Re: Metazones or Something Else?

2014-08-06 Thread Brian Cuttler
er [default any; if > missing] > allow-update is a EDNS acl option of subtype update [default none; if missing] > conf is a EDNS which contains other configuration data for a zone > > Mark > > In message <20140805164053.ga11...@fantomas.sk>, Matus UHLAR - fantomas >

Re: Metazones or Something Else?

2014-08-05 Thread Brian Cuttler
On Tue, Aug 05, 2014 at 09:41:14AM -0500, /dev/rob0 wrote: > On Tue, Aug 05, 2014 at 09:31:31AM -0400, Brian Cuttler wrote: > > On Tue, Aug 05, 2014 at 09:21:07AM -0400, Brian Cuttler wrote: > > > rndc addzone sounds like a very interesting tool, but > > > if you w

Re: Metazones or Something Else?

2014-08-05 Thread Brian Cuttler
On Tue, Aug 05, 2014 at 09:21:07AM -0400, Brian Cuttler wrote: > > rndc addzone sounds like a very interesting tool, but > if you want an automated sync, will require something to > read the source config of the master and then write the > requisit slave zone information for the d

Re: Metazones or Something Else?

2014-08-05 Thread Brian Cuttler
rndc addzone sounds like a very interesting tool, but if you want an automated sync, will require something to read the source config of the master and then write the requisit slave zone information for the dns slave server(s). Offsite slave servers will require a lot of trust. Rsync solution fo

Re: Clients Matching Multiple Views

2014-04-10 Thread Brian Cuttler
I had something similar a while back. view 1 { include external tables include common tables } view 2 { include internal tables include common tables } Read that as tables for ONLY-internal or ONLY-external view. I define each entry exactly once, also pushing stuff off to the common include me

Re: script - automatic change A record

2013-11-26 Thread Brian Cuttler
Mark, Good point, I'd completely forgotten the value of a shorter TTL record for cases like this. On Tue, Nov 26, 2013 at 09:56:45AM +1100, Mark Andrews wrote: > > In message > > , =?UTF-8?B?UGF3ZcWCIENoLg==?= writes: > > Hi list, > > > > I would like to write script that change two entry in

Re: script - automatic change A record

2013-11-25 Thread Brian Cuttler
I think you want to be using MX records, rather than A records to point to your mailhost systems, those records allow you to specify a priority, the higher priory system (I believe the lower numeric value, but look it up) getting the mail if available, else working through the list of available ma

Re: Bind logging

2013-10-11 Thread Brian Cuttler
I had a similar problem when moving to a newer version, the prior had run as root and logged to files in /var/log, the new version running as non-root couldn't do so. I created a subdirectory, and moved the logging in named.conf down one level, which you already have, but I set the owner of the

Re: weird perfmonce BIND version 9.6

2013-09-25 Thread Brian Cuttler
records or explicitely allowing recursive queries on our internal and private network. On Wed, Sep 25, 2013 at 04:23:57PM -0400, Alan Clegg wrote: > > On Sep 25, 2013, at 3:23 PM, Brian Cuttler wrote: > > > In our switch from BIND 8.3.3 to 9.8.2 we failed to add the now > >

Re: weird perfmonce BIND version 9.6

2013-09-25 Thread Brian Cuttler
Matus, I don't know if its related or not, but today we found that one of our internal DNS servers was not providing results for clients withing the domain, results we knew the server had because we could login into it and query the same information successfully. In our switch from BIND 8.3.3 to

Re: Can anyone help me resolve this named failure report

2013-09-17 Thread Brian Cuttler
When I upgraded bind I had trouble writing /var/log too. I moved the bind output logs down one level, /var/log/named-logs/ updating my config and allowing write access to the bind user for the new directory. I think I had trouble with the pid file, but I think I resolved that by removing the one

Re: Problem with "authoritative answer"

2013-09-13 Thread Brian Cuttler
new mount name, remains to be seen... Thank you, Brian On Fri, Sep 13, 2013 at 12:02:13PM -0700, Chris Buxton wrote: > On Sep 11, 2013, at 8:11 AM, Brian Cuttler wrote: > > We have remapped some of our DNS clients to point to another > > DNS resolver, one that we do not co

Problem with "authoritative answer"

2013-09-11 Thread Brian Cuttler
Cross posting to both Amanda users and bind users lists. We have remapped some of our DNS clients to point to another DNS resolver, one that we do not control, but that has "forwarder" records in place to point our domain's address resolution requests back to an authoritative server in our domain

Re: bind 2.1a3 on centos 6.4

2013-06-24 Thread Brian Cuttler
wrote: > On Jun 24, 2013, at 10:09 AM, Brian Cuttler wrote: > > On Mon, Jun 24, 2013 at 09:40:36AM -0700, Chris Buxton wrote: > >> On Jun 22, 2013, at 12:50 PM, "Lawrence K. Chen, P.Eng." > >> wrote: > >> > >>> Or don't use nslint? >

Re: bind 2.1a3 on centos 6.4

2013-06-24 Thread Brian Cuttler
On Mon, Jun 24, 2013 at 09:40:36AM -0700, Chris Buxton wrote: > On Jun 22, 2013, at 12:50 PM, "Lawrence K. Chen, P.Eng." > wrote: > > > Or don't use nslint? > > +1 > > Use 'named-checkconf -z' instead. Or run it without '-z', and then use > 'named-checkzone' against each zone file, with suita

Re: bind 2.1a3 on centos 6.4

2013-06-24 Thread Brian Cuttler
dling views was a Solaris > > enhancement > > or something that has broken in newer nslint versions. Or what the > > work-around is. > > > > Do you? > > > > thank you, > > > >

Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread Brian Cuttler
would expect to see errors, when nslint says: > > nslint: 0/131072 items used, 0 errors > > Zero items used/checked strongly implies zero errors can be detected. > > hth, > Len > > > > > > > > > From: Brian Cuttle

Re: bind 2.1a3 on centos 6.4

2013-06-21 Thread Brian Cuttler
mplies zero errors can be detected. > > hth, > Len > > > > > > > > > From: Brian Cuttler > >To: bind-users@lists.isc.org > >Sent: Friday, June 21, 2013 10:35 AM > >Subject: bind 2.1a3 on centos 6.4 > > > > > > >

bind 2.1a3 on centos 6.4

2013-06-21 Thread Brian Cuttler
Please let me know if there is a more appropriate list. Here is a question you probably don't hear every day. Background: We are moving our DNS from a Solaris platform to Centos Action: I installed BIND 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 nslint-2.1a3-1.el6.rf.x86_64.rpm rcs sudo etc on