Re: problem validate key of isc dlv

2011-03-20 Thread Torinthiel
On 03/21/11 02:13, fakessh @ wrote: > Yes, I bothered to redeploy new keys, fields TXT, a new signature. > and more on a new rehabilitation isc dlv. > > > I still get the same error > > nb : Simply debuggers dnssec still provide all kinds of resultasts And that's probably the main problem. Tw

Re: problem validate key of isc dlv

2011-03-20 Thread fakessh @
Yes, I bothered to redeploy new keys, fields TXT, a new signature. and more on a new rehabilitation isc dlv. I still get the same error nb : Simply debuggers dnssec still provide all kinds of resultasts Le lundi 21 mars 2011 à 10:58 +1100, Mark Andrews a écrit : > In message <1300660825.6651.2

Re: problem validate key of isc dlv

2011-03-20 Thread fakessh @
Le lundi 21 mars 2011 à 10:58 +1100, Mark Andrews a écrit : > In message <1300660825.6651.21.camel@localhost.localdomain>, "fakessh @" > writes > > > > that's what I did > > I made =E2=80=8B=E2=80=8Ba post on my blog explaining how I do > > goo.gl/EAbCB > > Have you changed your DNSKEY's since

Re: problem validate key of isc dlv

2011-03-20 Thread Mark Andrews
In message <1300660825.6651.21.camel@localhost.localdomain>, "fakessh @" writes : > > Le dimanche 20 mars 2011 =C3=A0 22:47 +0100, Torinthiel a =C3=A9crit : > > On 03/20/11 22:33, fakessh @ wrote: > > > and what do I do.=20 > >=20 > > You have to add your key to ISC's DLV registry. Go to dlv.isc.

Re: problem validate key of isc dlv

2011-03-20 Thread fakessh @
Le dimanche 20 mars 2011 à 22:47 +0100, Torinthiel a écrit : > On 03/20/11 22:33, fakessh @ wrote: > > and what do I do. > > You have to add your key to ISC's DLV registry. Go to dlv.isc.org, > create account, login, add a zone, add keys for it and publish a record > in your zone validating that

Re: problem validate key of isc dlv

2011-03-20 Thread Torinthiel
On 03/20/11 22:33, fakessh @ wrote: > and what do I do. You have to add your key to ISC's DLV registry. Go to dlv.isc.org, create account, login, add a zone, add keys for it and publish a record in your zone validating that you're the owner of the zone. You will be told what to do after you creat

Re: problem validate key of isc dlv

2011-03-20 Thread fakessh @
and what do I do. and what is this other publication of another DS Le lundi 21 mars 2011 à 08:25 +1100, Mark Andrews a écrit : > In message <1300650238.6651.15.camel@localhost.localdomain>, "fakessh @" > writes > : > > hello bind network and duru. > > > > I can not validate the key dlv via th

Re: problem validate key of isc dlv

2011-03-20 Thread Mark Andrews
In message <1300650238.6651.15.camel@localhost.localdomain>, "fakessh @" writes : > hello bind network and duru. > > I can not validate the key dlv via the website of the isc. > I do not understand why the warning is the isc > you have an explanation > SUCCESS 94.23.59.30 answered DNSKEY query

problem validate key of isc dlv

2011-03-20 Thread fakessh @
hello bind network and duru. I can not validate the key dlv via the website of the isc. I do not understand why the warning is the isc you have an explanation SUCCESS 94.23.59.30 answered DNSKEY query with rcode NOERROR 4.502:SUCCESS 87.98.164.164 answered DNSKEY query with rcode NOERROR 4.502:

Re: Need help on DNS reporter

2011-03-20 Thread Warren Kumari
Enable query logging, then: cat queries.log | grep 'query: example.com' | awk '{print $6}' | sed 's/#.*//' | sort -n | uniq -c | sort -rn | head -100 | more or something similar? W On Mar 20, 2011, at 10:09 AM, babu dheen wrote: > Hi, > > I am getting below status on this command.. Only

Re: Need help on DNS reporter

2011-03-20 Thread babu dheen
Hi, I am getting below status on this command.. Only internal DNS servers are allowed to query our gateway DNS server as client. number of zones: 12 debug level: 0 xfers running: 0 xfers deferred: 0 soa queries in progress: 0 query logging is ON recursive clients: 1/1000 tcp clients: 0/100 serve

Re: Master ns on internal lan

2011-03-20 Thread Torinthiel
On 03/20/11 11:13, x_bind-user...@nospam.pz.podzone.net wrote: > Hi, > > I'm trying to figure out how to configure my nameservers so that the > master can reside on an internal LAN *only* address. > > I already have it configured such that the master is (almost) hidden > while residing on a publi

Master ns on internal lan

2011-03-20 Thread x_bind-users_x
Hi, I'm trying to figure out how to configure my nameservers so that the master can reside on an internal LAN *only* address. I already have it configured such that the master is (almost) hidden while residing on a public IP. So I should present that first: ns0.mydomain.net - Gateway/firewall,

Re: Need help on DNS reporter

2011-03-20 Thread terry
How will "rndc status" take something good for you? 2011/3/20 babu dheen > Hi, > > Can anyone let me know is there any open source software available to > generate report for DNS service based on DNS BIND query logs. > > We have BIND DNS running RHEL 5.0. Would like to generate report based on