Re: Need to improve named performance

2012-11-11 Thread Florian Weimer
* Ed LaFrance: > Thanks for chiming in. Named is PID 8349 in my case. Here's a snippet > of the output from strace: > [pid 8351] send(3, "<30>Nov 11 13:07:25 named[8349]:"..., 107, > MSG_NOSIGNAL) = 107 <0.015232> > [pid 8353] send(3, "<30>Nov 11 13:07:25 named[8349]:"..., 103, > [pid 8353]

Re: bind-users Digest, Vol 1361, Issue 2

2012-11-11 Thread Ed LaFrance
Hi Kevin - Well for some reason, your message and someone else's never got back to me, saw it in the digest instead. I've got about 30 class C zones on this server and it's only handling rDNS for them; I figure theres a couple thousand actual PTR records. I did log queries for a while and t

Re: bind-users Digest, Vol 1361, Issue 2

2012-11-11 Thread Ed LaFrance
Did not get your post for some reason. I am running IP tables with a simple firewall setup. No idea on ip_conntrack. How do I check and if so, what setting should I try and how do I do it? Thanks! Ed -- Message: 1 Date: Sun,

Re: Need to improve named performance

2012-11-11 Thread Ed LaFrance
Hello - Thanks for chiming in. Named is PID 8349 in my case. Here's a snippet of the output from strace: [pid 8351] time( [pid 8352] <... sendmsg resumed> ) = 56 <0.000104> [pid 8352] recvmsg(515, {msg_name(16)={sa_family=AF_INET, sin_port=htons(38385), sin_addr=inet_addr("205.188.158

Re: Need to improve named performance

2012-11-11 Thread Florian Weimer
* Ed LaFrance: > Running BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 on a quadcore xeon server > (3Ghz) with 2GB RAM. Named is being used only for rDNS queries against > our address space. You should really upgrade to the latest version on that branch (likely bind-9.3.6-20.P1.el5_8.5). > The bottom lin

Re: Need to improve named performance

2012-11-11 Thread Kevin Darcy
On 11/10/2012 1:39 PM, Ed LaFrance wrote: Hello all - First post to this list, hope I'm on the right place. Running BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 on a quadcore xeon server (3Ghz) with 2GB RAM. Named is being used only for rDNS queries against our address space. The issue is that name

Re: Lots of "RSA_verify failed" after upgrade to 9.7.7

2012-11-11 Thread Evan Hunt
> But not for 9.7, since 9.7 is EOL since november 2012. Correct? Yes, that's correct. If you're stuck on 9.7 for the time being, you can silence the RSA_verify warnings with the change I mentioned in http://www.mail-archive.com/bind-users@lists.isc.org/msg14747.html (It's not the fix we used fo

Re: Lots of "RSA_verify failed" after upgrade to 9.7.7

2012-11-11 Thread Matus UHLAR - fantomas
In message <20121105092813.ge34...@pol-server.leissner.se>, Peter Olsson writes Yesterday I upgraded our slave DNS (running FreeBSD 7.4) from bind 9.7.6.4 to 9.7.7. The server uses bind97 from ports. After that upgrade I get lots of these in syslog: RSA_verify failed error:04077068:rsa routines

Re: Need to improve named performance

2012-11-11 Thread G.W. Haywood
Hi there, On Sun, 11 Nov 2012, Ed LaFrance wrote: Running BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 ... Somebody already said upgrade. Generally that's the first thing to do in a case like this (before asking on mailing lists:). The issue is that named is not keeping up with rdns requests. The