Re: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Mark Andrews
In message <023701ceb658$1cacff80$5606fe80$@leadmon.net>, "Howard Leadmon" writ es: > Thanks, but wait why am I getting resolution of the IP back? Is that > actually not valid, and it should be drilling down further but can't? Because the load balancer is misconfigured. It has the wrong zone

Re: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread David Miller
On 9/20/2013 7:28 PM, Mark Andrews wrote: > > In message <021501ceb653$ede37250$c9aa56f0$@leadmon.net>, "Howard Leadmon" > writ > es: >> This is probably easier than I am making it, but my googlefu seems to be >> failing me at the moment when I look around. I handle a batch of FreeBSD >> s

Re: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Kevin Darcy
"host" performs A, and MX queries, by default. If you want to limit it to a specific query type, use the "-t" option. Having said that, I didn't get an NXDOMAIN for any of the query types, from any of the delegated nameservers, when using dig, but I'm getting SERVFAILs when using host, *a

RE: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Howard Leadmon
Many thanks Mark, I was staring at this scratching my head, but that made it very clear, and I will pass this along. Glad to see it's not something I botched up on my side.. --- Howard Leadmon > -Original Message- > From: Mark Andrews [mailto:ma...@isc.org] > Sent: Friday, September

Re: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Mark Andrews
In message <021501ceb653$ede37250$c9aa56f0$@leadmon.net>, "Howard Leadmon" writ es: > This is probably easier than I am making it, but my googlefu seems to be > failing me at the moment when I look around. I handle a batch of FreeBSD > servers running sendmail, and I am having a site that is

RE: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Howard Leadmon
Thanks, but wait why am I getting resolution of the IP back? Is that actually not valid, and it should be drilling down further but can't? --- Howard Leadmon > -Original Message- > From: bind-users-bounces+howard=leadmon@lists.isc.org [mailto:bind- > users-bounces+howard=leadmon.

Re: bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 2013-09-20 at 18:51 -0400, Howard Leadmon wrote: > I am having a site that is trying to deliver mail being rejected, but > they swear their DNS is right, so I am not sure if we have an issue, > or they do. dig smtp2.panini.it. +trace +nodnssec

bind/sendmail resolving.. (NXDOMAIN)

2013-09-20 Thread Howard Leadmon
This is probably easier than I am making it, but my googlefu seems to be failing me at the moment when I look around. I handle a batch of FreeBSD servers running sendmail, and I am having a site that is trying to deliver mail being rejected, but they swear their DNS is right, so I am not sure

Re: RRL probably not useful for DNS IP blacklists, was Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-20 Thread Vernon Schryver
> From: Shane Kerr > With a 50% packet loss and 3 retries you'll have about 1 in 16 lookups > fail, right? If you've got enough legitimate lookups going on to > trigger RRL then you're going to get lots of failures. If 6% is "lots", then yes. > One workaround for this is to set SLIP to 1. I kn

Re: RRL probably not useful for DNS IP blacklists, was Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-20 Thread Noel Butler
Hi Shane, On Fri, 2013-09-20 at 11:38 +0200, Shane Kerr wrote: > Noel, > > On 2013-09-20 12:48:31 (Friday) > Noel Butler wrote: > > > On Fri, 2013-09-20 at 01:59 +, Vernon Schryver wrote: > > > > > plenty of delayed mail - hostname lookup failures (mostly because of > > > > URI/DNS BL's),

RRL probably not useful for DNS IP blacklists, was Re: New Versions of BIND are available (9.9.4, 9.8.6, and 9.6-ESV-R10)

2013-09-20 Thread Shane Kerr
Noel, On 2013-09-20 12:48:31 (Friday) Noel Butler wrote: > On Fri, 2013-09-20 at 01:59 +, Vernon Schryver wrote: > > > plenty of delayed mail - hostname lookup failures (mostly because of > > > URI/DNS BL's), so it certainly works as intended :) > > > > That sounds unrelated to RRL. Agai