query failed (broken trust chain)

2021-07-07 Thread Manish Rane
Hi Team, Any clue why this? and I my BIND has stopped resolving 07-Jul-2021 15:59:34.588 client @0x7f1c50b7ea88 192.168.10.174#56213 ( cisco.com): query failed (broken trust chain) for cisco.com/IN/A at query.c:7376 07-Jul-2021 15:59:34.844 client @0x7f1c5d9135a8 192.168.10.174#56214 ( cisco.com)

Re: BIND RPz with IPv6

2021-06-20 Thread Manish Rane
Thanks Tony for the reply. -- Thanks and Regards, Manish R On Sun, Jun 20, 2021 at 7:51 PM Tony Finch wrote: > Manish Rane wrote: > > > > Would be keen to know if BIND RPZ supports IPv6? > > Y

BIND RPz with IPv6

2021-06-19 Thread Manish Rane
Hi Team, Would be keen to know if BIND RPZ supports IPv6? I have 9.11.3 and 9.16.6 versions -- Thanks and Regards, Manish R ___ Please visit https://lists.isc.org/mailman/listinfo/bi

Re: How do I identify if bind9 is using 4 cores?

2021-06-17 Thread Manish Rane
Great - Thanks for the help -- Thanks and Regards, Manish R On Fri, Jun 18, 2021 at 1:44 AM Dennis Clarke via bind-users < bind-users@lists.isc.org> wrote: > On 6/17/21 03:47, Manish Rane wrote: > > Does this

Re: How do I identify if bind9 is using 4 cores?

2021-06-17 Thread Manish Rane
Oh - Thanks for the help. -- Thanks and Regards, Manish R On Thu, Jun 17, 2021 at 1:59 PM Anand Buddhdev wrote: > On 17/06/2021 05:32, Manish Rane wrote: > > Hi Manish, > > > I have BIND 9.16.17-Ubuntu on

Re: How do I identify if bind9 is using 4 cores?

2021-06-16 Thread Manish Rane
Manish Rane wrote: > Hi Team, > > I have BIND 9.16.17-Ubuntu on ubuntu and have 4 cores. I have configured > > more /etc/default/bind9 > OPTIONS="-n 4" > > And then restarted the services. How do I verify if bind9 has spawned 4 > processes and distri

How do I identify if bind9 is using 4 cores?

2021-06-16 Thread Manish Rane
Hi Team, I have BIND 9.16.17-Ubuntu on ubuntu and have 4 cores. I have configured more /etc/default/bind9 OPTIONS="-n 4" And then restarted the services. How do I verify if bind9 has spawned 4 processes and distributed among those? TIA Manish R ___ P

Re: DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-13 Thread Manish Rane
I completely agree with you and both are different. However I resolved the issue on my Ubuntu with stubby daemon and wondering if anyone is aware similar service? -- Thanks and Regards, Manish R On Mon, Jun 14, 2021 at 1:57

DOH or DOT Forwarder in BIND and is DOH GA?

2021-06-11 Thread Manish Rane
Hi Team, I am using BIND 9.11.3-1ubuntu1.12-Ubuntu version for my BIND and planning to use ISC PPA and use 9.16.16. So my queries are 1. Is DOH/DOT officially supported now? 2. And how do I DOH forwarding in my BIND configuration? ___ Please visi

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Manish Rane
I already tried the official Repository on my existing Ubuntu 18.04 and it worked perfectly. -- Thanks and Regards, Manish R On Fri, May 21, 2021 at 11:02 AM Josef Moellers wrote: > On 20.05.21 17:22, Manish Rane wr

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Manish Rane
Thanks for the reply -- Thanks and Regards, Manish R On Thu, May 20, 2021 at 9:15 PM Anand Buddhdev wrote: > On 20/05/2021 17:22, Manish Rane wrote: > > > Are those new versions available in Linux dis

Re: New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13

2021-05-20 Thread Manish Rane
Hi Team, Are those new versions available in Linux distro packages? -- Thanks and Regards, Manish R On Thu, May 20, 2021 at 8:08 PM Anand Buddhdev wrote: > On 20/05/2021 00:06, Michael McNally wrote: > > Hi ISC people, > >

Can I have Inbound load balancing achieved with below settings

2013-11-12 Thread Manish Rane
Hey Fellas, I am thinking on this perspective need some help on this. Please guide me if I am wrong or let me know if I can achieve the stuff 1. I have a firewall with TWO ISP links, lets assume ISP1 and ISP2. And then I have internal webserver www.foobar.com with IP 192.168.1.10 2. I have natted

Re: ISO or virtual appliance

2013-08-22 Thread Manish Rane
it, and > let it dynamically figure out the best IP address to return. > > See http://www.stanford.edu/~riepel/lbnamed/ > > There are 3rd-party appliances that do similar functions, such as F5's > GTM or Cisco's GSS. > > Mike Mitchell > ----

Re: ISO or virtual appliance

2013-08-22 Thread Manish Rane
confused here. -- Thanks and Regards, Manish R On Thu, Aug 22, 2013 at 3:19 PM, Phil Mayers wrote: > On 22/08/13 10:05, Manish Rane wrote: > >> Well, I was thinking on the same line. Use nagios plugins c

Re: ISO or virtual appliance

2013-08-22 Thread Manish Rane
hat monitored > status and returned the host IP address that was least loaded. > > Mike Mitchell > > > > Original message > From: Steven Carr > Date: 08/21/2013 10:25 PM (GMT-08:00) > To: bind-users > Subject: Re: ISO or virtual appliance >

Re: ISO or virtual appliance

2013-08-21 Thread Manish Rane
king, though, if you're using an appliance in production, > you need to understand the innards and be prepared to do your own > maintenance, or you need to pay someone for support. > > John > > > > On 08/21/2013 02:34 PM, Manish Rane wrote: > >> Hi Guys, >>

Re: ISO or virtual appliance

2013-08-21 Thread Manish Rane
backend will try to pack in ISO or virtual appliance. On 22 Aug 2013 00:26, "Alan Clegg" wrote: > > On Aug 21, 2013, at 2:49 PM, Manish Rane wrote: > > > Yeah even I am aware of infoblox. I am looking for open source. > > Debian ISO install followed by "apt-get i

Re: ISO or virtual appliance

2013-08-21 Thread Manish Rane
Yeah even I am aware of infoblox. I am looking for open source. On 22 Aug 2013 00:16, wrote: > On Thu, 22 Aug 2013, Manish Rane wrote: > > Hi Guys, >> >> Is there any ISO or virtual appliance available for BIND? Which ease out >> the deploy and configuration task.

ISO or virtual appliance

2013-08-21 Thread Manish Rane
Hi Guys, Is there any ISO or virtual appliance available for BIND? Which ease out the deploy and configuration task. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lis

RE: Can I change the zone file from command line?

2013-07-23 Thread Manish Rane
> > *From:* bind-users-bounces+naveen.kumar=cw@lists.isc.org [mailto: > bind-users-bounces+naveen.kumar=cw@lists.isc.org] *On Behalf Of *Manish > Rane > *Sent:* Tuesday, July 23, 2013 4:30 PM > *To:* Mark Andrews > *Cc:* bind-us...@isc.org > *Subject:* Re: Can I ch

Re: Can I change the zone file from command line?

2013-07-23 Thread Manish Rane
eckzone -q zone temp && mv temp file && rndc reload zone > > Mark > > > On Mon, Jul 22, 2013 at 10:28 PM, Mihamina Rakotomandimby > > wrote: > > > Hello, > > > > > > I did not catch what you're trying to achieve. > > > Please gi

Can I change the zone file from command line?

2013-07-22 Thread Manish Rane
Hi Folks, Wondering if I can edit/change the static zone file as a result of certain bash script. Well, I am trying to write a script which will monitor the server on certain ports and it if fails to connect to the server it will delete or add the entry from zone file so that traffic will be route

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
-->Slave > > mynewns1.example.com 20.20.20.20 --> Slave > > mynewns2.example.com 30.30.30.30 > Slave > > > > On Fri, Mar 15, 2013 at 12:44 AM, Manish Rane wrote: > > hmm...you are talking about SOA TTL Value? > > > > > On

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
.com 30.30.30.30 > Slave On Fri, Mar 15, 2013 at 12:44 AM, Manish Rane wrote: > hmm...you are talking about SOA TTL Value? > > > > > On Fri, Mar 15, 2013 at 12:40 AM, Andrew Latham wrote: > >> Manish >> >> That is a perfectly good plan. One note i

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
Also when my ISP DNS servers are live do I need to add mine one as a slave ones? both? On Fri, Mar 15, 2013 at 12:44 AM, Manish Rane wrote: > hmm...you are talking about SOA TTL Value? > > > > > On Fri, Mar 15, 2013 at 12:40 AM, Andrew Latham wrote: > >> Manish >

Re: How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
er TTL and wait until the time has passed. > > Example: if TTL is set to one week, ask for change to shorter period > and then wait for 1.5(or more) times the old TTL to pass before you > begin your process. > > > > On Thu, Mar 14, 2013 at 3:04 PM, Manish Rane wrote: > >

How to minimize the downtime in my case

2013-03-14 Thread Manish Rane
Hey Folks, I right now have NS server hosted with ISP and I am planning to set up my own BIND servers. Now I would like to understand that I need to ask my Registrar to populate the entry of my new NS server which would take 4-6 hours to propagate over the internet. To reduce the downtime, can I

Re: Can we load balance traf[f]ic for CNAME records?

2012-12-14 Thread Manish Rane
That is true by default rrset-order is cyclic I believe. And even if it replies randomly I guess we will have to NAT the traffic on firewall for particular IPs -- Thanks and Regards, Manish R On Fri, Dec 14, 2012 at 10:15 PM

How can I migrate my Domain from ISP hosted to my own BIND server?

2012-12-14 Thread Manish Rane
Hi Team, I need to migrate my domain which is hosted at my ISP on to my own internal BIND server and have my own NS record. Does anyone steps I need to take care of or complete procedure? -- -- Thanks and Regards, Manish R _

Re: Can we load balance traf[f]ic for CNAME records?

2012-12-14 Thread Manish Rane
-12-14 17:14, Manish Rane 写道: >> I understand that Mail Delivery load balance can be achieved by usingMX >> priorities. My concern is not that, rather I am more worries about users >> who will be using A record to configure their mail clients like IMAP or >> POP. I am think

Re: Can we load balance traf[f]ic for CNAME records?

2012-12-14 Thread Manish Rane
Fri, Dec 14, 2012 at 12:01 PM, Charles Swiger wrote: > On Dec 13, 2012, at 9:27 PM, Manish Rane wrote: > > I m planning to add cname records to two A records to different IPs > provided by two ISP. Can I loadbalance traffic then? > > Using CNAMES and load-balancing traffic isn&

Can we load balance trafgic for CNAME records?

2012-12-13 Thread Manish Rane
Hi, I m planning to add cname records to two A records to different IPs provided by two ISP. Can I loadbalance traffic then? Like say i need to play with mail services and I have 2 ISPs.say ISP A and ISP B. MX 10 mail.example.com 20.20.20.20 (from isp A) Mx 20 mail01.example.com 30.30.30.30 (f

Re: Just wondering if BIND can do GLB -Global Load Balancing Stuff?

2012-12-12 Thread Manish Rane
-day, etc. It depends on the model and > modules you get that determine what can be done. > The implementation you use will be different than ours and should be based > on testing what works best. The F5 technicians we work with are very > helpful. > > > On 12/12/12, Manish Rane w

Just wondering if BIND can do GLB -Global Load Balancing Stuff?

2012-12-12 Thread Manish Rane
Hi Folks, Can BIND work as a Global Load Balancer? Or I am keen to know about constructing GTM kindaa stuff which can monitor the health of devices and route away traffic from failed ones by putting lower TTL value? I believe F5 3DNS does the same thing? ___