Re: how to proper include DS record on key dnssec

2011-01-13 Thread fakessh @
hello bind network and hello dnssec network admin. thank you for answered, I think I found a solution to my problem. $INCLUDE directive is that I have to handle example: $INCLUDE /var/named/keys/dsset-fakessh.eu. fakessh.eu $INCLUDE /var/named/keys/keyset-fakessh.eu. fakessh

Re: Pushed transfer to slave fails

2011-01-13 Thread Hauke Lampe
Hi Stewart. > SLAVE (10.5.0.6) >                  transfer-source 10.5.0.5; > > zone "bard.edu" { >                  masters { 10.5.0.5; }; >                  transfer-source 10.5.0.5; transfer-source should probably be 10.5.0.6, not .5 > Jan 13 12:37:37 nsi1 named[21007]: zone bard.edu/IN

Re: only the response has aa flag can be cached?

2011-01-13 Thread Kevin Darcy
On 1/11/2011 11:40 PM, p...@mail.nsbeta.info wrote: These triggered the release of 9.7.2-P1 when we were rejecting these after tightening the response processing to treat glue to answer responses as referrals to address the issue of named return glue records from the parent zones rather than the

Pushed transfer to slave fails

2011-01-13 Thread Stewart Dean
IN the past I've had separate internal and external, master and slave servers. Moving from AIX to Lnx/VMware, I'm doing one master (with internal and external views) and one slave. When the slave's copy ages out, it seems to successfully pulls new zone files from the master. But when I update

Re: Tracing Response Packets at the Querying Server

2011-01-13 Thread Warren Kumari
On Jan 13, 2011, at 12:08 PM, Barry Finkel wrote: I am running bind-9.7.2-P3, and I am having a problem with BIND or the network or the Ubuntu operating system. I send a DNS query from one of my DNS servers to another of my DNS servers. I see in a tshark trace that the reply packet is receive

Re: how to proper include DS record on key dnssec

2011-01-13 Thread Paul Wouters
On Thu, 13 Jan 2011, fakessh @ wrote: > I correctly configure my server centos dnssec on with as a > representative of encryptions dlv isc. my question is relevant and was > already asked but I have not found the complete answer on google. my > question is how to include the DS record in the Keys.

Tracing Response Packets at the Querying Server

2011-01-13 Thread Barry Finkel
I am running bind-9.7.2-P3, and I am having a problem with BIND or the network or the Ubuntu operating system. I send a DNS query from one of my DNS servers to another of my DNS servers. I see in a tshark trace that the reply packet is received back at the querying server, but dig produces a tim

Re: host unreachable. -- a bit more info

2011-01-13 Thread Jay G. Scott
heh. sorry. i did read dig's man page but i thought you were going to reply and tell me my dig version was behind yours. sorry for the tardy reply. one of those weeks. j. ns5 52 > dig @146.6.211.1 +tcp arlut.utexas.edu ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3 <<>> @146.6.211.1 +tcp a

Re: rndc addzone and file name

2011-01-13 Thread Alan Clegg
On 1/13/2011 11:08 AM, Peter Andreev wrote: > I've executed > rndc addzone test.test '{ type master; file "/etc/namedb/master/test.1"; };' > > and have got the file /etc/namedb/3bf305731dd26307.nzf: > zone test.test { type master; file "/etc/namedb/master/test.1"; }; > > The question was: can I

Re: rndc addzone and file name

2011-01-13 Thread Peter Andreev
I see that my first post wasn't clear, please, excuse me. I'll try to explain the situation. I have: named.conf: ... include "includes/file1"; include "includes/file2"; etc ... eof I've executed rndc addzone test.test '{ type master; file "/etc/namedb/master/test.1"; };' and have got the file /

Re: rndc addzone and file name

2011-01-13 Thread Alan Clegg
On 1/13/2011 9:43 AM, Peter Andreev wrote: > I have several includes which are edited via hand-written script and > now I'm trying to simplify it by using add/delzone options of rndc. Yay! > So, the question is: how can I specify files where rndc addzone puts > new zones' descriptions? You prov

Re: rndc addzone and file name

2011-01-13 Thread Yohann Lepage
Hi, http://www.google.com/search?q=rndc+addzone 1st link : rndc addzone example.aa in myview '{type master; file "master/example.aa";};' Not tested. 2011/1/13 Peter Andreev : > Hello, All! > > I have several includes which are edited via hand-written script and > now I'm trying to simplify it

rndc addzone and file name

2011-01-13 Thread Peter Andreev
Hello, All! I have several includes which are edited via hand-written script and now I'm trying to simplify it by using add/delzone options of rndc. So, the question is: how can I specify files where rndc addzone puts new zones' descriptions? Thanks in advance. -- -- AP

Re: bind9 and IPV6

2011-01-13 Thread Alan Clegg
On 1/13/2011 9:19 AM, hugo hugoo wrote: > For all users... > > Can anybody give me informations on the IPV6 compatibility of BIND9 > compared to BIND8? > It is not clear what is present in BIND9 and not in BIN8 regarding IPV6. > > I have created an IPV6 record in BIND8 and it works... > > Tha

bind9 and IPV6

2011-01-13 Thread hugo hugoo
For all users... Can anybody give me informations on the IPV6 compatibility of BIND9 compared to BIND8? It is not clear what is present in BIND9 and not in BIN8 regarding IPV6. I have created an IPV6 record in BIND8 and it works... Thanks in advance for any clear references or for any clear