You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Ray Jette <rj...@mestek.com> on 2008/12/05 16:04:20 UTC

Off Topic?

Sorry if this is off topic. I am using a Microsoft DNS server. I am 
putting a big load on it with Mailscanner / Spamassassin and MTA RBL's. 
Would you recommend that I use a local BIND Cache server? Does anyone 
have any good resources as to how to set this up?

I have installed bind9 and bind-utils. I changed /etc/resolve.conf to be 
the following:
nameserver 127.0.0.1

When I did this the server was not able to resolve any names. Do I have 
to forward this name server to my Microsoft DNS server? Can it be 
configured to use the Root Hints?

Sorry about being off topic.

Thanks for the help.

Ray



Re: Off Topic?

Posted by mouss <mo...@netoyen.net>.
Ray Jette a écrit :
> John Hardin wrote:
>> On Fri, 2008-12-05 at 10:53 -0500, Ray Jette wrote:
>>  
>>> Now I want to be able to view the bind cache so I can verify that it
>>> is caching records. I have searched all over the Internet with no
>>> luck. At most, I can find that the cache is stored in RAM.
>>>     
>>
>> run "man rndc"
>>
>> http://www.oreillynet.com/pub/a/network/excerpt/dnsbindcook_ch05/?page=2
>>
>>
>>   
> Thanks for the link. I found the command:
> rndc dumpdb
> 
> When I run the command I get the following error:
> rndc: connect ailed: 127.0.0.1#953: connection refused
> 
> Any ideas about this?


http://www.google.fr/search?q=rndc%3A+connect+failed%3A+127.0.0.1%23953%3A+connection+refused



Re: Off Topic?

Posted by Ray Jette <rj...@mestek.com>.
John Hardin wrote:
> On Fri, 2008-12-05 at 10:53 -0500, Ray Jette wrote:
>   
>> Now I want to be able to view the bind cache so 
>> I can verify that it is caching records. I have searched all over the 
>> Internet with no luck. At most, I can find that the cache is stored in RAM.
>>     
>
> run "man rndc"
>
> http://www.oreillynet.com/pub/a/network/excerpt/dnsbindcook_ch05/?page=2
>
>
>   
Thanks for the link. I found the command:
rndc dumpdb

When I run the command I get the following error:
rndc: connect ailed: 127.0.0.1#953: connection refused

Any ideas about this?

Re: Off Topic?

Posted by John Hardin <jh...@impsec.org>.
On Fri, 2008-12-05 at 10:53 -0500, Ray Jette wrote:
> Now I want to be able to view the bind cache so 
> I can verify that it is caching records. I have searched all over the 
> Internet with no luck. At most, I can find that the cache is stored in RAM.

run "man rndc"

http://www.oreillynet.com/pub/a/network/excerpt/dnsbindcook_ch05/?page=2


-- 
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The question of whether people should be allowed to harm themselves
  is simple. They *must*.                           -- Charles Murray
-----------------------------------------------------------------------
 10 days until Bill of Rights day


Re: Off Topic?

Posted by mouss <mo...@netoyen.net>.
Ray Jette a écrit :
> Martin Gregorie wrote:
>> On Fri, 2008-12-05 at 10:04 -0500, Ray Jette wrote:
>>  
>>> Sorry if this is off topic. I am using a Microsoft DNS server. I am
>>> putting a big load on it with Mailscanner / Spamassassin and MTA
>>> RBL's. Would you recommend that I use a local BIND Cache server? Does
>>> anyone have any good resources as to how to set this up?
>>>
>>> I have installed bind9 and bind-utils. I changed /etc/resolve.conf to
>>> be the following:
>>> nameserver 127.0.0.1
>>>
>>>     
>> Try adding
>>
>>     forwarders {
>>         ip-of-MS-DNS;
>>     };
>>
>> to the options{} section of /etc/named.conf
>> This will should send all DNS requests it can't handle itself to your MS
>> DNS server.
>>

this is not a good advice. I would configure the ms server to resolve
via BIND instead of the opposite... but that may be just me;-p


>>   
> I have added what you recommended but I added it to the
> /etc/bind/named.con.options file.
> This solved my problem. Now I want to be able to view the bind cache so
> I can verify that it is caching records. I have searched all over the
> Internet with no luck. At most, I can find that the cache is stored in RAM.
> 

Welcome to the spamassassin-users list. This list is for questions and
discussions about spamassassin. blah blah ;-p




Re: Off Topic?

Posted by Ray Jette <rj...@mestek.com>.
Martin Gregorie wrote:
> On Fri, 2008-12-05 at 10:04 -0500, Ray Jette wrote:
>   
>> Sorry if this is off topic. I am using a Microsoft DNS server. I am 
>> putting a big load on it with Mailscanner / Spamassassin and MTA RBL's. 
>> Would you recommend that I use a local BIND Cache server? Does anyone 
>> have any good resources as to how to set this up?
>>
>> I have installed bind9 and bind-utils. I changed /etc/resolve.conf to be 
>> the following:
>> nameserver 127.0.0.1
>>
>>     
> Try adding
>
> 	forwarders {
> 		ip-of-MS-DNS;
> 	};
>
> to the options{} section of /etc/named.conf
> This will should send all DNS requests it can't handle itself to your MS
> DNS server.
>
>
> Martin
>
>
>
>
>   
I have added what you recommended but I added it to the 
/etc/bind/named.con.options file.
This solved my problem. Now I want to be able to view the bind cache so 
I can verify that it is caching records. I have searched all over the 
Internet with no luck. At most, I can find that the cache is stored in RAM.

Thanks again,
Ray

Re: Off Topic?

Posted by Martin Gregorie <ma...@gregorie.org>.
On Fri, 2008-12-05 at 10:04 -0500, Ray Jette wrote:
> Sorry if this is off topic. I am using a Microsoft DNS server. I am 
> putting a big load on it with Mailscanner / Spamassassin and MTA RBL's. 
> Would you recommend that I use a local BIND Cache server? Does anyone 
> have any good resources as to how to set this up?
> 
> I have installed bind9 and bind-utils. I changed /etc/resolve.conf to be 
> the following:
> nameserver 127.0.0.1
> 
Try adding

	forwarders {
		ip-of-MS-DNS;
	};

to the options{} section of /etc/named.conf
This will should send all DNS requests it can't handle itself to your MS
DNS server.


Martin



Re: Off Topic?

Posted by Ray Jette <rj...@mestek.com>.
Jack Pepper wrote:
> Have a look at Black hole DNS.  http://www.malwaredomains.com
>
> jp
>
> Quoting Ray Jette <rj...@mestek.com>:
>
>> Sorry if this is off topic. I am using a Microsoft DNS server. I am 
>> putting a big load on it with Mailscanner / Spamassassin and MTA 
>> RBL's. Would you recommend that I use a local BIND Cache server? Does 
>> anyone have any good resources as to how to set this up?
>>
>> I have installed bind9 and bind-utils. I changed /etc/resolve.conf to 
>> be the following:
>> nameserver 127.0.0.1
>>
>> When I did this the server was not able to resolve any names. Do I 
>> have to forward this name server to my Microsoft DNS server? Can it 
>> be configured to use the Root Hints?
>>
>> Sorry about being off topic.
>>
>> Thanks for the help.
>>
>> Ray
>
>
>
No I have not. I don't rely think this is what I am trying to do. I want 
to run a caching DNS server on my mail server to keep traffic off of our 
primary DNS server. I have an issue where the Microsoft DNS server fails 
ater heavy load.

Ray

Re: Off Topic?

Posted by Jack Pepper <pe...@autoshun.org>.
Have a look at Black hole DNS.  http://www.malwaredomains.com

jp

Quoting Ray Jette <rj...@mestek.com>:

> Sorry if this is off topic. I am using a Microsoft DNS server. I am  
> putting a big load on it with Mailscanner / Spamassassin and MTA  
> RBL's. Would you recommend that I use a local BIND Cache server?  
> Does anyone have any good resources as to how to set this up?
>
> I have installed bind9 and bind-utils. I changed /etc/resolve.conf  
> to be the following:
> nameserver 127.0.0.1
>
> When I did this the server was not able to resolve any names. Do I  
> have to forward this name server to my Microsoft DNS server? Can it  
> be configured to use the Root Hints?
>
> Sorry about being off topic.
>
> Thanks for the help.
>
> Ray



-- 
Simple compliance is a hacker's best friend

----------------------------------------------------------------
@fferent Security Labs:  Isolate/Insulate/Innovate  
http://www.afferentsecurity.com


Re: Off Topic?

Posted by Ray Jette <rj...@mestek.com>.
Ray Jette wrote:
> Sorry if this is off topic. I am using a Microsoft DNS server. I am 
> putting a big load on it with Mailscanner / Spamassassin and MTA 
> RBL's. Would you recommend that I use a local BIND Cache server? Does 
> anyone have any good resources as to how to set this up?
>
> I have installed bind9 and bind-utils. I changed /etc/resolve.conf to 
> be the following:
> nameserver 127.0.0.1
>
> When I did this the server was not able to resolve any names. Do I 
> have to forward this name server to my Microsoft DNS server? Can it be 
> configured to use the Root Hints?
>
> Sorry about being off topic.
>
> Thanks for the help.
>
> Ray
>
>
>
>
One more question. How do I go about viewing the DNS cache? I know it's 
stored in memory but it there a way to view it?

Re: Off Topic?

Posted by Ray Jette <rj...@mestek.com>.
Ray Jette wrote:
> Sorry if this is off topic. I am using a Microsoft DNS server. I am 
> putting a big load on it with Mailscanner / Spamassassin and MTA 
> RBL's. Would you recommend that I use a local BIND Cache server? Does 
> anyone have any good resources as to how to set this up?
>
> I have installed bind9 and bind-utils. I changed /etc/resolve.conf to 
> be the following:
> nameserver 127.0.0.1
>
> When I did this the server was not able to resolve any names. Do I 
> have to forward this name server to my Microsoft DNS server? Can it be 
> configured to use the Root Hints?
>
> Sorry about being off topic.
>
> Thanks for the help.
>
> Ray
>
>
>
>
Thank you for all the help everyone has provided.