Re: [RI-DISCUSS] Is it possible to block or modify DNS' resolution of a malware address?

2011-04-01 Thread Stewart Dean
: On Apr 1, 2011, at 10:22 AM, Stewart Dean wrote: That is, if we know that a symbolic address is malign, is there some way to refuse to resolve it or change its resolution when an internal users asks for its resolution from the internal DNS server? All my Google searching turns up DNSBLs a

Is it possible to block resolution of a malware address?

2011-04-01 Thread Stewart Dean
... Thanks in advance... -- Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sd...@bard.edu voice: 845-758-7475, fax: 845-758-7035 ___ bind-users mailing list bind-users@lists.isc.org

Re: Advice wanted on Nameserver switchover

2011-03-15 Thread Stewart Dean
See below On 3/15/2011 10:59 AM, Jay Ford wrote: On Tue, 15 Mar 2011, Stewart Dean wrote: Have two questions about the switchover of our external nameservers: I'll call the old nameservers oldns1, oldns2, offsitens and the new nameservers newns1 and newns2 So, you're replac

Advice wanted on Nameserver switchover

2011-03-15 Thread Stewart Dean
he pebble at the mountain's peak, the kiss in despair, the one right word. In darkness, understanding." Paladin of Souls by Lois McMaster Bujold -- Stewart Dean, Unix System Admin, Henderson Computer Center, Bard College, Annandale, New York 12504 sd...@bard.edu voice: 845-758-7475, fax:

Pushed transfer to slave fails

2011-01-13 Thread Stewart Dean
single internal/external server has a NIC for each view. It does work to resolve queries so traffic coming in on the NIC, goes out on that same NIC. -- "Where's the kaboom? There was supposed to be an Earth-shattering kaboom!" - Marvin the Martian Stewart Dean, Unix System Admin, Bar

one remaining error message in named log startup messages

2010-11-12 Thread Stewart Dean
n of heroic. Also, it's such a worthwhile human activity. The most." -Fran Liebowitz Funny how it's women who speak so well of the real heroism, that of going on, of being true. Stewart Dean, Unix System Admin, Bard College, New York 12504 sd...@ba

Re: One host serving both internal and external nameservice, which view should match-clients for the local host?

2010-10-25 Thread Stewart Dean
resses made through local host. - Original Message ----- From: "Todd Snyder" To: "Stewart Dean" , bind-users@lists.isc.org Sent: Monday, October 25, 2010 3:00:54 PM Subject: RE: One host serving both internal and external nameservice, which view should match-clients for the local

Q: One host serving both internal and external nameservice, which view should match-clients for the local host?

2010-10-25 Thread Stewart Dean
self) internal addresses, forcing it to only be able to resolve external addresses for itself. Is this as it should be? Am I missing something? -- "One must think like a hero to behave like a merely decent human being." - May Sarton Stewart Dean, Unix System Admin, Bard College, New

DNS Redundancy, Round 2

2010-10-21 Thread Stewart Dean
e like a merely decent human being." - May Sarton Stewart Dean, Unix System Admin, Bard College, New York 12504 sd...@bard.edu voice: 845-758-7475, fax: 845-758-7035 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

More ignorance (I have no shame) /var/named conventions

2010-10-05 Thread Stewart Dean
uently, an external view with match-clients {any;}; that it isn't really an any but an "everything else"...? -- "One must think like a hero to behave like a merely decent human being." - May Sarton Stewart Dean, Unix System Admin, Bard College, New York 12504 sd...@bard.ed

Here I am again, hat in hand with humble demeanor.......

2010-09-24 Thread Stewart Dean
rely decent human being." - May Sarton Stewart Dean, Unix System Admin, Bard College, New York 12504 sd...@bard.edu voice: 845-758-7475, fax: 845-758-7035 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: repository for zone files

2010-09-24 Thread Stewart Dean
). its UNIX fragmentation all over again. 8) -g On Sep 23, 2010, at 4:01 PM, Michael Sinatra wrote: On 09/23/10 12:53, Stewart Dean wrote: On AIX, I'm used to /etc/dns. CentOS seems to place in /var/named. Is there any blessed, bestofallpossibleworlds place for the zone files. I&

repository for zone files

2010-09-23 Thread Stewart Dean
put it in /var/named.Comments, brickbats? -- "One must think like a hero to behave like a merely decent human being." - May Sarton Stewart Dean, Unix System Admin, Bard College, New York 12504 sd...@bard.edu voice: 845-758-7475, fax: 845-758-7035 __