Re: Syncing DNS zones with different names

2011-11-15 Thread Matthew Seaman
On 15/11/2011 07:19, Chris Balmain wrote: > Let's say I have two domain names, d1.com and d2.com, and I want to > synchronise all records underneath them (one-way sync, that is). So if I > create an A record www.d1.com pointing at 1.2.3.4, www.d2.com is also > automatically created, with the same v

Turning log on bind for troubleshooting

2011-11-15 Thread Eduardo Bonsi
What is the best statement to insert on name.conf to generate logs for troubleshooting bind 9.x? Thanks! -- BEARTCOMMUNICATIONS Eduardo Bonsi System - Network Admin beart...@pacbell.net webmas...@beart.com ___ Please visit https://lists.isc.org/mail

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-15 Thread Sam Wilson
In article , Eduardo Bonsi wrote: > I am checking my DNS setup from inside using dig and I am getting > everything ok but I need a second opinion from outside of the server to > see if my ns1 and ns2 are responding ok to setup DNSSEC. Looks like you haven't put in any glue records for nsX.bon

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-15 Thread Mark Andrews
In message , Sam Wilson writes: > In article , > Eduardo Bonsi wrote: > > > I am checking my DNS setup from inside using dig and I am getting > > everything ok but I need a second opinion from outside of the server to > > see if my ns1 and ns2 are responding ok to setup DNSSEC. > > Looks li

Re: Help with dig to check NS servers for DNSSEC setup

2011-11-15 Thread Sam Wilson
In article , Mark Andrews wrote: > In message , Sam > Wilson writes: > > In article , > > Eduardo Bonsi wrote: > > > > > I am checking my DNS setup from inside using dig and I am getting > > > everything ok but I need a second opinion from outside of the server to > > > see if my ns1 and n

Re: Syncing DNS zones with different names

2011-11-15 Thread Chris Thompson
On Nov 15 2011, Barry Margolin wrote: In article , "Chris Balmain" wrote: Let's say I have two domain names, d1.com and d2.com, and I want to synchronise all records underneath them (one-way sync, that is). So if I create an A record www.d1.com pointing at 1.2.3.4, www.d2.com is also automa

Query regarding dig output

2011-11-15 Thread Gaurav Kansal
Dear Sir, When I am query through dig for nkn.in domain without any additional parameter, It is showing 3 ADDITIONAL records. And when I am query through dig for same nkn.in domain with +dnssec parameter, It is showing 4 ADDITIONAL records but there are only 3 answers in ;;ADDITIONAL SECTION.

Re: Query regarding dig output

2011-11-15 Thread Stephane Bortzmeyer
On Tue, Nov 15, 2011 at 06:11:32PM +0530, Gaurav Kansal wrote a message of 415 lines which said: > And when I am query through dig for same nkn.in domain with +dnssec > parameter, Something that you did not post. Such a test does not appear in your original email. nkn.in is not signed and u

[Best practice] Internal zone

2011-11-15 Thread Jeremy MAURO
Hi everyone, I asking you all for you best practice regarding your internal DNS and zones. I have a 2 DNS servers used as Internal DNS and Resolvers, here is the dilemma, should I declare in each internal zone my NS with a glue record: $ORIGIN example.internal. ; NS records

Re: [Best practice] Internal zone

2011-11-15 Thread Matthew Seaman
On 15/11/2011 12:50, Jeremy MAURO wrote: > I asking you all for you best practice regarding your internal DNS and > zones. > > I have a 2 DNS servers used as Internal DNS and Resolvers, here is the > dilemma, should I declare in each internal zone my NS with a glue record: > > $ORIGIN example.int

RE: Query regarding dig output

2011-11-15 Thread Marc Lampo
Hello, The fourth record in the ADDITIONAL section is the OPT EDNS0 record, “returned” by the server. You can see it displayed in the “QUESTION SECTION:” Also, try “dig @180.149.63.3 nkn.in. +dnssec +bufsize=1024” (EDNS0, with D0, but payload of 1024) à in the reply the payload will be 4096

Re: Query regarding dig output

2011-11-15 Thread Paul Wouters
On Tue, 15 Nov 2011, Gaurav Kansal wrote: When I am query through dig for nkn.in domain without any additional parameter, It is showing 3 ADDITIONAL records. And when I am query through dig for same nkn.in domain with +dnssec parameter, It is showing 4 ADDITIONAL records but there are only 3 a

Re: DNSSEC external validation issues

2011-11-15 Thread Casey Deccio
On Sun, Nov 13, 2011 at 1:50 PM, Eduardo Bonsi wrote: > Mark and everybody, Thanks for the checking. I had a suspicion that was > the issue but I need a second opinion since when I checked my DNS from the > inside the "refused" status is not happening. Here is what I am getting: > > What does you

Re: DNSSEC external validation issues

2011-11-15 Thread Eduardo Bonsi
Casey; I do have the allow-query { any; }; statement posted in all zones; The server is working fine! It has been serving the domain www.bonsi.org and another FQDN with not problems. When I dig from the inside it show that everything is ok. ; <<>> DiG 9.6-ESV-R4-P3 <<>> bonsi.org ;; global op

Re: Turning log on bind for troubleshooting

2011-11-15 Thread Eduardo Bonsi
Sebastian; Thanks! I was looking at this log statement last night. I found two statements: Not sure what is the best one to debug. They are also not clear where to insert these statements: On options or some place else in the end of named.conf. http://www.zytrax.com/books/dns/ch7/logging.html

Re: Turning log on bind for troubleshooting

2011-11-15 Thread michoski
Grab the BIND ARM for your version: http://www.isc.org/software/bind/documentation There it indirectly calls out that logging is it's own section (e.g. It doesn't say "this is valid in options or views" like it does for many other things)... It is it's own stanza: options { }; controls { }; a

Re: Turning log on bind for troubleshooting

2011-11-15 Thread Eduardo Bonsi
Sebastian; Thanks so much for that! I will try this at the slave server. I already configured for the master and these are my first issues: 15-Nov-2011 13:40:58.312 general: warning: /var/named/bonsi.org.external.hosts:15: ignoring out-of-zone data (EduardoBonsi.45.200.63.in-addr.arpa) 15-Nov

BIND started several times at one time

2011-11-15 Thread Aleksander Kurczyk
Hello, Is it possible to run named several times at one time on one computer on one OS at different ports and with different config files? I would like to simulate multiple servers on one PC. -- Pozdrawiam, Aleksander Kurczyk ___ Please visit https://

Re: BIND started several times at one time

2011-11-15 Thread Chuck Swiger
On Nov 15, 2011, at 4:00 PM, Aleksander Kurczyk wrote: > Is it possible to run named several times at one time on one computer on one > OS at different ports and with different config files? I would like to > simulate multiple servers on one PC. It's possible, but unlikely to be useful without a

Re: BIND started several times at one time

2011-11-15 Thread Aleksander Kurczyk
This will not be a server for public use. I just wan't to try make a configuration of two or more servers with zone transfers, master/slave, notify, etc. locally (on 127.0.0.1 but on different ports). How can I do that? I have to install named several times or just start it with some options?

Re: BIND started several times at one time

2011-11-15 Thread Alan Clegg
On 11/15/2011 7:19 PM, Aleksander Kurczyk wrote: > This will not be a server for public use. I just wan't to try make a > configuration of two or more servers with zone transfers, > master/slave, notify, etc. locally (on 127.0.0.1 but on different > ports). How can I do that? I have to install name

Re: BIND started several times at one time

2011-11-15 Thread /dev/rob0
On Tuesday 15 November 2011 18:19:22 Aleksander Kurczyk wrote: > This will not be a server for public use. I just wan't to try make > a configuration of two or more servers with zone transfers, > master/slave, notify, etc. locally (on 127.0.0.1 but on different > ports). How can I do that? I have t

Re: BIND started several times at one time

2011-11-15 Thread Karl Auer
On Tue, 2011-11-15 at 18:41 -0600, /dev/rob0 wrote: > On Tuesday 15 November 2011 18:19:22 Aleksander Kurczyk wrote: > > This will not be a server for public use. I just wan't to try make > > a configuration of two or more servers with zone transfers, > > master/slave, notify, etc. locally (on 127.

Re: BIND started several times at one time

2011-11-15 Thread Mark Andrews
In message <47085dc0.36001054.4ec2fd04.1d...@o2.pl>, =?UTF-8?Q?Aleksander_Kurcz yk?= writes: > Hello, > Is it possible to run named several times at one time on one computer on one > OS at different ports and with different config files? I would like to simula > te multiple servers on one PC. Ye

Re: [META] Usenet cross-posting is back.

2011-11-15 Thread Paul Vixie
Dan Mahoney writes: > I'm happy to announce that as of today, with some help from Russ Alberry > and the fine people at Stanford University, we've restored this > functionality. >... thanks dan, thanks russ. -- Paul Vixie KI6YSY ___ Please visit http

bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset)) failed

2011-11-15 Thread nicku
To my surprise, I had several DNS servers running BIND 9.8.1 all fail at about the same time with this assertion failure in query.c, on line 1895. The only references I have found to this were from CVE-2009-0696 Dynamic Update DoS attack, which 9.8.1 surely should be immune to. Any suggestions as

Re: Syncing DNS zones with different names

2011-11-15 Thread Chris
Thanks for the advice guys. The DNAME record is something I'd never heard of, and is quite interesting. Unfortunately it does not quite fulfill my needs due to, as Chris pointed out, the inability to alias the records on the name itself. I think Barry's suggestion of a common zone file on the