problem resolving domains with bind9.5.0-P2

2009-09-09 Thread Matthias Brehm
Dear all, we use bind9.5.0-P2 for the internet dns server. Sometimes we get no response for some domains, like this: ; <<>> DiG 9.3.2 <<>> cluster3.eu.messagelabs.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34869 ;; flags: qr rd

Re: problem resolving domains with bind9.5.0-P2

2009-09-09 Thread Jeremy C. Reed
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34869 While it doesn't help you with your 9.5.0-P2 version, BIND 9.6.1 and newer provide a new query-errors logging category that can be helpful by logging details about various errors. ___ bind-us

Re: problem resolving domains with bind9.5.0-P2

2009-09-09 Thread Dave Sparro
Based on the answer size for the query you presented, I'd focus on looking for an upstream filter/device that is blocking answers that are > 512 bytes. On Wed, Sep 9, 2009 at 5:34 AM, Matthias Brehm wrote: > Dear all, > > > > we use bind9.5.0-P2 for the internet dns server. > > Sometimes we get

Re: root and in-addr.arpa zone transfers

2009-09-09 Thread Rich Goodson
Michael, Here's a snippet from my named.conf which does what you're talking about. I use this in our recursive resolvers, but for authoritative servers, I find the hints file to be somewhat more robust. FYI, I stole this originally from the default FreeBSD named.conf file that got pushed o

Re: root and in-addr.arpa zone transfers

2009-09-09 Thread Rick Dicaire
On Wed, Sep 9, 2009 at 10:51 AM, Rich Goodson wrote: > zone "." { >        type slave; >        file "slave/root.slave"; >        masters { >                192.33.4.12;    // C.ROOT-SERVERS.NET. >                192.112.36.4;   // G.ROOT-SERVERS.NET. >                193.0.14.129;   // K.ROOT-SER

one DNS names to multiple IP Addresses(Round Robin DNS)

2009-09-09 Thread Balanagaraju Munukutla
Hi Anybody can help to explain the side effect of configuring the DNS name to multiple IP addresses(Round Robin DNS). Thanks & Regards Nagaraj ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: one DNS names to multiple IP Addresses(Round Robin DNS)

2009-09-09 Thread Sam Wilson
In article , Balanagaraju Munukutla <9ba...@sg.ibm.com> wrote: > Hi > > Anybody can help to explain the side effect of configuring the DNS name to > multiple IP addresses(Round Robin DNS). If you're planning to use it for load sharing, then the effect is very basic - requests get shared equal

9.2.2 vs 9.5.1

2009-09-09 Thread Riccardo Castellani
I'm using 3 dns servers with Bind bind-9.2.2.P3-9 Master A (domain1 + domain2) Slave B (domain1) Slave C (domain2) Now I'm migrating master A to Bind 9.5.1.dfsg.P3-1 together OS (Debian Lenny) so I'm interesting to know if there is some incompatible settings from/to slave servers. For example

Re: 9.2.2 vs 9.5.1

2009-09-09 Thread Kevin Darcy
Riccardo Castellani wrote: I'm using 3 dns servers with Bind bind-9.2.2.P3-9 Master A (domain1 + domain2) Slave B (domain1) Slave C (domain2) Now I'm migrating master A to Bind 9.5.1.dfsg.P3-1 together OS (Debian Lenny) so I'm interesting to know if there is some incompatible settings from/t

Bind 9.6.1-P1 ignoring listen-on directive

2009-09-09 Thread John Center
Hi, I'm testing Bind 9.6.1-P1 on Solaris 10 SPARC (64bit/Sun Studio 12.1) & I noticed this in the logs: Sep 9 13:15:31 ns3a/ns3a named[23042]: [ID 873579 daemon.info] listening on IPv4 interface lo0, 127.0.0.1#53 Sep 9 13:15:31 ns3a/ns3a named[23042]: [ID 873579 daemon.info] listening on I

Re: Bind 9.6.1-P1 ignoring listen-on directive

2009-09-09 Thread John Center
Of course, right after hitting enter on this message, I came across a message from last year about localhost mapping to all interfaces, not just 127.0.0.1. I created a "loopback" acl & used it instead that worked. Sorry for the noise. -John On 09/09/2009 03:04 PM, John Center wrote

Re: Bind 9.6.1-P1 ignoring listen-on directive

2009-09-09 Thread Kevin Darcy
Syntax. The parser is matching on "localhost" before it sees the negated elements. - Kevin John Center wrote: Hi, I'm testing Bind 9.6.1-P1 on Solaris 10 SPARC (64bit/Sun Studio 12.1) & I noticed this in the logs: Sep 9 13:15:31 ns3a/ns3a named[23042]: [ID 873579 daemon.info] listening on

salting NSEC3

2009-09-09 Thread Casey Deccio
Hello, I'm trying to better understand NSEC3. I have a signed zone for which I periodically resign expiring RRs with expiring RRSIGs using dnssec-signzone. When I do so, I use a different salt each time, which results in multiple salts being used in the zone. According to RFC 5155: This is h

Re: root and in-addr.arpa zone transfers

2009-09-09 Thread Matus UHLAR - fantomas
On 09.09.09 11:00, Rick Dicaire wrote: > On Wed, Sep 9, 2009 at 10:51 AM, Rich Goodson > wrote: > > zone "." { > >        type slave; > >        file "slave/root.slave"; > >        masters { > >                192.33.4.12;    // C.ROOT-SERVERS.NET. > >                192.112.36.4;   // G.ROOT-SER

Re: one DNS names to multiple IP Addresses(Round Robin DNS)

2009-09-09 Thread Joseph S D Yao
On Wed, Sep 09, 2009 at 05:47:34PM +0100, Sam Wilson wrote: > In article , > Balanagaraju Munukutla <9ba...@sg.ibm.com> wrote: > > Hi > > > > Anybody can help to explain the side effect of configuring the DNS name to > > multiple IP addresses(Round Robin DNS). > > If you're planning to use it f