cache server with authoritative answer

2011-01-28 Thread pyh
The book "Pro DNS and BIND" says: If the caching server obtains its data directly from an authoritative DNS, then it too will respond as authoritative. Ohterwise, if the data is supplied from its cache, the response is nonauthoritative. So this means even for a cache only server it can answer

Re: what's a valid domain name?

2011-01-28 Thread pyh
Barry Margolin writes: In article , p...@mail.nsbeta.info wrote: I googled and found this: It's on the Internet, so it must be true. :) * A domain name can be up to 63 characters long plus a dot plus the characters used to identify the top-level domain (i.e "com", "info", "biz",

Re: what's a valid domain name?

2011-01-28 Thread Barry Margolin
In article , p...@mail.nsbeta.info wrote: > I googled and found this: It's on the Internet, so it must be true. :) > > * A domain name can be up to 63 characters long plus a dot plus the > characters used to identify the top-level domain (i.e "com", "info", "biz", > etc. > * Valid

Re: root hints

2011-01-28 Thread Barry Margolin
In article , Joseph S D Yao wrote: > [This does leave a security hole - if a root name server's IP changes, > and a Bad Guy gets the old one; or on another internet, if the Bad Guy > gets all the IP addresses in the default file. It's not just lust for > control that has me using a visible root

Re: root hints

2011-01-28 Thread Joseph S D Yao
On Fri, Jan 28, 2011 at 09:51:13PM -0500, Joseph S D Yao wrote: > On Fri, Jan 28, 2011 at 08:10:10PM +, Jack Tavares wrote: > > I have a question about the hints file. > > > > It is "built in" to BIND. > > > > Does bind check for updates to this periodically? ... > To the best of my knowledge

Re: root hints

2011-01-28 Thread Joseph S D Yao
On Fri, Jan 28, 2011 at 08:10:10PM +, Jack Tavares wrote: > I have a question about the hints file. > > It is "built in" to BIND. > > Does bind check for updates to this periodically? > If so, where does it get it from ? > I assume it gets it from ftp.isc.org. > Does bind contain a hardcode f

Re: root hints

2011-01-28 Thread Joseph S D Yao
On Fri, Jan 28, 2011 at 04:40:50PM +0800, p...@mail.nsbeta.info wrote: > Joseph S D Yao writes: > > Just because we don't need to, doesn't mean that it's a good practtice > > not to. And it's so easy to create one on a system where DNS is already > > set up. > > > > dig ns . > root.hints >

what's a valid domain name?

2011-01-28 Thread pyh
I googled and found this: * A domain name can be up to 63 characters long plus a dot plus the characters used to identify the top-level domain (i.e "com", "info", "biz", etc. * Valid characters in a domain name include letters, numbers and hyphens "-". The domain name must start and end

What's up?

2011-01-28 Thread Juan O
Heya,how are you doing recently ? I would like to introduce you a very good company which i knew.Their website is [www.bestseller-offer.com] .They can offer you all kinds of electronical products which you need like Laptops ,GPS ,TV LED,Cell phones,ps3,MP3/4/5,motorcycles etcPlease ta

Re: root hints

2011-01-28 Thread Anand Buddhdev
On 28/01/2011 21:10, Jack Tavares wrote: > I have a question about the hints file. > > It is "built in" to BIND. > > Does bind check for updates to this periodically? > If so, where does it get it from ? > I assume it gets it from ftp.isc.org. > Does bind contain a hardcode for that IP address?

RE: root hints

2011-01-28 Thread Jack Tavares
> On 28/01/2011 21:10, Jack Tavares wrote: > > > I have a question about the hints file. > > > > It is "built in" to BIND. > > > > Does bind check for updates to this periodically? > > If so, where does it get it from ? > > I assume it gets it from ftp.isc.org. > > Does bind contain a hardcode for

RE: root hints

2011-01-28 Thread Jack Tavares
I have a question about the hints file. It is "built in" to BIND. Does bind check for updates to this periodically? If so, where does it get it from ? I assume it gets it from ftp.isc.org. Does bind contain a hardcode for that IP address? or does it use the existing hints to find the address of "

Re: Bind 9.7 - sanity check or a bug

2011-01-28 Thread Evan Hunt
> Interesting; can you be more specific - what version info are you > referring to, and which checking routines. When you update a zone, the new version of the zone has to be internally consistent. There was a bug where the consistency check was being applied against the old version of the zone

Re: Bind 9.7 - sanity check or a bug

2011-01-28 Thread Phil Mayers
In case two, you are sending the delete as one transaction and the add as a 2nd transaction. I'm surprised the 2nd case fails at the 2nd transaction, not the first. Known bug. The version information was not passed down to the checking routines. Interesting; can you be more specific - what

Re: Bind 9.7 - sanity check or a bug

2011-01-28 Thread Mark Andrews
In message <4d42a8df.10...@imperial.ac.uk>, Phil Mayers writes: > On 28/01/11 10:50, Din Jo wrote: > > > case 1: > > # nsupdate > > > server 127.0.0.1 > > > update delete server2.test.com A > > > update add server2.test.com A 10.0.0.2 >

Re: Bind 9.7 - sanity check or a bug

2011-01-28 Thread Phil Mayers
On 28/01/11 10:50, Din Jo wrote: case 1: # nsupdate > server 127.0.0.1 > update delete server2.test.com A > update add server2.test.com A 10.0.0.2 > send > quit case 2: # nsupdate > server 127.0.0.1 > update delete server2.test.c

Re: Bind 9.7 - sanity check or a bug

2011-01-28 Thread Din Jo
Please help me to understand the following behaviour of Bind 9.7. Consider this: NS server1.test.com. NS server2.test.com. server1 A 10.0.0.1 server2 A 10.0.0.2 case 1: # nsupdate > server 127.0.0

Bind 9.7 - sanity check or a bug

2011-01-28 Thread Din Jo
Please help me to understand the following behaviour of Bind 9.7. Consider this: NS server1.test.com. NS server2.test.com. server1 A 10.0.0.1 server2 A 10.0.0.2 case 1: # nsupdate > server 127.0.0

Re: Recursive DNS problem

2011-01-28 Thread Torinthiel
Dnia 2011-01-28 10:52 bangla desh napisał(a): >> I believed so that com.bd is broken. It only has 1 ns server and >hsbc.com.bd, whois.com.bd and even google.com.bd they are all delegate >directly from bd and not from com.bd. > >I am wondering, is there a dns rule/standard (or RFC) that explains

Re: root hints

2011-01-28 Thread pyh
Joseph S D Yao writes: Just because we don't need to, doesn't mean that it's a good practtice not to. And it's so easy to create one on a system where DNS is already set up. dig ns . > root.hints I disagree with this. Few files mean few risk for admin. How about the case when someone