Re: dig: Transfer failed

2012-07-26 Thread Jan-Piet Mens
> > Check the 'allow-transfer' option in your named.conf. > > I don't have this option. Should I include it? If you want to provide zone transfers, you include it. If you don't, leave it out. (You might also want to glance at BIND's Administrator's Reference [ARM] while you're at it ...)

How to check data file's content in DNS secondary server?

2012-07-26 Thread ShanyiWan
Zone data file's file type has changed in DNS secondary server, how to check the date file's content? After upgrade to Bind V9.9.1-P2: [root@localhost ~]# file /var/named/zzy4.com.dom /var/named/zzy4.com.dom: data Before upgrade to Bind V9.9.1-P2: [root@localhost ~]# file /var/named/zzz4.com.dom

Re: How to check data file's content in DNS secondary server?

2012-07-26 Thread Jan-Piet Mens
> After upgrade to Bind V9.9.1-P2: > [root@localhost ~]# file /var/named/zzy4.com.dom > /var/named/zzy4.com.dom: data Use named-compilezone to convert from one to the other. You can force the previous text-transfers by setting this option on a per/zone or globally: masterfile-format text

dns blacklist?

2012-07-26 Thread Pavel Urban
Hello, one of our customers asked us to take a look at strange problem. One address seems to 'work' in Germany, but not here. So I've tried it and found this: [pupu@aphrael ~]$ dig www.thomascook.de -t any ; <<>> DiG 9.9.1-P1-RedHat-9.9.1-2.P1.fc17 <<>> www.thomascook.de -t any ;; global opt

Re: dns blacklist?

2012-07-26 Thread Sten Carlsen
Hello How will this work if you use e.g.-t a? dig -t any will show the content of the local cache, so this just means your cache is empty. On 26/07/12 11:28, Pavel Urban wrote: > Hello, > > one of our customers asked us to take a look at strange problem. One > address seems to 'work' in Germany

Re: Journal File Question

2012-07-26 Thread Chris Nighswonger
On Wed, Jul 25, 2012 at 7:51 PM, Mark Andrews wrote: > > The slaves should have a recent copy of the zone. Just axfr it and > use it as the master file. Any untransferred changes will be applied > from the journal when named starts. > Thanks to everyone who replied. I've learned quite a bit abou

akamaitechnologies.com sending queries to the wrong dns server?

2012-07-26 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 client 23.3.104.194#52078 (116.226.242.64.in-addr.arpa): view normal: query (cache) '116.226.242.64.in-addr.arpa/PTR/IN' denied client 193.108.152.26#60940 (96.226.242.64.in-addr.arpa): view normal: query (cache) '96.226.242.64.in-addr.arpa/PTR/IN' de

TTL in Bad Cache

2012-07-26 Thread Yingdi Yu
Hi, Is there anyone who knows how long an answer that fails in verification can stay in the bad cache of BIND? Thanks! Regards, Yingdi ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing

Re: TTL in Bad Cache

2012-07-26 Thread Drunkard Zhang
2012/7/27 Yingdi Yu : > Hi, > > Is there anyone who knows how long an answer that fails in verification can > stay in the bad cache of BIND? Thanks! > Try max-ncache-ttl option. >From ARM: max-ncache-ttl To reduce network traffic and increase performance, the server stores negative answers. max-nc

Re: Block some users with Bind9

2012-07-26 Thread Emiliano Vazquez
El 24/07/12 22:38, Michael Hoskins (michoski) escribió: I would try using RPZ with a combination of views and match-clients. http://jpmens.net/2011/04/26/how-to-configure-your-bind-resolvers-to-lie-us ing-response-policy-zones-rpz/ Hi Michael. I was reading about rpz zones but i understand wh