Re: problem getting address record for google public dns server

2010-11-17 Thread Stacey Jonathan Marshall
This crops up time and time again - perhaps +trace should have been +mimic. The '+trace' option causes dig to act as a recursive server would, asking each server in turn for a none recursive answer. Thus when you say +trace its your instance of dig that's doing the work. The details in the respo

Re: IPAM advantages (was Re: MySQL BIND SDB)

2010-11-17 Thread Gary Wallis
Chris Buxton wrote: On Nov 16, 2010, at 12:44 PM, Gary Wallis wrote: IPAM is an Infloblox proprietary system that Cricket Liu is involved with. No. IPAM = IP Address Management. It is not a product, but rather a product category. I believe the term was coined by Lucent, or whoever owned QIP

Re: IPAM advantages (was Re: MySQL BIND SDB)

2010-11-17 Thread Alan Clegg
On 11/17/2010 7:15 AM, Gary Wallis wrote: [.. Discussion of non-open-source IPAM solutions ..] > (If we use FOSS BIND why should we support anti FOSS businesses like > many mentioned above?) Several of the businesses listed in the original post are BIND Forum members and are supporting ISC in th

Is it Possible to Log nxdomain Responses?

2010-11-17 Thread Martin McCormick
We are chasing down some problems in which clients are trying to resolve lookups to a domain related to Microsoft Active Directory zones. We were able to determine that clients were querying this AD zone when it was thought they weren't needing to do so. We enabled querylogging for a short

Re: Is it Possible to Log nxdomain Responses?

2010-11-17 Thread Phil Mayers
On 17/11/10 13:48, Martin McCormick wrote: We are chasing down some problems in which clients are trying to resolve lookups to a domain related to Microsoft Active Directory zones. We were able to determine that clients were querying this AD zone when it was thought they weren't needing to do so.

Re: Is it Possible to Log nxdomain Responses?

2010-11-17 Thread Stephane Bortzmeyer
On Wed, Nov 17, 2010 at 07:48:55AM -0600, Martin McCormick wrote a message of 22 lines which said: > It would be nice to log each nxdomain for a while so we can verify > that the new deligated zone we are about to install fixed the > problem. May be with dnscap

Nslookup not working for external domain

2010-11-17 Thread Moore, Mark A.
We are running into a issue where one of our slave servers isn't resolving non-local domain names. For the two domains hosted on this server, we can resolve any entry. However, if we try to do an nslookup to cnn, google, yahoo, etc. it fails. We have turned off iptables and verified internet co

Re: MySQL BIND SDB

2010-11-17 Thread Evan Hunt
> How would BIND sign a zone that is in a Database? Can BIND do this? > ALL examples of using DNSSEC have been with flat files. DNSSEC with SQL isn't supported in BIND 9 (yet?). IIRC, it can return signed responses for records that do exist, but it can't return proper signed negative responses fo

High named CPU every 10 minutes?

2010-11-17 Thread blrmaani
I see a peculiar behavior on my DNS server. The named CPU reaches 90% + every 10 minutes and my monitoring software keeps paging me. I have a DNS host running FreeBSD 7.x, running BIND 9.4.x on a 2-CPU machine with 4GB RAM. It is a recursive DNS server. Any pointers on how to find out the reason

Spaces in keys

2010-11-17 Thread Thomas Schulz
When I copied the key for root from http://www.isc.org/community/blog/201007/using-root-dnssec-key-bind-9-resolvers I ended up with spaces in the key. I assumed that they should not be there and removed them. I since noticed that the key in /etc/bind.keys supplied with the bind distribution has spa

Re: Spaces in keys

2010-11-17 Thread Hugo Salgado
On 11/17/2010 05:01 PM, Thomas Schulz wrote: > When I copied the key for root from > http://www.isc.org/community/blog/201007/using-root-dnssec-key-bind-9-resolvers > I ended up with spaces in the key. I assumed that they should not be there > and removed them. I since noticed that the key in /etc/

Re: Nslookup not working for external domain

2010-11-17 Thread Barry Margolin
In article , "Moore, Mark A." wrote: > We are running into a issue where one of our slave servers isn't resolving > non-local domain names. For the two domains hosted on this server, we can > resolve any entry. However, if we try to do an nslookup to cnn, google, > yahoo, etc. it fails. We h

Re: High named CPU every 10 minutes?

2010-11-17 Thread Dave Sparro
On 11/17/2010 2:26 PM, blrmaani wrote: I see a peculiar behavior on my DNS server. The named CPU reaches 90% + every 10 minutes and my monitoring software keeps paging me. I have a DNS host running FreeBSD 7.x, running BIND 9.4.x on a 2-CPU machine with 4GB RAM. It is a recursive DNS server. D