Knowledge Base ISC Main Website Ask a Question/Contact ISC
Quick Jump Menu
Categories
There are no subcategories in this category.
21 What do the log entries 'adb: grow_entries ..' mean?

Question: I am getting the following informational messages on starting named after installing bind 9.8.1-P1 on a set of resolvers: 18-Nov-2011 03:35:14.872 database: info: adb: grow_entries to 1531 starting 18-Nov-2011 03:35:14.874 database: info: adb: grow_entries…

22 Should I use rndc reconfig or rndc reload when changing my nameserver configuration files?

If you make a change to your named.conf that you want named to start using then use rndc reconfig. rndc reconfig will also load any new zones that you've added (and remove any that you no longer have defined), but it won't detect any changes that you've made…

23 How to determine if you are using a threaded build

To take advantage of multi-core computers BIND 9 must be built as a multi-threaded binary. This may not be the default for all BIND versions or on all platforms. To find out if you are using a threaded build, run the following command. The text you should…

24 Can I extract the key tag from a DNSKEY obtained via dig?

dig +multi will show the key tag (key id). In BIND 9.9 and later, you can also use dig +rrcomments, and both options provide more key information than was available with 9.8.2 dig. 9.8.2: $ dig +multi isc.org DNSKEY ; <<>> DiG 9.8.2 <<>>…

25 How do I display the contents of a .signed zone file in human-readable format?

BIND 9.9.0 introduced inline signing. BIND writes its backup signed zone file in raw format (this is the format in which the zone data is stored in working memory - it is faster to load/write the zone data in this format). Use named-checkzone to read the…

26 Why does named log error 22/Invalid argument quoting an IPv6 address starting with fe80: ?

Here's an example of what you might see: 01-Nov-2011 05:14:54.852 general: error: socket.c:5007: unexpected error: 01-Nov-2011 05:14:54.852 general: error: connect (fe80::***********#53) 22/Invalid argument (The actual address in the example is obscured -…

27 What happens when a remote server doesn't understand EDNS0?

Question: What are the situations (timeouts, FORMERR .. etc) that mark a server as unable to speak EDNS0? What happens afterwards? Answer: named tries to send a query with EDNS(0); If the responding server simply ignores the OPT record, this is OK as the…

28 What is DNS Cache snooping?

DNS cache snooping is a technique that can be employed for different purposes by those seeking to benefit from knowledge of what queries have been made of a recursive DNS server by its clients. Uses of this information vary, ranging from planning which mis-typed…

29 Why isn't nsupdate working from my Windows machine?

Question: I'm trying to run nsupdate on my Windows machine using a text file as input - but it's not working. The same updates are working OK from a linux client. Answer: It's most likely that the send command in your text file isn't being recognised. Check…

30 How do I prevent BIND from stopping listening on an interface when it's temporarily down?

By default, BIND will scan the network interface list every 60 minutes and will stop listening on any interfaces that it finds unavailable when it runs this scan. However, it's possible to configure the scanning interval and disable this functionality altogether…