BIND is the de facto standard DNS server

learn more… | top users | synonyms (1)

2
votes
2answers
62 views

Resolving hostname takes 5 seconds

I've a master bind9 DNS server and 2 slave servers running on IPv4 (Debian Jessie), using /etc/bind/named.conf: listen-on-v6 { none; }; When I try to connect from different server(s) each ...
1
vote
1answer
50 views

Bind9 socket.c unexpected error

The named process is giving this kind of error the whole day: Jun 17 12:50:43 s named[24479]: socket.c:5274: unexpected error: Jun 17 12:50:43 s named[24479]: connect(198.41.0.4#53) 22/Invalid ...
2
votes
1answer
26 views

can't generate key via dnssec-keygen

$ dnssec-keygen -a HMAC-MD5 -b 512 -n HOST {host} above results in blank line and endless waiting $ dnssec-keygen -T DNSKEY -a HMAC-MD5 -b 512 -n HOST {host} the same entropy: $ cat /proc/...
1
vote
1answer
34 views

How to override TTL in a caching-only bind9?

I have a caching-only DNS here. I want it to override the TTL fields of its cached records to reduce the mean network latency. Ideally I could set the TTL somewhere in the configuration, which would ...
-3
votes
2answers
40 views

How can I check the version of BIND on Debian [closed]

I am using Debian and when I give the command sudo named -v it returns command not found. I want to verify that my ssh server (sshd) is using bind version 9.1.3 or later so that it both is IPv6 ...
2
votes
0answers
15 views

What are the most restrictive external firewall / DNS listening port settings I can have for my DNS server (internal clients only)

This question relates specifically to hardening the configuration of DNS, firewalls and at the limit, ntp. (not proxys, http access,vpn's or other services). This is about the externally-facing side ...
1
vote
0answers
23 views

Should DNS (PTR Records) be configured differently for different ipv6 networks?

I am configuring DNS forward and reverse lookup for IPv6(Redhat). For both /64 and /120 prefix i am using below configuration for PTR records. for address 6b00:8a00:a000:11a1::a2b:1c9f (Only a ...
3
votes
2answers
95 views

Bind9 denied query

I created a bind9 based DNS server to work only in forwarding mode: This is my named.conf.options file: #acl goodclients { # localhost; # localnets; #}; options { directory "...
0
votes
0answers
42 views

Generate IPv6 reverse PTR records for /64 subnet

I use SixXS and delegated the reverse PTR ip6.arpa zone to my own NS servers, so I am able to set up forward-confirmed hostnames within my subnet. This is great. A particular /64 subnet I designated ...
0
votes
2answers
26 views

Moving up DNS domain between webhosting servers

first post over here. Until yesterday I had a virtual shop working in a VPS webhost site, but because of the quality of service it was decided to move the whole webapp to another webhost, in a ...
1
vote
1answer
83 views

DNS problem > If I disable recursion, I can't ping my result

I have configured dns server, and if i enable recursion, I can ping and got the result. [root@seobd ec2-user]# nslookup google.com Server: 52.10.197.195 Address: 52.10.197.195#53 Non-...
1
vote
2answers
39 views

reverse slave DNS server zone file not transferred

I am using amazon free tier with RHEL 7and configuring master and slave dns server. From master everything is ok, but slave I couldn't find result. Also I would like to know how can I secure my dns ...
1
vote
1answer
42 views

unexpected characters in BIND DNS zone slave files

I have this configuration in my named server's (master server) /etc/named.conf : zone "example.com." IN { type master; file "example.com"; notify yes; allow-transfer { 172....
0
votes
1answer
24 views

Bind RPZ config with domains of various level

I use RPZ to blacklist some domains and my configuration looks like: *.com A 127.0.0.1 mydomain.net A 127.0.0.1 if i query a whatever domain .com it works correctly giving me 127.0.0.1 let's ...
3
votes
1answer
257 views

Configure BIND as Forwarder only (no root hints), encrypted + RPZ blacklist / whitelist all together

My setup is getting more complex, generally I tend to divide things in pieces and assemble them together by myself. But it seems this time I need more help to get the whole gears working together. ...
3
votes
1answer
139 views

Configure BIND to be a simple forwarder (no root-servers queries)

I would like to setup a simple bind server able to act as simple forwarder to the OpenDNS servers. I don't want my bind however being able to query the root servers, i want all the traffic go only to ...
1
vote
2answers
51 views

When is bind/named needed on a Linux installation?

I don't understand when named/bind is needed on (Debian) Linux systems. I understand it's related to domain name resolution but I don't understand by what it is called. Is there any relation between ...
0
votes
2answers
100 views

Create a separate partition for /var/ /var/log and /tmp/ [closed]

I was asked at work to setup an RHEL 6.7 server to run an application called Nessus 5.2. As a security measure, they requested to create separate partitions for /tmp, /var/, /var/log. Would you ...
1
vote
2answers
46 views

resolve bind mounts with a shell tool/script

currently i have a setup with two hardrives, one with xfs, the other one with btrfs on it. The root fs is mounted on the xfs, and the btrfs under /data. For verious reasons, the directory /var/www on ...
1
vote
1answer
113 views

dig does not resolve unqualified domain names, but nslookup does

I have a lab set up with DNS running on a CentOS7 server (dns01.local.lab). The local.lab domain is defined in named.conf: zone "local.lab" IN { type master; file "local.lab.zone"; allow-...
3
votes
2answers
74 views

How to configure BIND for domain name with own nameservers?

I am using BIND 9.10.3_P2 to setup DNS records for domain speedydrive.net. The domain itself has glue records on parent servers with 2 IP addresses for NS servers. Everything looks fine except the ...
0
votes
1answer
146 views

PowerDNS returning ServFail for all requests

I have been working to get PowerDNS running on CentOS 7 x64 that is up to date. Followed this guide for everything except Nginx because I am using Apache: https://www.rosehosting.com/blog/install-...
0
votes
1answer
61 views

Please explain to me named.stats file

I don't quite understand BIND9's statistics file named.stats. Couple of things: 1.) +++ Statistics Dump +++ (1453303803) - what does it mean? Is it when the file was created? And One and half billion ...
0
votes
0answers
17 views

Bind: how to set a time for sync journal with zones?

I have set a bind server on Debian,wich is dynamically updated by dhcp. When a client send is hostname bind put in in journal zone(.jnl extension) And not immediately on zone db file. Is possible to ...
0
votes
0answers
34 views

How do I configure the SOA and A in the nsd.conf? and How do I configure the /etc/hosts and the /etc/resolv.conf for this 3 Domain names?

I use the authoritative-only Nameserver nsd for my authoritative example.com zone. My question: I have 3 domain names example-00.com example-01.com example-02.com How do I configure the SOA and A ...
4
votes
1answer
304 views

Large zone file for bind9 : ad-blocking

I was successfully using a small (20,000 entries) zone file with bind9 server, but today my data provider sent an update which caused the zone file to become 300,000+ entries large (30Mb+). The ...
1
vote
1answer
85 views

How can I programmatically modify DNS lookups in real time?

I want to use OpenDNS (parental control) and UnoTelly (geo-restriction circumvention) together. OpenDNS returns an IP to an error page if the site is blocked. So if I get that error IP, then I want ...
1
vote
0answers
44 views

Making bind to listen to localhost in netns

I have a Debian Jessie running Bind. There is an OpenVPN connection set up. And resolv.conf set up to use local Bind first: nameserver 127.0.0.1 nameserver 4.2.2.4 I want to set up system in a way ...
0
votes
1answer
587 views

server can't find xxx.xx.xxx.192.in-addr.arpa:NXDOMAIN

$ORIGIN xx.xxx.192.in-addr.arpa. $TTL 86400 @ IN SOA dns1.testserver.com. hostmaster.testserver.com. ( 2001062501 ;serial 21600 ;refresh after 6 hour 3600 ;retry after 1 hour 604800 ;expire ...
3
votes
0answers
18 views

'Named' slave the same as having forwarders?

I have a slave DNS server that dumped a bunch of... " error (unexpected RCODE REFUSED) resolving 'xxx.xxx.xxx.xxx.in-addr.arpa/PTR/IN'" messages all the sudden, and DNS lookups to the slave server ...
0
votes
1answer
181 views

Error in named.conf

I am getting the following error: Starting named: Error in named configuration: zone blk1999.lab/IN: loaded serial 2001062501 zone localhost.localdomain/IN: loading from master file named.localhost ...
0
votes
0answers
28 views

centmin mod setup Domain Nameserver

I install centmin mod on my VPS. (ex. IP VPS 49.49.49.49) then i select option (2) to Add Nginx vhost domain then i create 2 vhost mydomain1.com and mydomain2.com. add my domain panel, there's 3 ...
1
vote
1answer
214 views

Resolving IPv4 address from DNS using the IPv6 address of a host (bind9)

I need to make a DNS query to one of my clients using IPv6 to resolve the IPv4 address for the machine, how would I go about doing that. I know i can just use the hostname to resolve both IPv4 & ...
1
vote
0answers
102 views

Split-horizon on DNSMasq?

Is it possible to perform Split-horizon with DNSMasq? I've googled and it seems like it is only possible with Bind9, any advice would be much appericated
0
votes
1answer
17 views

Does bind depends on system DNS settings for lookup?

My understand of bind in handling non-authoritative queries is: forward mode. It just forward the client queries to an upstream DNS server, which is defined in "forwarders" directive. recursive mode....
2
votes
0answers
27 views

Can AppArmor restrict access to a specific interface?

A deceptively simple question; Can Apparmor on Ubuntu (any release) restrict network access for a specific application to a specific network interface? If it can; an example/tutorial/etc link would ...
0
votes
1answer
245 views

rsyslog sending data to remote slows down when $AddUnixListenSocket is used?

I'm running a busy DNS server which logs queries to a remote server via rsyslog. Due to the amount of traffic we're processing I've had to increase the rate limits in rsyslog.conf. This server is ...
0
votes
0answers
12 views

Bind9 resolv on or off?

I'm using bind9 to run my own public DNS for my website. I've been getting a lot of error messages in my syslog file about hostnames not resolving. When I looked in /etc/default/bind9 I noticed ...
1
vote
1answer
102 views

DNS Hostnames - using internal and external zones

Looking for the correct or best practice way of doing this. If you have an external zone called example.com that runs your public mail, web, etc and an internal zone called corp.example.com that runs ...
1
vote
1answer
286 views

Many domains using a single IP address with BIND 9.7

I'm in the middle of migrating and configuring a web server with two domains (with one more in the future), and no sub-domains so far, but using a single IP address (for now). This type of ...
1
vote
1answer
31 views

enable a user to chroot?

I have a script that I am running as a regular user (but one that can sudo). This script relates to BIND and gathers information each time it runs. It has not been working correctly and I noticed ...
2
votes
1answer
156 views

Named serial increment SED oneliner

I need to increment named serial and I want to do it with sed. I've done it like this: echo 2015092315 | gsed s/20[0-9][0-9][0-9][0-9]*/`date +%Y%m%d%H`/g But then I realized that updates to zone ...
0
votes
0answers
39 views

yum updated bind last week. Afterwards, ping, yum update, lynx stopped working

Per title I issued a standard yum update 10 days ago. The only packages updated were php and bind. Afterwards, the network went bonkers. yum update stopped working (couldn't resolve address), I can ...
0
votes
0answers
70 views

nagios plug-in for collecting DNS stats not working on RHEL server 6.7

We are trying to get the check_bind.sh script to automatically update the named.stats file. However, the file only seems to update when we run the script manually or with a cron job. We have this ...
1
vote
1answer
149 views

BIND9 denying queries from IPs outsite localnet (External IPs) - Ubuntu 14.04

BIND9 denying queries from IPs outsite localnet (External IPs) on Ubuntu. options { listen-on port 53 { any; }; directory "/var/bind"; allow-query ...
0
votes
1answer
81 views

Network routing issue after connecting to VPN

This is how my home network is configured: Internet connects to Router. Bind runs on a dedicated home server (called plug). Router is configured to use plug as DNS servers. Till today morning ...
1
vote
0answers
176 views

Debian Jessie bind9 permission problem

Whenever I start bind9 (/etc/init.d/bind9 start) I get the following reply: [FAIL] Starting domain name service...: bind9 failed This is what /var/log/syslog gives me: ... named[28282]: loading ...
0
votes
1answer
35 views

Reverse DNS for external DNS server

I have my forward zone configured and now I am writing my reverse zone configuration. I've read through Pro DNS and BIND book and the examples given are if you own a portion of an IP address space a.b....
1
vote
1answer
116 views

TTL values for external DNS records

Upon setting up my zone files, I went back to review my TTL values. The default is set for 24 hours and I have individual TTL values set for each individual record. My thought was NS, MX, and CNAME ...
1
vote
2answers
78 views

Security of zone transfers for bind

When having two public DNS servers that provide NS, A, MX, and CNAME records for your domain (website), is it necessary to encrypt the zone transfer data or is it fine to have the master-to-slave sent ...