Re: ISC launches new website and mailing list manager

2008-11-14 Thread Scott Haneda
Very nice, I am also cc'ing webmaster@ as per the email. I think it is a nice redo, very well done. One place I personally spend a lot of time, is the docs, trying to avoid having to ask questions here on the list and wasting others time. A quick google search: http://www.google.com/search

Lots of errors, having 'lame' day, suggestions?

2008-11-17 Thread Scott Haneda
Look at some web stats, I saw a traffic drop over the weekend on a few sites. Looking into it, I am stumped. Here are a few named log snips: 17-Nov-2008 05:47:26.582 security: info: client 203.162.4.198#40307: query (cache) 'nuclearrabbit.com/MX/IN' denied 17-Nov-2008 05:47:27.375 security:

Lots of errors, having 'lame' day, suggestions?

2008-11-17 Thread Scott Haneda
Look at some web stats, I saw a traffic drop over the weekend on a few sites. Looking into it, I am stumped. Here are a few named log snips: 17-Nov-2008 05:47:26.582 security: info: client 203.162.4.198#40307: query (cache) 'nuclearrabbit.com/MX/IN' denied 17-Nov-2008 05:47:27.375 security:

Re: Lots of errors, having 'lame' day, suggestions?

2008-11-17 Thread Scott Haneda
So it looks like my zone config file, not the actual zone, but the config statement that is in conf was gone. I added it back in and all is well now. I have ran rndc reload so many times, I have no idea how it was deleted, it is all in one file, not separate files, so it seems unlikely i

Re: Zone does not show an A record when using Dig

2008-11-18 Thread Scott Haneda
Can I see your dig command and results? Seems to work ok for me when I use default servers, in this case I use openDNS: ( I also get good results with other NS's as well ) $dig emailclick.discoversunriver.com ; <<>> DiG 9.4.2-P2 <<>> emailclick.discoversunriver.com ;; global options: printcm

Help understanding lame server error

2008-11-19 Thread Scott Haneda
I have a good deal if lame server errors in my logs, which I am not entirely understanding. 19-Nov-2008 15:36:34.657 lame-servers: info: lame server resolving '170.73.234.209.in-addr.arpa' (in '73.234.209.in-addr.arpa'?): 209.234.64.192#53 19-Nov-2008 15:36:34.955 lame-servers: info: lame s

Re: Help understanding lame server error

2008-11-20 Thread Scott Haneda
On Nov 19, 2008, at 6:19 PM, Kevin Darcy wrote: Scott Haneda wrote: I have a good deal if lame server errors in my logs, which I am not entirely understanding. 19-Nov-2008 15:36:34.657 lame-servers: info: lame server resolving '170.73.234.209.in-addr.arpa' (in '73.234.2

Just to make sure I have TTL's understood.

2008-11-25 Thread Scott Haneda
Before I go out on a limb, I wanted to ask those who know more about this than I do. I added a zone change to my primary server, in this case, setting the TTL's pretty low, as things were going to move around a bit in the beginning. Waited a few weeks after adding it. * The basic thing I

Re: Just to make sure I have TTL's understood.

2008-11-25 Thread Scott Haneda
On Nov 25, 2008, at 10:33 PM, Res wrote: Aa an after-thought, check yor ACL's...normally, IIRC once you do an rndc reload and changes are detected the master notifies the slaves right away, I might be wrong but I'm sure it used to do that. That is what I thought as well, either way, it has

Re: Just to make sure I have TTL's understood.

2008-11-25 Thread Scott Haneda
o 300 in each case? ie: @ 300 MX 10 gonepostal.hostwizard.com. Thanks. On Nov 25, 2008, at 10:17 PM, Res wrote: On Tue, 25 Nov 2008, Scott Haneda wrote: ORIGIN . ^^ not needed $TTL 86400 ; 1 day example.com IN SOA ns1.hostwizar

Re: Just to make sure I have TTL's understood.

2008-11-25 Thread Scott Haneda
Based on your suggestions, I have made a template zone file to base all new zones on, do you agree with this? * When I need to change to a low TTL for migration needs, what would be the approach to that with this template format? $TTL 1D @ IN SOA ns1.hostwizard.com. scott.hos

Re: 50 million records under one domain using Bind

2008-12-15 Thread Scott Haneda
Out of curiosity, if one zone is to hold 50 million records, what would they all be for? I can't even imagine blogspot or godaddy being in that league. Perhaps with this many records just using a wldcard would be simpler? Then again maybe this is a new tld, or old one being consolidated? --

General performance

2008-12-23 Thread Scott Haneda
Hello, I am working with a client of mine, who jumped right into developing a backend system for managing his arsenal of sites. I am not entirely sure what he is up to, but there is potential to have to add in 50,000 zones. From what I can gather, all the zones are the same, they all have

Help tracing out a strange lookup case

2008-12-24 Thread Scott Haneda
Trying to help a client, they stumped me today. dig crm.share-ideas.com ; <<>> DiG 9.4.2-P2 <<>> crm.share-ideas.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35978 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUES

Named goes deaf

2009-01-07 Thread Scott Haneda
Hello, running BIND 9.4.2-P2 on OS X 10.5, this is just what comes with OS X out of the box. Today, my secondary NS provider could not zone transfer. I looked into it and could not telnet to port 53, connection refused. This happens quite often on my friends machine, but he runs OS X 10.3

Re: Named goes deaf

2009-01-09 Thread Scott Haneda
It is getting important to know if you are on Mac OS X, if you are, this may have been solved, and somehow, I overlooked it. It appears launcd, the cron replacement tool in OS X, can start named before the network interfaces come up. I am not sure. This implies a reboot happened on my mach

Re: Named goes deaf

2009-01-09 Thread Scott Haneda
On Jan 9, 2009, at 9:38 AM, Chris Buxton wrote: On Jan 9, 2009, at 3:14 AM, Scott Haneda wrote: It is getting important to know if you are on Mac OS X, if you are, this may have been solved, and somehow, I overlooked it. It appears launcd, the cron replacement tool in OS X, can start

denied NS/IN

2009-01-20 Thread Scott Haneda
Hello, looking at my logs today, I am getting hammered with these: 20-Jan-2009 15:39:06.284 security: info: client 66.230.160.1#48517: query (cache) './NS/IN' denied 20-Jan-2009 15:39:06.790 security: info: client 66.230.128.15#31593: query (cache) './NS/IN' denied Repeated over and over, ho

Re: denied NS/IN

2009-01-20 Thread Scott Haneda
On Jan 20, 2009, at 3:52 PM, Frank Bulk wrote: That's being discussed on NANOG, here's one thread: http://markmail.org/message/ydiqnztzmz5qmusf See here for more details in blocking them: http://www.cymru.com/Documents/secure-bind-template.html specifically: blackhole { // Deny anyth

Re: denied NS/IN

2009-01-20 Thread Scott Haneda
On Jan 20, 2009, at 5:44 PM, Mark Andrews wrote: In message <232b45f8-acd3-427a-95e9-bc3ca5fc9...@newgeo.com>, Scott Haneda writ es: Hello, looking at my logs today, I am getting hammered with these: 20-Jan-2009 15:39:06.284 security: info: client 66.230.160.1#48517: query (cache) &#

What to do about openDNS

2009-01-20 Thread Scott Haneda
I brought this up a few months back. For me, it is getting worse, and I am not able to come up with a solution. I have many clients who reg domains. They all point to my NS. Sometimes, the client lapses hosting with me, and I delete the zones. They usually leave the domain reg'd and my

Re: What to do about openDNS

2009-01-21 Thread Scott Haneda
On Jan 20, 2009, at 7:39 PM, Fr34k wrote: Some quick ideas for dealing with, what I will call, defunct domains. FIRST, STOP THE MADNESS: Define what a defunct zone is in your TOS/AUP, so you have the power to deal with this situation as you see fit. Sure, policy is a good start, and would h

Re: unwanted delegations was: What to do about openDNS

2009-01-21 Thread Scott Haneda
On Jan 20, 2009, at 6:42 PM, Matthew Pounsett wrote: On 20-Jan-2009, at 21:24 , Danny Thomas wrote: Scott Haneda wrote: I brought this up a few months back. For me, it is getting worse, and I am not able to come up with a solution. I have many clients who reg domains. They all point to

Re: What to do about openDNS

2009-01-21 Thread Scott Haneda
On Jan 21, 2009, at 1:48 AM, Sten Carlsen wrote: Are you really sure this is ALL the fault of opendns? Mostly, and in my tests, I believe so. However, it was also why I was asking here, before I go too far out on a limb. Seems to me that the addition of www. and other such like stuff is

dig for domain registration

2009-01-22 Thread Scott Haneda
Hello, I want to do some spring cleaning on my dns. WHOIS seems to throttle me back with too many checks, how can I use dig to check for registration of a domains? If I do `dig NS example.com` and grep out my NS, does that suffice for making sure my primary and secondary are listed? What

Re: dig for domain registration

2009-01-22 Thread Scott Haneda
There are, I ran a repeat loop in bash, for only 50 domains, and I was thorttled back to I believe, once every 3 minutes. Different WHOIS servers may have different policy, but it is also slow. Dig should speed up my queries by a large degree. Thank you. On Jan 22, 2009, at 1:24 PM, CB wr

Re: dig for domain registration

2009-01-23 Thread Scott Haneda
On Jan 23, 2009, at 2:01 AM, Stephane Bortzmeyer wrote: On Thu, Jan 22, 2009 at 01:16:00PM -0800, Scott Haneda wrote a message of 18 lines which said: If I do `dig NS example.com` and grep out my NS, does that suffice for making sure my primary and secondary are listed? It depends on the

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT "Illegal"

2009-01-26 Thread Scott Haneda
On Jan 26, 2009, at 6:17 PM, Mark Andrews wrote: Which just means you have not ever experienced the problems causes. MTA are not required to look up the addresses of all the mail exchangers in the MX RRset to process the MX RRset. MTA usually learn their name by

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT "Illegal"

2009-01-26 Thread Scott Haneda
On Jan 26, 2009, at 7:54 PM, Al Stu wrote: If you refuse a CNAME then it is your SMTP server that is broken. The SMTP RFC's clearly state that SMTP servers are to accept and lookup a CNAME. [RFC974] explicitly states that MX records shall not point to an alias defined by a CNAME. That

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT "Illegal"

2009-01-26 Thread Scott Haneda
On Jan 26, 2009, at 10:03 PM, Barry Margolin wrote: In article , Scott Haneda wrote: 100% right. I refuse MX's that are cnamed, and I get emails from customers asking what is up. What is strange, and I can not figure it out, is that the admins of the DNS/email server always tell me

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT "Illegal"

2009-01-26 Thread Scott Haneda
On Jan 26, 2009, at 10:11 PM, Barry Margolin wrote: In article , Scott Haneda wrote: I have never got why this is such a hard thing for email admins to get right, but it certainly causes me headaches. I personally wish CNAME's would just go away, keep them around, but just stop ta

Re: BIND 9.6 Flaw - CNAME vs. A Record in MX Records are NOT "Illegal"

2009-01-27 Thread Scott Haneda
On Jan 26, 2009, at 11:27 PM, David Ford wrote: hand because each line isn't strictly well-formed per RFC. If every vendor was as utterly asinine about absolutist conformance, sure, we'd have a lot less mess out there, but we'd have a lot less forward movement as well as a lot more fractioning

wildcarding everything

2009-01-28 Thread Scott Haneda
Hello, I am wondering the technical possibility of a DNS change. Even if it is technically possible, I also want to make sure it is compliant as well. I would like to resolve any and all requests to a fixed IP, if there is no zone in place. While I understand I can create a zone for *.e

Re: wildcarding everything

2009-01-28 Thread Scott Haneda
oritative for domains for which your servers are not supposed to be authoritative. Ben Bridges -Original Message- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Scott Haneda Sent: Wednesday, January 28, 2009 3:31 AM To: bind-users@lists.isc

named and database backed systems

2009-01-28 Thread Scott Haneda
Hello, my past post about wildcarding the "." in a named server seems it may be wrought with issues in the long term. In short, my issues is a auto website creation tool that needs to be simple for users to change their registrar data, and have their site be served up. The old method work

Re: wildcarding everything

2009-01-28 Thread Scott Haneda
On Jan 28, 2009, at 3:34 PM, Mark Andrews wrote: In message <30e0039f-b0fd-4322-b0e0-52eeefa76...@newgeo.com>, Scott Haneda writ es: I can remove the entire DNS management, zone creation, and deltion if I wildcard. Any domain in which they enter in my clients ns's will resolve au

Re: named and database backed systems

2009-01-28 Thread Scott Haneda
Damnit, ever time I search this stuff out, I search for "named something-or-other" and should use BIND in my search :) I am going to test deploy on my worksation on OS X. Named comes up with relative ease, just add a key and I am pretty much up and running, albeit out of date, but for test

named with DLZ

2009-02-26 Thread Scott Haneda
I have been talked with getting named with DLZ support on Red Hat 5.2 Enterprise. I have never worked on Red Hat or with RPM, can someone point me to the rpm I need? Any other basic pointers? I was thinking to just build it out myself, but if there is a confident stable rpm, I might as we

BIND9 and DLZ

2010-08-31 Thread Scott Haneda
Hello, I am looking for a little assistance with BIND and DLZ. The deployment platform in this case is RHEL. >From my reading over the past few days, I want to make sure I understand this. The DLZ project at SF.net is old, and has a patch for an older version of BIND. That patch is probably n

Re: BIND9 and DLZ

2010-09-01 Thread Scott Haneda
On Sep 1, 2010, at 11:26 AM, Josh Miller wrote: > On 08/31/2010 12:10 PM, Scott Haneda wrote: > >> If anyone can point me to a simple tutorial, or explain how they managed to >> get this up and running on RHEL with a current version of BIND, I would >> appreciate any

Re: BIND 9.7.1 + DLZ + DNSSEC: Possible?

2010-09-14 Thread Scott Haneda
On Sep 14, 2010, at 12:15 PM, Kevin Mai wrote: > My name is Kevin and I'm working with the Argentina ccTLD team to upgrade our > local NS systems and our goal is to load the .ar, .com.ar and subsequent > zones using DLZ. Our other task was to deploy DNSSEC here and start signing > our TLDs, bu

Second dig lookup not the same as the first

2010-09-15 Thread Scott Haneda
Hello, I have set up a new BIND/named server, being backed by DLZ in this case, though I don't think that will have any bearing on my question. This NS is not publicly known or listed as an NS anywhere as of yet, so it is only my own testing that has hit the machine. If I perform a dig request,

Re: Second dig lookup not the same as the first

2010-09-15 Thread Scott Haneda
then make a post on the MacOSX-server list and step back for all of > the reasons this isn't a good idea, at least not using what Apple give you. > > Bill Larson > > and sorry about the top posting, but this was ... > Sent from Garminfone by T-Mobile. > > Scott Haned

chrooting BIND [was -Re: Here I am again, hat in hand with humble demeanor.......]

2010-09-24 Thread Scott Haneda
On Sep 24, 2010, at 12:51 PM, Tony Finch wrote: > A default build of bind expects to find it in /etc/named.conf > If you are running chrooted it needs to be copied into the chroot. Most systems these days have packages of BIND. Those that do tend to have BIND-chroot as an option for install.

RHEL and named with DLZ

2009-03-05 Thread Scott Haneda
Hello, I am trying to get named with DLZ on RHEL. My build line is below, I can start named, and I have base configured it so that it will return a lookup for `dig example.com @localhost +norec` which returns a custom IP I put in to make sure it is really working. So far, I know named is

Re: question about CNAME

2009-03-11 Thread Scott Haneda
How about you show us your current zone, and explain what you are tying to accomplish. Currently, what you are asking is not making a lot of sense. On Mar 11, 2009, at 12:46 AM, tzqian wrote: Hi , How can I config a zone to respose a CNAME record? Such as Email cname email.xx.xxx.com The

Re: question about CNAME

2009-03-13 Thread Scott Haneda
Ok, now please show us your dig command, and the output you are using to test. On Mar 12, 2009, at 8:19 PM, tzq tang wrote: thanks for your response.I do this test between two intranet machine and each of them has a local IP.10.0.0.13,additionally the both domain are in the same DNS SERVE

Re: No name resolution when slave is down

2009-03-20 Thread Scott Haneda
More data will need to be known. Where is the master and where is the slave, in the same subnet, or elsewhere? Were you previously getting any queries against the master at all, look in your logs? Are you sure your domains NS records even point to the master server? If the master is rep

Re: Make changes en mass [done]

2009-03-24 Thread Scott Haneda
It should not be too hard. Since you have such a rock solid format, you can safely assume in your case, the last 2 digits are ints always, always 2 digits long. Just find the string of chars you are interested in, and substring the last two. Now you have a number (int) and you can use a l

Re: [OT] zonedit.com and changing DNS servers from current provider

2009-04-06 Thread Scott Haneda
On Apr 6, 2009, at 3:30 PM, Michelle Konzack wrote: My hosting contract is running out on 2009-04-16 and now I like to use to host my zones. Unfortunately I have not found the answer to my qustion on there help page and they do not reply to my question per mail except an auto

Re: Failover

2009-04-26 Thread Scott Haneda
I belive this is the job of a load balancer and not something that can be done in dns. DNS has no way of following the resulting answer ip or host, let alone knowing what protocol to follow on and how to determine what ones definition of "up" is. This type if check could be done in a basi

Re: approach on parsing the query-log file

2009-04-28 Thread Scott Haneda
I have read the other posts here, and it looks like you are setting on tail, or a pipe, but that log rotation is causing you headaches. I have had to deal with things like this in the past, and took a different approach. Here are some ideas to think about. Since you mentioned below you wan

slave transfer problems

2009-04-29 Thread Scott Haneda
I have been having some long standing issues with my secondary provider that I would like to learn how to solve, and who needs to look to solve the errors. When I make an update, it seems hit or miss as to how long before I see it hit the secondary. Apparently they have a server at xx.xx.

Re: slave transfer problems

2009-04-29 Thread Scott Haneda
On Apr 29, 2009, at 5:03 PM, Barry Margolin wrote: In article , Scott Haneda wrote: like my machine, .14 is refusing their refresh request. Do I need to allow-recursion for their NS0? No, you shouldn't need allow-recursion. You might need allow-query, if you're not allow

Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
Someone pointed me to this http://thednsreport.com/?domain=isc.org I am not a huge fan of these checking tools, this one has me curious. My domain of course has the same error, which is a little comforting, sine I am in good company :) What is this error asking of me, they are wanting in my c

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
On Apr 30, 2009, at 1:43 AM, Kal Feher wrote: When I clicked on that link the only error was an MNAME error. Did you see another error? (I wonder if it was a transient error you observed, because it appears different to yours). The error according to the report (run against isc.org): "ERROR

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
On Apr 30, 2009, at 2:44 AM, Noel Butler wrote: On Thu, 2009-04-30 at 19:38, Scott Haneda wrote: On Apr 30, 2009, at 1:43 AM, Kal Feher wrote: > When I clicked on that link the only error was an MNAME error. Did > you see > another error? (I wonder if it was a transient error you

Re: Relevant RFC on A records for NS's

2009-04-30 Thread Scott Haneda
On Apr 30, 2009, at 3:54 AM, Kal Feher wrote: Lets check where they are delegated: 1st the hostwizard domain $ dig ns hostwizard.com +short ns1.hostwizard.com. ns1.nacio.com. Now nacio $ dig ns nacio.com +short ns1.nacio.com. ns3.nacio.com. ns2.nacio.com. So what _should_ we see if I query ns1

Mass update of TTL and serial

2009-05-02 Thread Scott Haneda
I client of mine has thousands of DNS zones that will need a ttl chance and a serial bump. I want to set a relevant ttl to 300 for a few days. After that, an IP address change will be made, and I would like to change the TTL back to something sane. The general format of the zone looks s

Re: Mass update of TTL and serial

2009-05-02 Thread Scott Haneda
On May 2, 2009, at 4:25 PM, Noel Butler wrote: On Sun, 2009-05-03 at 08:39, Scott Haneda wrote: I client of mine has thousands of DNS zones that will need a ttl chance and a serial bump. I want to set a relevant ttl to 300 for a few days. After that, an IP address change will be made, and I

Core dumping DLZ

2009-05-07 Thread Scott Haneda
Hello, I posted this to the DLZ testers list, cross posting it here, mainly because I am not sure which list to best address this to. I deployed a DLZ system for a client on RHEL. This is the first time I have used RHEL, mostly sticking to other OS's. I kept pretty good notes as I went along.

Re: Core dumping DLZ

2009-05-07 Thread Scott Haneda
On May 7, 2009, at 6:08 PM, Scott Haneda wrote: What can a core dump tell me to help trace this issue down and solve it? Named is going deaf/dead for some reason, perhaps related, I need it to keep up. I did a little searching and found how to look into the core dumps, here is what is

Re: Core dumping DLZ

2009-05-07 Thread Scott Haneda
On May 7, 2009, at 6:51 PM, Mark Andrews wrote: In message <8b717588-3e36-4596-9b11-de03e1ca4...@newgeo.com>, Scott Haneda writ es: On May 7, 2009, at 6:08 PM, Scott Haneda wrote: What can a core dump tell me to help trace this issue down and solve it? Named is going deaf/dead fo

Re: Core dumping DLZ

2009-05-07 Thread Scott Haneda
On May 7, 2009, at 6:51 PM, Mark Andrews wrote: (gdb) backtrace #0 0x2adb2b0e0215 in raise () from /lib64/libc.so.6 #1 0x2adb2b0e1cc0 in abort () from /lib64/libc.so.6 #2 0x2adb27c4c9e0 in assertion_failed (file=0x2adb2922428b "mem.c", line=918, type=, cond=0x2adb292245b5 "ctx->st

Re: Core dumping DLZ

2009-05-08 Thread Scott Haneda
On May 7, 2009, at 9:50 PM, Mark Andrews wrote: I beg to differ. Named only gets to this position in the code if it has been told to shut itself down. Note this may happen as a side effect of shutting the machine itself down. I can say with a lot of confidenc

Semi-OT, BIND dlz and excessive queries

2009-05-09 Thread Scott Haneda
The DLZ users mailing list is pretty quiet, thought to ask here in case someone can elaborate. I have MySql query logging on so I can see the queries as they come in for testing. dig example.com @localhost This yields a hit to the database of 090509 5:50:56 2593 Query SELECT zone

Re: no NS but having A record

2009-05-11 Thread Scott Haneda
Is it still happening? Can you show dig output for "dig gdpu.cn ns" On May 11, 2009, at 2:56 AM, Tech W. wrote: Hello, For this domain, gdpu.cn, I tried to find its ns record: dig gdpu.cn ns with no results. But I can dig its www record as below. why this happened? I can't understand enti

Re: no NS but having A record

2009-05-11 Thread Scott Haneda
On May 11, 2009, at 2:56 AM, Tech W. wrote: For this domain, gdpu.cn, I tried to find its ns record: dig gdpu.cn ns with no results. But I can dig its www record as below. why this happened? I can't understand entirely.. Thanks. Actually, here is what I get back: $dig gdpu.cn ns ; <<>> Di

Re: Several basic questions (and yes, I've looked at the documentation on the web)

2009-05-11 Thread Scott Haneda
You may also want to take this to the DLZ users mailing list, I am really not sure the correct channel for these questions. I end up cross posting, which is probably not a good idea. On May 11, 2009, at 3:25 PM, Mike Toler wrote: What there is of it. It seems VERY outdated since, if I unde

Re: MX is a numeric IP

2009-05-21 Thread Scott Haneda
On May 20, 2009, at 11:33 PM, "Tech W." wrote: What will be happened if a MX is an numeric IP? From a DNS perspective, You may or may not get an error in reload. I have seen both cases where I do a lookup and get an ip. I have seen cases where the DNS server will complain. From a MTA's (

dig return values

2009-05-22 Thread Scott Haneda
I have searched for "dig return codes" and also looked at the man page, leading me to nothing definitive. Does `dig` have return codes that I can use to make some form of automated tests? foo=`dig NS example.com @ns2.example.com +short +time=2 +tries=1` echo $foo ;

Re: dig return values

2009-05-22 Thread Scott Haneda
On May 22, 2009, at 3:52 PM, David Forrest wrote: I have searched for "dig return codes" and also looked at the man page, leading me to nothing definitive. Does `dig` have return codes that I can use to make some form of automated tests? foo=`dig NS example.com @ns2.example.com +s

Re: dig return values

2009-05-26 Thread Scott Haneda
On May 26, 2009, at 6:19 AM, Stephane Bortzmeyer wrote: On Fri, May 22, 2009 at 03:15:56PM -0700, Scott Haneda wrote a message of 32 lines which said: I do not know, nor would I want to have to know, all the possible return strings I may get back. My needs are simple, I believe any ANSWER

PTR delegation

2009-06-03 Thread Scott Haneda
Hoping I can get a walk through in simple terms, but also a pointer to some docs where I can dive into the details. I think I am finding what I want in the docs, but those docs come up 404 since the isc site changed things a bit, from there, I generally can not locate the old doc file. 1

Re: PTR delegation

2009-06-03 Thread Scott Haneda
On Jun 3, 2009, at 11:53 AM, Scott Haneda wrote: Hoping I can get a walk through in simple terms, but also a pointer to some docs where I can dive into the details. I think I am finding what I want in the docs, but those docs come up 404 since the isc site changed things a bit, from there

Re: PTR delegation

2009-06-03 Thread Scott Haneda
Thank you for your other answers, I will read those and test them after this reply.. On Jun 3, 2009, at 12:02 PM, Jeremy C. Reed wrote: Hoping I can get a walk through in simple terms, but also a pointer to some docs where I can dive into the details. I think I am finding what I want in

Re: weight for RR

2009-06-04 Thread Scott Haneda
Maybe cheat with round robin? Add 3 copies of one record and 1 of the other. That should give you 75/25 roughly. I don't think it's a dead on exact thing bit it may be close enough for your needs. -- Scott Iphone says hello. On Jun 4, 2009, at 7:09 PM, "Tech W." wrote: Hi, Is it possibl

Zone transfer failing

2009-06-23 Thread Scott Haneda
This has been an issue for far too long, though I solved it, but it rears it's head again. Example: $dig sugardimplesdesigns.com SOA @ns1.hostwizard.com +short ns1.hostwizard.com. scott.hostwizard.com. 2009062206 28800 7200 2419200 3600 $dig sugardimplesdesigns.com SOA @ns0.nacio.com +short

Re: Zone transfer failing

2009-06-23 Thread Scott Haneda
On Jun 23, 2009, at 3:01 PM, Hauke Lampe wrote: Scott Haneda wrote: $dig sugardimplesdesigns.com SOA @ns1.hostwizard.com +short Do you block 53/tcp anywhere on the path to your nameserver? It rejects TCP queries: | dig +tcp sugardimplesdesigns.com SOA @ns1.hostwizard.com +short

Re: Zone transfer failing

2009-06-24 Thread Scott Haneda
On Jun 23, 2009, at 11:57 PM, Chris Buxton wrote: On Jun 23, 2009, at 3:16 PM, Scott Haneda wrote: Good observation. This is a long standing issue that I assumed was solved. Named on OS X will go deaf on port 53 tcp for some reason. I just kicked it, and now I can tcp dig it. $dig +tcp

Re: Zone transfer failing

2009-06-25 Thread Scott Haneda
On Jun 23, 2009, at 11:57 PM, Chris Buxton wrote: No, we have not. However, it appears to be related to the port being idle for some time. Servers that use their TCP port more frequently, usually due to having lots of zone updates that need to be replicated to slaves, don't appear to be aff

Using dig for checking domain registration

2009-06-29 Thread Scott Haneda
I have been using the below command to determine if a domain is registered. I use this for an internal audit of what clients have come and gone, and what DNS records I need to clean up. dig example.com NS +trace -4 @4.2.2.1 | grep -i ns1.example.com I run it also with ns2.example.com in the

Re: Using dig for checking domain registration

2009-06-29 Thread Scott Haneda
On Jun 29, 2009, at 5:08 PM, Mark Andrews wrote: In message <76610622-42ba-4ed3-b945-14f6c6796...@newgeo.com>, Scott Haneda writ es: I have been using the below command to determine if a domain is registered. I use this for an internal audit of what clients have come and gone, and wh

Re: Using dig for checking domain registration

2009-06-29 Thread Scott Haneda
Comments interspersed below... On Jun 29, 2009, at 5:42 PM, Mark Andrews wrote: Hi Mark, thanks for the reply. I do not understand your last suggestion. If the domain in question is customtruckgraphics.us, can you show me an example of how to do this? % dig ns us ; <<>> DiG 9.3.6-P1 <<>> ns

Re: Using dig for checking domain registration

2009-06-30 Thread Scott Haneda
On Jun 29, 2009, at 6:57 PM, Mark Andrews wrote: Though I am not understanding the versions, you were using 9.3.6 and I am using DiG 9.6.0-P1-RedHat-9.6.0-2.P1 Since I am more current than you, I would estimate that the one bug is fixed if it is in your version, of course, that is not the

clearing local caches

2009-07-14 Thread Scott Haneda
Hello, this may not entirely be related to BIND/named, though I believe it is. I am working on a set of benchmarks to test the resolving speed of different recursive DNS providers. My plan is call an http resource, and see how long it takes to resolve that host, as well as all embedded h

Re: clearing local caches

2009-07-15 Thread Scott Haneda
On Jul 15, 2009, at 12:29 PM, Dave Sparro wrote: Scott Haneda wrote: ... However, I would like to just get DNS response times. Perhaps take the list of hosts and feed them to a iterative script calling dig, and fish out the response time? This does add the problem of redirects of course

Re: clearing local caches

2009-07-15 Thread Scott Haneda
On Jul 15, 2009, at 12:59 PM, Dave Sparro wrote: Scott Haneda wrote: On Jul 15, 2009, at 12:29 PM, Dave Sparro wrote: Scott Haneda wrote: ... However, I would like to just get DNS response times. Perhaps take the list of hosts and feed them to a iterative script calling dig, and fish out

Mailing list addresses

2009-07-17 Thread Scott Haneda
Been wondering this for a while. Bind list emails can come from lists.isc.org, or just isc.org, and there seems to be a change in the before the @ part as well. What is the story behind this? My mail app has less than ideal rule creation, with not a lot of "or" and "and" ability, so I end

Re: A simple question, please help

2009-07-19 Thread Scott Haneda
99% of the time openDNS works by just pointing some agent to their ip space. That 1% of the time, openDNS tries to make DNS responses that are modified in a way to try to help you. Maybe this is your issue? Googl.com being common enough they elect to return the google.com's answer istead

Glue record miunderstanding

2009-10-01 Thread Scott Haneda
Hello, I believe I understand what a glue record is, and why I would need one. I would like some clarification if possible. While I am not the hugest fan of the dns report services, this report was brought to my attention: http://www.intodns.com/hostwizard.com It says I am missing glue for

Re: Glue record miunderstanding

2009-10-01 Thread Scott Haneda
On Oct 1, 2009, at 3:25 PM, Matthew Pounsett wrote: On 01-Oct-2009, at 16:03, Scott Haneda wrote: Is it also correct, I only need a NS glue record for the actual NS itself. There does not need to be a glue record for very zone that I am providing DNS for? The only case where glue *must

Re: Glue record miunderstanding

2009-10-01 Thread Scott Haneda
Yeah, I just ran a few queries and can't figure out what exactly it's complaining about. Matt It's making a observation ("i" in a blue circle) that there were not additional records for ns1.nacio.com being returned by ns1.hostwizard.com presumable because ns1.hostwizard.com doesn't serve the zo