Re: one domain not resolving via response-policy zone

2018-01-22 Thread lists
Hey Kai, > If I do a nslookup for one of the otto.de domains I reveive "** server > can't find somehost.ov.otto.de: SERVFAIL" The guideline behind the response-policy is that only an actual response gets rewritten. This is usually an answer from a recursive lookup. If you don't get an answer, th

stumped on sub domain addition

2015-07-23 Thread lists - euca
Hello, I added a sub domain to my zone file euca.us yesterday. “onqsolutions”. It first was added as a CNAME, then I couldn’t get it to work.. so now it is an A record. Still not working. Can someone help troubleshoot? onqsolutions.euca.us TIA, Donovan ___

Re: stumped on sub domain addition

2015-07-23 Thread lists - euca
Thanks for the responses… On Jul 23, 2015, at 12:37 PM, Lightner, Jeff wrote: > Did you change the sequence/serial in the SOA and reload the zone? No, I am using ‘smbind’ to administer bind, and it appears to not let me do that. I don’t know if it does an ‘auto reload’ or not, but I’ve never

Re: stumped on sub domain addition

2015-07-23 Thread lists - euca
rica, Inc. > 2300 Windy Ridge Pkwy > Suite 600 N > Atlanta, GA 30339-8461 > > P: 678-486-3516 > C: 678-772-0018 > F: 678-460-3603 > E: jlight...@dsservices.com > > > -Original Message- > From: lists - euca [mailto:li...@euca.us] > Sent: Thursd

Can we provide recursion for forward zones in response to iterative queries?

2020-04-03 Thread bind-lists
Hi, In summary, my question is whether there is a way to configure a bind caching server to provide recursion in response to iterative queries for records in a forward type zone. The background is that we have: - AD domain controllers that are authoritative for all of 10.in-addr.arpa. in our

Re: Can we provide recursion for forward zones in response to iterative queries?

2020-04-07 Thread bind-lists
Currently our linux caching resolvers have a forwarding rule for 10.in-addr.arpa back to a small subset of our approximately 200 AD domain controllers. We made it a stub zone at one point in the past, but ran into intermittent resolution problems, although I don’t recall the details. We’ve neve

Re: Can we provide recursion for forward zones in response to iterative queries?

2020-04-07 Thread bind-lists
I had been told they tried that twice and in both cases the domain controller would not let them add the conditional forwarder. On the strength of your having said it worked in your situation, they tried again and now it is working. Thank you! Maria > On Apr 6, 2020, at 11:37 AM, Chris Buxton

Re: Can we provide recursion for forward zones in response to iterative queries?

2020-04-07 Thread bind-lists
Thanks. I have opened a ticket with AWS support asking them to allow us to pull slave copies of our VPC-internal zones. If they don’t do that, then making the zones slaves will not fix our problem, because the AWS endpoints refuse to answer iterative queries. Thanks, Maria > On Apr 7, 2020, at

Re: [Non-DoD Source] BIND Masters and slaves

2020-06-15 Thread bind-lists
I have been teaching informal DNS classes at work for decades, and I used to be very careful to use “master” and “slave” and would include a section where I pointed out that using “primary” and “secondary” instead was not correct. Then about 10 years ago one person in class pointed out to me tha

RE: BIND master , Windows 2008 stub zone not transferring

2011-10-20 Thread Will lists
I had a very similar issue recently, but it was with secondaries on Windows Server 2008 R2 and not stub zones. We actually went to stub zones afterwards to prevent the issue from happening again, hopefully. The issue was that a machine had done DCHP and gotten the DDNS created A/TXT/PTR records

Switching from forwarding to recursion

2011-11-01 Thread Will Lists
We recently tried a test to see how our internal servers would react to a loss of their external peers, with the goal being that the internal servers would switch from forwarding to doing recursive queries for clients. Normally, the internal servers forward to the external servers. To simulate th

Re: Switching from forwarding to recursion

2011-11-01 Thread Will Lists
rds. Forward only will only use forwarders. > > The delay you are seeing is likely the delay in exhausting the forwarders > before attempting the roots. > > -Ben Croswell > On Nov 1, 2011 9:23 AM, "Will Lists" wrote: > >> We recently tried a test to see how our i

Re: Switching from forwarding to recursion

2011-11-01 Thread Will Lists
back. > > In your case if you have a limited number of servers a quick removal of > the forwarders may be the quickest way to restore service. > > -Ben Croswell > On Nov 1, 2011 10:03 AM, "Will Lists" wrote: > >> Ben, >> >> I seem to recall reading at som

Re: bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset)) failed

2011-11-16 Thread Will Lists
Just for for my own knowledge, as I haven't had the issue (yet), what log would this error appear in? Thanks. -Will On Wed, Nov 16, 2011 at 7:18 AM, Evan Hunt wrote: > > > can we have a paradigm shift from ISC please? instead of falling over > > dead with insist/assert, please bleat a warni

Re: bind-9.8.1: INSIST(! dns_rdataset _isassociated(sigrdataset)) failed

2011-11-16 Thread Will Lists
Ah, never mind that last question. Brain hadn't been put in gear yet. :-) -Will On Wed, Nov 16, 2011 at 7:21 AM, Will Lists wrote: > Just for for my own knowledge, as I haven't had the issue (yet), what log > would this error appear in? > > Thanks. > > -Will >

"Scavenging" DDNS records

2011-11-16 Thread Will Lists
(I am going to post this individually to both the BIND and DHCP lists as this crosses both, but not going to cross-post). DHCPD 4.1-ESV-R3 & BIND 9.7.4 We've got about 20 /20 networks and another few /24 networks (all within the 10/8 block) that are setup for approximately 50% of th

Re: Not able to resolve a domain

2011-11-18 Thread Will Lists
Maybe a network/firewall issue? My results below. dig +trace thisisgame.com ; <<>> DiG 9.8.0-P2 <<>> +trace thisisgame.com ;; global options: +cmd . 432154 IN NS b.root-servers.net. . 432154 IN NS l.root-servers.net. .

Re: Not able to resolve a domain

2011-11-18 Thread Will Lists
in 38 ms thisisgame.com. 1800IN A 1.234.35.120 thisisgame.com. 1800IN NS ns1.thisisgame.com. ;; Received 82 bytes from 1.234.35.141#53(ns1.thisisgame.com) in 187 ms -Will On Fri, Nov 18, 2011 at 9:27 AM, Will Lists wrote: > Maybe a network/firewa

Re: Not able to resolve a domain

2011-11-18 Thread Will Lists
Site is based in Korea based on the IP and whois, so it does sound like some sort of access controls are in place on one end or the other. I was able to access the site. -Will On Fri, Nov 18, 2011 at 9:30 AM, Jan-Piet Mens wrote: > > I have found that www.thisisgame.com does not resolve on ou

Re: MS AD 2008R2 and bind

2012-01-03 Thread Will Lists
On Tue, Jan 3, 2012 at 4:00 AM, Melbinger Christian < christian.melbin...@wienit.at> wrote: > Hi > > ** ** > > My company moved to a 2008R2 Domain Controller environment. Now I see the > following message in the windows log: > > ** ** > > *Title*: This domain controller must register its c

RE: Trouble configuring forwarders for reverse zones.

2009-04-08 Thread M-lists
Thanks Chris. I had actually tried that, but it turned out Windows wasn't answering reverse queries properly so I didn't notice when I had got it right. Once your post pointed out that was the way to go, I got Wireshark on it and quickly noticed Windows was also at fault. One further thing, I'll

RE: Trouble configuring forwarders for reverse zones.

2009-04-09 Thread M-lists
Men & Mice On Apr 8, 2009, at 8:45 AM, M-lists wrote: > Apologies, I meant 10.1.1.0/28 not /24. The addresses used are > arbitrary, > as I don't like detailing my network topology unnecessarily. > Suffice to say > we've had the */28 subnet dished out and h

Re: File System Choice

2009-11-26 Thread Andy Shellam (Mailing Lists)
On 26 November2009, at 07:00, Fajar A. Nugraha wrote: > > Also, you could organize the zone files (manually) so that they spread > over many directories instead of one. I've heard that compiling the zones first (named-compilezone?) is a big help in this situation; I can't vouch for it though.