Re: Authoritative DNS High Memory Usage

2019-01-22 Thread Tony Finch
Jordan Tinsley wrote: > > DNS01 has extremely high memory usage while DNS02 has memory usage around > 50% and fluctuates up and down. I have seen some cases where reconfiguring the server (e.g. adding/removing views) can cause it to reconstruct all its zone configuration. Although the old zone da

RPZ question autoritative/recursive servers

2019-01-22 Thread Mik J via bind-users
Hello, I tried to dissociate roles and have:- 1 set of authoritative master/slave server- 1 set of recursive servers For a zone that I owned, the "recursive" servers forwards the request to the authoritative server. Otherwise the server resolves the query directly on the Internet.The authoritati

Re: RPZ question autoritative/recursive servers

2019-01-22 Thread Alan Clegg
On 1/22/19 9:41 AM, Mik J via bind-users wrote: > Internet, only my forward servers are, should I implement the RPZ > functionality on these forward only servers ? That's exactly what I do. My "forward only" servers are "forward only" because I'm testing DoH. Other than that, they are normal rec

Re: RPZ question autoritative/recursive servers

2019-01-22 Thread Bob Harold
On Tue, Jan 22, 2019 at 9:41 AM Mik J via bind-users < bind-users@lists.isc.org> wrote: > Hello, > > I tried to dissociate roles and have: > - 1 set of authoritative master/slave server > - 1 set of recursive servers > > For a zone that I owned, the "recursive" servers forwards the request to > th

Re: RPZ question autoritative/recursive servers

2019-01-22 Thread Tony Finch
Mik J via bind-users wrote: > For a zone that I owned, the "recursive" servers forwards the request to > the authoritative server. Beware: when you are forwarding the target server must be a recursive server. If you want to "forward" to an authoritative-only server, you must use "static-stub" zo

Named Service

2019-01-22 Thread Jordan Tinsley
Hello, Just wondering how to get the named service setup when compiling from source? When I tried on a test machine to enable named for startup using systemctl enable named or systemctl start named I get an error that named.service doesn't exist. I may be overlooking documentation some

Re: Named Service

2019-01-22 Thread Grant Taylor via bind-users
On 01/22/2019 08:12 AM, Jordan Tinsley wrote: I get an error that named.service doesn’t exist.  I may be overlooking documentation somewhere, but I don’t see anything about this. I don't think that the BIND source code includes distro / init daemon specific scripts / files. It's going to be u

Re: Named Service

2019-01-22 Thread Alan Clegg
On 1/22/19 10:12 AM, Jordan Tinsley wrote: > Just wondering how to get the named service setup when compiling from > source? I'm kinda old school, but adding "/usr/local/sbin/named" to /etc/rc.local has always worked for me. AlanC ___ Please visit http

Re: Named Service

2019-01-22 Thread Peter DeVries
You didn't mention your OS. I'm assuming Redhat Linux. The files you are looking for are /usr/lib/systemd/system/named{-chroot}.service. The files are not included in the BIND source. The easiest thing is to pull them out of one of the existing redhat BIND packages and edit for your needs. Th

RE: Named Service

2019-01-22 Thread Jordan Tinsley
Thank you for the information! Also, do I need to use the {-chroot} portion? Thanks, Jordan From: Peter DeVries Sent: Tuesday, January 22, 2019 11:32 AM To: Jordan Tinsley Cc: bind-users Subject: Re: Named Service You didn't mention your OS. I'm assuming Redhat Linux. The files

Re: Named Service

2019-01-22 Thread Peter DeVries
You should want the -chroot portion so you are running named in a chroot environment but you don't need it. There are two files named.service and named-chroot.service. There is also rndc-startup.service (maybe the wrong filename) that helps configure rndc if it isn't already. I typically remove

RE: Named Service

2019-01-22 Thread Jordan Tinsley
Okay, if that doesn’t work, then temporarily until I can get the service figured out I will just do - adding "/usr/local/sbin/named" to /etc/rc.local From: Peter DeVries Sent: Tuesday, January 22, 2019 11:38 AM To: Jordan Tinsley Cc: bind-users Subject: Re: Named Service You should wa

Re: Selective forwarding?

2019-01-22 Thread ObNox
On 22/01/2019 02:20, Grant Taylor via bind-users wrote: Before going into your requirements / desires below, I feel the need to say: I feel like this can be done with a single common zone. Site 1 is authoritative and handles dynamic updates. Site(s) 2 (and 3) slave the zone -and- forward dyna

Re: Selective forwarding?

2019-01-22 Thread Grant Taylor via bind-users
On 1/22/19 10:06 PM, ObNox wrote: I'm not fully against this idea but I'm not comfortable with Site2/3 depending on Site1 for the updates. Fair. If for some reason Site1 is unreachable and a host tries to update the DHCP lease, the DNS update would fail and the said host wouldn't be reachabl

Unbound 1.9 release date

2019-01-22 Thread rams
Greetings, Is anyone knows unbound 1.9 release date? Regards, Ramesh ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinf