BIND is the de facto standard DNS server

learn more… | top users | synonyms (1)

9
votes
2answers
2k views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 ...
7
votes
1answer
7k views

“Fake” DNS for a single host

I am running a bind9 dns server at my home network, serving for all my internal servers in my domain local / 192.168.x.x - one of those, extweb.local 192.168.1.33 is also visible from the internet as ...
7
votes
1answer
5k views

How to let `named` (bind9) forward certain domains to a different nameserver?

In dnsmasq, it's possible to forward domains to different nameservers. How can I do that in named? server=/foo.com/10.0.10.1 server=/vpn.foo.com/8.8.8.8
7
votes
3answers
721 views

Is it possible to execute scripts in BIND based on lookup

Is it possible, to set up BIND as DNS server on my local network, and make execute scripts when it gets a lookup? I would like to execute a Python or Bash script, based on the incoming DNS lookup, ...
5
votes
1answer
614 views

Setup of DNS zone with secure zone updates

How do I run a dns server with a zone for a local domain and be able to add dynamic entries to the dns zone securely from selected hosts? I have tried to setup a domain 'rag.local' with bind9. I have ...
4
votes
2answers
763 views

Unable to delete files to trash in a bind-mounted filesystem

I'm trying to set up shared home directory for two Linux installations and thus I'm using bind-mounts. My user is named dbz and his home directory is /home/dbz. I also have shared directory ...
4
votes
1answer
570 views

How can we make Squid do a reverse nslookup?

We all know that access.log file logs the access Info of Squid: 1286536351.746 41762 192.168.1.17 TCP_MISS/200 5340945 GET http://v15.lscache3.c.youtube.com/videoplayback? - DIRECT/122.160.120.150 ...
4
votes
1answer
413 views

Can you Chroot a program from an OpenVZ environment?

I just recently purchased a Virtual Private Server, and it is OpenVZ virtualization. I am setting up my LAMP stack, and in the past I have always just set up my BIND dns set up in a chrooted ...
4
votes
2answers
2k views

Socket connect to a ports bound to IP vs localhost

It is my understanding that sockets bound to ports using localhost will not be visible to the subnet because the binding is not with the nic IP address. Local processes connecting to such port will ...
4
votes
1answer
5k views

TCP buffers keep filling up (Recv-Q full): named unresponsive

Using netstat -an, I set the message that the Recv-Q is full. It is filling up to the rmem_max: Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address ...
4
votes
3answers
759 views

Unabled to get rid of BIND 9 chroot

I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under ...
4
votes
2answers
3k views

BIND9 as a DNS server refuses requests

I am trying to set up a DNS server on Amazon Linux using BIND9. It has to act as a master nameserver for a lot of domains. I have imported all of the DNS zone files using NamedManager (a web ...
4
votes
2answers
2k views

Creating a new TLD for private network

I want to setup a new TLD (foo.) for my the private network so that I can host some child domains which will be accessible from within the network. For this purpose I have setup a DNS server ...
4
votes
0answers
164 views

Unable to view mounted directories in a chroot [closed]

Here is a quick description of what I have done: I have a chrooted user (username: clientdev) which I have jailed inside their home directory. This chroot directory is /home/clientdev/ which is ...
3
votes
2answers
236 views

How to host a website on personal computer

I want to start hosting my website at my own computer as well websites of my friends too (say mini hosting platform). I learned Debian, Bind9 and Apache for this purpose. On my system everything is ...
3
votes
1answer
230 views

What does the Bind bindkeys-file directive do?

Just trying to understand the bindkeys-file directive related to the DNSSEC extension in the Bind configuration. Is that a public key? Does it sign the response in the same way as digital signatures?
3
votes
2answers
5k views

How can I reset or lower the serial used in BIND DNS server's “SOA” record?

I use BIND as my DNS server at home. For my SOA record (start of authority) I always use a serial in the recommended format YYYYMMDD## where ## is the counter for changes on that day. ...
3
votes
1answer
173 views

Local DNS Server Refuses to Ask itself for DNS

I am running Debian 7 and have set up a DHCP and DNS server. Everything is working nicely, except for the server itself not following the DNS entries in BIND. The problem is that /etc/resolv.conf is ...
3
votes
2answers
1k views

I want to expose “easy” URL's for machines on a home network. Is custom DNS/BIND the answer?

I recently convinced my room mates to cut the cord and go cable free, and they've found it pretty great so far. I'm in the process of setting up a pretty sweet, mostly automated home theater setup ...
3
votes
2answers
4k views

how can I add records to the zone file without restarting the named service?

I'm working on centos6.5 and bind9 and I have managed to add records to a DNS zone by doing this steps: creating the key: dnssec-keygen -a HMAC-MD5 -b 128 -n HOST example.com. editing conf. ...
3
votes
1answer
705 views

Bind9 — How to find which programs are making which dns lookups?

Using bind9 on a laptop shows lots of nonsense domains when network connectivity is down: Oct 18 19:56:18 lap3 named[1536]: error (network unreachable) resolving './NS/IN': 128.63.2.53#53 Oct 18 ...
3
votes
2answers
7k views

When to use BIND vs internal DNS for Samba 4 backend

The docs say, "Bind as DNS backend is recommended, if you plan setup a complexer DNS setup, than the Samba 4 internal DNS currently made possible." What exactly is the threshold for "a complexer DNS ...
3
votes
2answers
83 views

How to return multiple DNS A records in a specific order using bind9?

I have a bind9 testing environment in Debian wheezy that I am trying to set up two A records that are returned in a fixed order. In my named.conf.options file I have the following configuration: ...
3
votes
1answer
668 views

Force local DNS resolution for external hosts

My Environment: *OS:* Angstrom Linux DNS: Bind Current Scenario: User connects to my private offline network. User tries to access google.com, and my box is on a private network therefore they ...
3
votes
2answers
494 views

$ORIGIN directive in IPv6 zone files

I have often seen similar BIND zone files: $ORIGIN 2.0.3.0.8.b.d.0.1.0.0.2.ip6.arpa. $TTL 604800 @ IN SOA ns1.example.org. hostmaster.example.org. ( 1978022513 ; Serial 10800 ...
3
votes
2answers
353 views

Looking up a local domain name without specifying the local DNS server

I've set up a local domain name by creating a zone (by following the steps in this tutorial). Why I look the domain using dig, I get the right results when using the following command: dig ...
3
votes
1answer
387 views

Running my own dynamic DNS record hosting

I intend to run a debian server at home, it will host various websites, SSH server and email. I have a dynamic IP address and I am unwilling to pay the extra for a static IP. I was thinking I could ...
3
votes
1answer
2k views

PID file /var/run/named/named.pid not readable (yet?) after start [duplicate]

Feb 24 15:54:34 ns1 named[20308]: all zones loaded Feb 24 15:54:34 ns1 named[20308]: running Feb 24 15:54:34 ns1 systemd[1]: PID file /var/run/named/named.pid not readable (yet?) after start. Feb 24 ...
3
votes
1answer
600 views

One non-root user run jetty by port 512 which less that port1024

Customer asks us to create a non-root user to run our web system which bind port 512, less than 1024. When web server(jetty) runs, this is the exception: 2013-10-16 14:49:51.406:WARN::failed ...
3
votes
1answer
436 views

bind mounting and df output

I have a partition, /dev/sdb1, that gets mounted at /data. In /etc/fstab I have: /dev/sdb1 /data ext4 defaults 1 2 After that partition gets mounted, I then have the following ...
3
votes
1answer
1k views

/var/named/chroot/var/named: device is busy

When I restart the named service, it gives me this error: ./etc/init.d/named restart Stopping named: [ OK ] Starting named: Error in named ...
3
votes
1answer
98 views

Do I need a new zone for each domain I have on my server?

I currently have a working BIND nameserver Running on my dedicated ubuntu server box. I have one zone set up.. example.com with its own nameservers. If I want to add a new domain to point to the ...
2
votes
1answer
1k views

How to configure a catch-all CNAME on Ubuntu Linux using BIND 9

I'm trying to set up APE server on my local system. I'm using Ubuntu and BIND and I need to set up a catch-all CNAME record. What would be required for this?
2
votes
1answer
195 views

Why are NS records needed in zone-files?

I installed BIND and I am aware that it is required to have at least two NS(Name Server) records in zone-file. This is true also for reverse-zone files. I understand that NS records point to ...
2
votes
1answer
86 views

Bind DNS A Record priority

I am working on 2 scenarios: Scenario 1: DNS A Record with 2 IPs [Default it works on Round Robin], but I am looking for option where if First IP not reachable then share 2nd IP. Scenario 2: DNS A ...
2
votes
1answer
31 views

rndc -k ddns.key status

rndc: unsupported algorithm: HMAC-MD5.SIG-ALG.REG.INT I've created a new key using this command: dnssec-keygen -a HMAC-MD5 -b 128 -r /dev/urandom -n USER DDNS_UPDATE I didn't found any way to ...
2
votes
1answer
830 views

Managing (Dynamic) DNS Zone Files with Puppet (Solved)

I'm running a Debian 7.0 (Wheezy) server and I have a dynamic DNS setup wherein my clients make DHCP requests and the DHCP server updates the DNS zone files with whatever IP was assigned to each ...
2
votes
2answers
1k views

In a recursive dns query what happens ttl = 0?

in name resolution (current version of bind), what happens when a recursive answer reaches ttl 0 on the return trip?
2
votes
2answers
1k views

BIND server doesn't recognize my zone properly

I'm pretty new to BIND so I was hoping maybe someone can help me understand why I can't resolve. What is wrong? named.conf options { listen-on port 53 { localhost; 10.30.0.10; }; ...
2
votes
1answer
490 views

How to add another domain to my chrooted named server

Firstly I successfully have a domain working in a chroot named. There are files in /var/named/chroot/var/named called mydomain.com.db and named.local and named.root. Also in /var/named/chroot/etc ...
2
votes
1answer
176 views

Do rndc keys expire after a year?

Yesterday, I noticed an error in a bind zone file, and after correcting it, I tried to restart bind9, but the service refused to stop, displaying this error: rndc: connect failed: 127.0.0.1#953: ...
2
votes
1answer
905 views

Cannot install BIND dns with yum on Oracle Enterprise Linux 6.1

I am currently using Oracle Enterprise Linux 6.1 to use for Oracle RAC. However I am stuck at installing BIND (DNS Server) at the VM I've set up. I've used the following command: yum install ...
2
votes
1answer
334 views

bind's path to 'named.pid' looks a bit weird after a not-so-smooth package installation

I had a fresh VPS hosting account running Ubuntu LTS (Lucid Lynx) with Plesk 10.2.0 (and etckeeper package) I used Plesk's web interface to install Plesk Health Monitor. It took two attempts because ...
2
votes
0answers
16 views

Is it possible to mix zones with DNSSEC enabled and disabled in BIND?

I have a dozen domains configured in a set of zones in BIND and I need to add a new one with DNSSEC enabled. If I enable DNSSEC: options { dnssec-enable yes; dnssec-validation yes; }; Will ...
2
votes
0answers
22 views

Bind a directory as me

Analogous for a regular user running a thin FTP server (where others can access the file system with his/her permissions), can a regular user (through fuse maybe) "mount" a directory for others to use ...
2
votes
0answers
112 views

Server-side move between NFS shares

I have these folders on my server: /share1 /home/user Both are actually on the same partition. Now I want to be able to move files between these two folders directly on the server (without any data ...
2
votes
2answers
63 views

How to change /var partition online?

I have a Linux server with /var in XFS and I want to change to EXT4. There is enough space in /home, so I can backup all files in /var. Is there a way to do it while the system in running ? I think ...
2
votes
1answer
228 views

zone delegation in Bind

I have a lot of zones defined in my DNS server. I need to delegate one particular zone to a foreign DNS server and I don't have access to my domain-registrar control panel, currently. Is there a way ...
2
votes
0answers
447 views

How to bind ppp0 interface (PPTP VPN) as 'external' in proxy server?

I'm trying to bind ppp0 interface (PPTP VPN) as 'external' interface in proxy server (Tinyproxy). Unfortunately it does not work. Using route add -net default gw 10.9.0.1 I can make all the traffic ...
2
votes
2answers
628 views

How to configure dhcpd to register ipv4 with bind while having static ipv6 addresses?

I have IPv6 configured on my local network via radvd; it advertises a routable IPv6 block, that all the machines auto-configure.s I have IPv4 assigned to a NAT'd block via dhcpd and that updates ...