Re: dotted hostname is bad IMO

2011-02-01 Thread Barry Margolin
In article , p...@mail.nsbeta.info wrote: > given the domain name of "126.com", and given an A RR in its zone is: > > s1.s2.s3 IN A 11.22.33.44 > > OK when a dns cache query for s1.s2.s3.126.com the first time, it will > follow the logic: > > #1, s1.s2.s3.126.com has NS RR in cache? (no

Querying the SOA timers

2011-02-01 Thread Balder
Hello, I have had a bit of a Google but I have been unsuccessful in finding an answer to this one.   We currently have bind acting as a slave server for a number of different zones.  The owners of these zones sometimes change configuration without letting us know, resulting in zones expiring.  I w

Re: Querying the SOA timers

2011-02-01 Thread pyh
I once wrote a perl script for nagios plugin and posted it to the list. Just to check both master and slave's serial number to see if they are the same to verify the zone data in every name server is correct. #!/usr/bin/perl use strict; use Net::DNS; use Getopt::Std; my %opts; getopts('hm:s

Fwd: Querying the SOA timers

2011-02-01 Thread Balder
On 1 February 2011 10:04,   wrote: > I once wrote a perl script for nagios plugin and posted it to the list. > Just to check both master and slave's serial number to see if they are the > same to verify the zone data in every name server is correct. Hello, Thanks for this however it would be useful

Re: [OT] does deliveragent must have a PTR RR

2011-02-01 Thread Fr34k
See RFC1123 and RFC1912 which suggest that legitimate nodes on the Internet have appropriate forward/reverse DNS entries. By appropriate, I mean DNS entires which distinguish which hosts are static/business space from residential/dhcp space. Reason: So others on the Internet can make informed

Some dnssec-signzone questions

2011-02-01 Thread Torinthiel
I have three questions regarding dnssec-signzone: To clarify things, I'm using BIND 9.7.2-P2. First is about input file: you can specify on the command line either the signed version of the zone, or the unsigned one. What I'd like to do hovever, is to use both. The unsigned zone is much more re

RE: dotted hostname is bad IMO

2011-02-01 Thread Vyto Grigaliunas
Thanks for all the responses...learned a thing or two ;-) What I was basically fishing for was whether using periods was acceptable practice, frowned upon, or discretionary. Thanks... Vyto > -Original Message- > From: bind-users-bounces+vyto=fnal@lists.isc.org [mailto:bind- > user

bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread hugo hugoo
Dear all, I plan to upgrade my nameservers from bind8 to bind9. I guess I will encounter some compatibility problems notably in the layout of the zone files - can anybody give me the point of attention for this upgrade? Your experience will be appreciated. - is it possible to install bind9

Re: bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread Phil Mayers
On 01/02/11 16:33, hugo hugoo wrote: Dear all, I plan to upgrade my nameservers from bind8 to bind9. I guess I will encounter some compatibility problems notably in the layout of the zone files - can anybody give me the point of attention for this upgrade? Your experience will be appreciated.

Re: bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread Jeremy C. Reed
On Tue, 1 Feb 2011, hugo hugoo wrote: > I plan to upgrade my nameservers from bind8 to bind9. > I guess I will encounter some compatibility problems notably in the layout > of the zone files >   > - can anybody give me the point of attention for this upgrade? Your > experience will be appreciated.

Re: Some dnssec-signzone questions

2011-02-01 Thread Paul Wouters
On Tue, 1 Feb 2011, Torinthiel wrote: To clarify things, I'm using BIND 9.7.2-P2. First is about input file: you can specify on the command line either the signed version of the zone, or the unsigned one. What I'd like to do hovever, is to use both. The unsigned zone is much more readable, and

Re: Some dnssec-signzone questions

2011-02-01 Thread Jay Ford
On Tue, 1 Feb 2011, Torinthiel wrote: Third is about -N option: a well established practice (although I don't know what was the origin) is to set SOA serial number to eg 2011020101, which is current day and two-digit of daily version. This has benefit of being almost as good as putting unixtime o

Re: what's a valid domain name?

2011-02-01 Thread Joseph S D Yao
On Sun, Jan 30, 2011 at 09:40:51AM +0800, p...@mail.nsbeta.info wrote: > Joseph S D Yao writes: > > > > > The labels must follow the rules for ARPANET host names. They must > > start with a letter, end with a letter or digit, and have as interior > > characters only letters, digits, and hyphen.

Re: dotted hostname is bad IMO

2011-02-01 Thread Joseph S D Yao
On Tue, Feb 01, 2011 at 11:11:47AM +0800, p...@mail.nsbeta.info wrote: ... > So I dont think dotted hostname is good pratical. ... You need to read the whole posting. Another poster pointed out that the dot _ I S _ the DNS delimiter. -- /**

Re: bind8 and bind9 installed on the same server: possible?

2011-02-01 Thread Eivind Olsen
> I plan to upgrade my nameservers from bind8 to bind9. > I guess I will encounter some compatibility problems notably in the layout > of the zone files Depends how freaky the zonefiles were before. You could end up having to _not_ change a thing except for a couple of changes in your named.conf.

Re: Some dnssec-signzone questions

2011-02-01 Thread Torinthiel
On 02/01/11 19:44, Paul Wouters wrote: > On Tue, 1 Feb 2011, Torinthiel wrote: > >> >> To clarify things, I'm using BIND 9.7.2-P2. >> >> First is about input file: you can specify on the command line either >> the >> signed version of the zone, or the unsigned one. >> What I'd like to do hovever, i

Re: Some dnssec-signzone questions

2011-02-01 Thread Torinthiel
On 02/01/11 22:13, Jay Ford wrote: > On Tue, 1 Feb 2011, Torinthiel wrote: >> Third is about -N option: >> a well established practice (although I don't know what was the >> origin) is >> to set SOA serial number to eg 2011020101, which is current day and >> two-digit of daily version. This has ben