Re: Building a fresh named.root

2013-02-15 Thread Robert Moskowitz
On 02/15/2013 03:40 PM, Chris Buxton wrote: On Feb 15, 2013, at 9:57 AM, Robert Moskowitz wrote: I will do some more testing with this to see if I can indeed remove the root.hint includes. But I have a question. I have tried to dig in my server for the root info like you can a root server,

Re: Building a fresh named.root

2013-02-15 Thread Alan Clegg
On Feb 15, 2013, at 3:56 PM, Robert Moskowitz wrote: >> >> The hostname 'localhost' can mean different things to different computers. >> It probably means ::1 (IPv6 localhost) in this case. Try explicitly >> specifying the IP address rather than using the hostname. > > Appearently so. Very

Re: Building a fresh named.root

2013-02-15 Thread Robert Moskowitz
On 02/15/2013 03:40 PM, Chris Buxton wrote: On Feb 15, 2013, at 9:57 AM, Robert Moskowitz wrote: I will do some more testing with this to see if I can indeed remove the root.hint includes. But I have a question. I have tried to dig in my server for the root info like you can a root server,

Re: Building a fresh named.root

2013-02-15 Thread Chris Buxton
On Feb 15, 2013, at 9:57 AM, Robert Moskowitz wrote: > I will do some more testing with this to see if I can indeed remove the > root.hint includes. But I have a question. I have tried to dig in my server > for the root info like you can a root server, but obviously this is not the > way to do

empty-zones not set warning, but have net 192.168.128/24

2013-02-15 Thread Robert Moskowitz
I have been getting this warning, and wonder why? I have read: https://kb.isc.org/.../Why-does-named-log-an-error-disabling-RFC-1918-empty-zones-when-starting-up.html I have a 128.168.192.in-addr.arpa.zone zone in my internal view. So what might I be missing? Do I need to create my own deleg

Re: Randoming ports and firewall rules

2013-02-15 Thread Mike Hoskins (michoski)
-Original Message- From: Robert Moskowitz Date: Friday, February 15, 2013 1:33 PM To: "bind-users@lists.isc.org" Subject: Randoming ports and firewall rules >So it is past time for me to only use port 53 and support port >randomization. But I do run iptables (and ip6tables) and the ser

builtin hints working - Re: Building a fresh named.root

2013-02-15 Thread Robert Moskowitz
I commented out include for the root.hints and things are working still so obviously it is built in even though the string search is not working on my binary. On 02/15/2013 12:57 PM, Robert Moskowitz wrote: On 02/15/2013 12:37 PM, Chris Buxton wrote: On Feb 14, 2013, at 8:49 AM, Shawn Bakh

Randoming ports and firewall rules

2013-02-15 Thread Robert Moskowitz
So it is past time for me to only use port 53 and support port randomization. But I do run iptables (and ip6tables) and the server sits behind a Juniper SSG firewall. Where are there instructions for setting up iptables for port randomization and for general firewall rules (I doubt I will fin

rndc.key

2013-02-15 Thread Robert Moskowitz
I am now running without chroot and relying on selinux for protection. I created a /etc/named.d/ directory for all my many includes in named.conf which I know I have to keep in /etc/ My rndc.key is in /etc/named.d/ and is an include in my named.conf. When I first started bind, it reported tha

Re: Building a fresh named.root

2013-02-15 Thread Robert Moskowitz
On 02/15/2013 12:37 PM, Chris Buxton wrote: On Feb 14, 2013, at 8:49 AM, Shawn Bakhtiar wrote: Running bind rooted on FC 16 using the standard package. The ca file is located in /var/named/chroot/var/named/named.ca The hints are not built in. [shawn@www ~]$ strings /usr/sbin/named | grepA.

Re: Export / Import all zone data

2013-02-15 Thread Chris Buxton
On Feb 14, 2013, at 11:46 AM, Mailinglists wrote: > I'm looking to migrate all of the zone data from one installation of Bind to > another...hardware move. One machine is very old but running a pretty modern > version of Bind 9.6-ESV-R8. The other server is running Bind 9.8.2 and is in > use, so

Re: Building a fresh named.root

2013-02-15 Thread Chris Buxton
On Feb 14, 2013, at 8:49 AM, Shawn Bakhtiar wrote: > > Running bind rooted on FC 16 using the standard package. > > The ca file is located in /var/named/chroot/var/named/named.ca > > The hints are not built in. > [shawn@www ~]$ strings /usr/sbin/named | grep A.ROOT-SERVERS.NET > returns nothi

MX failed lookup and BIND

2013-02-15 Thread M. Meadows
We're seeing email failures to outlook.uga.edu. dig uga.edu +nssearch shows only dns3.uga.edu responds with an soa record. and dig -t mx outlook.uga.edu @dns3.uga.edu returns an mx record. outlook.uga.edu.86400 IN MX 10 707341637.mail.outlook.com. And we see a proble

Re: BIND9 statistics-server: JSON?

2013-02-15 Thread Mike Hoskins (michoski)
-Original Message- From: Jan-Piet Mens Date: Friday, February 15, 2013 12:57 AM To: "bind-users@lists.isc.org" Subject: BIND9 statistics-server: JSON? >As a fan of BIND's statistics-server I was tempted to see if I could >reduce the size of the data (XML) named produces by adding an opt

Re: [SOLVED] dns_journal_write_transaction on managed-keys-zone

2013-02-15 Thread Thomas Leuxner
* Thomas Leuxner 2013.02.11 21:13: > * Evan Hunt 2013.02.11 20:30: > > > I haven't seen this problem before. Can you share the rest of > > your configuration with me? You can open a ticket by mailing > > bind9-b...@isc.org. > > Config sent. > > Regards > Thomas Finally found the root of th

Re: BIND9 statistics-server: JSON?

2013-02-15 Thread Niall O'Reilly
On 15 Feb 2013, at 05:57, Jan-Piet Mens wrote: > would there be a chance of ISC adding this to stock > BIND9? Even better: would ISC take on the work of doing it? ;-) FWIW: +1 /Niall ___ Please visit https://lists.isc.org/mailman/list

Monitoring BIND

2013-02-15 Thread Arie Lendra. Putra
Hi, Let me introduce myself, My name is Arie L. Putra, I’m a data network engineer at a EVDO operator. We are using BIND 9.3.6 ( a bit old yes), for our caching-only name server, we are not maintaining authoritatives. We are not monitoring our DNS Server using: 1. Cacti (for traffi