Martin wrote:
Jeff Chan wrote:
Comes up fine for me, but it could be intermittent DNS timeouts due to BIND being slow reloading. I'm changing my server over to rbldnsd and encouraging other of the public SURBL name servers to do likewise, but some are not converted over yet. I believe running rbldnsd will help a lot.
Jeff,
Alright, but it seems like i can't find the host at all:
traceroute www.surbl.org traceroute: unknown host www.surbl.org
Anyone else from sweden experiencing the same problem?
I think it's to do with which nameserver you get back. I noticed when I switched mine to rbldnsd that other day that I was unable to resolve www.surbl.org from it anymore...
dave@pagh:~$ dig version.bind chaos txt @ns16.surbl.org +short "rbldnsd" dave@pagh:~$ dig a www.surbl.org @ns16.surbl.org +short dave@pagh:~$ dig version.bind chaos txt @ns14.surbl.org +short "rbldnsd 0.992 (7 Mar 2004)" dave@pagh:~$ dig a www.surbl.org @ns14.surbl.org +short dave@pagh:~$ dig version.bind chaos txt @ns13.surbl.org +short "8.3.7-REL" dave@pagh:~$ dig a www.surbl.org @ns13.surbl.org +short 66.170.2.60
As you can see, ns16 & ns14 won't give you an A record back, but ns13 will. This also affects what my nameservers will cache ....
daveb@bilbo:~$ dig a www.surbl.org @ns4.ns.esat.net +short daveb@bilbo:~$ dig a www.surbl.org @ns5.ns.esat.net +short 66.170.2.60 daveb@bilbo:~$ traceroute www.surbl.org traceroute: unknown host www.surbl.org
Both servers are identical, yet one can resolve it, and one can't.
I'm not sure what the solution should be, but it will only get worse as more clients migrate rbldnsd IMHO.
Dave
Hi!
I think it's to do with which nameserver you get back. I noticed when I switched mine to rbldnsd that other day that I was unable to resolve www.surbl.org from it anymore...
dave@pagh:~$ dig version.bind chaos txt @ns16.surbl.org +short "rbldnsd" dave@pagh:~$ dig a www.surbl.org @ns16.surbl.org +short dave@pagh:~$ dig version.bind chaos txt @ns14.surbl.org +short "rbldnsd 0.992 (7 Mar 2004)" dave@pagh:~$ dig a www.surbl.org @ns14.surbl.org +short dave@pagh:~$ dig version.bind chaos txt @ns13.surbl.org +short "8.3.7-REL" dave@pagh:~$ dig a www.surbl.org @ns13.surbl.org +short 66.170.2.60
Your RBLDNSD should not be listed as authorative server for the main zone, only for the subzones... They can only answer for the zones you loaded.
But since 'only' NS1-13 are used for the SURBL.ORG zone this wont afect anything, unless you also forward (locally) your requests or surbl.org to that RBLDNSD...
Jeff is checking is we have servers 1-16 all ok now. So we can exclude that from any problemlist shortly :)
Bye, Raymond.
On Tuesday, August 17, 2004, 1:42:13 AM, Raymond Dijkxhoorn wrote: (Dave Burke wrote:)
I think it's to do with which nameserver you get back. I noticed when I switched mine to rbldnsd that other day that I was unable to resolve www.surbl.org from it anymore...
dave@pagh:~$ dig version.bind chaos txt @ns16.surbl.org +short "rbldnsd" dave@pagh:~$ dig a www.surbl.org @ns16.surbl.org +short dave@pagh:~$ dig version.bind chaos txt @ns14.surbl.org +short "rbldnsd 0.992 (7 Mar 2004)" dave@pagh:~$ dig a www.surbl.org @ns14.surbl.org +short dave@pagh:~$ dig version.bind chaos txt @ns13.surbl.org +short "8.3.7-REL" dave@pagh:~$ dig a www.surbl.org @ns13.surbl.org +short 66.170.2.60
Your RBLDNSD should not be listed as authorative server for the main zone, only for the subzones... They can only answer for the zones you loaded.
But since 'only' NS1-13 are used for the SURBL.ORG zone this wont afect anything, unless you also forward (locally) your requests or surbl.org to that RBLDNSD...
Jeff is checking is we have servers 1-16 all ok now. So we can exclude that from any problemlist shortly :)
Yes, I just took ns16 out of the delegations for the parent zone. All the authoritative servers for the parent zone should be ok now.
Dave, if you were trying to load surbl.org in rbldnsd, please take that out. As Raymond says the rbldnsd servers should be loading only the subdomains.
Jeff C.
Jeff Chan wrote:
Dave, if you were trying to load surbl.org in rbldnsd, please take that out. As Raymond says the rbldnsd servers should be loading only the subdomains.
Apologies Jeff. I just added all the zones that came in when I rsynced the rbldnsd files.
It's gone now.
Dave
On Tuesday, August 17, 2004, 1:53:07 AM, Dave Burke wrote:
Jeff Chan wrote:
Dave, if you were trying to load surbl.org in rbldnsd, please take that out. As Raymond says the rbldnsd servers should be loading only the subdomains.
Apologies Jeff. I just added all the zones that came in when I rsynced the rbldnsd files.
It's gone now.
No need to apologize. Somewhat confusingly the file surbl.rbldnsd is not the zone file for surbl.org but for sc.surbl.org. That was an early name I tried to get Raymond to get rid of, but I think he felt people may have already been using it. In fact I think he is using it. ;-)
For symmetry, I think it's prettier to use the zone files whose names begin with their zone, i.e.:
ab.surbl.org.rbldnsd be.surbl.org.rbldnsd ob.surbl.org.rbldnsd sc.surbl.org.rbldnsd (not surbl.rbldnsd) ws.surbl.org.rbldnsd multi.surbl.org.rbldnsd
There is no rbldnsd zone file for the parent zone surbl.org since rbldnsd doesn't support delegations to subdomains, zone transfers, etc. So the parent zone needs to be done with BIND. Fortunately it's small and quite static.
Jeff C.
Hi!
It's gone now.
No need to apologize. Somewhat confusingly the file surbl.rbldnsd is not the zone file for surbl.org but for sc.surbl.org. That was an early name I tried to get Raymond to get rid of, but I think he felt people may have already been using it. In fact I think he is using it. ;-)
Lets just remove it, and also cleanout the BE one right away...
For symmetry, I think it's prettier to use the zone files whose names begin with their zone, i.e.:
ab.surbl.org.rbldnsd be.surbl.org.rbldnsd ob.surbl.org.rbldnsd sc.surbl.org.rbldnsd (not surbl.rbldnsd) ws.surbl.org.rbldnsd multi.surbl.org.rbldnsd
Yes.
Bye, Raymond.
On Tuesday, August 17, 2004, 2:13:19 AM, Raymond Dijkxhoorn wrote: (Jeff wrote:)
Somewhat confusingly the file surbl.rbldnsd is not the zone file for surbl.org but for sc.surbl.org. That was an early name I tried to get Raymond to get rid of, but I think he felt people may have already been using it. In fact I think he is using it. ;-)
Lets just remove it, and also cleanout the BE one right away...
Please check the logs and see if anyone is grabbing it from the rsync server. If they are, we should let them know to use sc.surbl.org.rbldnsd instead. We don't want them to end up with stale files.
Thanks!
Jeff C.
On Tuesday, August 17, 2004, 2:13:19 AM, Raymond Dijkxhoorn wrote:
and also cleanout the BE one right away...
Please don't get rid of BE. We have not officially deprecated it and people may still be using it, though of course the content is quite stale at this point and people should use ws instead.
Jeff C.
Hi!
and also cleanout the BE one right away...
Please don't get rid of BE. We have not officially deprecated it and people may still be using it, though of course the content is quite stale at this point and people should use ws instead.
Ok, an you make the announcement ? ;)
Bye, Raymond.
On Tuesday, August 17, 2004, 2:40:41 AM, Raymond Dijkxhoorn wrote:
and also cleanout the BE one right away...
Please don't get rid of BE. We have not officially deprecated it and people may still be using it, though of course the content is quite stale at this point and people should use ws instead.
Ok, an you make the announcement ? ;)
OK I'll announce that we're deprecating, but not that we're removing. Let's give some people some time to move off BE:
http://nmrl.kconline.com/rbldnsd/be.surbl.org.html
Jeff C.
Hi!
Ok, an you make the announcement ? ;)
OK I'll announce that we're deprecating, but not that we're removing. Let's give some people some time to move off BE:
Sure, sounds fine.
Jeff C.
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
Hi!
Dave, if you were trying to load surbl.org in rbldnsd, please take that out. As Raymond says the rbldnsd servers should be loading only the subdomains.
Apologies Jeff. I just added all the zones that came in when I rsynced the rbldnsd files.
It's gone now.
There is NO zone (rbldnsd format) for surbl.org itself ?
Bye, Raymond.
On Tuesday, August 17, 2004, 2:11:36 AM, Raymond Dijkxhoorn wrote:
Dave, if you were trying to load surbl.org in rbldnsd, please take that out. As Raymond says the rbldnsd servers should be loading only the subdomains.
Apologies Jeff. I just added all the zones that came in when I rsynced the rbldnsd files.
It's gone now.
There is NO zone (rbldnsd format) for surbl.org itself ?
No. Most of the content of the surbl.org is NS records for subdomain delegation. Since rbldnsd does not support delegations I did not feel it necessary to make (and need to maintain) a separate rbldnsd file.
Would it be useful to make one? I suppose rbldnsd installations could just treat the parent and the child zones equally. I guess I think in terms of the delegations being the most useful things.
Jeff C.
Hi!
It's gone now.
There is NO zone (rbldnsd format) for surbl.org itself ?
No. Most of the content of the surbl.org is NS records for subdomain delegation. Since rbldnsd does not support delegations I did not feel it necessary to make (and need to maintain) a separate rbldnsd file.
I know there is no zone, was just as a questionmark for the previous poster :)
Would it be useful to make one? I suppose rbldnsd installations could just treat the parent and the child zones equally. I guess I think in terms of the delegations being the most useful things.
Lets just leave it on bind for now, its small anyway. But in the future it might be handy to have one that we can rsync as rbldnsd.
On the rsync box i dont see specific requests for that file, and besides that, lets just announce it on the zoneslist, and go ahead.
Most are fetching up: rsync on surbl/*.rbldnsd
I will also compile a list of people still syncing the rbldns files, so not the rbldnsd, so we can also get those out.
Its just a few syncing the rbldns files i noticed anyway, most are fetching the rbldnsd ones.
Bye, Raymond.
On Tuesday, August 17, 2004, 2:40:07 AM, Raymond Dijkxhoorn wrote:
It's gone now.
There is NO zone (rbldnsd format) for surbl.org itself ?
[...]
Would it be useful to make one? I suppose rbldnsd installations could just treat the parent and the child zones equally. I guess I think in terms of the delegations being the most useful things.
Lets just leave it on bind for now, its small anyway. But in the future it might be handy to have one that we can rsync as rbldnsd.
OK It goes on the todo list....
On the rsync box i dont see specific requests for that file,
OK then definitely get rid of surbl.rbldnsd. I'll get rid of it here too.
Do you see anyone grabbing surbl.bind instead of surbl.org.bind? If not we should get rid of surbl.bind also (and leave surbl.org.bind).
and besides that, lets just announce it on the zoneslist, and go ahead.
Most are fetching up: rsync on surbl/*.rbldnsd
I will also compile a list of people still syncing the rbldns files, so not the rbldnsd, so we can also get those out.
Its just a few syncing the rbldns files i noticed anyway, most are fetching the rbldnsd ones.
Sounds good. Let's announce all changes on (zones and) announce. Would you like to or shall I?
Jeff C.
-
daveb＠esat.net -
Jeff Chan -
Raymond Dijkxhoorn