MyDNS

markus@... writes:
> mydns: 27-Jul-2004 23:01:04+005991 #754 30917 UDP 195.20.224.99 IN
> AAAA 
> 62.75.152.234.maussner.net. NXDOMAIN No_matching_resource_records 1 0
> 1 0 LOG N 

AAAA is IPv6.  You don't need to worry about it.

-- 
David Phillips <david@...>
http://david.acz.org/

Man, I wish I could use that accurately.  But we - still - must kill MyDNS
regularly, as it freezes completely after accepting so many thousand axfr
requests.  I once sent all our stuff to Don, never heard anything back, one
way or the other.  Using the latest (0.11.0)...

- Chris Slothouber



> From: Philipp Kern <phil@...>
> Organization: 0x539.de
> Date: Fri, 16 Jul 2004 15:43:21 +0200
> To: Andras Got <andrej@...>
> Cc: mydns-users@...
> Subject: Re: [mydns-users] Just curious about 1.0.0
> 
> On Fr, 2004-07-16 at 15:20, Andras Got wrote:
>> Oh, one question, where can we find this counter for all request completed?
> 
> In syslog after issuing killall -USR1 mydns && killall -USR2 mydns
> 
> Have phun.
> Philipp Kern
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> _______________________________________________
> mydns-users mailing list
> mydns-users@...
> https://lists.sourceforge.net/lists/listinfo/mydns-users
>

On Fr, 2004-07-16 at 15:50, Chris Slothouber wrote:
> Man, I wish I could use that accurately.  But we - still - must kill MyDNS
> regularly, as it freezes completely after accepting so many thousand axfr
> requests.  I once sent all our stuff to Don, never heard anything back, one
> way or the other.  Using the latest (0.11.0)...

And still it needs >=1s to resolve things recursively using dnscache ;)

Bye,
phil

On 15.07 12:47, Don Moore wrote:
> > I was just curious how things are coming along with v1.0.0... Did your
> > 0.11.0 server reach the required 1,000,000,000 requests with a single
> > crash?
> 
> Yep!  We hit a billion requests this weekend with no crashes.  It's
> currently at 1,082,507,316 requests.  I'll be releasing 1.0.0 tomorrow
> morning.
> 
> 1.1.0 is also already in the works, with DNS NOTIFY working, for DHCP
> folks.

How is this going to be implemented?

-- 
Matus UHLAR - fantomas, uhlar@... ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95

On Do, 2004-07-15 at 19:47, Don Moore wrote:
> Yep!  We hit a billion requests this weekend with no crashes.  It's
> currently at 1,082,507,316 requests.  I'll be releasing 1.0.0 tomorrow
> morning.

Does this happen soon?

Regards,
Philipp Kern

Dave Carrera wrote:

>Hi List,
>
>I want to make sure that my zone defaults are as best they can be , if
>that’s the right way to put it.
>
>  
>
I use dnsreport.com to check my zones :)

>I found this on a DNS based site
>
>example.com.  3600  SOA  dns.example.com. hostmaster.example.com. (
>                         1999022301   ; serial YYYYMMDDnn
>                         86400        ; refresh (  24 hours)
>                         7200         ; retry   (   2 hours)
>                         3600000      ; expire  (1000 hours)
>                         172800 )     ; minimum (   2 days)
>);
>
>Are these settings good or can they be tweaked, and if so what are the
>ramifications.
>
>  
>
 From dnsreport.com :
Refresh : This value determines how often secondary/slave nameservers 
check with the master for updates.
Retry : the amount of time your secondary/slave nameservers will wait to 
contact the master nameserver again if the last attempt failed.
Expire : This is how long a secondary/slave nameserver will wait before 
considering its DNS data stale if it can't reach the primary nameserver.
minimum : This value used to determine the default (technically, 
minimum) TTL (time-to-live) for DNS entries, but now is used for 
negative caching.

If what you're looking for is "fast update on host add/change/removal", 
decrease your minimum TTL.

Regards,

Fajar

Play with TTL values. Keep in mind, that the lower the ttl-s the more que=
ries have to be served. Low=20
TTL-s will not be cached for a long time in ISP-s DNS-s or somewhere else=
.

I wouldn't set a TTL below one hour.

Andras


Dave Carrera =C3=ADrta:

> Hi List,
>=20
> I want to make sure that my zone defaults are as best they can be , if
> that=E2=80=99s the right way to put it.
>=20
> I found this on a DNS based site
>=20
> example.com.  3600  SOA  dns.example.com. hostmaster.example.com. (
>                          1999022301   ; serial YYYYMMDDnn
>                          86400        ; refresh (  24 hours)
>                          7200         ; retry   (   2 hours)
>                          3600000      ; expire  (1000 hours)
>                          172800 )     ; minimum (   2 days)
> );
>=20
> Are these settings good or can they be tweaked, and if so what are the
> ramifications.
>=20
> I think I am asking what settings are needed to make changes to a DNS r=
ecord
> appear to the world as quickly as possible.
>=20
> I am open to advice and suggestions on this as I have no real idea abou=
t the
> affects off these defualts. I do have 0'reillys DNS book but that=E2=80=
=99s as clear
> as mud.....
>=20
> Thanks for any input
>=20
> Dave Carrera
>=20
>=20

> From: "Dave Carrera" <dave@...>
>
> When I run mydnsimport to grab a zone from my bind into mydns it comeback
> with an error saying that the bind server REFUSED the zone transfer.


You need to set

    allow-transfer { <youriplist> };

In your bind configuration. See the information on allow-transfer in the
bind documentation for more details.

David

Dave Carrera wrote:
> Hi List,
> 
> Got mydns running and all looks ok :-)
> 
> When I run mydnsimport to grab a zone from my bind into mydns it comeback
> with an error saying that the bind server REFUSED the zone transfer.
> 
> Why would this be.
> 
> Both bind and mydns are running on the same box with separate public ips.
> 
> Any help is very much appreciated.
> 
> Dave Carrera
> 
> 
hi Dave,

you should put something like that in your bind's zone :

{ allow-transfer <your mydns' ip>; };

so that Bind allows MyDNS to ask a zone transfert

-- 
Nicolas CARTRON
nc at ncartron dot org

"Faire du SMB pour communiquer entre un mac et un serveur Unix, c'est
ideologiquement douteux, ca frise l'heresie."

Manu Dreyfus, sur fr.comp.os.bsd

Hi,

I added all of the ips to the allow-transfer line in my zone delimited by
";" and restarted name but I still get refused :-)

Do I have to wait for it to update or something or should it be good to go
straight away as I am working on the server.

Just for clarification what is the correct mydnsimport command line ?

Thanks for the help

Dave Carrera


-- 
UK Web Hosting @ http://www.ephgroup.com  


-----Original Message-----
From: mydns-users-admin@...
[mailto:mydns-users-admin@...] On Behalf Of Nicolas
CARTRON
Sent: 20 July 2004 16:39
To: mydns-users@...
Subject: Re: [mydns-users] Mydnsimport problem


Dave Carrera wrote:
> Hi List,
> 
> Got mydns running and all looks ok :-)
> 
> When I run mydnsimport to grab a zone from my bind into mydns it 
> comeback with an error saying that the bind server REFUSED the zone 
> transfer.
> 
> Why would this be.
> 
> Both bind and mydns are running on the same box with separate public 
> ips.
> 
> Any help is very much appreciated.
> 
> Dave Carrera
> 
> 
hi Dave,

you should put something like that in your bind's zone :

{ allow-transfer <your mydns' ip>; };

so that Bind allows MyDNS to ask a zone transfert

-- 
Nicolas CARTRON
nc at ncartron dot org

"Faire du SMB pour communiquer entre un mac et un serveur Unix, c'est
ideologiquement douteux, ca frise l'heresie."

Manu Dreyfus, sur fr.comp.os.bsd


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
mydns-users mailing list
mydns-users@...
https://lists.sourceforge.net/lists/listinfo/mydns-users


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004

From: "Dave Carrera" <dave@...>
>
> I added all of the ips to the allow-transfer line in my zone delimited by
> ";" and restarted name but I still get refused :-)
>
> Do I have to wait for it to update or something or should it be good to go
> straight away as I am working on the server.

Are you sure you added the correct IP? It needs to be the IP that the
connection from mydnsimport will be sourced from. Since they're on the same
box, it might be 127.0.0.1.

Look in the bind logs to see what the address is that's getting refused.

Dave

From: "Dave Carrera" <dave@...>
>
> I added all of the ips to the allow-transfer line in my zone delimited by
> ";" and restarted name but I still get refused :-)
>
> Do I have to wait for it to update or something or should it be good to go
> straight away as I am working on the server.

Are you sure you added the correct IP? It needs to be the IP that the
connection from mydnsimport will be sourced from. Since they're on the same
box, it might be 127.0.0.1.

Look in the bind logs to see what the address is that's getting refused.

Dave

zone "ukprohost.com" {
    type master;
    file "db.ukprohost.com";
    allow-transfer { 192.168.28.114; 127.0.0.1; 213.129.75.67;};
};
This is my bind zone that I want to transfer.

I run 

$mydnsimport -vra 213.129.73.114 ukprohost.com

There are only three ips on the system 2  x local and the public one.

Bind still refuses my transfer request.

Any ideas why ?

Any help or advice is most welcome.

Thank you

Dave Carrera

-- 
UK Web Hosting @ http://www.ephgroup.com  


-----Original Message-----
From: David S. Madole [mailto:david@...] 
Sent: 20 July 2004 18:07
To: Dave Carrera; 'Nicolas CARTRON'
Cc: mydns-users@...
Subject: Re: [mydns-users] Mydnsimport problem


From: "Dave Carrera" <dave@...>
>
> I added all of the ips to the allow-transfer line in my zone delimited 
> by ";" and restarted name but I still get refused :-)
>
> Do I have to wait for it to update or something or should it be good 
> to go straight away as I am working on the server.

Are you sure you added the correct IP? It needs to be the IP that the
connection from mydnsimport will be sourced from. Since they're on the same
box, it might be 127.0.0.1.

Look in the bind logs to see what the address is that's getting refused.

Dave



---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004

From: "Dave Carrera" <dave@...>
>
> zone "ukprohost.com" {
>     type master;
>     file "db.ukprohost.com";
>     allow-transfer { 192.168.28.114; 127.0.0.1; 213.129.75.67;};
> };
> This is my bind zone that I want to transfer.
>
> I run
>
> $mydnsimport -vra 213.129.73.114 ukprohost.com
>
> There are only three ips on the system 2  x local and the public one.


You stated earlier that these are on the same system.

Then why isn't 213.129.73.114 from the mydnsimport command line in the
allow-transfer list?

Did you look in the bind logs to see what address is getting rejected?

David

The 213.129.73.114 is the ip address of my bind name server on the same
system as 213.129.75.67 my new mydns server.

Can find any reason in the logs :-(

So I was using mydnsimport <NS-IP> <zone> method.

Dave Carrera


-- 
UK Web Hosting @ http://www.ephgroup.com  


-----Original Message-----
From: David S. Madole [mailto:david@...] 
Sent: 20 July 2004 19:09
To: Dave Carrera
Cc: mydns-users@...
Subject: Re: [mydns-users] Mydnsimport problem


From: "Dave Carrera" <dave@...>
>
> zone "ukprohost.com" {
>     type master;
>     file "db.ukprohost.com";
>     allow-transfer { 192.168.28.114; 127.0.0.1; 213.129.75.67;}; };
> This is my bind zone that I want to transfer.
>
> I run
>
> $mydnsimport -vra 213.129.73.114 ukprohost.com
>
> There are only three ips on the system 2  x local and the public one.


You stated earlier that these are on the same system.

Then why isn't 213.129.73.114 from the mydnsimport command line in the
allow-transfer list?

Did you look in the bind logs to see what address is getting rejected?

David



---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004

Ok got it....

Added localhost to the list and bingo :-)

Off to do some fun stuff know :-)

Thanks for the help and brain nudges.

Dave Carrera


-- 
UK Web Hosting @ http://www.ephgroup.com  


-----Original Message-----
From: mydns-users-admin@...
[mailto:mydns-users-admin@...] On Behalf Of Dave Carrera
Sent: 20 July 2004 19:13
To: 'David S. Madole'
Cc: mydns-users@...
Subject: RE: [mydns-users] Mydnsimport problem


The 213.129.73.114 is the ip address of my bind name server on the same
system as 213.129.75.67 my new mydns server.

Can find any reason in the logs :-(

So I was using mydnsimport <NS-IP> <zone> method.

Dave Carrera


-- 
UK Web Hosting @ http://www.ephgroup.com  


-----Original Message-----
From: David S. Madole [mailto:david@...] 
Sent: 20 July 2004 19:09
To: Dave Carrera
Cc: mydns-users@...
Subject: Re: [mydns-users] Mydnsimport problem


From: "Dave Carrera" <dave@...>
>
> zone "ukprohost.com" {
>     type master;
>     file "db.ukprohost.com";
>     allow-transfer { 192.168.28.114; 127.0.0.1; 213.129.75.67;}; }; 
> This is my bind zone that I want to transfer.
>
> I run
>
> $mydnsimport -vra 213.129.73.114 ukprohost.com
>
> There are only three ips on the system 2  x local and the public one.


You stated earlier that these are on the same system.

Then why isn't 213.129.73.114 from the mydnsimport command line in the
allow-transfer list?

Did you look in the bind logs to see what address is getting rejected?

David



---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004
 



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
mydns-users mailing list
mydns-users@...
https://lists.sourceforge.net/lists/listinfo/mydns-users


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.722 / Virus Database: 478 - Release Date: 18/07/2004

On Di, 2004-07-20 at 20:00, Dave Carrera wrote:
> Bind still refuses my transfer request.

Please look into your bind logfile (normal syslog in /var/log/messages
most of the time). We can't guess, but it would tell you from where the
AXFR request comes and which IPs you need to allow.

Regards,
Philipp Kern