Re: Deny MX queries for dynamic IP pools

2010-02-01 Thread Peter Dambier
Noel Butler wrote: > Firstly, I feel this really belongs on mailops not bind list :) > secondly... > > On Mon, 2010-02-01 at 00:00 +0300, Wael Shaheen wrote: > >> Blocking port 25 is much worse IMHO because it forces users out of the >> service, by restricting their ability to use their own mail

Re: recursion on auth-only server

2009-10-02 Thread Peter Dambier
Matus UHLAR - fantomas wrote: > Hello, > > I have moved authoritative server to new IP address. I have changed the DNS > name pointing to it so the NS would point to the new IP. > > Now I looked at the traffic and it seems that there are ~4 of 1000 recursive > requests sent to it. > > Are there

Re: BIND do not listen on udp port 53

2009-05-28 Thread Peter Dambier
Hi Thomas, did you reboot or start/stop bind or kill? I remember having a named process dangling that kept me from receiving. After rebooting that worked again. with ps -elf | grep named you should see your named and how it was called: ps -elf | grep named 5 S hammer 4142 1 0 80 0

Re: Quick poll: Cache poison vs site problems vs BIND bug vs Windows neg caching

2009-05-08 Thread Peter Dambier
Hi Wiley, I did have trouble with cached negatives. My isp is breaking my aDSL line at least once per day. When they had problems reconnecting I lost connectivity for a day when bind could not receive any answers for about 10 minutes. Reload with rndc did not help but restarting bind did. I expe

Re: tcp versus udp

2009-05-05 Thread Peter Dambier
t unless pursuant to explicit written > agreement or government initiative expressly permitting the use of e-mail for > such purpose. > > > -bind-users-boun...@lists.isc.org wrote: -

Re: tcp versus udp

2009-05-05 Thread Peter Dambier
Hello Martin, since a major outage at my provider, dtag.de or Deutsche Telecom AG, I have trouble with f.root-servers.net. Sometimes "dig ... +vc" does help me to see f.root-servers.net. The real problem is anycast. With udp it behaves different than with tcp. When querying servers that are di

Re: single-character host names

2009-03-07 Thread Peter Dambier
How about ; <<>> DiG 9.4.3b2 <<>> -t . @a.root-servers.net ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49774 ;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14 ;; WARNING: recursion requested but not availab

Re: anycasting, DNS client retry/failover

2009-03-06 Thread Peter Dambier
Hi Gordon, I am running several Bind 9.4.x nameservers inside and outside. Inside I can see my clients, diverse Linuxes, query ns1 and when there does not come an answer within a second, they query ns2 from /etc/resolv.conf. So ns2 will ask the same request ns1 did - but one second later and to

Re: Unified Root - Domain Configuration Issue

2009-01-15 Thread Peter Dambier
Hi ozgurs, can you give me your address so I can settup a zone for you? e.g. ozgurs A 127.0.0.1 Then you have the proof that it is working. Please have a look at http://www.cesidianroot.net/ to find how to settup your DNS for the test. If you have a dynamic ip address things are a li

Re: Install problem [resolved]

2008-12-17 Thread Peter Dambier
Hi Fred, after config problems with Debian, Ubuntu and Gentoo I have given up and got the sources from isc.org. Works perfectly and you are more up to date than with a distro. Kind regards Peter Fred Zinsli wrote: > Hello all > > Well out of curiosity I thought I would see what happened if I j

Re: Testing my configuration

2008-12-17 Thread Peter Dambier
Hello Fred, try dig -t any domain.com @your-server dig -t any domain.com @your-server +vc and dig --help Regards Peter Fred Zinsli wrote: > Hello all > > Well I have a basic setup going and it seems to function. > > What I am wanting to know is, is there a way of getting all of the >

Re: Where is the open recursion test?

2008-12-15 Thread Peter Dambier
just try dig -t any peter-dambier.de @ If it tells you something about denic it is not recursive. If you get the complete answer it is very likely recursive. Something internal could have triggered the query but only if your server is in /etc/resolv.conf. Kind regards Peter Gregory Hicks wrot

Re: bind memory usage

2008-12-13 Thread Peter Dambier
I can confirm bind 9.4 does run on an (IBM, not Intel) 486-SCL/2 with 16 MB. That cpu can address no more than 16 MB. $ cat /proc/meminfo total:used:free: shared: buffers: cached: Mem: 14540800 10596352 398 3194880 1003520 3518464 Swap: 133885952 11907072 121978880 MemTo