BIND is the de facto standard DNS server

learn more… | top users | synonyms (1)

10
votes
1answer
10k views

How to let `named` (bind9) forward certain domains to a different nameserver?

In dnsmasq, it's possible to forward domains to different nameservers. How can I do that in named? server=/foo.com/10.0.10.1 server=/vpn.foo.com/8.8.8.8
10
votes
3answers
3k views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 www....
7
votes
1answer
11k views

“Fake” DNS for a single host

I am running a bind9 dns server at my home network, serving for all my internal servers in my domain local / 192.168.x.x - one of those, extweb.local 192.168.1.33 is also visible from the internet as ...
7
votes
3answers
971 views

Is it possible to execute scripts in BIND based on lookup

Is it possible, to set up BIND as DNS server on my local network, and make execute scripts when it gets a lookup? I would like to execute a Python or Bash script, based on the incoming DNS lookup, ...
5
votes
1answer
753 views

Setup of DNS zone with secure zone updates

How do I run a dns server with a zone for a local domain and be able to add dynamic entries to the dns zone securely from selected hosts? I have tried to setup a domain 'rag.local' with bind9. I have ...
5
votes
2answers
5k views

BIND9 as a DNS server refuses requests

I am trying to set up a DNS server on Amazon Linux using BIND9. It has to act as a master nameserver for a lot of domains. I have imported all of the DNS zone files using NamedManager (a web ...
4
votes
2answers
1k views

Unable to delete files to trash in a bind-mounted filesystem

I'm trying to set up shared home directory for two Linux installations and thus I'm using bind-mounts. My user is named dbz and his home directory is /home/dbz. I also have shared directory /home/...
4
votes
2answers
7k views

How can I reset or lower the serial used in BIND DNS server's “SOA” record?

I use BIND as my DNS server at home. For my SOA record (start of authority) I always use a serial in the recommended format YYYYMMDD## where ## is the counter for changes on that day. ...
4
votes
2answers
8k views

how can I add records to the zone file without restarting the named service?

I'm working on centos6.5 and bind9 and I have managed to add records to a DNS zone by doing this steps: creating the key: dnssec-keygen -a HMAC-MD5 -b 128 -n HOST example.com. editing conf. file:...
4
votes
2answers
529 views

Looking up a local domain name without specifying the local DNS server

I've set up a local domain name by creating a zone (by following the steps in this tutorial). Why I look the domain using dig, I get the right results when using the following command: dig debian....
4
votes
1answer
355 views

Large zone file for bind9 : ad-blocking

I was successfully using a small (20,000 entries) zone file with bind9 server, but today my data provider sent an update which caused the zone file to become 300,000+ entries large (30Mb+). The ...
4
votes
1answer
1k views

How can we make Squid do a reverse nslookup?

We all know that access.log file logs the access Info of Squid: 1286536351.746 41762 192.168.1.17 TCP_MISS/200 5340945 GET http://v15.lscache3.c.youtube.com/videoplayback? - DIRECT/122.160.120.150 ...
4
votes
1answer
477 views

Can you Chroot a program from an OpenVZ environment?

I just recently purchased a Virtual Private Server, and it is OpenVZ virtualization. I am setting up my LAMP stack, and in the past I have always just set up my BIND dns set up in a chrooted ...
4
votes
1answer
4k views

PID file /var/run/named/named.pid not readable (yet?) after start [duplicate]

Feb 24 15:54:34 ns1 named[20308]: all zones loaded Feb 24 15:54:34 ns1 named[20308]: running Feb 24 15:54:34 ns1 systemd[1]: PID file /var/run/named/named.pid not readable (yet?) after start. Feb 24 ...
4
votes
2answers
2k views

Socket connect to a ports bound to IP vs localhost

It is my understanding that sockets bound to ports using localhost will not be visible to the subnet because the binding is not with the nic IP address. Local processes connecting to such port will ...
4
votes
1answer
8k views

TCP buffers keep filling up (Recv-Q full): named unresponsive

Using netstat -an, I set the message that the Recv-Q is full. It is filling up to the rmem_max: Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address ...
4
votes
3answers
914 views

Unabled to get rid of BIND 9 chroot

I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under /...
4
votes
2answers
2k views

Creating a new TLD for private network

I want to setup a new TLD (foo.) for my the private network so that I can host some child domains which will be accessible from within the network. For this purpose I have setup a DNS server (172.16....
4
votes
0answers
205 views

Unable to view mounted directories in a chroot [closed]

Here is a quick description of what I have done: I have a chrooted user (username: clientdev) which I have jailed inside their home directory. This chroot directory is /home/clientdev/ which is ...
3
votes
3answers
260 views

How to host a website on personal computer

I want to start hosting my website at my own computer as well websites of my friends too (say mini hosting platform). I learned Debian, Bind9 and Apache for this purpose. On my system everything is ...
3
votes
1answer
560 views

What does the Bind bindkeys-file directive do?

Just trying to understand the bindkeys-file directive related to the DNSSEC extension in the Bind configuration. Is that a public key? Does it sign the response in the same way as digital signatures?
3
votes
1answer
200 views

Local DNS Server Refuses to Ask itself for DNS

I am running Debian 7 and have set up a DHCP and DNS server. Everything is working nicely, except for the server itself not following the DNS entries in BIND. The problem is that /etc/resolv.conf is ...
3
votes
2answers
2k views

I want to expose “easy” URL's for machines on a home network. Is custom DNS/BIND the answer?

I recently convinced my room mates to cut the cord and go cable free, and they've found it pretty great so far. I'm in the process of setting up a pretty sweet, mostly automated home theater setup ...
3
votes
1answer
1k views

Bind9 — How to find which programs are making which dns lookups?

Using bind9 on a laptop shows lots of nonsense domains when network connectivity is down: Oct 18 19:56:18 lap3 named[1536]: error (network unreachable) resolving './NS/IN': 128.63.2.53#53 Oct 18 19:...
3
votes
2answers
9k views

When to use BIND vs internal DNS for Samba 4 backend

The docs say, "Bind as DNS backend is recommended, if you plan setup a complexer DNS setup, than the Samba 4 internal DNS currently made possible." What exactly is the threshold for "a complexer DNS ...
3
votes
2answers
121 views

Bind9 denied query

I created a bind9 based DNS server to work only in forwarding mode: This is my named.conf.options file: #acl goodclients { # localhost; # localnets; #}; options { directory "...
3
votes
2answers
82 views

How to configure BIND for domain name with own nameservers?

I am using BIND 9.10.3_P2 to setup DNS records for domain speedydrive.net. The domain itself has glue records on parent servers with 2 IP addresses for NS servers. Everything looks fine except the ...
3
votes
2answers
424 views

How to return multiple DNS A records in a specific order using bind9?

I have a bind9 testing environment in Debian wheezy that I am trying to set up two A records that are returned in a fixed order. In my named.conf.options file I have the following configuration: ...
3
votes
1answer
903 views

Force local DNS resolution for external hosts

My Environment: *OS:* Angstrom Linux DNS: Bind Current Scenario: User connects to my private offline network. User tries to access google.com, and my box is on a private network therefore they ...
3
votes
2answers
682 views

$ORIGIN directive in IPv6 zone files

I have often seen similar BIND zone files: $ORIGIN 2.0.3.0.8.b.d.0.1.0.0.2.ip6.arpa. $TTL 604800 @ IN SOA ns1.example.org. hostmaster.example.org. ( 1978022513 ; Serial 10800 ...
3
votes
1answer
372 views

Configure BIND as Forwarder only (no root hints), encrypted + RPZ blacklist / whitelist all together

My setup is getting more complex, generally I tend to divide things in pieces and assemble them together by myself. But it seems this time I need more help to get the whole gears working together. ...
3
votes
1answer
200 views

Configure BIND to be a simple forwarder (no root-servers queries)

I would like to setup a simple bind server able to act as simple forwarder to the OpenDNS servers. I don't want my bind however being able to query the root servers, i want all the traffic go only to ...
3
votes
1answer
1k views

bind mounting and df output

I have a partition, /dev/sdb1, that gets mounted at /data. In /etc/fstab I have: /dev/sdb1 /data ext4 defaults 1 2 After that partition gets mounted, I then have the following ...
3
votes
1answer
671 views

Running my own dynamic DNS record hosting

I intend to run a debian server at home, it will host various websites, SSH server and email. I have a dynamic IP address and I am unwilling to pay the extra for a static IP. I was thinking I could ...
3
votes
1answer
1k views

Cannot install BIND dns with yum on Oracle Enterprise Linux 6.1

I am currently using Oracle Enterprise Linux 6.1 to use for Oracle RAC. However I am stuck at installing BIND (DNS Server) at the VM I've set up. I've used the following command: yum install ...
3
votes
1answer
788 views

One non-root user run jetty by port 512 which less that port1024

Customer asks us to create a non-root user to run our web system which bind port 512, less than 1024. When web server(jetty) runs, this is the exception: 2013-10-16 14:49:51.406:WARN::failed Server@...
3
votes
1answer
2k views

/var/named/chroot/var/named: device is busy

When I restart the named service, it gives me this error: ./etc/init.d/named restart Stopping named: [ OK ] Starting named: Error in named configuration:...
3
votes
1answer
102 views

Do I need a new zone for each domain I have on my server?

I currently have a working BIND nameserver Running on my dedicated ubuntu server box. I have one zone set up.. example.com with its own nameservers. If I want to add a new domain to point to the ...
3
votes
0answers
19 views

'Named' slave the same as having forwarders?

I have a slave DNS server that dumped a bunch of... " error (unexpected RCODE REFUSED) resolving 'xxx.xxx.xxx.xxx.in-addr.arpa/PTR/IN'" messages all the sudden, and DNS lookups to the slave server ...
2
votes
1answer
2k views

How to configure a catch-all CNAME on Ubuntu Linux using BIND 9

I'm trying to set up APE server on my local system. I'm using Ubuntu and BIND and I need to set up a catch-all CNAME record. What would be required for this?
2
votes
1answer
465 views

possible spots to configure BIND-DNS forwarders

i'm investigating our BIND's configuration and can not figure out how it is aware of it's next name server to ask for some domain he's not authorative server for... e.g. home domain is 'workgroup.lan'...
2
votes
2answers
84 views

Resolving hostname takes 5 seconds

I've a master bind9 DNS server and 2 slave servers running on IPv4 (Debian Jessie), using /etc/bind/named.conf: listen-on-v6 { none; }; When I try to connect from different server(s) each ...
2
votes
1answer
35 views

can't generate key via dnssec-keygen

$ dnssec-keygen -a HMAC-MD5 -b 512 -n HOST {host} above results in blank line and endless waiting $ dnssec-keygen -T DNSKEY -a HMAC-MD5 -b 512 -n HOST {host} the same entropy: $ cat /proc/...
2
votes
1answer
650 views

Why are NS records needed in zone-files?

I installed BIND and I am aware that it is required to have at least two NS(Name Server) records in zone-file. This is true also for reverse-zone files. I understand that NS records point to ...
2
votes
1answer
60 views

How to override TTL in a caching-only bind9?

I have a caching-only DNS here. I want it to override the TTL fields of its cached records to reduce the mean network latency. Ideally I could set the TTL somewhere in the configuration, which would ...
2
votes
1answer
167 views

Named serial increment SED oneliner

I need to increment named serial and I want to do it with sed. I've done it like this: echo 2015092315 | gsed s/20[0-9][0-9][0-9][0-9]*/`date +%Y%m%d%H`/g But then I realized that updates to zone ...
2
votes
1answer
428 views

Bind DNS A Record priority

I am working on 2 scenarios: Scenario 1: DNS A Record with 2 IPs [Default it works on Round Robin], but I am looking for option where if First IP not reachable then share 2nd IP. Scenario 2: DNS A ...
2
votes
1answer
51 views

rndc -k ddns.key status

rndc: unsupported algorithm: HMAC-MD5.SIG-ALG.REG.INT I've created a new key using this command: dnssec-keygen -a HMAC-MD5 -b 128 -r /dev/urandom -n USER DDNS_UPDATE I didn't found any way to ...
2
votes
1answer
7k views

how to update Records using nsupdate?

We know that we can update a record (its IP) by doing these steps: nsupdate server ns.bar44.com zone bar44.com update delete somehost.bar44.com. A update add somehost.bar44.com. 86400 A 10.10.10.1 ...
2
votes
1answer
982 views

Managing (Dynamic) DNS Zone Files with Puppet (Solved)

I'm running a Debian 7.0 (Wheezy) server and I have a dynamic DNS setup wherein my clients make DHCP requests and the DHCP server updates the DNS zone files with whatever IP was assigned to each ...