NAMED issue

2017-02-09 Thread Sudharanjan Patnaik
Hi Team, We are facing an issue with BIND since last 1 year, will you be able to help. We have a DNS master and 4 Replicas at 2 sites. Current BIND version: 9.9.9.P5 (recently patched to P5). Issue: The named process is getting hung or stopped at least once a day on each of these Replicas. This is

Question!

2017-02-09 Thread IP망설계팀
Hello, We have DNS servers (Venders are Dell & HP & Fujitsu) Recently, we upgraded bind version from 9.9.8-P3 to 9.9.9-P4. We find out server query performance droped from our test.(Used DNS perf. program) Especially, dell server droped minus 61%. I wonder why server performance droped. And why d

Re: domain-unable-resolve

2017-02-09 Thread Abdul Khader
Is your DNS server(ns10.cyberia.net.sa) able to connect NS servers of of abudawood.com ? On 2/9/2017 11:32 AM, Ejaz wrote: Helo, Time to time we are having problem in resolving some domains, one of them is “*abudawood.com*” we unable to resolve through our DNS servers of “ns10.cyberia.n

Re: NAMED issue

2017-02-09 Thread Johannes Kastl
On 09.02.17 09:24 Sudharanjan Patnaik wrote: > Issue: The named process is getting hung or stopped at least once a > day on each of these Replicas. This is happening since more than 1 > year. Meanwhile, many vulnerability patch versions upgraded and > currently running with the latest BIND 9.9.9.P

Re: domain-unable-resolve

2017-02-09 Thread Mark Andrews
In message <9adb101d282a6$ac1699b0$0443cd10$@cyberia.net.sa>, "Ejaz" writes: > > Helo, > > Time to time we are having problem in resolving some domains, one of them is > "abudawood.com" we unable to resolve through our DNS servers of > "ns10.cyberia.net.sa" where I have latest bind version and

Re: domain-unable-resolve

2017-02-09 Thread Reindl Harald
Am 09.02.2017 um 08:32 schrieb Ejaz: Time to time we are having problem in resolving some domains, one of them is “*abudawood.com*” we unable to resolve through our DNS servers of “ns10.cyberia.net.sa” where I have latest bind version and all, what could be the issue and what is the best way

RE: domain-unable-resolve

2017-02-09 Thread Ejaz
Thank you all, for the detailed explanation, I understood as sys admin but our client will comparing with Google open DNS server. No, I can't use his DNS server. From ns10.cyberia.net.sa, connection timed out.. It is one of our VIP customer and complaining that if "I have problem

Re: domain-unable-resolve

2017-02-09 Thread Abdul Khader
On your DNS server(recursing) put the following do that any query for the domain abudawood.com all the requests are forwarded to google DNS server. zone "abudawood.com" IN { type forward; forward only; forwarders { 8.8.8.8; }; }; Regards On 2/9/2017 1:34 PM, Ejaz

Named issue

2017-02-09 Thread Sudharanjan Patnaik
know what logs you need. Sudharanjan -- next part -- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 244 bytes Desc: OpenPGP digital signature URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170209/d9b44df6

Bind failing to start on new 9.9.4 server

2017-02-09 Thread Robert Moskowitz
I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I currently do not have DNSSEC enabled, and not enabling it for the initial migration work. I have looked over changes in named.conf and believe I have made the necessary changes. My

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Ray Bellis
On 09/02/2017 14:28, Robert Moskowitz wrote: > I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, > I am building this on a new server. I currently do not have DNSSEC > enabled, and not enabling it for the initial migration work. > > I have looked over changes in named.conf

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Sten Carlsen
On 09-02-2017 15.31, Ray Bellis wrote: > On 09/02/2017 14:28, Robert Moskowitz wrote: >> I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, >> I am building this on a new server. I currently do not have DNSSEC >> enabled, and not enabling it for the initial migration work.

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Robert Moskowitz
On 02/09/2017 09:31 AM, Ray Bellis wrote: On 09/02/2017 14:28, Robert Moskowitz wrote: I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I currently do not have DNSSEC enabled, and not enabling it for the initial migration work. I ha

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Reindl Harald
Am 09.02.2017 um 15:44 schrieb Robert Moskowitz: On 02/09/2017 09:31 AM, Ray Bellis wrote: On 09/02/2017 14:28, Robert Moskowitz wrote: I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I currently do not have DNSSEC enabled, and not

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Robert Moskowitz
On 02/09/2017 09:31 AM, Ray Bellis wrote: On 09/02/2017 14:28, Robert Moskowitz wrote: I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I currently do not have DNSSEC enabled, and not enabling it for the initial migration work. I ha

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Alan Clegg
On 2/9/17 8:53 AM, Robert Moskowitz wrote: > > > On 02/09/2017 09:31 AM, Ray Bellis wrote: >> On 09/02/2017 14:28, Robert Moskowitz wrote: >>> I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, >>> I am building this on a new server. I currently do not have DNSSEC >>> enabl

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Reindl Harald
Am 09.02.2017 um 15:53 schrieb Robert Moskowitz: On 02/09/2017 09:31 AM, Ray Bellis wrote: On 09/02/2017 14:28, Robert Moskowitz wrote: I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I currently do not have DNSSEC enabled, and n

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Robert Moskowitz
On 02/09/2017 09:55 AM, Alan Clegg wrote: On 2/9/17 8:53 AM, Robert Moskowitz wrote: On 02/09/2017 09:31 AM, Ray Bellis wrote: On 09/02/2017 14:28, Robert Moskowitz wrote: I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I current

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Robert Moskowitz
Strange.. On 02/09/2017 09:31 AM, Ray Bellis wrote: On 09/02/2017 14:28, Robert Moskowitz wrote: I am migrating to Centos7 from Centos6. Going from Bind 9.8.2 to 9.9.4, I am building this on a new server. I currently do not have DNSSEC enabled, and not enabling it for the initial migration wo

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Ray Bellis
On 09/02/2017 15:32, Robert Moskowitz wrote: > Now doing it 'right' and seeing: > > 09-Feb-2017 09:59:52.191 could not open file '/run/named/named.pid': > Permission denied > 09-Feb-2017 09:59:52.192 generating session key for dynamic DNS > 09-Feb-2017 09:59:52.192 could not open file '/run/named

SOLVED - Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Robert Moskowitz
File permission problems. On 02/09/2017 10:38 AM, Ray Bellis wrote: On 09/02/2017 15:32, Robert Moskowitz wrote: Now doing it 'right' and seeing: 09-Feb-2017 09:59:52.191 could not open file '/run/named/named.pid': Permission denied 09-Feb-2017 09:59:52.192 generating session key for dynamic

Re: Bind failing to start on new 9.9.4 server

2017-02-09 Thread Phil Mayers
On 09/02/17 14:51, Reindl Harald wrote: just take the "ExecStart" line, look in the environment file which defines $OPTIONS, add them and finally -g and press enter On RH-based systems, the SELinux transition behaviour is different running something from the CLI versus init scripts/systemd, s