***: fink has quit IRC (Quit: fink)
fink has joined #arpnetworks
fink has quit IRC (Quit: fink)
fink has joined #arpnetworks
fink has quit IRC (Quit: fink)
fink has joined #arpnetworks
fink has quit IRC (Quit: fink)
fink has joined #arpnetworks
dj_goku has quit IRC (Remote host closed the connection)
fink has quit IRC (Quit: fink)
gizmoguy has quit IRC (Ping timeout: 265 seconds)
gizmoguy has joined #arpnetworks
mnathani: thanks jlgaddis brycec mercutio
does ARP provide Authoritative DNS?
or does DNS Manager refer strictly to Reverse DNS ?
brycec: As far as I know, it only manages reverse DNS
I use dns.he.net personally, and I've used freedns.afraid.org in the past for auth/secondary DNS
(Keyword being *free* :D)
twobithacker: I just run my own named
mhoran: So do I, but you need slaves. I also use dns.he.net.
I suppose I don't run named anymore. nsd!
twobithacker: I'm using puck.nether.net and esgob.com as secondaries
haven't played with nsd yet. knot looks kindof interesting too
JC_Denton: i've had good luck with buddyns as a secondary
fast ntfy updates too
mkb: Gandi.net provides a slave server if your domain is registered there
brycec: (You don't technically need slaves ;P)
mercutio: i just tinydns and scp files with a script.
jlgaddis: i still use bind on all my dns servers but will likely switch to nsd and unbound as they're upgraded
mnathani: looks interesting >> https://www.buddyns.com/services/cpanel-whm/
mercutio: i use unbound for recursive, it's nice.
jlgaddis: yeah i've been using it at home for almost a year and haven't had a single issue
mercutio: do you enable prefetch?
jlgaddis: nfi, lemme check
nope
mercutio: it can only help a little with small number of users.
i do reckon it's kind of a cool thing to boost performance in generla though
mnathani: I just installed unbound on an ubuntu box, but keep getting SERVFAIL for DNS queries
my etc/resolv.conf has: nameserver 127.0.0.1
but I cannot ping google.com
ping 8.8.8.8 works however
mercutio: acl?
ubuntu recently started having empty unbound config files
with all the comments and default options not visible
but default config should just work for localhost
mnathani: http://pastebin.com/UsmHrGzm
thats my config
mercutio: oh maybe yours is old enough to have more config
mnathani: I put that config in there
mercutio: i don't see anything allowing 127.0.0/8
127.0.0.0/8
mnathani: by default it was blank
mercutio: yeah but it normally has an access-control already in there
and i imagine defining access-controls overrides the default
mnathani: dig mnathani.com gives SERVFAIL
mercutio: oh
access-control: 0.0.0.0/0 refuse
mnathani: but dig google.com gives IP addresses
mercutio: stick that first too
then access-control: 127.0.0.0/8 allow
then what you have
access-control: ::0/0 refuse
access-control: ::1 allow
access-control: ::ffff:127.0.0.1 allow
mnathani: wouldnt I get REFUSED if it was ACL issue?"
mercutio: nope
mnathani: akamai.com. 60 IN A 23.36.93.239
but mnathani.com gets SERVFAIL
http://pastebin.com/xwFJ9RqL
I can't make any sense of that log error
why its returning a SERVFAIL
mercutio: Capsforid fallback: getting different replies, failed
weird
fwiw mnathani.com resolves from here
mnathani: using unbound?
mercutio: not directly
dnsmasq then unbound
hangon i have direct unbound i can try
yeah works fine
mnathani: the config I put in there had it enabled
use-caps-for-id: yes
disabled it now and it works
mercutio: oh i didn't spot that
mnathani: time to get my windows box using the unbound instance