Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Fr34k
- Original Message > From: Mark Andrews > To: Fr34k > Cc: Bindlist > Sent: Wed, March 23, 2011 9:04:00 PM > Subject: Re: Q on clients-per-query, max-clients-per-query > > > In message <>, Fr34k writes: > > Hello, > > > > # The ARM says: # > > clients-per-query, max-clients-per-que

Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Cathy Almond
> > So, does BIND behave the same whether it is a single PC making 100 queries > for > the same record compared to 555 PCs making queries for the same record? > That is, how does BIND treat "clients-per-query, max-clients-per-query" > differently based upon the query requesters' IP address(es)

problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
hi bind //guru/ hi isc guru hi mark andrews hi michel graff despite my efforts to validate isc dlv. I'm always at the same point I can not validate the keys. error below the script isc SUCCESS 94.23.59.30 answered DNSKEY query with rcode NOERROR 3.345:SUCCESS 87.98.186.232 answered DNSKEY query

Re: Q on clients-per-query, max-clients-per-query

2011-03-24 Thread Mark Andrews
In message <688460.82562...@web121414.mail.ne1.yahoo.com>, Fr34k writes: > - Original Message > > > From: Mark Andrews > > To: Fr34k > > Cc: Bindlist > > Sent: Wed, March 23, 2011 9:04:00 PM > > Subject: Re: Q on clients-per-query, max-clients-per-query > > > > > > In message <>, F

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message <1300993213.12273.96.camel@localhost.localdomain>, "fakessh @" write s: > hi bind //guru/ > hi isc guru > hi mark andrews > hi michel graff There are no DLV records for fakessh.eu. See below. There are no DS records for fakessh.eu. See below. Two of the nameservers for your zone a

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
Le vendredi 25 mars 2011 à 08:24 +1100, Mark Andrews a écrit : > In message <1300993213.12273.96.camel@localhost.localdomain>, "fakessh @" > write > s: > > hi bind //guru/ > > hi isc guru > > hi mark andrews > > hi michel graff > > There are no DLV records for fakessh.eu. See below. > > There

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message <1301004136.12273.106.camel@localhost.localdomain>, "fakessh @" writes: > Le vendredi 25 mars 2011 =C3=A0 08:24 +1100, Mark Andrews a =C3=A9crit : > > In message <1300993213.12273.96.camel@localhost.localdomain>, "fakessh @"= > write > > s: > > > hi bind //guru/ > > > hi isc guru > >

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Evan Hunt
> necessarily because I can not validate the key through via isc dlv Your zone isn't fully DNSSEC-capable yet; fix that first, then you can submit a DLV record into dlv.isc.org. ns0.xname.org and ns2.xname.org are giving bad answers; remove them from your NS RRset and things should start working

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
everything worked just fine until I change the key rdnc. ns in my side and only ns1.novacrea.fr ns1.xname.org are valid for dnssec Le jeudi 24 mars 2011 à 23:02 +0100, fakessh @ a écrit : > Le vendredi 25 mars 2011 à 08:24 +1100, Mark Andrews a écrit : > > In message <1300993213.12273.96.camel@lo

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
the DS it is necessary that I contact OVH. in the DLV conserne my problem I have this same recurring errors in the script of the isc that's my problem Le vendredi 25 mars 2011 à 09:24 +1100, Mark Andrews a écrit : > In message <1301004136.12273.106.camel@localhost.localdomain>, "fakessh @" > wr

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
it is 6 months since I used no worries dlv Le jeudi 24 mars 2011 à 23:21 +0100, fakessh @ a écrit : > everything worked just fine until I change the key rdnc. ns in my side > and only ns1.novacrea.fr ns1.xname.org are valid for dnssec > > > Le jeudi 24 mars 2011 à 23:02 +0100, fakessh @ a écrit

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Eivind Olsen
Fakessh wrote: > the DS it is necessary that I contact OVH. > in the DLV conserne my problem I have this same recurring errors in the > script of the isc > that's my problem I'll admit, I've had some problems guessing what the problem you're experiencing really is, there's been mentions of TSIG k

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread Mark Andrews
In message <1301008426.12273.115.camel@localhost.localdomain>, "fakessh @" writes: > it is 6 months since I used no worries dlv What keys do you have recorded with dlv.isc.org? Do they match what you currently have in the zone? Click on ManageZones Click on (details) Under More click on (detail

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
I did click Click ManageZones Click on (details) Click under More (more) performance test the total result is http://pastebin.com/1bAYHj0d i mail hostmaster of ns1.novacrea.fr is a friend Le vendredi 25 mars 2011 à 10:38 +1100, Mark Andrews a écrit : > In message <1301008426.12273.115.camel

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
http://secspider.cs.ucla.edu/fakessh-eu--dnskey.txt this page indicate a DSA algorhtyme it's my old algorthyme new is RSA Le vendredi 25 mars 2011 à 01:25 +0100, fakessh @ a écrit : > I did click Click ManageZones > Click on (details) > Click under More (more) > performance test > > > > the t

Re: problem for validate the script dnssec to isc dlv

2011-03-24 Thread fakessh @
Le vendredi 25 mars 2011 à 09:24 +1100, Mark Andrews a écrit : > In message <1301004136.12273.106.camel@localhost.localdomain>, "fakessh @" > writes: > > Le vendredi 25 mars 2011 =C3=A0 08:24 +1100, Mark Andrews a =C3=A9crit : > > > In message <1300993213.12273.96.camel@localhost.localdomain>, "f

Re: rndc-key has expired

2011-03-24 Thread Joseph S D Yao
On Wed, Mar 23, 2011 at 08:57:26PM +0100, fakessh @ wrote: > hi guru > > I'm walking on the same server rndc and named Then all I can suggest is generating a new key. What puzzles me is that I don't see a way to see or adjust dates on the generated keys. -- /**

Re: rndc-key has expired

2011-03-24 Thread Joseph S D Yao
On Wed, Mar 23, 2011 at 10:09:06PM +0100, fakessh @ wrote: > > > I can wait how long before this ends? ... > > Are you running 'rndc' from the same server on which the 'named' is > > running? If not, make sure that both have the same time. ... I don't understand the question. Is it at all rel