RE: Unexpected issues with "nslookup" command

2010-04-15 Thread James Roberts-Thomson
Hi Mark, >allow-recursion defaults to "{ localnets; localhost; };". >If the client was not on a directly connected network it >will NOT get recursion by default. So it would seem; I had made an assumption about subnetting that apparently was not entirely accurate. Oh well, you know what they sa

Re: Unexpected issues with "nslookup" command

2010-04-15 Thread Mark Andrews
In message <9b2fff1719120e4c83de53c2f70cc60755d5899...@secmclust01a.corp.ssi.go vt.nz>, James Roberts-Thomson writes: > Hi Mark, > > Thanks for your response; whilst I accept what your saying, I'm not convinced > it applies in this case. > > As far as I can tell, recursion is enabled on the serv

RE: Unexpected issues with "nslookup" command

2010-04-15 Thread James Roberts-Thomson
Hi Mark, Thanks for your response; whilst I accept what your saying, I'm not convinced it applies in this case. As far as I can tell, recursion is enabled on the servers. (We don't have an allow-recursion entry in the named.conf, and my reading of the documentation implies recursion is enable

Re: Unexpected issues with "nslookup" command

2010-04-15 Thread Mark Andrews
In message <9b2fff1719120e4c83de53c2f70cc60755d5899...@secmclust01a.corp.ssi.go vt.nz>, James Roberts-Thomson writes: > > Can anyone explain what may be happening here, please? Stub resolvers really should be talking to nameservers that offer recursion. If it is talking to a nameserver that does

Unexpected issues with "nslookup" command

2010-04-15 Thread James Roberts-Thomson
Hello, I have tried to research my problem, but haven't found an answer from the collected Google wisdom of the ages, unfortunately. We have a situation where we are getting strange results from the "nslookup" command (with knock-on effects to name resolution in general). We have two primary (

Re: Understanding 'format error" Messages

2010-04-15 Thread Mark Andrews
In message <20100415204352.3695b40...@britaine.cis.anl.gov>, b19...@anl.gov wri tes: > I am trying to understand "format error" messages like this one from > BIND 9.7.0-P1: > > Apr 15 15:36:02 dnsserver.it.anl.gov named[8662]: >[ID 873579 daemon.notice] DNS format error >from

Re: Intermittent failures resolving .org domains in BIND 9.7.0 with DLV enabled

2010-04-15 Thread Roy Badami
> Actually there *is* DNSSEC involved or the query would not have > failed. Yes, sorry. I meant to imply that there is no DNSSEC involved beyond the verification of the covering NSEC that proves the lack of a DLV record. > There is a bug in the BIND 9.7.0-P1 fixes that triggers this. The > fix

Re: dig +trace

2010-04-15 Thread Mark Andrews
In message , Li nux Addict writes: > > Hello Folks, I got a strange issue going on.. > > I dig for a specific record against a ISP cache server , and the cache > server doesn't seem to see it, but When I do dig +any, then the record stays > in the cache for say 5minutes and then vanishes. > > an

Re: Understanding 'format error" Messages

2010-04-15 Thread Michael Sinatra
b19...@anl.gov wrote: I am trying to understand "format error" messages like this one from BIND 9.7.0-P1: Apr 15 15:36:02 dnsserver.it.anl.gov named[8662]: [ID 873579 daemon.notice] DNS format error from 209.234.234.42#53 resolving markets.nytimes.wallst.com/ for cl

Understanding 'format error" Messages

2010-04-15 Thread b19141
I am trying to understand "format error" messages like this one from BIND 9.7.0-P1: Apr 15 15:36:02 dnsserver.it.anl.gov named[8662]: [ID 873579 daemon.notice] DNS format error from 209.234.234.42#53 resolving markets.nytimes.wallst.com/ for client 164.54.214.14#13132

Re[2]: Apparent BIND problem doing RBL lookups for Postfix

2010-04-15 Thread listserv . traffic
Hello Nuno, Thursday, April 15, 2010, 9:43:52 AM, you wrote: > Hi, > At the first sight it seems network problems, but when you restart bind, > the problem goes away for a while. > I suppose your dns server is resolving names for himself, try to put > your ISP's dns servers on resolv.conf, perha

Re: logging forwarding reqs

2010-04-15 Thread Gregory Hicks
> Date: Thu, 15 Apr 2010 14:25:35 -0400 > Subject: Re: logging forwarding reqs > From: Jonathan Reed > To: bind-users@lists.isc.org > > But I am still unable to determine if those reqs are asking the > forwarders. > > The forwarders are all Windows boxes which I dont have rights to > access. St

Re: logging forwarding reqs

2010-04-15 Thread Jonathan Reed
Indeed I have setup querylog, and I have these show in my logs: Apr 15 14:20:00 TOR-HYPER-01 named[10228]: client 172.18.4.214#47149: query: google.ca IN A + Apr 15 14:20:09 TOR-HYPER-01 named[10228]: client 172.18.4.214#51366: query: yahoo.ca IN A + Apr 15 14:23:32 TOR-HYPER-01 named[10228]: clien

dig +trace

2010-04-15 Thread Linux Addict
Hello Folks, I got a strange issue going on.. I dig for a specific record against a ISP cache server , and the cache server doesn't seem to see it, but When I do dig +any, then the record stays in the cache for say 5minutes and then vanishes. any idea? ~LA ___

RE: Apparent BIND problem doing RBL lookups for Postfix

2010-04-15 Thread Nuno Paquete
Hi, At the first sight it seems network problems, but when you restart bind, the problem goes away for a while. I suppose your dns server is resolving names for himself, try to put your ISP's dns servers on resolv.conf, perhaps it solve the problem. It could be a problem with your dns forwarders b

logging forwarding reqs

2010-04-15 Thread Jonathan Reed
Hey all, I've setup bind9 to be a forwarder only. However I'm not understanding how to confirm requests for queries are being sent through to the forwarded dns servers. Even running in debug mode, I can see the req, but I dont see anything in the debug msg that says its been forwarded on to any of

Re: Apparent BIND problem doing RBL lookups for Postfix

2010-04-15 Thread Fr34k
Hello, Looks like NXDOMAIN can be one of the responses. http://www.spamhaus.org/faq/answers.lasso?section=DNSBL%20Usage#252 That said, I think it is working correctly (a la "name=33.229.242.205.zen.spamhaus.org type=A: Host not found, try again"). However, perhaps tweak the number of que

nsupdate failed with using database mysql as backup

2010-04-15 Thread aihua zhang
hi all, i have another problem:when i use sdb mysql as a backup storing zone data, i found this method doesn't support dynamic update message. but i need a database backup and dynamic shema. is there any solutions? thank you very much! Best regards! Sincerely, aiHua Zhang State Key Lab.