question on query process

2010-05-25 Thread Tech W.
Hello, I have a question about the query process of local dns cache to remote servers. When my local dns cache want to find the A record for a domain name, for example, www.example.com If the A record doesn't exist in its cache, but example.com's NS records are there. Thus the dns cache will que

Re: Understanding Total QPS from named stats

2010-05-25 Thread ivan jr sy
Jinmei - Thank you. As a follow up question, the stats "queries resulted in successful answer" - does this counter only cover queries that were answered with DNS data? how about DNS queries that where the responded with SERVFAIL, NXDOMAIN, timed-out due to delegation, dropped, or non-successful

BIND 9.7.1b1 is now available

2010-05-25 Thread Mark Andrews
BIND 9.7.1b1 is now available. BIND 9.7.1b1 is a beta version of the maintenance release for BIND 9.7. The managed-keys-directory option is known to be broken and a patch (namedconf.c.patch) is available. BIND 9.7.1b1 can be downloaded from ftp:/

Re: question on query process

2010-05-25 Thread Kevin Oberman
> Date: Tue, 25 May 2010 16:20:05 +0800 (CST) > From: "Tech W." > Sender: bind-users-bounces+oberman=es@lists.isc.org > > Hello, > > I have a question about the query process of local dns cache to remote > servers. When my local dns cache want to find the A record for a > domain name, for e

Re: Understanding Total QPS from named stats

2010-05-25 Thread JINMEI Tatuya / 神明達哉
At Tue, 25 May 2010 07:48:48 -0700 (PDT), ivan jr sy wrote: > As a follow up question, the stats "queries resulted in successful > answer" - does this counter only cover queries that were answered > with DNS data? See the BIND 9 ARM (http://www.isc.org/files/arm96.html#statistics_counters). To q

noob; looks like a caching issue?

2010-05-25 Thread Jay G. Scott
my setup: linux/redhat name servers bind-9.3.6-4.P1.el5_4.2 beginning yesterday i'm seeing something i haven't seen before. if i do this (for example): # dig weather.gov +short ;; connection timed out; no servers could be reached and then immediately do this: # dig weather.gov

[ghi...@hicks-net.net: Re: noob; looks like a caching issue?]--solved

2010-05-25 Thread Jay G. Scott
okay, just got the answer -- problem with the firewall. our firewall was doing a stateful inspection of dns packets, and botching it somehow. (i didn't hear the details.) the inspection was turned off, and now, the problem i talked about here AND another problem i was having both got fixed. luck

Another Question about SERVFAIL

2010-05-25 Thread b19141
One of our networking personnel is trying to access ftp.cisco.com and is unable to do so from Argonne. He has no problem from home, (Comcast). The Comcast DNS servers are 68.87.72.134 68.87.77.134 and report that they are running "Nominum Vantio 4.2.1.0" (about which I know ver

Re: Another Question about SERVFAIL

2010-05-25 Thread Kevin Darcy
Cool, it looks like Cisco's Distributed Directors for ftp.cisco.com are misconfigured as open recursors: % dig www.sun.com @sjce-ddir-ns.cisco.com ; <<>> DiG 9.3.0 <<>> www.sun.com @sjce-ddir-ns.cisco.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR

Re: Another Question about SERVFAIL

2010-05-25 Thread Mark Andrews
In message <20100525202455.06f0b40...@britaine.cis.anl.gov>, b19...@anl.gov wri tes: > One of our networking personnel is trying to access > > ftp.cisco.com > > and is unable to do so from Argonne. He has no problem from home, > (Comcast). The Comcast DNS servers are > > 68.87.72.13

Re: Another Question about SERVFAIL

2010-05-25 Thread Josh Kuo
I tried these myself, and I am still scratching my head on the results. First, I tried to look for just ftp.cisco.com's A record, and I got back the answer 198.133.219.241. $ dig @4.2.2.2 ftp.cisco.com. a ; <<>> DiG 9.4.3-P3 <<>> @4.2.2.2 ftp.cisco.com. a ; (1 server found) ;; global options: pr

synchronization between maste and slave no working

2010-05-25 Thread Yunfeng Xu
Hi, all I tried to add one A record on the master, but the slave did not get the new record. my slave settting is : zone "mydomain.com.cn" IN { type slave; file "mydomain.com.cn.zone"; masters {10.69.3.1;}; }; 10.69.3.1 is my master ip. bind version is bind-9.3.6-4.P1.el

Re: synchronization between maste and slave no working

2010-05-25 Thread Larry Brower
Yunfeng Xu wrote: Hi, all I tried to add one A record on the master, but the slave did not get the new record. my slave settting is : zone "mydomain.com.cn " IN { type slave; file "mydomain.com.cn.zone"; masters {10.69.3.1;}; }; 10.69.3.1 is m

Re: synchronization between maste and slave no working

2010-05-25 Thread Warren Kumari
On May 25, 2010, at 9:57 PM, Yunfeng Xu wrote: Hi, all I tried to add one A record on the master, but the slave did not get the new record. my slave settting is : zone "mydomain.com.cn" IN { type slave; file "mydomain.com.cn.zone"; masters {10.69.3.1;}; }; 10.69.3

Opinions about zone configuration

2010-05-25 Thread Gary Gladney
We have some people at my site who like a zone configured on our internal DNS server named .apple.com. The zone information would not be replicated to our external server but I suggested this is not a good idea basically because the domain name of apple.com and if for some reason this zone

Re: Opinions about zone configuration

2010-05-25 Thread Kevin Oberman
> From: Gary Gladney > Date: Tue, 25 May 2010 22:30:15 -0400 (EDT) > Sender: bind-users-bounces+oberman=es@lists.isc.org > > We have some people at my site who like a zone configured on our > internal DNS server named .apple.com. The zone information would > not be replicated to our exte

Re: Opinions about zone configuration

2010-05-25 Thread Barry Margolin
In article , Gary Gladney wrote: > We have some people at my site who like a zone configured on our internal DNS > server named .apple.com. The zone information would not be replicated to > our external server but I suggested this is not a good idea basically because > the domain name of