BIND is the de facto standard DNS server

learn more… | top users | synonyms (1)

10
votes
3answers
3k views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 ...
8
votes
1answer
7k views

How to let `named` (bind9) forward certain domains to a different nameserver?

In dnsmasq, it's possible to forward domains to different nameservers. How can I do that in named? server=/foo.com/10.0.10.1 server=/vpn.foo.com/8.8.8.8
7
votes
1answer
9k views

“Fake” DNS for a single host

I am running a bind9 dns server at my home network, serving for all my internal servers in my domain local / 192.168.x.x - one of those, extweb.local 192.168.1.33 is also visible from the internet as ...
7
votes
3answers
849 views

Is it possible to execute scripts in BIND based on lookup

Is it possible, to set up BIND as DNS server on my local network, and make execute scripts when it gets a lookup? I would like to execute a Python or Bash script, based on the incoming DNS lookup, ...
5
votes
1answer
685 views

Setup of DNS zone with secure zone updates

How do I run a dns server with a zone for a local domain and be able to add dynamic entries to the dns zone securely from selected hosts? I have tried to setup a domain 'rag.local' with bind9. I have ...
5
votes
2answers
4k views

BIND9 as a DNS server refuses requests

I am trying to set up a DNS server on Amazon Linux using BIND9. It has to act as a master nameserver for a lot of domains. I have imported all of the DNS zone files using NamedManager (a web ...
4
votes
2answers
963 views

Unable to delete files to trash in a bind-mounted filesystem

I'm trying to set up shared home directory for two Linux installations and thus I'm using bind-mounts. My user is named dbz and his home directory is /home/dbz. I also have shared directory ...
4
votes
2answers
6k views

How can I reset or lower the serial used in BIND DNS server's “SOA” record?

I use BIND as my DNS server at home. For my SOA record (start of authority) I always use a serial in the recommended format YYYYMMDD## where ## is the counter for changes on that day. ...
4
votes
1answer
891 views

How can we make Squid do a reverse nslookup?

We all know that access.log file logs the access Info of Squid: 1286536351.746 41762 192.168.1.17 TCP_MISS/200 5340945 GET http://v15.lscache3.c.youtube.com/videoplayback? - DIRECT/122.160.120.150 ...
4
votes
1answer
448 views

Can you Chroot a program from an OpenVZ environment?

I just recently purchased a Virtual Private Server, and it is OpenVZ virtualization. I am setting up my LAMP stack, and in the past I have always just set up my BIND dns set up in a chrooted ...
4
votes
2answers
2k views

Socket connect to a ports bound to IP vs localhost

It is my understanding that sockets bound to ports using localhost will not be visible to the subnet because the binding is not with the nic IP address. Local processes connecting to such port will ...
4
votes
1answer
6k views

TCP buffers keep filling up (Recv-Q full): named unresponsive

Using netstat -an, I set the message that the Recv-Q is full. It is filling up to the rmem_max: Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address ...
4
votes
3answers
842 views

Unabled to get rid of BIND 9 chroot

I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under ...
4
votes
2answers
2k views

Creating a new TLD for private network

I want to setup a new TLD (foo.) for my the private network so that I can host some child domains which will be accessible from within the network. For this purpose I have setup a DNS server ...
4
votes
0answers
186 views

Unable to view mounted directories in a chroot [closed]

Here is a quick description of what I have done: I have a chrooted user (username: clientdev) which I have jailed inside their home directory. This chroot directory is /home/clientdev/ which is ...
3
votes
2answers
243 views

How to host a website on personal computer

I want to start hosting my website at my own computer as well websites of my friends too (say mini hosting platform). I learned Debian, Bind9 and Apache for this purpose. On my system everything is ...
3
votes
1answer
390 views

What does the Bind bindkeys-file directive do?

Just trying to understand the bindkeys-file directive related to the DNSSEC extension in the Bind configuration. Is that a public key? Does it sign the response in the same way as digital signatures?
3
votes
2answers
6k views

how can I add records to the zone file without restarting the named service?

I'm working on centos6.5 and bind9 and I have managed to add records to a DNS zone by doing this steps: creating the key: dnssec-keygen -a HMAC-MD5 -b 128 -n HOST example.com. editing conf. ...
3
votes
1answer
188 views

Local DNS Server Refuses to Ask itself for DNS

I am running Debian 7 and have set up a DHCP and DNS server. Everything is working nicely, except for the server itself not following the DNS entries in BIND. The problem is that /etc/resolv.conf is ...
3
votes
2answers
2k views

I want to expose “easy” URL's for machines on a home network. Is custom DNS/BIND the answer?

I recently convinced my room mates to cut the cord and go cable free, and they've found it pretty great so far. I'm in the process of setting up a pretty sweet, mostly automated home theater setup ...
3
votes
1answer
884 views

Bind9 — How to find which programs are making which dns lookups?

Using bind9 on a laptop shows lots of nonsense domains when network connectivity is down: Oct 18 19:56:18 lap3 named[1536]: error (network unreachable) resolving './NS/IN': 128.63.2.53#53 Oct 18 ...
3
votes
2answers
8k views

When to use BIND vs internal DNS for Samba 4 backend

The docs say, "Bind as DNS backend is recommended, if you plan setup a complexer DNS setup, than the Samba 4 internal DNS currently made possible." What exactly is the threshold for "a complexer DNS ...
3
votes
2answers
40 views

How to configure BIND for domain name with own nameservers?

I am using BIND 9.10.3_P2 to setup DNS records for domain speedydrive.net. The domain itself has glue records on parent servers with 2 IP addresses for NS servers. Everything looks fine except the ...
3
votes
2answers
256 views

How to return multiple DNS A records in a specific order using bind9?

I have a bind9 testing environment in Debian wheezy that I am trying to set up two A records that are returned in a fixed order. In my named.conf.options file I have the following configuration: ...
3
votes
1answer
3k views

PID file /var/run/named/named.pid not readable (yet?) after start [duplicate]

Feb 24 15:54:34 ns1 named[20308]: all zones loaded Feb 24 15:54:34 ns1 named[20308]: running Feb 24 15:54:34 ns1 systemd[1]: PID file /var/run/named/named.pid not readable (yet?) after start. Feb 24 ...
3
votes
1answer
786 views

Force local DNS resolution for external hosts

My Environment: *OS:* Angstrom Linux DNS: Bind Current Scenario: User connects to my private offline network. User tries to access google.com, and my box is on a private network therefore they ...
3
votes
2answers
590 views

$ORIGIN directive in IPv6 zone files

I have often seen similar BIND zone files: $ORIGIN 2.0.3.0.8.b.d.0.1.0.0.2.ip6.arpa. $TTL 604800 @ IN SOA ns1.example.org. hostmaster.example.org. ( 1978022513 ; Serial 10800 ...
3
votes
2answers
442 views

Looking up a local domain name without specifying the local DNS server

I've set up a local domain name by creating a zone (by following the steps in this tutorial). Why I look the domain using dig, I get the right results when using the following command: dig ...
3
votes
1answer
106 views

Large zone file for bind9 : ad-blocking

I was successfully using a small (20,000 entries) zone file with bind9 server, but today my data provider sent an update which caused the zone file to become 300,000+ entries large (30Mb+). The ...
3
votes
1answer
555 views

Running my own dynamic DNS record hosting

I intend to run a debian server at home, it will host various websites, SSH server and email. I have a dynamic IP address and I am unwilling to pay the extra for a static IP. I was thinking I could ...
3
votes
1answer
1k views

Cannot install BIND dns with yum on Oracle Enterprise Linux 6.1

I am currently using Oracle Enterprise Linux 6.1 to use for Oracle RAC. However I am stuck at installing BIND (DNS Server) at the VM I've set up. I've used the following command: yum install ...
3
votes
1answer
709 views

One non-root user run jetty by port 512 which less that port1024

Customer asks us to create a non-root user to run our web system which bind port 512, less than 1024. When web server(jetty) runs, this is the exception: 2013-10-16 14:49:51.406:WARN::failed ...
3
votes
1answer
869 views

bind mounting and df output

I have a partition, /dev/sdb1, that gets mounted at /data. In /etc/fstab I have: /dev/sdb1 /data ext4 defaults 1 2 After that partition gets mounted, I then have the following ...
3
votes
1answer
1k views

/var/named/chroot/var/named: device is busy

When I restart the named service, it gives me this error: ./etc/init.d/named restart Stopping named: [ OK ] Starting named: Error in named ...
3
votes
1answer
99 views

Do I need a new zone for each domain I have on my server?

I currently have a working BIND nameserver Running on my dedicated ubuntu server box. I have one zone set up.. example.com with its own nameservers. If I want to add a new domain to point to the ...
3
votes
0answers
12 views

'Named' slave the same as having forwarders?

I have a slave DNS server that dumped a bunch of... " error (unexpected RCODE REFUSED) resolving 'xxx.xxx.xxx.xxx.in-addr.arpa/PTR/IN'" messages all the sudden, and DNS lookups to the slave server ...
2
votes
1answer
1k views

How to configure a catch-all CNAME on Ubuntu Linux using BIND 9

I'm trying to set up APE server on my local system. I'm using Ubuntu and BIND and I need to set up a catch-all CNAME record. What would be required for this?
2
votes
1answer
393 views

Why are NS records needed in zone-files?

I installed BIND and I am aware that it is required to have at least two NS(Name Server) records in zone-file. This is true also for reverse-zone files. I understand that NS records point to ...
2
votes
1answer
85 views

Named serial increment SED oneliner

I need to increment named serial and I want to do it with sed. I've done it like this: echo 2015092315 | gsed s/20[0-9][0-9][0-9][0-9]*/`date +%Y%m%d%H`/g But then I realized that updates to zone ...
2
votes
1answer
244 views

Bind DNS A Record priority

I am working on 2 scenarios: Scenario 1: DNS A Record with 2 IPs [Default it works on Round Robin], but I am looking for option where if First IP not reachable then share 2nd IP. Scenario 2: DNS A ...
2
votes
1answer
45 views

rndc -k ddns.key status

rndc: unsupported algorithm: HMAC-MD5.SIG-ALG.REG.INT I've created a new key using this command: dnssec-keygen -a HMAC-MD5 -b 128 -r /dev/urandom -n USER DDNS_UPDATE I didn't found any way to ...
2
votes
1answer
934 views

Managing (Dynamic) DNS Zone Files with Puppet (Solved)

I'm running a Debian 7.0 (Wheezy) server and I have a dynamic DNS setup wherein my clients make DHCP requests and the DHCP server updates the DNS zone files with whatever IP was assigned to each ...
2
votes
1answer
5k views

bind9: client update denied

I've a bind9.7.3 running on Debian squeeze. I've configured a zone to accept dynamic update using a key: (I've replaced the key and the actual domain names ...) key "yme" { algorithm ...
2
votes
2answers
2k views

In a recursive dns query what happens ttl = 0?

in name resolution (current version of bind), what happens when a recursive answer reaches ttl 0 on the return trip?
2
votes
2answers
1k views

BIND server doesn't recognize my zone properly

I'm pretty new to BIND so I was hoping maybe someone can help me understand why I can't resolve. What is wrong? named.conf options { listen-on port 53 { localhost; 10.30.0.10; }; ...
2
votes
1answer
614 views

How to add another domain to my chrooted named server

Firstly I successfully have a domain working in a chroot named. There are files in /var/named/chroot/var/named called mydomain.com.db and named.local and named.root. Also in /var/named/chroot/etc ...
2
votes
1answer
182 views

Do rndc keys expire after a year?

Yesterday, I noticed an error in a bind zone file, and after correcting it, I tried to restart bind9, but the service refused to stop, displaying this error: rndc: connect failed: 127.0.0.1#953: ...
2
votes
2answers
515 views

How to increment serial number in bind9 dns zone

I have a dns zone, which has serial number: 2015040500 Today I am going to add some CNAME records there, so I am interested in how to increment serial number, I mean should I change it based on ...
2
votes
1answer
358 views

bind's path to 'named.pid' looks a bit weird after a not-so-smooth package installation

I had a fresh VPS hosting account running Ubuntu LTS (Lucid Lynx) with Plesk 10.2.0 (and etckeeper package) I used Plesk's web interface to install Plesk Health Monitor. It took two attempts because ...
2
votes
0answers
50 views

Split-horizon on DNSMasq?

Is it possible to perform Split-horizon with DNSMasq? I've googled and it seems like it is only possible with Bind9, any advice would be much appericated