listen-to clusterIP address

2013-06-05 Thread paul
Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because the cluster Ip was not available when named originally started even though I have listen-to the cluster ip listed in my named.conf. Is there a way to make na

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
On 06/05/2013 07:37 PM, paul wrote: Hi. I have a two node active passive cluster serving webpages. When a failover occurs, I have to restart named on the now active node because You don't have to restart it. "rndc reconfig" will re-check the IPs on the machine and re-listen. the cluster Ip

Re: listen-to clusterIP address

2013-06-05 Thread paul
Thanks for the quick reply. rndc reconfig has the same problem as a restart. I need to automatically listen to the new ip address without manual intervention. On Wed, 2013-06-05 at 09:14 +0100, Phil Mayers wrote: > On 06/05/2013 07:37 PM, paul wrote: > > Hi. I have a two node active passive cluster

Re: listen-to clusterIP address

2013-06-05 Thread Peter Andreev
2013/6/5 Phil Mayers > On 06/05/2013 07:37 PM, paul wrote: > >> Hi. I have a two node active passive cluster serving webpages. When a >> failover occurs, I have to restart named on the now active node because >> > > You don't have to restart it. "rndc reconfig" will re-check the IPs on the > mach

Re: listen-to clusterIP address

2013-06-05 Thread Mitchell Warden
Hi Paul, BIND will rescan the interfaces automatically - I think by default every 60 minutes. If a listen-on address becomes available it should be used. It would probably be better to automatically trigger a reconfig, but you can lower the scan time with the "interface-interval" option. I have

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
Peter Andreev wrote: >2013/6/5 Phil Mayers > >> On 06/05/2013 07:37 PM, paul wrote: >> >>> Hi. I have a two node active passive cluster serving webpages. When >a >>> failover occurs, I have to restart named on the now active node >because >>> >> >> You don't have to restart it. "rndc reconfig" w

Re: listen-to clusterIP address

2013-06-05 Thread paul
Thanks again. I am using linux fedora17. I have tested changing interface-interval to i min and that seems to work. I am also looking on the cluster mailing list to see if I can include named in my cluster configuration. Paul On Wed, 2013-06-05 at 10:02 +0100, Phil Mayers wrote: > Peter Andreev wr

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
On 05/06/13 20:06, paul wrote: Thanks for the quick reply. rndc reconfig has the same problem as a restart. I need to automatically listen to the new ip address without manual intervention. "rndc reconfig" need not be manual - surely your cluster software can execute a script on IP failover?

Re: listen-to clusterIP address

2013-06-05 Thread G.W. Haywood
Hi there, On Wed, 5 Jun 2013, paul wrote: I need to automatically listen to the new ip address without manual intervention. Listen on a virtual/alias whatever interface amnd forward ports from the real one(s)? -- 73, Ged. ___ Please visit https://

Re: listen-to clusterIP address

2013-06-05 Thread Abdul Khader
Better to write a script which would first check the availability of Virtual IP before doing "rndc reconfig" during a failover. In case the script does not find the VIP in the first run, you can put in a loop to check for VIP for N number of times with N number of seconds interval. The failover

Re: listen-to clusterIP address

2013-06-05 Thread Mark Andrews
Use IPv6 and listen-on-v6 { any; };. The IPv4 socket api doesn't have the hooks to force the UDP replies from the correct address. The IPv6 socket api has more functionality. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET:

Re: listen-to clusterIP address

2013-06-05 Thread Phil Mayers
On 05/06/13 12:42, Mark Andrews wrote: Use IPv6 and listen-on-v6 { any; };. The IPv4 socket api doesn't have the hooks to force the UDP replies from the correct address. The IPv6 socket api has more functionality. For what it's worth, there is code to do this in other projects: https://gith

Confused about a basic concept

2013-06-05 Thread Bryan Harris
Hi all,I think I may be confused about a very basic DNS concept.  Sorry if this has been asked before.1. I have a master and two slaves.2. The master server is the SOA for my zone.  The SOA record points to the master server.3. Each of the two slaves are authoritative for my zone.4. There are 2 NS

Re: Confused about a basic concept

2013-06-05 Thread Ben Croswell
Everything you listed is pretty close to accurate. A couple points of clarification. 8) The master needs UDP/TCP 53 open to the slaves. Before a zone transfer can happen the slave needs to get the SOA RR from the master to see if the serial number has changed. This normally happens over UDP 53(s

Re: Confused about a basic concept

2013-06-05 Thread Warren Kumari
On Jun 5, 2013, at 9:02 AM, Bryan Harris wrote: > Hi all, > > I think I may be confused about a very basic DNS concept. Many people are, but most don't a: know or B: admit it :-P > Sorry if this has been asked before. > > 1. I have a master and two slaves. > 2. The master server is the SOA

Re: Confused about a basic concept

2013-06-05 Thread Carlos M. Martinez
The 'hidden master' setup is a very good strategy for a number of reasons. I think the original description only derails a bit when using the term 'authoritative': > I'm being told "our authoritative DNS >> servers should not receive any queries", as well as "DNS slaves >> respond to quer

Re: any requests

2013-06-05 Thread Tony Finch
Leonard Mills wrote: > If your some of your clients are SMTP relays, then ANY is the default > lookup for an MX and is perfectly normal. Much better from the point of > view of the mail servers to do one lookup instead of several. You are not quite correct. See http://fanf.livejournal.com/10

This list's prefix

2013-06-05 Thread Narcis Garcia
It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for messages' subject? For example: [bind-u] Thanks. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list b

Re: This list's prefix

2013-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Narcis Garcia Date: Wednesday, June 5, 2013 12:43 PM To: "bind-users@lists.isc.org" Subject: This list's prefix >It's not the only mailing list where I'm subscribed. >Could please the administrator setup a prefix for messages' subject? > >For example: >[bind-u]

Re: This list's prefix

2013-06-05 Thread Jeremy C. Reed
On Wed, 5 Jun 2013, Narcis Garcia wrote: > It's not the only mailing list where I'm subscribed. > Could please the administrator setup a prefix for messages' subject? > > For example: > [bind-u] Please just have your MUA or your mail filtering client look at the following header (and add the su

Re: This list's prefix

2013-06-05 Thread Phil Mayers
On 05/06/13 17:43, Narcis Garcia wrote: It's not the only mailing list where I'm subscribed. Could please the administrator setup a prefix for messages' subject? This is getting to be an FAQ. Please read this entire (recent) thread: https://lists.isc.org/pipermail/bind-users/2013-May/090574.ht

Re: Confused about a basic concept

2013-06-05 Thread Bryan Harris
Hi everyone,Thanks for all the detailed responses, I think I have a better understanding of things now.  I was completely and totally confused about UDP/TCP.  I am just going to take a wild guess that doing iptables the way I described would've caused a bunch of problems...After reading everything

Re: This list's prefix

2013-06-05 Thread Narcis Garcia
Somebody has answered me privately and didn't realized until I've checked all details of each message. I've been near to respond to the list about that message, unknown for the whole list. There are some Mailman's features that help a lot to usability for users, both subject prefix and Reply-To li

Re: This list's prefix

2013-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Narcis Garcia Date: Wednesday, June 5, 2013 1:02 PM To: "bind-users@lists.isc.org" Subject: Re: This list's prefix >Somebody has answered me privately and didn't realized until I've >checked all details of each message. I've been near to respond to the >list abo

Re: Confused about a basic concept

2013-06-05 Thread SM
Hi Bryan, At 09:52 05-06-2013, Bryan Harris wrote: Regarding if we need a hidden master in the first place, I wish I could remember. :-) It's been that way since I came here and I suspect it's a requirement we will simply have to keep using. Sometimes it is better to ask or else you can end u

Re: any requests

2013-06-05 Thread Vernon Schryver
> From: Tony Finch > You are not quite correct. See http://fanf.livejournal.com/10.html for > details. It is obvious to anyone willing to spend a few seconds experimenting that is true of current BIND9 code (and as far as I know old versions): } If a DNS cache already has any records (usu

Re: This list's prefix

2013-06-05 Thread Warren Kumari
On Jun 5, 2013, at 11:43 AM, Narcis Garcia wrote: > It's not the only mailing list where I'm subscribed. > Could please the administrator setup a prefix for messages' subject? You have unwittingly walked into a religious argument. If, like me, you really like list prefixes, *and* you use proc

Re: This list's prefix

2013-06-05 Thread Carlos M. Martinez
That's a neat trick, thanks Warren! I also do like prefixes, BTW (as can be seen in the other thread referenced). cheers! ~Carlos On 6/5/13 2:46 PM, Warren Kumari wrote: > > On Jun 5, 2013, at 11:43 AM, Narcis Garcia wrote: > >> It's not the only mailing list where I'm subscribed. >> Could p

Re: This list's prefix

2013-06-05 Thread Mike Hoskins (michoski)
-Original Message- From: Warren Kumari Date: Wednesday, June 5, 2013 1:46 PM To: Narcis Garcia Cc: "bind-users@lists.isc.org" Subject: Re: This list's prefix >-- >Curse the dark, or light a match. You decide, it's your dark. >-- Valdis Kletnieks Very appropriate!

Re: Confused about a basic concept

2013-06-05 Thread Tony Finch
Bryan Harris wrote: > > After reading everything it looks to me like our hidden master configuration > is basically okay, but by some of the best practices described, it could be > better and easier to work with if we had a separate caching layer. Note that the caches live on the client side of D

Re: any requests

2013-06-05 Thread Tony Finch
Vernon Schryver wrote: > > If you have a domain to which you can can add records for a subdomain > with differing 5-30 second TTLs and can spend not just 5 seconds but > a few minutes playing around, you might come to my conclusion. I think > they treat ANY as if it were psuedo-rdataset containin

Re: any requests

2013-06-05 Thread Doug Barton
On 06/05/2013 11:33 AM, Tony Finch wrote: I believe the ANY hack on mail servers was a Sendmailism 20ish years ago. s/Send/q/ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

Re: any requests

2013-06-05 Thread Chris Buxton
On Jun 5, 2013, at 11:59 AM, Doug Barton wrote: > On 06/05/2013 11:33 AM, Tony Finch wrote: >> I believe the ANY hack on mail servers was a Sendmailism 20ish years ago. > > s/Send/q/ That makes even more sense. DJB always thinks he knows best. ___ Plea

Re: any requests

2013-06-05 Thread Vernon Schryver
> From: Tony Finch > > a few minutes playing around, you might come to my conclusion. I think > > they treat ANY as if it were psuedo-rdataset containing some of the > > RRs for the domain with a TTL equal to the minimum of all of the TTLs > > of the contained rdatasets. (I thought I sometimes

Re: This list's prefix

2013-06-05 Thread Elmar K. Bins
war...@kumari.net (Warren Kumari) wrote: > If, like me, you really like list prefixes, *and* you use procmial, you can > add them yourself: [...] And the 100-dollar-question is: How do you remove them on outgoing mails? ;-) Elmar. PS: But thank you for the adding recipe already.

Re: This list's prefix

2013-06-05 Thread Warren Kumari
Warren Kumari -- Please excuse typing, etc -- This was sent from a device with a tiny keyboard. On Jun 5, 2013, at 2:27 PM, "Elmar K. Bins" wrote: > war...@kumari.net (Warren Kumari) wrote: > >> If, like me, you really like list prefixes, *and* you use procmial, you can >> add them your

Re: This list's prefix

2013-06-05 Thread Elmar K. Bins
war...@kumari.net (Warren Kumari) wrote: > > And the 100-dollar-question is: How do you remove them on outgoing mails? > > ;-) > You don't -- that's part of the churches evangelism / outreach effort. ;) > (Less flip answer: sorry, don't know if you can...) Just wondering, because your respons

Re: This list's prefix

2013-06-05 Thread SM
Hi Elmar, At 12:27 05-06-2013, Elmar K. Bins wrote: And the 100-dollar-question is: How do you remove them on outgoing mails? ;-) The answer is to edit the subject line after hitting the reply button. :-) Regards, -sm ___ Please visit https://list

Re: This list's prefix

2013-06-05 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/05/2013 03:47 PM, Elmar K. Bins wrote: > war...@kumari.net (Warren Kumari) wrote: > >>> And the 100-dollar-question is: How do you remove them on >>> outgoing mails? ;-) >> You don't -- that's part of the churches evangelism / outreach >> effort

Re: does zone trump forward?

2013-06-05 Thread Dave Warren
On 2013-06-04 06:42, Alan Shackelford wrote: We have 2843 authoritative zones. We run a split brain DNS. The new hospitals and other entities need to see our internal zone view once they have "joined". So I have them forward queries during the early stages of the merger, until I can get control

Re: does zone trump forward?

2013-06-05 Thread Jonathan Reed
> > But then I just hate forwards. Burned 1000x times, lesson learned :) What are you referring to? Why are forwards such a bad idea? On Wed, Jun 5, 2013 at 4:54 PM, Dave Warren wrote: > On 2013-06-04 06:42, Alan Shackelford wrote: > > We have 2843 authoritative zones. We run a split brain D

Re: does zone trump forward?

2013-06-05 Thread Dave Warren
On 2013-06-05 14:27, Jonathan Reed wrote: But then I just hate forwards. Burned 1000x times, lesson learned :) What are you referring to? Why are forwards such a bad idea? They're not automatically a bad idea, but I always prefer having a local copy of a zone unless that's not practica

Re: Confused about a basic concept

2013-06-05 Thread btb
On 2013.06.05 10.02, Bryan Harris wrote: > Hi all, > > I think I may be confused about a very basic DNS concept. Sorry if this has > been asked before. > > 1. I have a master and two slaves. > 2. The master server is the SOA for my zone. The SOA record points to the > master server. > 3. Each o

Re: any requests

2013-06-05 Thread Dave Warren
On 2013-06-05 12:28, Vernon Schryver wrote: I thought Google Public DNS re-fetched RRsets as they were expiring in >order to keep the cache populated, which would explain what you see, I don't understand how they could pre-fetch the gazillions of RRsets that are rarely requested. As far as I

[Off-Topic] RE: This list's prefix

2013-06-05 Thread Stuart Browne
> -Original Message- > From: bind-users-bounces+stuart.browne=ausregistry.com...@lists.isc.org > [mailto:bind-users-bounces+stuart.browne=ausregistry.com...@lists.isc.org] > On Behalf Of Elmar K. Bins > Sent: Thursday, 6 June 2013 5:46 AM > To: bind-users@lists.isc.org > Subject: Re: This l

Re: Confused about a basic concept

2013-06-05 Thread Mark Andrews
In message <05883710-136f-4dc2-8079-e29a68fed...@me.com>, Bryan Harris writes: > Hi everyone, > > Thanks for all the detailed responses, I think I have a better > understanding of things now. I was completely and totally confused about > UDP/TCP. I am just going to take a wild guess that doing i

Re: any requests

2013-06-05 Thread Vernon Schryver
> From: Dave Warren > >> I thought Google Public DNS re-fetched RRsets as they were expiring in > >> >order to keep the cache populated, which would explain what you see, > > I don't understand how they could pre-fetch the gazillions of RRsets > > that are rarely requested. > ... > I'm not conv

Re: [Off-Topic] RE: This list's prefix

2013-06-05 Thread Narcis Garcia
Not everyone has the same software infrastructure, and not everyone has the same visual proficiency. For this reason a Subject Prefix helps on manage much messages on inbox. I don't understand why the Subject Prefix can be inconvenient for someone, if it's brief. Al 06/06/13 01:11, En/na Stuart