Re: Strictly separate directories for admin-provided and named-generated files?

2024-11-22 Thread Charles Eckman via bind-users
Thanks for the ideas! On Sun, Nov 17, 2024 at 5:15 AM Matus UHLAR - fantomas wrote: > > >On 16/11/2024 04:47, Charles Eckman via bind-users wrote: > >>I'm also down for other workarounds, if you have suggestions! > > On 16.11.24 10:40, Nick Tait via bind-users wro

Strictly separate directories for admin-provided and named-generated files?

2024-11-15 Thread Charles Eckman via bind-users
ff in /var will save me some confusion the next time I have to debug something. I'm also down for other workarounds, if you have suggestions! Thanks, Charles [1]: https://lists.isc.org/mailman/htdig/bind-users/2020-September/103706.html [2]: https://refspecs.linuxfoundation.org/FHS_3.0/fhs/c

Re: Bind9 resolver diagnostics for very small number of dropped requests

2022-08-31 Thread Charles Polisher
ing useful? It might help to describe your load balancer setup: make/model, software revision level, how you set up the health checks, how the load balancers failover is configured. Has this behavior started recently? Have there been any load balancer configuration changes? Best regards, -- Charle

RE: [EXTERNAL] Re: NOTAUTH on dynamic update followed by approved update

2022-03-14 Thread Hellige, Charles D
Tony, Thank you for your detailed and thoughtfuly analysis. I think you are spot-on. I'm looking into the app that is sending those updates. And wahoo, I won a prize! That's awesome. -Original Message- From: Tony Finch Sent: Monday, March 14, 2022 4:23 PM To: Hellige, Cha

NOTAUTH on dynamic update followed by approved update

2022-03-11 Thread Hellige, Charles D
ailed: not authoritative for update zone (NOTAUTH) 11-Mar-2022 10:07:19.821 update: info: grn-mid: view GRN: updating zone 'ops.company.com/IN': adding an RR at 'test-09.ops.company.com' A 1.1.1.9 Any hints on what I might be doing wrong would be greatly appreciated. ~Charles

RE: [External] strange queries incrementing letter by letter

2021-05-08 Thread Charles Elliott
unemployed soldiers to roam the highways and byways looking for people to rob and damsels to distress. We need something like knighthood, the first state police. Charles Elliott From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Ondrej Surý Sent: Friday, May 7, 2021 3:30 PM To

Re: [EXT] Re: Bind-Efficientip

2019-10-20 Thread Anderson, Charles R
On Sun, Oct 20, 2019 at 12:25:11PM -0400, Alan Clegg wrote: > On 10/20/2019 2:09 AM, MEjaz wrote: > > > As you know these days there has been several security threats, So > > deciding to go with *Efficient iP DDI and DNS Security Solution* > > https://www.efficientip.com/ > > You may want to a

Re: Allow only temporary zone updates without making them permanent

2019-06-26 Thread Anderson, Charles R
On Wed, Jun 26, 2019 at 07:46:20PM +0300, Lefteris Tsintjelis via bind-users wrote: > On 26/6/2019 17:39, Grant Taylor via bind-users wrote: > > Or are you wanting to update the zone contents without actually updating > > the zone file on disk? > > Yes, exactly this. That is the reason I changed

RE: allow-update in global options (was Re: bind and certbot with dns-challenge)

2019-03-18 Thread Charles Elliott
o design a user interface for an ideal domain name system? Day in and day out the vast majority of messages that appear on this bind list server are about configuration issues. Isn't it time to get a new perspective on solving these problems? Charles Elliott -Original Message- From:

RE: Strange recursor response time pattern

2017-09-07 Thread Charles Elliott
in time, save it somewhere, restart query processing, and then format the report from the saved data. In this case, there would be a brief interval when name could not handle queries. One might have to write a prototype to determine how long that interruption would take. Charles Elliott

RE: Providing GeoIP information for servers

2017-05-11 Thread Charles Elliott
If you search for the terms "Computer location," "Default computer location," "Sensor data API," you may find: Hundreds of people have complained about this issue. None of the proposed solutions work. In Windows 7 it was possible to enter your location as your exact postal address, but MSFT has

RE: Question on Bind validating resolver

2017-01-26 Thread Charles Elliott
WorksForMe info.nominet.uk = 137.117.185.220 both thru my ISP (75.75.75.75) and through Bind at 07:50 AM EST (USA, GMT - 5:00). Maybe it is fixed on the domain name server. Charles Elliott -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Volker

RE: Postgresql 8.4 optimize heavy load

2016-09-17 Thread Charles Elliott
SITY) library to see if any of it worked in PostgreSQL 8.4. Charles Elliott -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Job Sent: Saturday, September 17, 2016 10:02 AM To: bind-users@lists.isc.org Subject: Postgresql 8.4 optimize heavy load He

Re: *Reminder of the* L-Root IPv6 address renumbering

2016-03-22 Thread Charles Swiger
Hi-- On Mar 22, 2016, at 9:44 AM, Bob Harold wrote: [ ... ] > I appreciate the announcement of the change ahead of time, but I don't feel > like it is safe to update my root hints file based on an email, which could > be spoofed. It's not that I don't trust you, but someone could spoof your >

Re: Using bind and ad blocking

2016-02-05 Thread Charles Swiger
On Feb 5, 2016, at 6:09 PM, Noel Butler wrote: > Why point them to an IP at all, just use TTL and SOA , no A no nothing else. > > They'll get NXDOMAIN when trying to look it up, problem solved. One might point such domains to a local webserver which has been configured to reply to all image req

Re: Log output questions

2015-08-07 Thread Charles Swiger
On Aug 7, 2015, at 12:48 PM, Dimitri Yioulos wrote: > Hello, all. > > I’m pretty new to BIND, and am tasked with monitoring several BIND server. A > script is in place that runs hourly, via cron, looking for any anomalies in > named.log. Here’s the essence of the script: > > grep -i -E ':

[OT] Re: configuration error in lists.isc.org

2015-08-06 Thread Charles Swiger
On Aug 6, 2015, at 4:25 PM, Heiko Richter wrote: > Whenever I post something to the list (I'm not using SMTP, I'm using a > usenet server to post to comp.protocols.dns.bind), my postmaster > address receives DMARC notifications from list members that have > employed this wonderful protocol on thei

Re: servfail only for a zone

2015-07-13 Thread Charles Swiger
On Jul 13, 2015, at 10:34 AM, Lucio Crusca wrote: [ ... ] > Yes the zone failed to update, I know because if I raise the seqno @ns1, it > tries to update and it keeps failing. I don't understand why it fails. I > doubt a Cisco router is to blame here because ns1 and ns2 are two guests of > the

Re: delay between nsupdate and NOTIFY

2015-06-04 Thread Charles Musser
> > Adjust serial-query-rate. This also controls the notify rate in BIND 9.9. > A seperate control "notify-rate" is coming in BIND 9.11. > Today we tried increasing serial-query-rate from our original value of 1000 up to 5000 for a while, and then up to 1. The symptoms (long delay for NOTIF

delay between nsupdate and NOTIFY

2015-06-04 Thread Charles Musser
We are experiencing a delay of approximately 9 minutes between the time a zone is changed on our DNS master (via nsupdate) and the time at which the NOTIFY is sent to slaves. We've turned up logging on the master and some slaves, then watched for messages regarding a test zone. On the master, an

Re: random latency in named

2015-05-21 Thread Charles Swiger
Hi, Mathew-- On May 21, 2015, at 3:01 PM, Mathew Ian Eis wrote: > Hi BIND, > > I’ve been trying to track down the source of random latency in our production > servers, without much luck. At random intervals - several times an hour - > named appears to suddenly stop processing queries for aroun

Re: Problem with BIND 9.10.1-P1 recursion limits

2014-12-09 Thread Charles Swiger
Hi-- On Dec 9, 2014, at 12:04 PM, Mike Hoskins (michoski) wrote: > Wanted to point out that (perhaps sadly) this isn't so crazypants...or at > least not uncommon. The *edge* and *aka* references speak Akamai DNS+CDN. > From my last overview, this has gotten cleaner in the latest versions of > th

Re: Diagnostic help part 2

2014-09-30 Thread Charles Swiger
Hi-- On Sep 30, 2014, at 1:59 PM, Bill Christensen wrote: > Fair enough. > > Africabound.org > SustainableSources.com > > The server that's giving problems is ns1.sustainablesources.com > 205.238.182.102 Your 102 box doesn't seem responding to 53/udp or 53/tcp from the outside: http://w

Re: no servers found

2014-08-19 Thread Charles Swiger
Hi-- On Aug 19, 2014, at 1:47 PM, "Adamiec, Lawrence" wrote: > I am running BIND 9.6-ESV-R5-P1 on a Solaris 10 server. I can run queries > without specifying a name server on my Solaris servers successfully. When I > try to run a query on a Solaris 10 virtual server, I get "connection timed

Re: classless ptr setup

2014-01-20 Thread Charles Swiger
Hi-- On Jan 20, 2014, at 10:43 AM, Jim Pazarena wrote: > I have a full /24, which I would like to separate into two /25's, and > assign each half to two of my customers. The snag is that *I* maintain > the DNS for each of these customers. > > Is it possible to create the classless setup within m

Re: Performance Tuning RHEL 5 and Bind

2013-10-28 Thread Charles Swiger
Hi— On Oct 28, 2013, at 9:05 PM, Alan Clegg wrote: > Slave X.internal.example.com +1; it’s also worth looking into why there is such a high volume of DNS queries. Is it simply a big network with a lot of chatty clients? Or is TTL turned down so low that client side caching is not effective and

Re: Dig gives ;; connection timed out; no servers could be reached

2013-10-02 Thread Charles Swiger
Hi-- On Oct 2, 2013, at 9:18 PM, Balanagaraju Munukutla <9ba...@sg.ibm.com> wrote: > Any one could help on the error below. > > [andrew@oc8163211842 ~] $ dig @.com abcd.com.sg mx > > ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> @x.com abcd.com.sg mx > ; (1 server found) > ;; global

Re: weird perfmonce BIND version 9.6

2013-09-25 Thread Charles Swiger
Hi-- On Sep 25, 2013, at 12:22 PM, IT Support wrote: > Hi charles I'm "Chuck", although I've also answered to worse things than my full name. :-) > this is what i get from dig > > dig host2.mydomain.com > > ; <<>> DiG 9.6-ESV-R4 <<

Re: RFC requirements for relative CNAME targets?

2013-07-18 Thread Charles Swiger
On Jul 18, 2013, at 1:18 PM, John Miller wrote: > I know that for the following record in example.com's zone file: > > host.example.com. IN CNAME otherhost > > BIND will return: > > host.example.com. IN CNAME otherhost.example.com. Assuming $ORIGIN is set to example.com, but yes. > Is this

Re: Reverse address entries

2013-06-28 Thread Charles Swiger
On Jun 28, 2013, at 10:54 AM, "Ward, Mike S" wrote: > Hello all, is there any reason to setup reverse address entries for a zone? Certainly. Various software performs what's called a double-reverse lookup to confirm that the A and PTR records match. > I have asked some of the admins here and th

THANKS! RE: long SPF txt record

2013-06-20 Thread Koehler, Charles
@lists.isc.org Subject: Re: long SPF txt record On 6/20/2013 1:13 PM, Koehler, Charles wrote: > Our email group wants to change the current SPF txt record and replace it > with one that is 274 characters. > > How can I put it in so that it works correctly? > > Thanks > --cwk

long SPF txt record

2013-06-20 Thread Koehler, Charles
Our email group wants to change the current SPF txt record and replace it with one that is 274 characters. How can I put it in so that it works correctly? Thanks --cwk == Charles Koehler Network Operations - IT Infrastructure UCSF 500 Parnassus Ave P7-14 San

Re: PTR files

2013-06-17 Thread Charles Swiger
On Jun 17, 2013, at 3:00 PM, Norman Fournier wrote: > [ ... ] > (...Members of the httpd-users list says the same thing - its not an httpd > problem. >From what you've said below, they're quite right. > I am just trying to take possibilities off my list of potential errors, sorry > if I am ann

Re: PTR files

2013-06-17 Thread Charles Swiger
On Jun 17, 2013, at 2:21 PM, Norman Fournier wrote: > I am working on bringing a virtual webserver behind a router online and am > encountering problems. OK. The odds are very good that you should ask about this on an Apache/nginx/etc forum, as it's unlikely to be related to DNS or BIND. > In

Re: What happens when one out of three NSs are down?

2013-06-11 Thread Charles Swiger
On Jun 11, 2013, at 4:12 PM, Gary Wallis wrote: > DNS experts: > > What really happens in the real world when 1 out of three authoritative NSs > are down for 30 minutes due to a datacenter outage? Properly functioning nameservers will note that queries sent to the NS which is down aren't getti

Re: dnssec signing tools

2010-03-20 Thread charles
May 2010 Thx Charles Greetings list.. I have recently assumed responsibility and did a complete rebuild of a Master DNS server running 9.6.1.P3. (will upgrade to 9.6.2 when SRPM is available) OS: CentOS 5.4 New to DNS administration but not new to Linux / UNIX.. I am looking at dnssec-tools for

PTR zone / VLSM issue

2009-03-15 Thread Charles Lee
to address .127) Can anyone help out with the proper format of the zone and what a PTR record would look like? Thanks a LOT! Charles Lee ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users