Re: "forward after" option

2010-11-12 Thread Marc Lampo
>We were looking about the forward configuration on BIND and we found that there is the ?forward only? and ?forward first? option. > If our partner configure our external zone on their DNS and configured just this specific entry on the zone and configure the forward of the zone > to

Re: named won't restart

2010-11-12 Thread Stacey Jonathan Marshall
What does /etc/init.d/named do when you run it with the restart option? That file is not part of the BIND distribution and is likely a shell script so take a look and see what's its attempting to do. I wonder if its running 'rndc stop' and not waiting for the process to finish up before trying t

Re: Could DNS help solve this?

2010-11-12 Thread Chris Buxton
On Nov 10, 2010, at 5:53 PM, Sten Carlsen wrote: > Hi > > This is not a bind problem, not really a DNS problem. I still hope that these > might be able to help provide the solution. > > With the growing number of registrars of e.g. .com domains, it becomes > difficult or even almost impossible

ENC: RES: BIND View Option

2010-11-12 Thread Stéphanas Schaden
Thank you very much. Stéphanas Schaden stephan...@ctbc.com.br Uberlândia - MG - Brazil -Mensagem original- De: bind-users-bounces+stephanass=ctbc.com...@lists.isc.org [mailto:bind-users-bounces+stephanass=ctbc.com...@lists.isc.org] Em nome de Barry Margolin

Re: named won't restart

2010-11-12 Thread Bèrto ëd Sèra
maybe this can be of help: http://bugs.gentoo.org/show_bug.cgi?id=324315 On 11 November 2010 20:49, Carlos Vicente < cvice...@network-services.uoregon.edu> wrote: > Has anybody had this problem? > > # /etc/init.d/named restart > Stopping named: . [FAILED]

ENC: RES: BIND View Option

2010-11-12 Thread Stéphanas Schaden
Thank you everybody for the suggestions, we decided to ask our business partner to create a specific zone for the FQDN that it need to access in our internal network using the private IP address. And to other names of our domain it will use the normal resolution process of DNS.

Re: named won't restart

2010-11-12 Thread Steve Arntzen
Is it possible named was killed and restarted without the /etc/init.d/named script? The script looks up the process ID from /var/run/bind/run/named.pid (on Debian) and if the PID doesn't match, the script can't stop named. You can cat /var/run/bind/run/named.pid and compare the PID to what you se

DNSSEC with 9.7.2-P2

2010-11-12 Thread David Forrest
While running BIND 9.7.2-P2 built with defaults on F11 While processing: Nov 12 06:07:57 maplepark sendmail[3928]: oACC7utt003928: from=, size=5486, class=-30, nrcpts=1, msgid=<003e01cb8262$1ee2b150$5ca813...@com.br>, proto=ESMTP, daemon=MTA-v6, relay=webster.isc.org [IPv6:2001:4f8:1:d::12]

Re: DNSSEC with 9.7.2-P2

2010-11-12 Thread Phil Mayers
On 12/11/10 12:49, David Forrest wrote: and, on checking named.conf, I found the entry for br. as: trusted-keys { "br." 257 3 5 "AwEAAdDoVnG9CyHbPUL2rTnE22uN66gQCrUW5W0NTXJBNmpZXP27w7PMNpyw3XCFQWP/XsT0pdzeEGJ400kdbbPqXr2lnmEtWMjj3Z/ejR8mZbJ/6OWJQ0k/2YOyo6Tiab1NGbGfs513y6dy1hOFpz+peZzGsCm

Re: out of place mx records.

2010-11-12 Thread Matus UHLAR - fantomas
On 29.10.10 12:49, Mark Andrews wrote: > And they can do a SMTP level rejection rather than waiting for the > sending server to abandon sending the email due to multiple timeouts. > Just return 550 for all mail directed to users at those hosts. It > would be nice if we could standardise a MX targ

Re: out of place mx records.

2010-11-12 Thread Mark Andrews
In message <20101112135657.gb22...@fantomas.sk>, Matus UHLAR - fantomas writes: > On 29.10.10 12:49, Mark Andrews wrote: > > And they can do a SMTP level rejection rather than waiting for the > > sending server to abandon sending the email due to multiple timeouts. > > Just return 550 for all mail

Re: out of place mx records.

2010-11-12 Thread Matus UHLAR - fantomas
> In message <20101112135657.gb22...@fantomas.sk>, Matus UHLAR - fantomas > writes: > > On 29.10.10 12:49, Mark Andrews wrote: > > > And they can do a SMTP level rejection rather than waiting for the > > > sending server to abandon sending the email due to multiple timeouts. > > > Just return 550

Re: DNSSEC with 9.7.2-P2

2010-11-12 Thread Alan Clegg
On 11/12/2010 7:49 AM, David Forrest wrote: > While running BIND 9.7.2-P2 built with defaults on F11 [..] > and, on checking named.conf, I found the entry for br. as: > trusted-keys { > "br." 257 3 5 > "AwEAAdDoVnG9CyHbPUL2rTnE22uN66gQCrUW5W0NTXJBNmpZXP27w7PMNpyw3XCFQWP/XsT0pdzeEGJ400kdbbPqXr

Re: Debugging "configuring TKEY: failure" (w/samba4)

2010-11-12 Thread Nicholas F Miller
I recently went through this and have it working. Look through the archives for 'GSS-TSIG and Active Directory'. https://lists.isc.org/mailman/mmsearch/bind-users?config=bind-users.htsearch&restrict=&exclude=&method=and&format=short&sort=score&words=GSS-TSIG+and+Active+Directory Things to check:

Re: DNSSEC with 9.7.2-P2

2010-11-12 Thread Paul Wouters
On Fri, 12 Nov 2010, Alan Clegg wrote: On 11/12/2010 7:49 AM, David Forrest wrote: While running BIND 9.7.2-P2 built with defaults on F11 [..] and, on checking named.conf, I found the entry for br. as: trusted-keys { "br." 257 3 5 "AwEAAdDoVnG9CyHbPUL2rTnE22uN66gQCrUW5W0NTXJBNmpZXP27w7P

Re: DNSSEC with 9.7.2-P2

2010-11-12 Thread Phil Mayers
On 12/11/10 14:51, Alan Clegg wrote: On 11/12/2010 7:49 AM, David Forrest wrote: While running BIND 9.7.2-P2 built with defaults on F11 [..] and, on checking named.conf, I found the entry for br. as: trusted-keys { "br." 257 3 5 "AwEAAdDoVnG9CyHbPUL2rTnE22uN66gQCrUW5W0NTXJBNmpZXP27w7PMN

RE: DNSSEC with 9.7.2-P2

2010-11-12 Thread Lightner, Jeff
Not a hole if you look at the reasoning for Fedora itself. It has a short lifecycle and they expressly tell folks not to use it for Production due to this. It is meant to be bleeding edge for testing the latest/greatest. It is used as a test bed for what makes it into RHEL. For Production (RP

Re: DNSSEC with 9.7.2-P2

2010-11-12 Thread Phil Mayers
On 12/11/10 15:45, Lightner, Jeff wrote: For Production (RPM based system) you should use RHEL or CentOS which has a much longer life cycle. (Speaking of which, RHEL6 was just put in I don't agree with your line of reasoning. RHEL may have longer update cycles, but there's no guarantee a par

Re: named won't restart

2010-11-12 Thread Carlos Vicente
It is possible. I found that named wasn't logging to the configured /var/log/named because logrotate failed to reload named after creating the new file. If rndc stop was timing out because the daemon was trying to write to the log file, then it could have been a catch 22 situation. I have since re

dynamic updates via libbind.

2010-11-12 Thread Jack Tavares
I am currently using libbind to do dynamic updates in "C". I have looked in the bind 9.7.x source and I don't see a replacement mechanism for this. Is there one or is there one planned in bind10? Thanks -- Jack. ___ bind-users mailing list bind-users@

one remaining error message in named log startup messages

2010-11-12 Thread Stewart Dean
Am building a new nameserver, with vanilla CentOS 5.5, and am in the home stretch. I see one last anomalous message that says: "adjusted limit on open files from 1024 to 1048576" The named service works just fine.I have about 260 zone files...or is this just adjusting the number o

Re: why one shouldn't use relative hostnames

2010-11-12 Thread Maria Iano
Thank you both and Kevin I for one would really appreciate if you would compose that web page and put it out there! On Nov 11, 2010, at 8:40 AM, Stacey Jonathan Marshall wrote: Additionally a wildcard record in one of the the searched domains would cause a false positive to be returned causi

how to see ALL NS records in a zone file with dig

2010-11-12 Thread M. Meadows
If I use dig NS I know I will see the NS records for the domain. I know I can do the same thing for other RR types. In the case where a zone file has RR records that define delegation for subdomains why can't I use this dig command to see those delegations? I assume this is easy and it's jus

Re: how to see ALL NS records in a zone file with dig

2010-11-12 Thread Jay Ford
On Fri, 12 Nov 2010, M. Meadows wrote: If I use dig NS I know I will see the NS records for the domain. I know I can do the same thing for other RR types. In the case where a zone file has RR records that define delegation for subdomains why can't I use this dig command to see those delegation

libbind error

2010-11-12 Thread Jack Tavares
I believe I found a bug in the libbind code. Is this the correct place to report that? Thanks -- jack ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: out of place mx records.

2010-11-12 Thread Mark Andrews
In message <20101112143542.ga23...@fantomas.sk>, Matus UHLAR - fantomas writes: > > In message <20101112135657.gb22...@fantomas.sk>, Matus UHLAR - fantomas wri > tes: > > > On 29.10.10 12:49, Mark Andrews wrote: > > > > And they can do a SMTP level rejection rather than waiting for the > > > > sen

Re: dynamic updates via libbind.

2010-11-12 Thread Nuno Paquete
It would be interesting to have an API that we could use to make changes dynamically to DNS zones. I don't know if there is already such a tool. No dia 12 de Nov de 2010, às 18:57, "Jack Tavares" escreveu: > I am currently using libbind to do dynamic updates in "C". > > > > I have looked in

Re: DNSSEC with 9.7.2-P2

2010-11-12 Thread Mark Andrews
In message <4cdd6467.9050...@imperial.ac.uk>, Phil Mayers writes: > On 12/11/10 15:45, Lightner, Jeff wrote: > > > For Production (RPM based system) you should use RHEL or CentOS which > > has a much longer life cycle. (Speaking of which, RHEL6 was just put in > > I don't agree with your line o

RE: DNSSEC with 9.7.2-P2

2010-11-12 Thread Ian Tait
Lads, Isn't this getting ridiculous? Is this the future of DNSSEC? Ian -Original Message- From: bind-users-bounces+ian.t=thoughtbubble@lists.isc.org [mailto:bind-users-bounces+ian.t=thoughtbubble@lists.isc.org] On Behalf Of Mark Andrews Sent: 13 November 2010 00:36 To: Phil Maye

hello bind network problem ipv6

2010-11-12 Thread fakessh @
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hello bind network hello guru of bind hello everybody i have all a slice of ipv6 address 2001:41D0:2:3Dd6::/64 and I would simply change it with my bind ipv6 please you have to be in your answer or I will not understand Please give concrete examples