Zone machine move causing SpamAssassin DNS outage, fyi

[Theo Van Dinter <fe...@apache.org>]

I was noticing that my nightly rsync run was complaining that it couldn't
resolve "rsync.spamassassin.org".  After a little digging, it turns
out that all the public servers return SERVFAIL for queries, and then I
found aha, the zone information has expired.  With the zone machine move
recently, the primary/hidden dns server that runs on the SpamAssassin
zone changed IP, so all the secondaries lost contact.  The main issue
is that our updates system went offline (*.updates.spamassassin.org). :(

I've updated the config on my server so at least one of the public
machines is serving data again.  I'll send mail out to the other 2 people
providing DNS service and ask them to update their configs as well.

-- 
Randomly Selected Tagline:
"Every Jewish holiday is based on 3 principles:  They tried to kill us,
 we won, let's eat."     - Bruce Villanch

Re: Zone machine move causing SpamAssassin DNS outage, fyi

[Theo Van Dinter <fe...@apache.org>]

On Sun, Oct 29, 2006 at 12:24:28PM -0800, Paul Querna wrote:
> >I was noticing that my nightly rsync run was complaining that it couldn't
> >resolve "rsync.spamassassin.org".  After a little digging, it turns
> >out that all the public servers return SERVFAIL for queries, and then I
[...]
> 
> Should we consider moving this DNS to be hosted using the same setup as 
> *.apache.org?

Hi Paul,

We had a whole discussion about this setup last year, and decided it'd be
better to keep spamassassin.org separate so that we (SA PMC) can make changes
quickly, since the domain is used for testing and updates.

I really just wanted to throw out a mail about the issue since everyone,
including myself, forgot about this in relation to the helios move.

-- 
Randomly Selected Tagline:
All left-handed people, please raise your right hand!

Re: Zone machine move causing SpamAssassin DNS outage, fyi

[Paul Querna <pq...@apache.org>]

Theo Van Dinter wrote:
> I was noticing that my nightly rsync run was complaining that it couldn't
> resolve "rsync.spamassassin.org".  After a little digging, it turns
> out that all the public servers return SERVFAIL for queries, and then I
> found aha, the zone information has expired.  With the zone machine move
> recently, the primary/hidden dns server that runs on the SpamAssassin
> zone changed IP, so all the secondaries lost contact.  The main issue
> is that our updates system went offline (*.updates.spamassassin.org). :(
> 
> I've updated the config on my server so at least one of the public
> machines is serving data again.  I'll send mail out to the other 2 people
> providing DNS service and ask them to update their configs as well.
> 

Should we consider moving this DNS to be hosted using the same setup as 
*.apache.org?