recursive resolver
Dear sir, how can we improve my DNS Recursive resolver speed. Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Fwd: Re: recursive resolver
Thank you very much sir for replying we made a recurive resolver (Cent OS 7, 8GB RAM ,250 GB Hard disk and network speed is also good ) . It reply in 1200 msec and 1800 msec (which is very slow). if it gave Reply by Cache (80 msec or 76 msec). so i want to know about, How can i improve my recursive resolver speed. and If we apply syslog (it is a centralised logging of bind) . then any profit for recursive resolver. In order for us to help you better, you need to provide more information. What makes you think The recursive resolver is slow? Do you have syslog? Is the BIND instance slow, or is it the operating system (low RAM? Slow disk?) or is this a network-related issue? On Thu, Mar 12, 2020 at 11:00 AM ShubhamGoyal < shubhamgo...@cdac.in <mailto:shubhamgo...@cdac.in> > wrote: >Dear sir, > how can we improve my DNS Recursive resolver > speed. > > Best Regards, > Shubham Goyal > Cyber Security Group > Centre for Development of Advanced Computing > Bangalore > > [150th Anniversary Mahatma Gandhi] > > > > > [ C-DAC is on Social-Media too. Kindly follow us at: > Facebook: https://www.facebook.com/CDACINDIA > <https://www.facebook.com/CDACINDIA> & Twitter: @cdacindia ] > > This e-mail is for the sole use of the intended recipient(s) and may > contain confidential and privileged information. If you are not the > intended recipient, please contact the sender by reply e-mail and destroy > all copies and the original message. Any unauthorized review, use, > disclosure, dissemination, forwarding, printing or copying of this email > is strictly prohibited and appropriate legal action will be taken. > > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users > <https://lists.isc.org/mailman/listinfo/bind-users> to unsubscribe from this > list > > bind-users mailing list > bind-users@lists.isc.org <mailto:bind-users@lists.isc.org> > https://lists.isc.org/mailman/listinfo/bind-users > <https://lists.isc.org/mailman/listinfo/bind-users> Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
how can we restart bind-9.14.11
Dear sir, I installed bind version 9.14.11 by tar file . it is working okk. i tried 1. systemctl restart named 2. /etc/rc.d/init.d/bind restart 3. service named restart But I do not able to restart service. please tell me how can i restart bind 9.14.11 Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: bind-users Digest, Vol 3393, Issue 1
Dear sir, I tried whatever you said but it is not working. please give me more solutions On March 16, 2020 at 8:55 PM bind-users-requ...@lists.isc.org wrote: > Send bind-users mailing list submissions to > bind-users@lists.isc.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.isc.org/mailman/listinfo/bind-users > or, via email, send a message with subject or body 'help' to > bind-users-requ...@lists.isc.org > > You can reach the person managing the list at > bind-users-ow...@lists.isc.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of bind-users digest..." > > > Today's Topics: > > 1. how can we restart bind-9.14.11 (ShubhamGoyal) > 2. Re: how can we restart bind-9.14.11 (Reindl Harald) > 3. Re: how can we restart bind-9.14.11 (Reindl Harald) > 4. Re: how can we restart bind-9.14.11 (Matus UHLAR - fantomas) > > > ------ > > Message: 1 > Date: Mon, 16 Mar 2020 19:18:39 +0530 (IST) > From: ShubhamGoyal > To: bind-users@lists.isc.org > Subject: how can we restart bind-9.14.11 > Message-ID: > <1350384105.17912.1584366519539.javamail.open-xcha...@webmail.cdac.in> > Content-Type: text/plain; charset="utf-8" > > Dear sir, > I installed bind version 9.14.11 by tar file . it is > working okk. > i tried > 1. systemctl restart named > 2. /etc/rc.d/init.d/bind restart > 3. service named restart > > But I do not able to restart service. > please tell me how can i restart bind 9.14.11 > Best Regards, > Shubham Goyal > Cyber Security Group > Centre for Development of Advanced Computing > Bangalore > > [ C-DAC is on Social-Media too. Kindly follow us at: > Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] > > This e-mail is for the sole use of the intended recipient(s) and may > contain confidential and privileged information. If you are not the > intended recipient, please contact the sender by reply e-mail and destroy > all copies and the original message. Any unauthorized review, use, > disclosure, dissemination, forwarding, printing or copying of this email > is strictly prohibited and appropriate legal action will be taken. > > > -- next part -- > An HTML attachment was scrubbed... > URL: > <https://lists.isc.org/pipermail/bind-users/attachments/20200316/14c4a50d/attachment-0001.htm> > -- next part -- > A non-text attachment was scrubbed... > Name: signature.jpg > Type: image/jpeg > Size: 7789 bytes > Desc: not available > URL: > <https://lists.isc.org/pipermail/bind-users/attachments/20200316/14c4a50d/attachment-0001.jpg> > > ------ > > Message: 2 > Date: Mon, 16 Mar 2020 14:58:47 +0100 > From: Reindl Harald > To: bind-users@lists.isc.org > Subject: Re: how can we restart bind-9.14.11 > Message-ID: > Content-Type: text/plain; charset=utf-8 > > > > Am 16.03.20 um 14:48 schrieb ShubhamGoyal: > > ?Dear sir, > > ?? I installed bind version 9.14.11 by tar file > > . it is working okk. > > ??? i tried > > ??? 1. systemctl restart named > > 2.? /etc/rc.d/init.d/bind restart > > 3.? service named restart > > ? > > ??? But I do not able to restart service. > > ? please tell me how can i restart bind 9.14.11 > > by write a simple systemd-unit and forget about /etc/rc.d and most > important: by not start it by hand to begin with because systemd has no > clue about random processes > > [root@srv-rhsoft:~]$ cat /etc/systemd/system/named.service > [Unit] > Description=DNS Server > > [Service] > Type=simple > ExecStart=/usr/sbin/named -4 -f -u named -t /var/named/chroot > ExecReload=/usr/bin/kill -HUP $MAINPID > ExecStop=/usr/bin/kill -TERM $MAINPID > TimeoutSec=25 > Restart=always > RestartSec=1 > > PrivateTmp=yes > ReadOnlyPaths=/etc > ReadOnlyPaths=/usr > > > [Install] > WantedBy=multi-user.target > > > -- > > Message: 3 > Date: Mon, 16 Mar 2020 15:04:52 +0100 > From: Reindl Harald > To: bind-users@lists.isc.org > Subject: Re: how can we restart bind-9.14.11 > Message-ID
Re: bind-users Digest, Vol 3453, Issue 1
Dear sir, i want to ask about bind 9.14 version has geoip database Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore For assimilation and dissemination of knowledge, visit cakes.cdac.in [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Ask about bind 9.14
Greetings all. We recently learnt that geoip and dnstap can be configured into RR setup using Bind 9.14.11 during installation. But we already have installed our RR using Bind 9.14.11, can someone please suggest how to configure or enable geoip and dnstap in this installed version. Thankyou Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore For assimilation and dissemination of knowledge, visit cakes.cdac.in [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
can bind support DOH and DoT
Dear sir/madam, 1. Can bind support DoH and DoT 2. If yes Which version of bind support DoH or DoT thankyou Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
bind DoH ANd DoT Implementation
Dear all, I want to ask about bind DoH Implementation by proxy server, Is there any Documentation of DoH Implementation. or Any other method to implement DoH and DoT. Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
issue in bind installation
Dear sir I am installing bind latest version with additional feature , it gave me "configure: error librpz.so and dlopen needed for dnsrps" error. I am searching for that error but i did not find the solution. please help me! Best regards Shubham Goyal [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: bind-users Digest, Vol 3492, Issue 1
> On 7/6/20 10:00 PM, ShubhamGoyal wrote: > > I am installing bind latest version with additional feature , it gave > > me "configure: error librpz.so and dlopen needed for dnsrps" error. > > I am searching for that error but i did not find the solution. > > please help me! > > Are you compiling from source? Or did you install a binary package and > now you're getting that error when trying to run something? > > Please tell us a little bit about what you have done up to this point. > > Please include details about the platform and version (updates) that you > are working on. i am working in Centos 8 with bind version 9.17.2 and i am install from source package [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
issue of Amplification attack
Dear sir, Thank you for give me answer for my previous question, Sir now we are suffer from amplification attack so is there any method in bind to stop DNS Amplification attack. I am thinking to stop or drop ANY type queries from our DNS Recursive resolver , so please tell me how can we drop or stop ANY type queries from bind. [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
distribution of Bind software through our website
Dear All , We host a public DNS Recursive Resolver and also cater training on hosting the same using Bind. Kindly let us know if we can host and distribute a version of bind software in our own website in order to facilitate our training process. Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
"minimal-any" configuration query
Dear All, We have enabled " minimal-any yes;" in our Bind DNS Sever, Yet an ANY query provides complete details instead of providing reduced details . Please suggest a fix. Thanks Best Regards, Shubham Goyal Cyber Security Group Centre for Development of Advanced Computing Bangalore [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: "minimal-any" configuration query
> > Dear sir, > We are running a public DNS resolver in > Centos 8 with bind software . We enable geoip feature at configuration time > now I want to know about > >" How can we implement Geo log > in bind for Recursive Resolver" > Thanks > Best Regards, > Shubham Goyal > Cyber Security Group > Centre for Development of Advanced Computing > Bangalore > > [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
GeoIP Implement log help
> Dear sir, >We are running a public DNS resolver in > Centos 8 with bind software . We enable geoip feature at configuration time > now I want to know about > > " How can we implement Geo > log in bind Recursive Resolver" > Thanks > Best Regards, > Shubham Goyal > Cyber Security Group > Centre for Development of Advanced Computing > Bangalore > [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
hardware requirements
Dear sir , I want to ask about what is the Hardware requirements . If 1 million queries/sec comes in our Recursive resolver (bind 9.16.11)in Centos 8 thanks [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
