Re: switching entire DNS system to new servers and IP addresses

2017-02-23 Thread Mark Andrews
In message <1ca812f4-7ea0-4498-b838-bbfaf551b...@iastate.edu>, "Eldridge, Rod A [ITNET]" writes: > > Iowa State University is replacing 7 ISC NAMED/BIND servers and 4 ISC DHCP > servers with Infoblox servers on March 14th. We want to keep the domain > names of our external servers the same (with

Re: switching entire DNS system to new servers and IP addresses

2017-02-23 Thread John Miller
On Thu, Feb 23, 2017 at 2:52 PM, Eldridge, Rod A [ITNET] wrote: > > Iowa State University is replacing 7 ISC NAMED/BIND servers and 4 ISC DHCP > servers with Infoblox servers on March 14th. We want to keep the domain names > of our external servers the same (with one exception), but we will be

Re: switching entire DNS system to new servers and IP addresses

2017-02-23 Thread Warren Kumari
On Thu, Feb 23, 2017 at 3:03 PM, Reindl Harald wrote: > > > Am 23.02.2017 um 20:52 schrieb Eldridge, Rod A [ITNET]: >> >> >> Iowa State University is replacing 7 ISC NAMED/BIND servers and 4 ISC DHCP >> servers with Infoblox servers on March 14th. We want to keep the domain >> names of our externa

Re: switching entire DNS system to new servers and IP addresses

2017-02-23 Thread Mitchell Kuch
Hello, Rod - It is important to consider the TTL on the glue records at Educause/Verisign. The EDU. root sets TTLs for each NS/A/ record for two days. I recommend operating authoritative DNS servers at the old IP addresses for four days after the EDU. and IASTATE.EDU. zone updates. In pra

Re: switching entire DNS system to new servers and IP addresses

2017-02-23 Thread Reindl Harald
Am 23.02.2017 um 20:52 schrieb Eldridge, Rod A [ITNET]: Iowa State University is replacing 7 ISC NAMED/BIND servers and 4 ISC DHCP servers with Infoblox servers on March 14th. We want to keep the domain names of our external servers the same (with one exception), but we will be changing all

switching entire DNS system to new servers and IP addresses

2017-02-23 Thread Eldridge, Rod A [ITNET]
Iowa State University is replacing 7 ISC NAMED/BIND servers and 4 ISC DHCP servers with Infoblox servers on March 14th. We want to keep the domain names of our external servers the same (with one exception), but we will be changing all of the IPv4 and IPv6 addresses of those external servers.

Re: Redirect only second and third level domains

2017-02-23 Thread Warren Kumari
On Thu, Feb 23, 2017 at 7:21 AM, Andrea Gabellini wrote: > Hi, > > I would like to redirect the NXDOMAIN responses to a courtesy page but > only for second and third level domains. I mean something like: > > *.*. IN A 1.2.3.4 > *.*.*. IN A 1.2.3.4 > > that obviously doesn't work. Is there a soluti

Re: Concatenating more RPZ zones?

2017-02-23 Thread Anne Bennett
>> i have this situation with RPZ zones (and can grow up with more RPZ zones): > > If no-one has replied, it's possible no-one knows the answer. The latest draft of the RPZ specification is: https://tools.ietf.org/html/draft-vixie-dns-rpz-04 I see nothing, even in "6.1. Per-Zone Action Overr

Re: Concatenating more RPZ zones?

2017-02-23 Thread Phil Mayers
On 23/02/17 13:05, Job wrote: Hi guys, i have this situation with RPZ zones (and can grow up with more RPZ zones): This is the third time you've posted this query. It's not necessary or polite to continually re-post the same message to the list. If no-one has replied, it's possible no-one

Concatenating more RPZ zones?

2017-02-23 Thread Job
Hi guys, i have this situation with RPZ zones (and can grow up with more RPZ zones): response-policy { zone "policy1.lan"; zone "policy2.lan"; }; Within polici1.lan and policy2.lan i have included the client IP that must not load the policy (passthrough). If a Client IP needs to have enabled p

Redirect only second and third level domains

2017-02-23 Thread Andrea Gabellini
Hi, I would like to redirect the NXDOMAIN responses to a courtesy page but only for second and third level domains. I mean something like: *.*. IN A 1.2.3.4 *.*.*. IN A 1.2.3.4 that obviously doesn't work. Is there a solution to do it? Actually my configuration is: zone "." in { type redire