Reverse DNS conditional forwardning

2018-01-18 Thread Karol Nowicki via bind-users
Hi Everyone  I have problem because my business need is to forward reverse lookup query for IPs which are in same time hosted on my local name server. That means few IPs from reverse zone of subnet for example 172.30.115.0/24 I need to forward to remote name server to get response with different

Impossible to activate logging

2018-01-18 Thread Pierre Couderc
under systemd, and under a lxd stretch container in a minimal stretch host. I get : Jan 18 10:21:13 bind named[893]: command channel listening on ::1#953 Jan 18 10:21:13 bind named[893]: isc_file_isplainfile '/var/log/bind/bind.log' failed: permission denied Jan 18 10:21:13 bind named[893]: co

Re: Reverse DNS conditional forwardning

2018-01-18 Thread Matus UHLAR - fantomas
On 18.01.18 09:32, Karol Nowicki via bind-users wrote: I have problem because my business need is to forward reverse lookup query for IPs which are in same time hosted on my local name server. That means few IPs from reverse zone of subnet for example 172.30.115.0/24 I need to forward to remote

Re: Impossible to activate logging

2018-01-18 Thread Anand Buddhdev
On 18/01/2018 11:36, Pierre Couderc wrote: Hi Pierre, > under systemd, and under a lxd stretch container in a minimal stretch host. > > I get : > > Jan 18 10:21:13 bind named[893]: command channel listening on ::1#953 > Jan 18 10:21:13 bind named[893]: isc_file_isplainfile > '/var/log/bind/bind

Re: [ASK] Block Malware Generate Random Subdomain, Domain and TLD

2018-01-18 Thread Tony Finch
Grant Taylor via bind-users wrote: > > Did you see or hear any talks about RPS in addition to RPZ? I'm afraid not - I guess it's still too new. Tony. -- f.anthony.n.finchhttp://dotat.at/ - I xn--zr8h punycode German Bight, Humber, Thames: North or northwest 7 to severe gale 9 backing west

Re: intermittent SERVFAIL for high visible domains such as *.google.com

2018-01-18 Thread Tony Finch
Brian J. Murrell wrote: > > In any case when this happens, it will last a few minutes until it > resolves itself and/or I issue an "rndc reload". That always seems to > correct it if I don't care to wait it out. Does the time to recovery correspond to the lame-ttl setting? The default is 10 minu

Re: intermittent SERVFAIL for high visible domains such as *.google.com

2018-01-18 Thread Brian J. Murrell
On Thu, 2018-01-18 at 15:41 +, Tony Finch wrote: > > Does the time to recovery correspond to the lame-ttl setting? I am not sure. I'm not always aware of when it starts. I guess if I am running a trace level permanently the log would tell me though. > The default > is 10 minutes - try redu

Re: Reverse DNS conditional forwardning

2018-01-18 Thread Grant Taylor via bind-users
On 01/18/2018 03:44 AM, Matus UHLAR - fantomas wrote: what you search for is the Classless IN-ADDR.ARPA delegation, described in RFC2317 Classless IN-ADDR.ARPA delegation likely won't work if all IPs involved are not configured for it. I would suggest adding NS records to (re)delegate the (f

Re: Impossible to activate logging

2018-01-18 Thread Pierre Couderc
On 01/18/2018 01:01 PM, Anand Buddhdev wrote: I don't know what the function "isc_file_isplainfile" checks for, but perhaps the executable bits on the file are causing the failure. Log files shouldn't be executable, so you normally need mode 0644 for them. Try changing the mode, and seeing if

Re: intermittent SERVFAIL for high visible domains such as *.google.com

2018-01-18 Thread Tony Finch
Brian J. Murrell wrote: > On Thu, 2018-01-18 at 15:41 +, Tony Finch wrote: > > > > The default is 10 minutes - try reducing it and see if the outage > > becomes shorter. > > If it does, what is that telling me? My hypothesis here is that `named` has marked all the nameservers for the domain t

Re: Reverse DNS conditional forwardning

2018-01-18 Thread Matus UHLAR - fantomas
On 01/18/2018 03:44 AM, Matus UHLAR - fantomas wrote: what you search for is the Classless IN-ADDR.ARPA delegation, described in RFC2317 On 18.01.18 09:39, Grant Taylor via bind-users wrote: Classless IN-ADDR.ARPA delegation likely won't work if all IPs involved are not configured for it. yo

NS ROOT queries to root servers

2018-01-18 Thread Medina, Antonio
Hi all, we are running BIND in linux servers. We are using release bind-9.9.4-51.el7_4.1.x86_64 We are not using BIND in an standard Internet environment. Instead, we are using BIND in a mobile network environment, in which DNS Root service is provided by service providers. Therefore, we a

Re: Reverse DNS conditional forwardning

2018-01-18 Thread Grant Taylor via bind-users
On 01/18/2018 12:08 PM, Matus UHLAR - fantomas wrote: you can create something very similar, not necessarily classless. simply redirect reverse names via CNAME to other zone. very standard. Yes. But that requires that something is done in the authoritative / parent zone. what's the point o