Re: forward first and fallback not working

2016-08-24 Thread marco
No errors on logs and if i remove forward first; forwarders { 8.8.8.8; }; all is workin properly . i don't know if i am missing something but i think it is a bug . On Tue, 23 Aug 2016 21:05:13 + "Darcy Kevin (FCA)" wrote: > Look in your logs at the time of named startup to see if yo

RE: Slaves or Forwarders?

2016-08-24 Thread Tony Finch
Darcy Kevin (FCA) wrote: > From an InfoSec standpoint, of course one would prefer to use > cryptographic methods of securing DNS data, Yes, use TSIG for zone transfers. You can also use it for forwarding. Tony. -- f.anthony.n.finchhttp://dotat.at/ - I xn--zr8h punycode Fair Isle, North F

Re: forward first and fallback not working

2016-08-24 Thread Marco Felettigh
The dns resolution with 8.8.8.8 works fine with "forward first" if 8.8.8.8 is working but for testing i blocked with an intermediate firewall the dns requests to the forwarder and two things happened (the second one is bad). 1) If the firewall reset the connection to 8.8.8.8 bind fallbacks on its

Re: forward first and fallback not working

2016-08-24 Thread /dev/rob0
On Wed, Aug 24, 2016 at 05:28:55PM +0200, Marco Felettigh wrote: > The dns resolution with 8.8.8.8 works fine with "forward first" if > 8.8.8.8 is working but for testing i blocked with an intermediate > firewall the dns requests to the forwarder and two things happened > (the second one is bad)

Need of caching on bind server

2016-08-24 Thread Harshith Mulky
Hello, I am trying to understand why caching is required on the bind server, when the client receiving the responses would be caching based on TTL values. So, Is caching required on the server, if the client is not able to cache such responses? Isn't it a overhead on both the client and serv

RE: Need of caching on bind server

2016-08-24 Thread Woodworth, John R
> From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of > Harshith Mulky > Sent: Thursday, August 25, 2016 12:47 AM > To: bind-users@lists.isc.org > Subject: Need of caching on bind server > > Hello, > > I am trying to understand why caching is required on the bind server, > when

Re: Need of caching on bind server

2016-08-24 Thread Mukund Sivaraman
Hi Harshith On Thu, Aug 25, 2016 at 04:47:03AM +, Harshith Mulky wrote: > Hello, > > > I am trying to understand why caching is required on the bind server, > when the client receiving the responses would be caching based on TTL > values. > > > So, > > Is caching required on the server, i

Re: Need of caching on bind server

2016-08-24 Thread Dave Warren
> I am trying to understand why caching is required on the bind server, > when the client receiving the responses would be caching based on TTL > values. > > So, > Is caching required on the server, if the client is not able to > cache such responses? Isn't it a overhead on both the client and se

Re: DNSKEY and RRSIG DNSKEY TTL values aren't changed after changing of zone's TTL

2016-08-24 Thread Aleks Ostapenko
To make zone dinamically updated - I added into `zone` section of named.conf 'allow-update { any; };' directive and made `rndc reload` after that. Then I made `rndc freeze `. But after this command - the signed zone file (`.signed`) still remain in raw format (not text readable) - so I can read it