Bind doesn't make zone delegation.

2012-04-19 Thread Ellad G. Yatsko
Hello! I have FreeBSD 7.2 x64 installed. And Bind 9.4: /etc/namedb> named -v BIND 9.4.3-P2 I have zone "/united-networks.ru/" and I try to do the following: ... $ORIGIN sokol.msk.united-networks.ru. @ IN NS srvgate srvgate

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
Hi, First of all, nslookup isn't a good tool for debug DNS problems. Use dig instead. Could you show the output of "dig @freebsdbox sokol.msk.united-networks.ru. NS +norec" run from freebsd box itself? 2012/4/19 Ellad G. Yatsko > > Hello! >> >>I have FreeBSD 7.2 x64 installed. And Bin

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Ellad G. Yatsko
Hello! Here is output: /etc/namedb> dig @172.16.0.1 sokol.msk.united-networks.ru. NS +norec ; <<>> DiG 9.4.3-P2 <<>> @172.16.0.1 sokol.msk.united-networks.ru. NS +norec ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14255 ;; flag

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
2012/4/19 Ellad G. Yatsko > Hello! > Here is output: > /etc/namedb> dig @172.16.0.1 sokol.msk.united-networks.ru. NS +norec > > ; <<>> DiG 9.4.3-P2 <<>> @172.16.0.1 sokol.msk.united-networks.ru. NS > +norec > ; (1 server found) > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- op

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Ellad G. Yatsko
Nope. FreeBSD is not the master for sokol.msk.united-networks.ru. It delegates zone sokol.msk only. Not more.Master for sokol.msk.united-networks.ru is srvgate.sokol.msk.united-networks.ru (Ubuntu server). Indeed, now when I try nslookup sokol.msk.united-networks.ru - it returns me its IP. Fre

[ANN] ndsiff 1.39 - create nsupdate script from master file changes

2012-04-19 Thread Tony Finch
nsdiff is a small perl program that examines old and new versions of a DNS zone and outputs the differences as a script for use by BIND's nsupdate program. It bridges the gap between static master files and dynamic updates. I have published version 1.39 which has a new -q quiet / quick check optio

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Peter Andreev
2012/4/19 Ellad G. Yatsko > Nope. FreeBSD is not the master for sokol.msk.united-networks.ru. It > delegates zone sokol.msk only. > Not more.Master for sokol.msk.united-networks.ru is > srvgate.sokol.msk.united-networks.ru (Ubuntu > server). > > Indeed, now when I try nslookup sokol.msk.united-n

Re: www.glb.hud.gov

2012-04-19 Thread Chris Thompson
On Apr 19 2012, Richard Laager wrote: Are others timing out trying to resolve www.glb.hud.gov? This seems (though I haven't done extensive testing) to only happen to me with BIND. http://dnsviz.net/d/www.glb.hud.gov/dnssec/ shows a couple of DNSKEY warnings, so maybe that's it. I always suspect

Re: www.glb.hud.gov

2012-04-19 Thread Jeremy C. Reed
On Thu, 19 Apr 2012, Richard Laager wrote: > Are others timing out trying to resolve www.glb.hud.gov? This seems > (though I haven't done extensive testing) to only happen to me with > BIND. The nameservers 170.97.67.51 and 170.97.67.139 timeout when asking for glb.hud.gov DNSKEY. > http://dnsv

Re: www.glb.hud.gov

2012-04-19 Thread Casey Deccio
On Thu, Apr 19, 2012 at 5:59 AM, Chris Thompson wrote: > On Apr 19 2012, Richard Laager wrote: > > Are others timing out trying to resolve www.glb.hud.gov? This seems >> (though I haven't done extensive testing) to only happen to me with >> BIND. >> >> http://dnsviz.net/d/www.glb.**hud.gov/dnsse

Re: Bind doesn't make zone delegation.

2012-04-19 Thread Barry Margolin
In article , "Ellad G. Yatsko" wrote: > > Hello! > > > > I have FreeBSD 7.2 x64 installed. And Bind 9.4: > > > > /etc/namedb> named -v > > BIND 9.4.3-P2 > > > > I have zone "/united-networks.ru/" and I try to do the following: > > ... > > $ORIGIN sokol.msk.united-netw

Zone transfer using TSIG

2012-04-19 Thread Carlos Ribas
Hello all, I have a server that is authoritative to my domain and is secondary to four different domains. What is the best way to receive the zones from master using TSIG? May I have something like this into a view statement? server 10.0.1.1 { keys hostA-myserver; }; server 10.0.1.2 { keys ho

Re: Zone transfer using TSIG

2012-04-19 Thread Rich Goodson
Carlos, zone "example.com" { ... allow-transfer { key hostA-myserver.key; }; ... }; and in our environment, I have the key files readable only by the user that named is running as, then use something like: include keys/tsig_key_file.key in named.conf so that the named.conf file can remain read

Re: Zone transfer using TSIG

2012-04-19 Thread Rich Goodson
Forgot to reply all in my corrected answer. On Apr 19, 2012, at 3:09 PM, Carlos Ribas wrote: > Thanks Rich! I completely forgot that I can use the key in the definitions of > master. > > Regards, > > - > Carlos Eduardo Ribas > > > 2012/4/19 Rich Goodson > S