Re: bind9.7.1 Instance seems to not talk to systems on its own network.

2010-11-05 Thread Kevin Oberman
aa> Date: Fri, 05 Nov 2010 15:04:23 -0500 > From: Martin McCormick > Sender: bind-users-bounces+oberman=es@lists.isc.org > > This sounds like a firewall issue, but read carefully. > > Our master and slave are on 2 different networks that > are each larger than a single octet. Bot

bind9.7.1 Instance seems to not talk to systems on its own network.

2010-11-05 Thread Martin McCormick
This sounds like a firewall issue, but read carefully. Our master and slave are on 2 different networks that are each larger than a single octet. Both are producing messages like: client 139.78.100.57#33486: error sending response: host unreachable That particular VLAN or

Re: multi-master configuration?

2010-11-05 Thread Chris Buxton
Jiann-Ming Su wrote: >> On Nov 4, 2010, at 8:38 PM, Jiann-Ming Su wrote: >>> So, to clarify my question. When I add the other two dhcp servers >>> to the masters{} list and set "multi-master yes" will this allow >>> all three dhcp servers to update the dyn.mydomain.com zone? If so, >>> do the

Re: no. of Views and Zones

2010-11-05 Thread Alans
On 11/04/2010 06:43 PM, Alan Clegg wrote: On 11/4/2010 12:22 AM, Alans wrote: On 10/31/2010 4:48 AM, Alans wrote: Have 2 questions, is there any limitation (beside hardware) on number of views? I mean creating a view/customer? And is there any limitation for number of zones/view? Since I didn'

Re: multi-master configuration?

2010-11-05 Thread Jiann-Ming Su
> On Nov 4, 2010, at 8:38 PM, Jiann-Ming Su wrote: > > So, to clarify my question. When I add the other two dhcp servers to the > > masters{} list and set "multi-master yes" will this allow all three dhcp >servers > > > to update the dyn.mydomain.com zone? If so, do the three dhcp servers

RE: BIND - Declare variable?

2010-11-05 Thread Mike Cavanagh
Chris. Thanks for the confirmation. Just wanted to make sure I did not miss something. Yes. You suggestion would work. But, I will leave things as is. It's straight forward and easy for someone else to follow. Thanks again, Mike. Michael D. Cavanagh Phone [916] 853-9658 ___

Re: "Success resolving" messages and can I Ignore them?

2010-11-05 Thread Martin McCormick
Paul Ebersman writes: > category edns-disabled { null; }; > > should make you happier. I must get a newer edition of DNS and Bind, but thanks to you and the list for your patience. Actually, I am not sure whether it is mentioned in the 4TH edition but searching for something

Re: "Success resolving" messages and can I Ignore them?

2010-11-05 Thread Paul Ebersman
martin> there is a recurring message in named.log that goes something martin> like: martin> success resolving 'www.pbs.org/A' (in 'pbs.org'?) after martin> reducing the advertised EDNS UDP packet size to 512 octets martin> What category of message is this called and can I put something martin>

Re: "Success resolving" messages and can I Ignore them?

2010-11-05 Thread Leo Baltus
Op 05/11/2010 om 09:31:58 -0500, schreef Martin McCormick: > We just started running bind9.7.1 in production mode and > it appears to be healthy but there is a recurring message in > named.log that goes something like: > > success resolving '147.184.158.95.in-addr.arpa/PTR' > (in '95.in-add

"Success resolving" messages and can I Ignore them?

2010-11-05 Thread Martin McCormick
We just started running bind9.7.1 in production mode and it appears to be healthy but there is a recurring message in named.log that goes something like: success resolving '147.184.158.95.in-addr.arpa/PTR' (in '95.in-addr.arpa'?) after reducing the advertised EDNS UDP packet size to 512

Re: KSK rollover, set revoke bit unconditionally ? (cfr RFC5011)

2010-11-05 Thread Tony Finch
On Fri, 5 Nov 2010, Marc Lampo wrote: > > in RFC5011, section 6.6, "Trust Point Deletion" (== KSK rollover), Trust point deletion isn't the same as a normal KSK rollover. It's a special procedure to make validators remove a trust anchor while maintaining the security status of the zone using a cha

KSK rollover, set revoke bit unconditionally ? (cfr RFC5011)

2010-11-05 Thread Marc Lampo
Hello, in RFC5011, section 6.6, "Trust Point Deletion" (== KSK rollover), there is an unconditional statement to set the REVOKE bit on the "old" KSK, once the parent zone publishes the DS record of the new KSK. I / we at EURId / are interested to learn if this unconditional setting of the revo