If I force a MX record lookup it does get the correct MX records for

Re: tcp versus udp

2009-05-06 Thread Barry Margolin
In article , Sam Wilson wrote: > In article , Mark Elkins > wrote: > > > One place that TCP may make sense - if you are involved in a registry > > system and the process involves actually checking the information that > > you are given, including nameservers (do they exist, do they serve that

Re: tcp versus udp

2009-05-06 Thread Mark Andrews
In message , Barry Margolin writes: > In article , > Sam Wilson wrote: > > > In article , Mark Elkins > > wrote: > > > > > One place that TCP may make sense - if you are involved in a registry > > > system and the process involves actually checking the information that > > > you are given,