BIND is the de facto standard DNS server

learn more… | top users | synonyms (1)

1
vote
1answer
6k views

how to update Records using nsupdate?

We know that we can update a record (its IP) by doing these steps: nsupdate server ns.bar44.com zone bar44.com update delete somehost.bar44.com. A update add somehost.bar44.com. 86400 A 10.10.10.1 ...
0
votes
0answers
11 views

How do I use BIND in CentOS to create a link to a Print Server for a network with multiple VLANS? [on hold]

Someone smarter than me told me building my own DNS server would solve the problem of resolving hostnames across VLANS so people can easily find the print server when they're searching for them using ...
1
vote
3answers
3k views

Split DNS (bind9), match-clients any doesn't work?

I've been fighting with this for the last few days. A few of my entries have external and internal IP's. My internal network is 10.0.0.0/8. When I nslookup pc1.clase.net internally it responds with ...
2
votes
2answers
62 views

Resolving hostname takes 5 seconds

I've a master bind9 DNS server and 2 slave servers running on IPv4 (Debian Jessie), using /etc/bind/named.conf: listen-on-v6 { none; }; When I try to connect from different server(s) each ...
0
votes
1answer
142 views

DNS local area vs DNS Virtualbox

I have been trying to set up a DNS server on my system using Linux and bind. (I'm working with CentOS and Linux on my Windows 7) On my Linux everything seemed to work:I can access my server and ping/...
0
votes
2answers
411 views

My local DNS don't resolv specific hostnames IP's

I've been trying to accomplish a DNS set up on my local machine using Linux and CentOS. I've been following couple of tutorials and eventually everything seemed to work but when surfing to my ...
1
vote
1answer
54 views

Bind9 socket.c unexpected error

The named process is giving this kind of error the whole day: Jun 17 12:50:43 s named[24479]: socket.c:5274: unexpected error: Jun 17 12:50:43 s named[24479]: connect(198.41.0.4#53) 22/Invalid ...
2
votes
1answer
27 views

can't generate key via dnssec-keygen

$ dnssec-keygen -a HMAC-MD5 -b 512 -n HOST {host} above results in blank line and endless waiting $ dnssec-keygen -T DNSKEY -a HMAC-MD5 -b 512 -n HOST {host} the same entropy: $ cat /proc/...
2
votes
2answers
361 views

zone delegation in Bind

I have a lot of zones defined in my DNS server. I need to delegate one particular zone to a foreign DNS server and I don't have access to my domain-registrar control panel, currently. Is there a way ...
1
vote
1answer
34 views

How to override TTL in a caching-only bind9?

I have a caching-only DNS here. I want it to override the TTL fields of its cached records to reduce the mean network latency. Ideally I could set the TTL somewhere in the configuration, which would ...
-3
votes
2answers
40 views

How can I check the version of BIND on Debian [closed]

I am using Debian and when I give the command sudo named -v it returns command not found. I want to verify that my ssh server (sshd) is using bind version 9.1.3 or later so that it both is IPv6 ...
2
votes
0answers
16 views

What are the most restrictive external firewall / DNS listening port settings I can have for my DNS server (internal clients only)

This question relates specifically to hardening the configuration of DNS, firewalls and at the limit, ntp. (not proxys, http access,vpn's or other services). This is about the externally-facing side ...
1
vote
0answers
23 views

Should DNS (PTR Records) be configured differently for different ipv6 networks?

I am configuring DNS forward and reverse lookup for IPv6(Redhat). For both /64 and /120 prefix i am using below configuration for PTR records. for address 6b00:8a00:a000:11a1::a2b:1c9f (Only a ...
3
votes
2answers
96 views

Bind9 denied query

I created a bind9 based DNS server to work only in forwarding mode: This is my named.conf.options file: #acl goodclients { # localhost; # localnets; #}; options { directory "...
3
votes
3answers
259 views

How to host a website on personal computer

I want to start hosting my website at my own computer as well websites of my friends too (say mini hosting platform). I learned Debian, Bind9 and Apache for this purpose. On my system everything is ...
0
votes
0answers
42 views

Generate IPv6 reverse PTR records for /64 subnet

I use SixXS and delegated the reverse PTR ip6.arpa zone to my own NS servers, so I am able to set up forward-confirmed hostnames within my subnet. This is great. A particular /64 subnet I designated ...
0
votes
2answers
26 views

Moving up DNS domain between webhosting servers

first post over here. Until yesterday I had a virtual shop working in a VPS webhost site, but because of the quality of service it was decided to move the whole webapp to another webhost, in a ...
0
votes
0answers
111 views

why samba 4 is giving the following error attempting to join to domain

trying to join windows 7 clients to samba 4 that is using named as name server i am getting the following error: An attempt to resolve the DNS name of a domain controller in the domain has being ...
0
votes
1answer
186 views

Error in named.conf

I am getting the following error: Starting named: Error in named configuration: zone blk1999.lab/IN: loaded serial 2001062501 zone localhost.localdomain/IN: loading from master file named.localhost ...
0
votes
2answers
69 views

Sandbox alike solution for linux

I wonder if there is a kind of a sandboxing solution for linux, sometimes there is more than one app that is candidate to solve my problems, in that case I want to try all of them to get the one which ...
1
vote
1answer
85 views

DNS problem > If I disable recursion, I can't ping my result

I have configured dns server, and if i enable recursion, I can ping and got the result. [root@seobd ec2-user]# nslookup google.com Server: 52.10.197.195 Address: 52.10.197.195#53 Non-...
1
vote
2answers
44 views

reverse slave DNS server zone file not transferred

I am using amazon free tier with RHEL 7and configuring master and slave dns server. From master everything is ok, but slave I couldn't find result. Also I would like to know how can I secure my dns ...
1
vote
1answer
43 views

unexpected characters in BIND DNS zone slave files

I have this configuration in my named server's (master server) /etc/named.conf : zone "example.com." IN { type master; file "example.com"; notify yes; allow-transfer { 172....
0
votes
1answer
25 views

Bind RPZ config with domains of various level

I use RPZ to blacklist some domains and my configuration looks like: *.com A 127.0.0.1 mydomain.net A 127.0.0.1 if i query a whatever domain .com it works correctly giving me 127.0.0.1 let's ...
3
votes
1answer
262 views

Configure BIND as Forwarder only (no root hints), encrypted + RPZ blacklist / whitelist all together

My setup is getting more complex, generally I tend to divide things in pieces and assemble them together by myself. But it seems this time I need more help to get the whole gears working together. ...
1
vote
2answers
3k views

Redhat 7 DNS Bind Failed to restart

I am getting Error while Restarting the Named.service in Red-hat 7 Here is my Lab Status and all the Command. Configure DNS in REDHAT 7 DNS Name p1.linux.com IP address 192.168.1.1/24 N/W ID 192....
1
vote
1answer
85 views

How can I programmatically modify DNS lookups in real time?

I want to use OpenDNS (parental control) and UnoTelly (geo-restriction circumvention) together. OpenDNS returns an IP to an error page if the site is blocked. So if I get that error IP, then I want ...
3
votes
1answer
142 views

Configure BIND to be a simple forwarder (no root-servers queries)

I would like to setup a simple bind server able to act as simple forwarder to the OpenDNS servers. I don't want my bind however being able to query the root servers, i want all the traffic go only to ...
1
vote
2answers
52 views

When is bind/named needed on a Linux installation?

I don't understand when named/bind is needed on (Debian) Linux systems. I understand it's related to domain name resolution but I don't understand by what it is called. Is there any relation between ...
0
votes
2answers
101 views

Create a separate partition for /var/ /var/log and /tmp/ [closed]

I was asked at work to setup an RHEL 6.7 server to run an application called Nessus 5.2. As a security measure, they requested to create separate partitions for /tmp, /var/, /var/log. Would you ...
3
votes
2answers
74 views

How to configure BIND for domain name with own nameservers?

I am using BIND 9.10.3_P2 to setup DNS records for domain speedydrive.net. The domain itself has glue records on parent servers with 2 IP addresses for NS servers. Everything looks fine except the ...
0
votes
1answer
61 views

Please explain to me named.stats file

I don't quite understand BIND9's statistics file named.stats. Couple of things: 1.) +++ Statistics Dump +++ (1453303803) - what does it mean? Is it when the file was created? And One and half billion ...
10
votes
3answers
3k views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 www....
1
vote
2answers
46 views

resolve bind mounts with a shell tool/script

currently i have a setup with two hardrives, one with xfs, the other one with btrfs on it. The root fs is mounted on the xfs, and the btrfs under /data. For verious reasons, the directory /var/www on ...
1
vote
1answer
114 views

dig does not resolve unqualified domain names, but nslookup does

I have a lab set up with DNS running on a CentOS7 server (dns01.local.lab). The local.lab domain is defined in named.conf: zone "local.lab" IN { type master; file "local.lab.zone"; allow-...
0
votes
1answer
151 views

PowerDNS returning ServFail for all requests

I have been working to get PowerDNS running on CentOS 7 x64 that is up to date. Followed this guide for everything except Nginx because I am using Apache: https://www.rosehosting.com/blog/install-...
2
votes
2answers
1k views

How to increment serial number in bind9 dns zone

I have a dns zone, which has serial number: 2015040500 Today I am going to add some CNAME records there, so I am interested in how to increment serial number, I mean should I change it based on today'...
0
votes
0answers
17 views

Bind: how to set a time for sync journal with zones?

I have set a bind server on Debian,wich is dynamically updated by dhcp. When a client send is hostname bind put in in journal zone(.jnl extension) And not immediately on zone db file. Is possible to ...
4
votes
1answer
304 views

Large zone file for bind9 : ad-blocking

I was successfully using a small (20,000 entries) zone file with bind9 server, but today my data provider sent an update which caused the zone file to become 300,000+ entries large (30Mb+). The ...
0
votes
0answers
34 views

How do I configure the SOA and A in the nsd.conf? and How do I configure the /etc/hosts and the /etc/resolv.conf for this 3 Domain names?

I use the authoritative-only Nameserver nsd for my authoritative example.com zone. My question: I have 3 domain names example-00.com example-01.com example-02.com How do I configure the SOA and A ...
1
vote
0answers
45 views

Making bind to listen to localhost in netns

I have a Debian Jessie running Bind. There is an OpenVPN connection set up. And resolv.conf set up to use local Bind first: nameserver 127.0.0.1 nameserver 4.2.2.4 I want to set up system in a way ...
0
votes
1answer
600 views

server can't find xxx.xx.xxx.192.in-addr.arpa:NXDOMAIN

$ORIGIN xx.xxx.192.in-addr.arpa. $TTL 86400 @ IN SOA dns1.testserver.com. hostmaster.testserver.com. ( 2001062501 ;serial 21600 ;refresh after 6 hour 3600 ;retry after 1 hour 604800 ;expire ...
3
votes
0answers
19 views

'Named' slave the same as having forwarders?

I have a slave DNS server that dumped a bunch of... " error (unexpected RCODE REFUSED) resolving 'xxx.xxx.xxx.xxx.in-addr.arpa/PTR/IN'" messages all the sudden, and DNS lookups to the slave server ...
0
votes
0answers
28 views

centmin mod setup Domain Nameserver

I install centmin mod on my VPS. (ex. IP VPS 49.49.49.49) then i select option (2) to Add Nginx vhost domain then i create 2 vhost mydomain1.com and mydomain2.com. add my domain panel, there's 3 ...
1
vote
1answer
228 views

Resolving IPv4 address from DNS using the IPv6 address of a host (bind9)

I need to make a DNS query to one of my clients using IPv6 to resolve the IPv4 address for the machine, how would I go about doing that. I know i can just use the hostname to resolve both IPv4 & ...
1
vote
0answers
103 views

Split-horizon on DNSMasq?

Is it possible to perform Split-horizon with DNSMasq? I've googled and it seems like it is only possible with Bind9, any advice would be much appericated
0
votes
1answer
17 views

Does bind depends on system DNS settings for lookup?

My understand of bind in handling non-authoritative queries is: forward mode. It just forward the client queries to an upstream DNS server, which is defined in "forwarders" directive. recursive mode....
2
votes
0answers
27 views

Can AppArmor restrict access to a specific interface?

A deceptively simple question; Can Apparmor on Ubuntu (any release) restrict network access for a specific application to a specific network interface? If it can; an example/tutorial/etc link would ...
0
votes
1answer
247 views

rsyslog sending data to remote slows down when $AddUnixListenSocket is used?

I'm running a busy DNS server which logs queries to a remote server via rsyslog. Due to the amount of traffic we're processing I've had to increase the rate limits in rsyslog.conf. This server is ...
0
votes
0answers
12 views

Bind9 resolv on or off?

I'm using bind9 to run my own public DNS for my website. I've been getting a lot of error messages in my syslog file about hostnames not resolving. When I looked in /etc/default/bind9 I noticed ...