Re: Question about recursion queries

2010-07-19 Thread Lyle Giese
Recursive queries start with the root name servers. That list is built in to almost(I am reluctant to say all) all versions of bind and is availible for download from ftp.rs.internic.net. An unknown server is one that 1) does not answer queries or 2) has not been asked yet by this bind server. O

Re: Question about recursion queries

2010-07-19 Thread Zhang Meng
Thanks for your information. But what does unknown servers mean? Where does the list come from? On Tue, Jul 20, 2010 at 7:08 AM, Chris Buxton wrote: > It uses the RTT algorithm to select the "fastest" server from the list, > using random, low values for unknown servers. ("Fastest" is in quotes

Re: Question about recursion queries

2010-07-19 Thread Chris Buxton
It uses the RTT algorithm to select the "fastest" server from the list, using random, low values for unknown servers. ("Fastest" is in quotes because the algorithm does not do exactly that, but it's close.) No, I cannot show you the code. I'm not a developer. Find it yourself. Regards, Chris Bu

Re: manage managed-keys?

2010-07-19 Thread Evan Hunt
> BTW, does bind keep track of a trust anchor history, i.e. the chain from > the configured initial key to the now current TA? Or does it just keep > the 'last known good'? When a key expires, it's presumably going to be revoked first, then eventually removed from the zone. When it disappears, BI

Re: reason for "expected covering NSEC3, got an exact match" ?

2010-07-19 Thread Gilles Massen
Thanks, Marc. Mark Andrews wrote: > It's cosmetic. The final NSEC3 record proves the non-existance > of the data or wildcard. With a nodata response we should be > expecting the record. The following has been compiled but otherwise > has not been tested. It works here, and seems to have the ex

Re: manage managed-keys?

2010-07-19 Thread Gilles Massen
Evan, Evan Hunt wrote: >> How do you manage "managed-keys"? > BIND 9.7.2 will introduce a command "rndc secroots" that dumps > a list of the current trust anchors for each view to a file. Thanks, good to know. > To remove a key from managed-keys.bind, just remove the initial key > for that nam

Re: ISC to be at OSCON next week...

2010-07-19 Thread Danny Mayer
On 7/16/2010 8:59 AM, Alan Clegg wrote: > With the signing of the root and all of the related activities, I > thought I'd take this opportunity to let you know that I'll be giving a > presentation at OSCON (O'Reilly's Open Source Convention) next week in > Portland. > >http://www.oscon.com/osc

Re: recursing stop at about 1000 clients

2010-07-19 Thread Kebba Foon
Thanks for the tips, i once saw this errors on my log file, "too many files open " but i fix that with setting ulimit -n 1824. i will try to donwload the bind-9.7.1-P2. On Sun, 2010-07-18 at 08:20 +1000, Noel Butler wrote: > On Fri, 2010-07-16 at 08:41 +, Kebba Foon wrote: > > am runnin

Question about recursion queries

2010-07-19 Thread Zhang Meng
The question is given that When I ask the bind server, what's the A record of google.com? for the ROOT name server, there're several NS record *.** **60493** **IN** **NS** **g.root-servers.net.* *.** **60493** **IN** **NS** **b.root-servers.net.* *.** **60493** **IN** **NS** **m.root-servers.net