Bind 9.7 and using multiple forwarders

2010-07-28 Thread Dangl, Thomas
Hello, when we have a zone with type forward and a forwarders list with multiple entries, which strategy is used by Bind9.7? I found some information in the DNS and Bind book by O Reilly and the identical statement on the Internet and FAQs saying There was a Bind8.2.3 that had applied an intellig

Three NameServer DOSing my

2010-07-28 Thread Michelle Konzack
Hello Experts, my primary NameServer is hit by more then 600.000 requests per day coming mainly from three NameServers: [ '/var/log/named.log' ] Jul 28 11:18:17 samba3 named[26425]: 28-Jul-2010 11:18:17.318 security: info: client 194.25.2.173#3445

Re: Bind 9.7 and using multiple forwarders

2010-07-28 Thread Cathy Almond
No longer true. named picks the 'nearest' one, based on SRTT. Non-responding forwarders are penalised via a very large SRTT. https://lists.isc.org/mailman/htdig/bind-users/2010-April/079556.html Dangl, Thomas wrote: > Hello, > > when we have a zone with type forward and a forwarders list with

Re: Three NameServer DOSing my

2010-07-28 Thread Dave Sparro
On 7/28/2010 5:53 AM, Michelle Konzack wrote: Hello Experts, my primary NameServer is hit by more then 600.000 requests per day coming mainly from three NameServers: [ '/var/log/named.log' ] Jul 28 11:18:17 samba3 named[26425]: 28-Jul-2010 11:18:

Question on query-source, transfer-source, notify-source

2010-07-28 Thread Barry Finkel
I have a BIND config question. First some history. My initial two DNS servers (A and B) had three NICs and three IP addresses. Then I installed two additional servers (C and D), each with one NIC; each server has one base address and one DNS address. All four servers run Solaris. When I install

Re: Three NameServer DOSing my

2010-07-28 Thread Michelle Konzack
Hello Dave Sparro, Am 2010-07-28 10:11:52, hacktest Du folgendes herunter: > That host name does show up in your e-mail headers. That may > be why there are some people curious about that host name. But why do they query my server 3 times per second? Currently I have more then 600.000 DNS requ

Re: Bind Clustering

2010-07-28 Thread Gordon A. Lang
This reply is a few months delayed, but this issue is still very important to me, and I'm hoping you can take a few minutes to help out. I finally took some time to read through the code, and unfortunately I was unable to identify where forward target(s) are obtained in the update forwarding acti

Dynamically add zones

2010-07-28 Thread Mike Flathers
Hey guys, It looks like bind 10 will address this, but I might as well check here. Is there a patch for bind 9 to add new zones dynamically without having to run rndc reconfig? The server stops answering queries when reconfig is loading in the new config as the config grows this timeout increase

Re: Dynamically add zones

2010-07-28 Thread Alan Clegg
On 7/28/2010 10:41 PM, Mike Flathers wrote: > Is there a patch for bind 9 to add new zones dynamically without > having to run rndc reconfig? The server stops answering queries when > reconfig is loading in the new config as the config grows this timeout > increases. I haven't hit the source cod

Re: Question on query-source, transfer-source, notify-source

2010-07-28 Thread Chris Buxton
Why do you need 3 DNS interfaces on one box? Why do you need the extra interface? Perhaps you could simplify, or split the three addresses across multiple hosts, or even run multiple instances of named on each box. Regards, Chris On 7/28/10, Barry Finkel wrote: > I have a BIND config question.

Re: Bind Clustering

2010-07-28 Thread Chris Buxton
Updates are always forwarded to the zone masters, as configured in the zone statement itself. And yes, the update is only forwarded (successfully) once. BIND assumes that each zone has exactly one "primary master". That's why updates are forwarded only once. If you want a true multi-master setup,