Re: RPZ and negative answers

2013-04-05 Thread Noel Butler
On Fri, 2013-04-05 at 08:51 +0200, Torsten Segner wrote: > $TTL 43200 > @ IN SOA a.prim-ns.de. hostmaster.de.easynet.net. ( > 2012041802 ; > 28800 ; > 7200; > 604800 ; >

Simple question about zone and CNAME

2013-04-05 Thread Thomas Manson
Hi, I'd like use CNAME record on my zone. I'm able to have this config: for http://www.mysite.com www IN CNAME somehost.com but I can't do for http://mysite.com @ IN CNAME somehost.com How can I achive this configuration ? Is there another way to specify the address of http://mysite.com

Re: Simple question about zone and CNAME

2013-04-05 Thread Phil Mayers
On 04/05/2013 10:13 AM, Thomas Manson wrote: @ IN CNAME somehost.com Correct. CNAMEs are mutually exclusive with other records (DNSSEC signatures excepted) and zone apex requires SOA and NS. How can I achive this configuration ? You will have to use an A record.

Re: Simple question about zone and CNAME

2013-04-05 Thread Thomas Manson
Ok thanks for this confirmation. I already build my zone file from a Database with a php-cgi script, what's painful is handling the changes for domains I don't manage directly ;) Thanks for your quick feedback ! Regards, Thomas. On Fri, Apr 5, 2013 at 11:25 AM, Howard Wilkinson wrote: > The

Re: Simple question about zone and CNAME

2013-04-05 Thread Warren Kumari
On Apr 5, 2013, at 5:23 AM, Phil Mayers wrote: > On 04/05/2013 10:13 AM, Thomas Manson wrote: > >> @ IN CNAME somehost.com > > Correct. CNAMEs are mutually exclusive with other records (DNSSEC signatures > excepted) and zone apex requires SOA and NS. > > >> >> How can

Re: Simple question about zone and CNAME

2013-04-05 Thread Phil Mayers
On 05/04/13 14:16, Warren Kumari wrote: DNAME? DNAME doesn't do it, because it directs a sub-tree, not the name itself. You'd need the DNAME in the parent zone, and if you can do that, you can just put two CNAMES (zone and *.zone). ___ Please vis

Re: RPZ and negative answers

2013-04-05 Thread Vernon Schryver
> From: Torsten Segner > subdomain.domain.de 60 A 172.26.30.231 > The above setting is rewriting NXDOMAIN answers for subdomain.domain.de > to the above IP address while every other host still has the information > of the customers outside zone. > > Am I doing something substantially wrong

trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
I have been attempting to follow the instructions here: http://ss.vix.su/~vjs/rrlrpz.html but make fails with this error ... gcc -I/users/red/platform/red-bind-beta/BUILD/red-bind-beta-9.9.2 -I./include -I./unix/include -I. -I/users/red/platform/red-bind-beta/BUILD/red-bind-beta-9.9.2/lib/lwres/i

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Vernon Schryver
> From: Red Cricket > I have been attempting to follow the instructions here: > http://ss.vix.su/~vjs/rrlrpz.html > but make fails with this error ... > undefined reference to `dns_rrl'query.o: In function I bet that there is are a passle of stray files including rrl.c in the top of the BIND so

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
I used ... patch -s -p0 -i rl-9.9.2-P2.patch like it says in the documentation. I could post the entire set of commands and I am executing and the resulting outputs, but it is kinda of a lot of text. Maybe I could sanitize and put on paste.bin ? On Fri, Apr 5, 2013 at 11:10 AM, Vernon Schryver

Re: Simple question about zone and CNAME

2013-04-05 Thread John Wobus
DNAME? Or SRV records. Surely browsers are adding support in the next day or two? John ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
here's a link to pastebin http://pastebin.com/RxcsJMLe On Fri, Apr 5, 2013 at 11:35 AM, Red Cricket wrote: > I used ... > > patch -s -p0 -i rl-9.9.2-P2.patch > > like it says in the documentation. > I could post the entire set of commands and I am executing and the > resulting outputs, but it is

Re: Simple question about zone and CNAME

2013-04-05 Thread Chris Thompson
On Apr 5 2013, John Wobus wrote: DNAME? Or SRV records. Surely browsers are adding support in the next day or two? Come on, April 1 has been over for too long for this. Incidentally, we have just been asked for an A record for cam.ac.uk to duplicate www.cam.ac.uk because, and I quote, "al

Re: Simple question about zone and CNAME

2013-04-05 Thread Sam Wilson
In article , Chris Thompson wrote: > On Apr 5 2013, John Wobus wrote: > > >> DNAME? > > > >Or SRV records. Surely browsers are adding support > >in the next day or two? > > Come on, April 1 has been over for too long for this. > > Incidentally, we have just been asked for an A record for ca

Re: Simple question about zone and CNAME

2013-04-05 Thread Mike Hoskins (michoski)
-Original Message- From: Chris Thompson Date: Friday, April 5, 2013 3:10 PM To: Bind Users Mailing List Subject: Re: Simple question about zone and CNAME >On Apr 5 2013, John Wobus wrote: > >>> DNAME? >> >>Or SRV records. Surely browsers are adding support >>in the next day or two? >

Re: Simple question about zone and CNAME

2013-04-05 Thread WBrown
> >Incidentally, we have just been asked for an A record for cam.ac.uk to > >duplicate www.cam.ac.uk because, and I quote, "all the publicity material > >sent out by the nominator [for an award for the web site] gave the URL > >as http://cam.ac.uk/ and this has been retweeted around". > > Yes, sa

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Vernon Schryver
> From: Red Cricket > here's a link to pastebin http://pastebin.com/RxcsJMLe > > I used ... > > > > patch -s -p0 -i rl-9.9.2-P2.patch > > > > like it says in the documentation. It looks like the patch was applied after running ./configure. That doesn't work because the some Makefile.in files ar

Re: Simple question about zone and CNAME

2013-04-05 Thread Dave Warren
On 2013-04-05 12:18, Sam Wilson wrote: We're currently prevaricating over putting in an A record for ed.ac.uk. Whilst my colleagues who manage active directory assure me that having an A record there - pointing at the content-managed web server that has difficulty handling arbitrary URLs - won't

Re: trouble compiling bind 9.9.2-P2 with rate limit patch rl-9.9.2-P2.patch

2013-04-05 Thread Red Cricket
Ah I think that is what I was doing wrong. I some how got the idea in my head that the patch needed to be applied after configure because I was getting "Patch which file:" prompts when I would run patch ... and that was actually being caused because I (or rpmbuild) was in the wrong directory when

Re: Can two views be layered?

2013-04-05 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/15/2013 07:11 PM, Joseph S D Yao wrote: > On Fri, Mar 15, 2013 at 06:56:57PM -0400, Novosielski, Ryan wrote: >> Hi all. Running BIND 9.6 I believe it is. Not important what >> version as if there is a version that can do this and I'm not >> runni

Re: Simple question about zone and CNAME

2013-04-05 Thread Warren Kumari
On Apr 5, 2013, at 3:48 PM, wbr...@e1b.org wrote: >>> Incidentally, we have just been asked for an A record for cam.ac.uk to >>> duplicate www.cam.ac.uk because, and I quote, "all the publicity > material >>> sent out by the nominator [for an award for the web site] gave the URL >>> as http://ca

Re: Simple question about zone and CNAME

2013-04-05 Thread Lawrence K. Chen, P.Eng.
- Original Message - > > On Apr 5, 2013, at 3:48 PM, wbr...@e1b.org wrote: > > >>> Incidentally, we have just been asked for an A record for > >>> cam.ac.uk to > >>> duplicate www.cam.ac.uk because, and I quote, "all the publicity > > material > >>> sent out by the nominator [for an awa

Re: Can two views be layered?

2013-04-05 Thread Joseph S D Yao
On Fri, Apr 05, 2013 at 04:24:24PM -0400, Novosielski, Ryan wrote: ... > One followup question to this: are there any limits to how the SOA > section is handled in this case? Can the SOA record be in the > $INCLUDE'd file, or does it have to be in the defined zone files > (which then would mean mai

Re: Can two views be layered?

2013-04-05 Thread Joseph S D Yao
On Sat, Apr 06, 2013 at 01:04:47AM -0400, Joseph S D Yao wrote: ... > Just as a logistical thing, the SOA record should be in the zone file > that $INCLUDEs the rest of the information, anmd no SOA record in the > latter. ... Which means, I should have added, that any time you update the $INCLUDE

Re: Can two views be layered?

2013-04-05 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/06/2013 01:05 AM, Joseph S D Yao wrote: > On Fri, Apr 05, 2013 at 04:24:24PM -0400, Novosielski, Ryan wrote: > ... >> One followup question to this: are there any limits to how the >> SOA section is handled in this case? Can the SOA record be in

Re: Simple question about zone and CNAME

2013-04-05 Thread Phil Mayers
Sam Wilson wrote: >In article , > Chris Thompson wrote: > >> On Apr 5 2013, John Wobus wrote: >> >> >> DNAME? >> > >> >Or SRV records. Surely browsers are adding support >> >in the next day or two? >> >> Come on, April 1 has been over for too long for this. >> >> Incidentally, we have just

Re: Simple question about zone and CNAME

2013-04-05 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/05/2013 04:12 PM, Dave Warren wrote: > On 2013-04-05 12:18, Sam Wilson wrote: >> We're currently prevaricating over putting in an A record for >> ed.ac.uk. Whilst my colleagues who manage active directory assure >> me that having an A record ther