RE: added new name server to zone are missing from the slave

2011-12-19 Thread Gaurav Kansal
Did you increment the Serial Number in SOA?? -Original Message- From: bind-users-bounces+gaurav.kansal=nic...@lists.isc.org [mailto:bind-users-bounces+gaurav.kansal=nic...@lists.isc.org] On Behalf Of Gregory Machin Sent: Tuesday, 20 December, 2011 7:40 AM To: bind-us...@isc.org Subject

Re: added new name server to zone are missing from the slave

2011-12-19 Thread Barry Margolin
In article , Gregory Machin wrote: > Hi. > I have added 2 new name servers ns3 and ns4 to my zone, when I use dig > against the master they are shown in the list. When I do a dig against > the slave only the original servers ns1 and ns2 are there, I have > deleted the slave zones files and even

added new name server to zone are missing from the slave

2011-12-19 Thread Gregory Machin
Hi. I have added 2 new name servers ns3 and ns4 to my zone, when I use dig against the master they are shown in the list. When I do a dig against the slave only the original servers ns1 and ns2 are there, I have deleted the slave zones files and even after transferring the zone again I get the same

recursive clients quota maxes out when dnssec-validate and dlv-lookaside set to auto

2011-12-19 Thread Mark Jeftovic
version: 9.8.1-P1 We're seeing a lot of "no more recursive clients: quota reached"" log messages on a dns resolver we're running when we try to set dnssec-validate and dlv-lookaside set to auto (and queries time out). Before the change, we're running this: dnssec-enable yes; dnssec-validation

Re: Cache only and reverse mapping

2011-12-19 Thread sasa sasa
>> I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree >> (answering world), and I know about cache vulnerabilities so I was wondering >> what is the best solution for ISPs? >> By separating cache from authorities, you mean implementing 2 DNSs (2 >> different IPs)? This d

Re: Cache only and reverse mapping

2011-12-19 Thread Kevin Darcy
On 12/16/2011 11:22 AM, sasa sasa wrote: I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree (answering world), and I know about cache vulnerabilities so I was wondering what is the best solution for ISPs? By separating cache from authorities, you mean implementing 2 DNSs

Re: purpose of the RIR(for example RIPE) "domain:" object

2011-12-19 Thread Matus UHLAR - fantomas
On 19.12.11 10:32, Martin T wrote: what is the purpose of RIPE database "domain:" objects? Are they practically used for something? And according to RIPE database manual, "nserver" attribute under domain object specifies nameservers of the domain- has this some sort of practical use or is it just

purpose of the RIR(for example RIPE) "domain:" object

2011-12-19 Thread Martin T
Hi, what is the purpose of RIPE database "domain:" objects? Are they practically used for something? And according to RIPE database manual, "nserver" attribute under domain object specifies nameservers of the domain- has this some sort of practical use or is it just informative field(it's not mand