Re: Zones-unable-update

2020-01-06 Thread Fajar A. Nugraha
On Mon, Jan 6, 2020 at 3:16 PM MEjaz wrote: > 1. My primary name server, /etc/named.conf, and here am forcing transfer > to only few trusted servers, as mentioned in the below clause. > transfers-out 2000; > allow-transfer {212.119.93.5;213.230.0.10; 212.119.93.10; 212.119.92.6;}; > 2. second

Re: Zones-unable-update

2020-01-05 Thread Fajar A. Nugraha
On Mon, Jan 6, 2020 at 2:03 PM MEjaz wrote: > > Thank you for your emai. > > > > I am not cutting any logs, I am capturing only for that particular zone > which I have chooses for the test, as I can't do the test on live zones. > > This time I have noticed "denied" in my slave server logs as be

Re: Zones-unable-update

2020-01-05 Thread Fajar A. Nugraha
On Thu, Jan 2, 2020 at 7:58 PM MEjaz wrote: > > Hello all. > > My setup which has one primary and slave server was working fine since years. > > All of sudden I started getting the problem of zones updates on slaves. > Which are not happening on time. it takes two hours to take the updates. > >

Re: bind-9.11.0-P2 on Debian 9.0 (stretch)

2017-01-27 Thread Fajar A. Nugraha
On Fri, Jan 27, 2017 at 7:20 PM, Wolfgang Riedel wrote: > Just wonder if there is some agreed guidance on what steps I SHOULD take > to get bind-9.11.0-P2 successfully build on Debian 9.0? > > The generic recommendation on debian would probably be 'use whatever the distro comes with, as they main

Re: Is there any reverse proxy software for dns or udp?

2015-01-30 Thread Fajar A. Nugraha
On Fri, Jan 30, 2015 at 9:07 AM, WXR <474745...@qq.com> wrote: > Is there any reverse proxy software for dns‍ , which can do load > balance、cache for dns service, just like squid for http service? > > What functionality do you need that can't be provided by bind? e.g. https://www.safaribooksonline

Re: Digging to the final IP

2014-10-19 Thread Fajar A. Nugraha
What are you using this for? If it's part of a script, it might be easier to just use gethostbyname. For example, in php: http://php.net/manual/en/function.gethostbyname.php , Returns the IPv4 address or a string containing the unmodified hostname on failure. -- Fajar On Mon, Oct 20, 2014 at 1

Re: Value of memory

2014-08-06 Thread Fajar A. Nugraha
On Thu, Aug 7, 2014 at 10:39 AM, Robert Moskowitz wrote: > I have a server that is only running bind 9.8.2 (Centos 6.5). It has 2Gb > memory and free reports ~1.7Gb used. > > I am looking at replacing this server with an armv7 board running Redsleeve > (until Centos 7 is out and stable for armv7)

Re: Does bind read /etc/hosts?

2014-07-15 Thread Fajar A. Nugraha
On Wed, Jul 16, 2014 at 9:55 AM, Mark Andrews wrote: > > In message <53c5e714.5080...@thelounge.net>, Reindl Harald writes: >> > Can the LDNS return 10.10.10.1 defined in the /etc/hosts to the >> > client? >> > maybe some special configuration in named can support this feature >> >> wrong tool -

Re: AIX and 9.9.5 compiling

2014-05-09 Thread Fajar A. Nugraha
On Fri, May 9, 2014 at 5:36 PM, Tony Finch wrote: > > Edward DeLargy wrote: > > > I just want to verify that 9.9.5 can be compiled in AIX > > The README says: > > Building > > BIND 9 currently requires a UNIX system with an ANSI C compiler, > basic POSIX support, and a 64 bit inte

Re: RPM SPEC file for el6

2013-08-19 Thread Fajar A. Nugraha
On Mon, Aug 19, 2013 at 9:22 PM, Samuel Lentz wrote: > Thanks. It looks to be good. I did find this once and thought is was to > good to be true. But after verifying the code is the same, I will be using > this for further updates. > > I understand that CentOS if suppose to be a complete copy of

Re: Caching server - named process is limit at 500MB

2013-04-26 Thread Fajar A. Nugraha
On Wed, Apr 17, 2013 at 9:46 AM, Chu Ha Khanh wrote: > Hi, > > Here is my output from command. It looks like my bind version is actually 32 > bit. But there are some default applications also 32 bit although all are > installed on a 64 bit OS. I have to check this for a moment. Correct. If you w

Re: Moving BIND from Solaris to Linux

2012-10-01 Thread Fajar A. Nugraha
> One idea would be to use RHEL but still download and compile your own BIND on > top of it. Yup, IIRC there are (S)RPM for latest bind versios posted on this list. > However, if the only thing on your RHEL server is BIND you have to wonder > why you're paying RedHat a subscription. Yeah. If

Re: Moving BIND from Solaris to Linux

2012-10-01 Thread Fajar A. Nugraha
On Mon, Oct 1, 2012 at 7:58 PM, Graham Butler wrote: > We are currently looking at replacing our Solaris boxes with a flavour of > Linux to run BIND with a focus on Red Hat and Ubuntu. I am trying to collect > some evidence to which OS is being used to run BIND and why, before we make > a decision

Re: limiting number of requests of a single hosts

2012-06-15 Thread Fajar A. Nugraha
On Fri, Jun 15, 2012 at 9:37 PM, Holemans Wim wrote: > > > Wim Holemans > Netwerkdienst Universiteit Antwerpen > Network Services University of Antwerp > > > One of the problems is that these firewalls are going to be replaced soon and > we don't want to spend to much effort in trying to fix what

Re: a domain can ns of itself?

2012-03-28 Thread Fajar A. Nugraha
On Thu, Mar 29, 2012 at 6:33 AM, Mohsen Pahlevanzadeh wrote: > pahlevanzadeh.info. 14400 IN NS shared.pahlevanzadeh.info. > > Is it Possible? Yes. Google does it $ dig google.com ns ; <<>> DiG 9.8.1-P1 <<>> google.com ns ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, sta

Re: huge count of DNS deny hits

2012-01-11 Thread Fajar A. Nugraha
On Wed, Jan 11, 2012 at 1:27 PM, babu dheen wrote: > > Dear Fajar, > >  Below logs taken from Internal DNS server running in Microsoft DNS. Then why did you ask this list instead of contacting MS support? > I checked with client AV status, everything is fine( system is up to date > with DAT fro

Re: huge count of DNS deny hits

2012-01-10 Thread Fajar A. Nugraha
On Wed, Jan 11, 2012 at 12:11 PM, babu dheen wrote: > > Hi, > > I enabled the logs in DNS server and i found  below lines from this client > continiously.. > > 1/10/2012 9:14:30 AM 0FDC PACKET  05B489B0 UDP Snd > 1f23   Q [0005 A D   NOERROR] TXT    (7)version(4)bind(0) > 1/10/2012 9

Re: huge count of DNS deny hits

2012-01-08 Thread Fajar A. Nugraha
On Mon, Jan 9, 2012 at 1:37 PM, babu dheen wrote: > Unfortunately, i have not enabled logs in my internal DNS server. You just dismissed the only reliable source of information > > Any idea .. Without logs, you only have assumptions. The best assumption at this point is that the client probably

Re: register .org NS in root?

2012-01-01 Thread Fajar A. Nugraha
On Mon, Jan 2, 2012 at 12:35 PM, DNSbed.com wrote: > Well, say I want to setup the domain "mydots.net" to use these two NS: > dwdns1.nsbeta.info > dwdns2.nsbeta.info > How can I setup the glue in Godaddy? Glue records are only needed if the ns is on the same domain. e.g. nsbeta.info -> NS = dwdns

Re: register .org NS in root?

2012-01-01 Thread Fajar A. Nugraha
On Mon, Jan 2, 2012 at 10:58 AM, DNSbed.com wrote: > Hi, > > I just noticed namecheap's NS servers are five .org hostnames: > > namecheap.com.  86400   IN  NS  ns3.mydyndns.org. > namecheap.com.  86400   IN  NS  ns2.mydyndns.org. > namecheap.com.  86400   IN

Re: Re: .TLD minimum number of nameservers rule

2011-12-13 Thread Fajar A. Nugraha
On Tue, Dec 13, 2011 at 3:53 PM, wrote: >> > For instance, would this be a problem when implementing a >> > wide area bonjour subdomain using my own local dns server for clients that >> > are >> > mobile (internal/external) ? >> >> Bonjour should work even without a DNS server. > > Reminds me of

Re: Re: .TLD minimum number of nameservers rule

2011-12-12 Thread Fajar A. Nugraha
On Tue, Dec 13, 2011 at 6:20 AM, wrote: > Thanks all. Chris, Anand that's very useful to know, sorry Jeff and Philippe, > your interesting suggestions wont work in this case. > > If I attack the problem from the other way down instead, the fact my current > registra doesn't allow me to add PTR or

Re: trigger point for new bug

2011-11-20 Thread Fajar A. Nugraha
On Fri, Nov 18, 2011 at 6:11 AM, Jack Tavares wrote: > Thank you again. And I agree that upgrading is the best option, however > I was looking for any possible mitigations to the problem for the > (unfortunately unavoidable) period of time it will take vendors > to provide patched bind servers. W

Re: reverse delegation from Telco

2011-11-03 Thread Fajar A. Nugraha
On Fri, Nov 4, 2011 at 1:11 PM, Jim Pazarena wrote: > but that non-auth kinda bugs me, because for my 'full' /24 subnets, > that never happens. And it's delegated from the same Telco (Telus) That's because "full" /24 subnets can be delegated easily using subdomains, while a /28 needs classless de

Re: host versus nslookup

2011-10-13 Thread Fajar A. Nugraha
On Thu, Oct 13, 2011 at 1:05 PM, listmail wrote: > On Thu, 13 Oct 2011 03:33:30 +0700, Fajar A. Nugraha wrote >> If you're concern about what address programs gets when they resolve >> host names, then getent is a better choice as it also respects >> nsswitch.conf and

Re: host versus nslookup

2011-10-12 Thread Fajar A. Nugraha
On Thu, Oct 13, 2011 at 3:23 AM, Sten Carlsen wrote: >> Use dig. >> >> Always use dig. > I don't quite agree, for debugging bind, use dig - for debugging lookup > issues on some machine, host will behave more like any normal program, using > resolv.conf and what else and can point to some issues

Re: about the dig

2011-07-18 Thread Fajar A. Nugraha
On Tue, Jul 19, 2011 at 12:32 PM, Feng He wrote: > Hi list, > > When I deleted all the entries in /etc/resolv.conf (I am using Linux), > dig can't work. > I was thinking since dig is a standard resolver, what makes you think that? From the man page dig (domain information groper) is a fle

Re: Client cannot resolve communities.intel.com

2011-07-04 Thread Fajar A. Nugraha
On Tue, Jul 5, 2011 at 10:29 AM, vr wrote: > Hello, > > I am trying to visit "http://communities.intel.com"; using Iceweasel on a > Debian desktop PC. No proxies. > > My clients etc/resolv.conf point to my own Debian BIND 9.7.3 installed on a > separate server and installed from distribution packa

Re: better performance with 32 bit ! why?

2011-06-29 Thread Fajar A. Nugraha
On Wed, Jun 29, 2011 at 8:33 PM, wrote: > on server1(64 bit) i have 2 Intel E5310 quad-core 1.6Ghz and on server2(32 > bit) i have 2 Intel Xeon dual-core 2.33Ghz. > means 8*1.6 Ghz on server1 and 4*2.33 on server2. > > 8*1.6 is better and faster than 4*2.33, no? Sometimes I wonder if people REAL

Re: What is DNS Tunneling

2011-06-20 Thread Fajar A. Nugraha
On Mon, Jun 20, 2011 at 1:56 PM, babu dheen wrote: > > Hi, > >  Can anyone explain what is DNS tunneling because i am seeing large number of > DNS tunneling attack in IPS from one machine in the LAN. Did you try Google? First entry is very informative: http://www.dnstunnel.de/ -- Fajar __

Re: Help needed

2011-06-14 Thread Fajar A. Nugraha
add that code. > Regards. Now that you're giving more details, hopefuly others will be able to help you. -- Fajar > > On Tue, Jun 14, 2011 at 3:08 PM, Fajar A. Nugraha wrote: >> >> On Tue, Jun 14, 2011 at 3:04 PM, Vignesh Gadiyar >> wrote: >> > Hi, &

Re: Help needed

2011-06-14 Thread Fajar A. Nugraha
On Tue, Jun 14, 2011 at 3:04 PM, Vignesh Gadiyar wrote: > Hi, > I am Vignesh from Bangalore and i was developing an application using Open > source BIND wherein i needed to know where exactly, i mean from which > function do we get the IP addresses looked up from the Domain names > inputted, so as

Re: Hosting my company DNS server in Internet

2011-05-30 Thread Fajar A. Nugraha
On Mon, May 30, 2011 at 3:45 PM, babu dheen wrote: > > Dear Olsen, > > thanks for the update. I can follow all the steps but i couldn't understand > below two points > >  - register/buy the domain name(s) if you haven't already done so. > - tell your registrar to configure your parent domain so i

Re: Operating system recommendation

2011-03-13 Thread Fajar A. Nugraha
On Mon, Mar 14, 2011 at 1:43 AM, Ben McGinnes wrote: > On 12/03/11 12:30 AM, Lightner, Jeff wrote: >> As the prior poster said RedHat is still supports RHEL4 (7 years or >> more) and RHEL5 (4 years or more) and has now relased RHEL6. > > Actually EOL for RHEL4 was announced last month, one more ye

Re: Operating system recommendation

2011-03-10 Thread Fajar A. Nugraha
On Fri, Mar 11, 2011 at 9:55 AM, Dan wrote: > > I think there are really 2 sides to this, whether your after an OS easy to > maintain, with great stability, or best performance. I think you'll fall in > love with freebsd if you give it a try, Try explaining that to managerial types who thinks "we

Re: Operating system recommendation

2011-03-10 Thread Fajar A. Nugraha
On Thu, Mar 10, 2011 at 2:52 AM, pollex wrote: > Hi, I want to know in your experience what is the best operating > system to run bind for an ISP. We currently have Debian for the 5 > Cache servers and for the 2 Authoritative servers. > We have around 111851 success querys in the cache servers and

Re: multi-master with mysql backend

2011-02-13 Thread Fajar A. Nugraha
On Mon, Feb 14, 2011 at 6:24 AM, Doug Barton wrote: > On 2/13/2011 8:06 AM, fddi wrote: >> >> I do not know why you really don't liket this mysql solution. > > It isn't a matter of "not liking" it. Given that you have steadfastly > refused to answer any of the questions from people who are trying

Re: Bind hang out when named reach to 5-600 Mb

2010-07-08 Thread Fajar A. Nugraha
On Thu, Jul 8, 2010 at 4:30 PM, khanh rua wrote: > Hi, > > I install bind as a cache server on Solaris 10, Sun Sparc T5140. It has > problem, bind always hang out when named reach to 5-600 Mb ('prstat' check). How did you determine that it "hang"? If you enable query log, you might be able to see

Re: hosts or subnet number in delegation?

2010-02-23 Thread Fajar A. Nugraha
On Wed, Feb 24, 2010 at 2:01 PM, sasa sasa wrote: > Hello, > for a 192.168.199.64/26 in zone file to delegate to a customer; > should i put subnet number: > 64/26 IN NS ns1.example.com. > 64/26 IN NS ns2.example.com. > or host ranges: > 64-126 IN NS ns1.example.com. > 64-126 IN NS ns2.example.com.

Re: Building 9.6.1-P2 for 32-bit Redhat RHEL 5.4

2009-11-28 Thread Fajar A. Nugraha
On Sat, Nov 28, 2009 at 5:00 PM, Howard Wilkinson wrote: > At present I do not have a 32-bit build environment I can try to natively > build this on, and was hoping that somebody could suggest how I can get round > this problem in the build environment I am using. a generic workaround that has

Re: File System Choice

2009-11-25 Thread Fajar A. Nugraha
2009/11/26 万善义 : > 500,000 domains, with the Ext3 file system, DNS service starts very slow and > therefore require several hours before they can work properly. For the bind > file system choices, there are any suggestions advice? Are you sure it's filesystem issue? ext3 has a feature, dir_index

Re: Bind-9.6 and Heavy Cpu Load

2009-09-26 Thread Fajar A. Nugraha
On Sun, Sep 27, 2009 at 1:28 AM, Bind wrote: > The number of requests is 2700 recieved pps and 2500 transmit pps. > also i forced it to use both cpu`s,(in prstat -a command the STATE > column,shows named uses cpu0 then after moment it changed to cpu2) but heavy > cpu load exists. Assuming: - the

Re: Bind-9.6 and Heavy Cpu Load

2009-09-26 Thread Fajar A. Nugraha
On Sat, Sep 26, 2009 at 5:43 PM, Bind wrote: > Hello > I have SunFire V880 (2 cpu +4G Ram) and installed bind 9.6.1-P1 on solaris > 10. > but my cpu load is very high!(above 90% during the pick time) > bash-3.00# prstat -a >    PID USERNAME  SIZE   RSS STATE  PRI NICE  TIME  CPU PROCESS/NLWP >

Re: hardware requirements per hits

2009-08-19 Thread Fajar A. Nugraha
On Wed, Aug 19, 2009 at 12:47 AM, Subhan Malick wrote: > On 8/17/09 10:15 PM, Fajar A. Nugraha wrote: >> >> Here are some pointers from my experience though: >> - syslog query logging is expensive. NEVER enable it. If you need to >> log client queries, log it directly t

Re: hardware requirements per hits

2009-08-17 Thread Fajar A. Nugraha
On Mon, Aug 17, 2009 at 8:50 PM, Alans wrote: > @Matus: let me put it in this way, if I want to create a budget for next > year for example, then I should know what upgrades I need for next year > (estimated needs), and let's assume dns queries increase monthly by x hits, > now, if I know how many

Re: compiling BIND on AIX

2009-01-21 Thread Fajar A. Nugraha
On Wed, Jan 21, 2009 at 1:39 AM, Jerry Kemp wrote: > I currently need to compile (a current) BIND on AIX 5.2 and it appears to me > that there is a little more work involved to get a successful compile on > this platform vs. others that I have worked with. Really? And why is that? > > Can anyone