Wide IP and SOA query
Hi, That is probably obvious question but I am not sure if I am getting things right. All related to 13.1.0.6 version. Setup: Wide IP: created Automatically ZoneRunner Zone wip.exmaple.com creted with: SOA NS A for DNS profile with: Only GSLB enabled Unhandled Query Actions: Reject When performing A query for answer with correct IP returned. When performing SOA query for wip.exmaple.foo reply with REFUSED status returned. Only way I figured out to make SOA query work is: Unhandled Query Actions: Allow Use BIND Server on BIG-IP: Enabled I wonder if above is really only way to have SOA query working? Are SOA and NS RRs created just because bind zone file db.external.wip.example.foo. format requires it and those RR are not really necessary for any real life scenarios? Sure this is just W2K8 implementation but to create delegation (using wizard) without error for configured NS (for wip.example.foo subdomain) SOA query has to work. That is not big deal because even if there is error in wizard, name resolution is working. Still I am a bit curious if lack of ability to answer SOA query can be important? Piotr
Wide IP and SOA query
Hi, That is probably obvious question but I am not sure if I am getting things right. All related to 13.1.0.6 version. Setup: Wide IP: created Automatically ZoneRunner Zone wip.exmaple.com creted with: SOA NS A for DNS profile with: Only GSLB enabled Unhandled Query Actions: Reject When performing A query for answer with correct IP returned. When performing SOA query for wip.exmaple.foo reply with REFUSED status returned. Only way I figured out to make SOA query work is: Unhandled Query Actions: Allow Use BIND Server on BIG-IP: Enabled I wonder if above is really only way to have SOA query working? Are SOA and NS RRs created just because bind zone file db.external.wip.example.foo. format requires it and those RR are not really necessary for any real life scenarios? Sure this is just W2K8 implementation but to create delegation (using wizard) without error for configured NS (for wip.example.foo subdomain) SOA query has to work. That is not big deal because even if there is error in wizard, name resolution is working. Still I am a bit curious if lack of ability to answer SOA query can be important? Piotr
Adding ip address which can query gtm
We are trying to create a setup where for all infoblox is primary dns server and there are some zone which are delegated to gtm. Since the gtm is external so security team wants us to only allow query address as infoblox address instead of allowing all. Is there any way we can restrict ip based query? Thanks.
delegate _xmpp-client._tcp.domain.com to GTM and let the GTM to resolve to (A) record hosted on BIND.
I am trying to get iRule to work for servicing SRV records for _sipinternaltls._tcp.domain.com and _xmpp-client._tcp.domain.com, which are delegated to the GTM from the dns server running BIND. ERROR: 01070151:3: Rule [/Common/srvtest1_irule] error: /Common/srvtest1_irule:9: error: [undefined procedure: DNS::answer][DNS::answer insert "[DNS::question name]. $ttl IN [DNS::question type] 1 0 5223 xmpp1.domain.net."] /Common/srvtest1_irule:14: error: [undefined procedure: DNS::additional][DNS::additional insert "xmpp1.domain.net. $ttl IN A 1.1.1.1"] /Common/srvtest1_irule:17: error: [undefined procedure: DNS::return][DNS::return]