Questions tagged [bind9]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
16 views

How to reference another DNS entry from a primary zone ( BIND 9 )

I have two sub zones lets say: zone "first.com" { type master; file "/etc/bind/zones/first.com.primary";}; zone "second.com" { ...
user avatar
  • 13
0 votes
1 answer
34 views

No "notify" category debug log entries anymore with Bind 9.11.3

On old server with Ubuntu 12 and Bind 9.8.1 I got the following "notify" category log entries as expected (domain names and IP addresses redacted): 27-Dec-2021 12:58:51.786 notify: debug 3: ...
user avatar
  • 31
0 votes
0 answers
20 views

Dont ignore out-of-zone data

Small example: undefine@undefine-ThinkPad-T470p:~/tmp$ cat test1.zone test1. 3600 IN SOA ns0.test.com. hostmaster.test1.local. 1 900 600 86400 3600 test1. 3600 IN NS ns0....
user avatar
  • 1,250
0 votes
0 answers
60 views

Docker Bind9 Unable To Resolve From Outside Container

I’m trying to move a Bind9 configuration into a Docker Container. The Docker Container is primarily running Bind9 and Apache2 (just to test). Both in a single container with Supervisor. The Apache2 ...
user avatar
0 votes
0 answers
29 views

Bind9 for Single Machine DNS Name Server and Host

I'm trying to set up Bind9 on a Debian 10 machine so that I can access it by using its domain name and am having difficulty in getting it to work. I'm sure I'm doing this wrong. My IP Range is 192.168....
user avatar
0 votes
1 answer
35 views

The bind9 forward zone more flexible than reverse zone file?

My local network is 192.168.0.1, but of course the cable modem is 192.168.100.1. In my local DNS server I can fudge a lookup for my private domain of 'dd.org', for example 'cable.dd.org' as 192.168....
user avatar
1 vote
1 answer
1k views

bind: forwarding zone does not work when allow-recursive not allowed

I have the following setup: DNS-Server reachable from the internet, is authoritative for zone foo.com DNS-Server reachable only locally, should be authoritative for zone test.lab.foo.com What I try ...
user avatar
  • 181
1 vote
0 answers
34 views

Bind9 named Got recursion not available from 192.168.1.100, trying next server [duplicate]

I use a Raspberry PI as bind and dhcp server. A strange thing happens to me… On the clients, the resolv.conf looks like this: # Generated by NetworkManager search flab nameserver 192.168.1.100 ...
user avatar
1 vote
0 answers
53 views

Configuration that has bind listening on 2 different ip addresses and resolving queries using response-policy

I have a requirement where I need to have a bind server listening on two different private ip addresses. Depending on the server address queried, a particular host entry gets returned. Server has ...
user avatar
  • 11
-1 votes
1 answer
908 views

Reverse DNS Resolution Not Working After Installing Bind9 in Ubuntu Server

I installed DNS Server (bind9) in my ubuntu server and I am able to do name resolution from hostname to ip address using nslooup and dig; however when I try to do reverse lookups I get an error ...
user avatar
  • 99
3 votes
0 answers
285 views

How do you setup the catalog zone in BIND9?

I've been trying to setup a catalog zone in BIND9 so that way I do not have to manually update my slaves each time I add or remove a domain. I asked this question and the answer would be to use the ...
user avatar
  • 2,305
0 votes
1 answer
1k views

How do I list all the domain names that my BIND9 manages as a master?

I'm wondering whether there is a command I can run to get a complete list of the domain names that my BIND9 currently manages on my master DNS server. Hypothetically, something such as: named --list ...
user avatar
  • 2,305
1 vote
1 answer
285 views

Why Server is not able to resolve DNS

I setup DNS which will act as external DNS server. All settings are default , administrator told me to use Root hints file which is located under /var/named/named.ca. And root zone is mentioned in /...
user avatar
  • 3,834
0 votes
1 answer
1k views

Forward reverse lookups with Bind9

I have a DNS server with Bind9 installed, that has IP 192.168.145.119. This works as a resolver for a DNS server on IP 192.168.145.1. I have setup so it works as a forwarder when using ping, using ...
user avatar
5 votes
1 answer
899 views

why host from bind9-host is/was deprecated and when?

I was looking at bind9-host shirish@debian:"04 Jan 2020 15:48:02" ~$ aptitude show bind9-host=1:9.11.5.P4+dfsg-5.1+b1 Package: bind9-host Version: 1:9.11.5.P4+dfsg-5.1+b1 State:...
user avatar
  • 10.7k
0 votes
1 answer
265 views

How to add URI record to bind9 DNS zone?

I want to setup my Kerberos authentication using DNS lookups to define its servers. This can be done with URI records in the DNS database. There is given an example for KDC Discovery that looks like: ...
user avatar
  • 496
0 votes
1 answer
303 views

How to timeout for specific systemd unit?

Is there a way to change timeout for specific systemd unit? I'm okay with the default 90s, except for bind9; we serve tens of thousands of zones so bind9 needs a few minutes to start.
user avatar
0 votes
2 answers
5k views

bind9 named-checkzone failing with SOA record not at top of zone

I set up bind9 perfectly a year ago but neglected to document exactly what I done, and now something has changed and I am struggling to fix it. The problem manifested itself first from the DHCP ...
user avatar
  • 133
1 vote
1 answer
306 views

hostname failing to resolve in CentOS 7

I have a DNS server configured but the hostname is failing to resolve. I keep getting these error when running host: [root@ns1 ~]# host hostname Host hostname not found: 5(REFUSED) And I also get ...
user avatar
2 votes
1 answer
3k views

bind9 - timed out resolving

I have a bind9 server spun up on one of my old test test boxes, and it's close. Everything appears to be working, however I'm getting 'time out resolving' errors spamming my sys.log from what appears ...
user avatar
4 votes
1 answer
2k views

How to generate TSIG key for certbot plugin 'certbot-dns-rfc2136'

I'm configuring BIND9 to obtain a wildcard certificate from Let's Encrypt. When I try to generate TSIG key according to instruction here, I got the following error: # dnssec-keygen -a HMAC-SHA512 -b ...
user avatar
0 votes
2 answers
734 views

Bind9 shared libraries: libbind vs libdns?

There are two packages libbind and libdns packaged by Debian, they're both described as, The Berkeley Internet Name Domain (BIND) implements an Internet domain name server. BIND is the most ...
user avatar
  • 22.4k
2 votes
1 answer
349 views

Forward DNS requests for a zone except one record?

I've got a domain name and hosting web content with a provider, so have for example server.example.com hosted in the cloud. The provider also manage my DNS. Now I would like to run nextcloud on my ...
user avatar
1 vote
2 answers
3k views

BIND9 DNS zone file check reveals "ignoring out-of-zone data"

I am running a DNS and DCHP service on a local server (Raspberry on Stretch). When checking the zone files, I get: # [2019-02-03 10:32] maxg@rpiserver /etc/bind/zones $ named-checkzone rpiserver ...
user avatar
  • 383
1 vote
1 answer
28 views

There is any difference between this zone syntax?

I'd like to build bind zone files via Ansible. To decide how to structure the jinja2 template I need to know if there is any difference in any of these zone configurations: 1.) good old fashioned way:...
user avatar
-1 votes
1 answer
130 views

How to forbid my PC in LAN to make DNS queries? (in a PC -> VPN gateway scenario)

scenario: i have 2 pc's that are connected to each other over ethernet in a lan and one of the pc's is configured as a gateway that tunnels the traffic of the other pc over to a vpn service. ...
user avatar
0 votes
0 answers
2k views

Bind - Configure different Forwarders only for Specific Domains CDNs (eg. Wetransfer, Cloudflare, Amazon AWS)

INTRO I've setup a linux box where there's a BIND that serves me as a local dns. Basically by taking advantage of RPZ I can restrict some hosts and at same time with DNSCRYPT I forward everything to ...
user avatar
  • 2,434
1 vote
1 answer
869 views

Can't get authoritative DNS server working (BIND9)

I'm trying to make a BIND9 DNS server work on a Debian server for an assignment at school. The problem is that, when I try to test my DNS server with dig -t soa my.domain.com @ns.my.domain.com, I just ...
user avatar
  • 171
0 votes
1 answer
860 views

DHCP DNS and Domain resolution NetworkManager

My environment is following, all cabled with gigalan, all latest Debian 9, vm with virtualbox on 2 different physical hosts. A mikrotik internet router which acts as DHCPD I configured it setting ...
user avatar
0 votes
1 answer
2k views

How to route specific client's traffic to VPN (PPTP)?

The setup: I have a server set up as a DHCP (isc-dhcp-server) and DNS (bind9) server (acting as a router). It connects to the internet via pppoe (ppp0) using eth0 device. The eth1 is connected to a ...
user avatar
  • 3
0 votes
1 answer
934 views

Is it a best practice to have both Bind and DNSMasq which is running on port 53?

I installed Bind on CentOS7 and noticed that the DNSMasq which is already installed & running on the same port 53 where Bind runs. Looks like DNSMasq is default package comes up with CentOS. ...
user avatar
  • 1
-2 votes
1 answer
2k views

How to configure bind9 to iteratively resolve recursive requests, starting with a dns root server?

I would like to know how to configure bind9 to resolve all DNS requests given to it iteratively starting with a root server. My goal with this is to set up bind9 as a dns resolver in my local ...
user avatar
0 votes
1 answer
676 views

Host command successful but DNS won't resolve

I'm trying to complete the setup of my Bind9 DNS server. Both Systems are running Debian Stretch. The serving machine (192.168.0.113) is a VM host and the client machine (192.168.0.104) is its ...
user avatar
0 votes
1 answer
953 views

Samba integration with existing OpenLDAP, MIT Kerberos and Bind9 services

I have a network domain running OpenLDAP, MIT Kerberos and Bind9. Now I want to enable some MS Windows hosts access to a NAS, in such a way that user credentials stay in my LDAP and Kerberos ...
user avatar
2 votes
1 answer
493 views

Can I exclude some clients from BIND query logging?

We have some BIND DNS servers we are thinking of shutting down. I turned on query logging to see which clients are contacting these servers. The vast majority of entries are from three known culprits....
user avatar
1 vote
0 answers
632 views

Samba4 Bind9 dynamic DNS Update Error GSS failure

I try to register my DHCP Clients to my Samba 4 based domain controller (DC). For this I followed the guide Configure DHCP to update DNS records with BIND9. I've searched around the internet without ...
user avatar
0 votes
1 answer
878 views

bind9 reverse resolve problem

i use bind for simple setup on my lan, just a cache for external domanin and the LAN internal resolver, the problem that the output of the reverse resolver is wrong, it should return only the domain ...
user avatar
0 votes
1 answer
2k views

Bind 9 logging is not working

I am using RHEL 6.5 server for Master DNS server. And using BIND 9.8. All are working fine. But customized logging is not working. Here is my configuration file- logging { channel general_file { ...
user avatar
  • 131
0 votes
0 answers
3k views

Configuring a dns server and client in Ubuntu

I have configured the following two ubuntu 16.04 machines: dns client: 192.168.248.190 dns server (bind9): 192.168.242.116 I basically followed this and only setup the forward zone file https://www....
user avatar
  • 181
1 vote
0 answers
415 views

How do I view the DDNS leases from BIND9 and DHCP server?

How do I view the DDNS leases from BIND9 and DHCP server? I have set up isc-dhcp-server updating leases with a fixed IP address from /etc/dhcp/dhcpd.conf to BIND9 zone and reverse zone. This command ...
user avatar
  • 129
1 vote
1 answer
9k views

named-checkzone displays “ignoring out-of-zone” data

I came across a strange problem. Maybe someone knows the answer. I use named-checkzone to check my zone file. The following zone file will display ignoring out-of-zone data when I use fully qualified ...
user avatar
  • 171
0 votes
1 answer
1k views

Bind9 Reverse Zone Replication Error

I have 2 DNS Servers in my testing environment: Centos 7 x64 VM - running BIND 9.9.4-RedHat-9.9.4-50.el7_3.1 PRIMARY DNS Raspbian GNU/Linux 8 Jessie- running BIND 9.9.5-9+deb8u12-Raspbian - ...
user avatar
  • 3
0 votes
2 answers
57 views

Problem with Bind9 initial configuration

I´m new using Bind 9. I have follow a tutorial on web, and i dont know why its not working.... i have configured this files: named.conf.local : // // Do any local configuration here // // Consider ...
user avatar
  • 101
2 votes
1 answer
196 views

Prevent resolvconf package assign localhost if named bind9/dnsmasq is found on host

Resolvconf is a package born to handle different specific situations like lans with dhcp, vpn, and other situation where everyone try to change manually the /etc/resolv.conf file. It has an algorithm ...
user avatar
  • 2,434
1 vote
1 answer
3k views

ISC DHCP Server doesn't handout dns servers to clients [closed]

Yesterday I setup a isc dhcp server on a raspberry pi together with a dns bind server. Now the problem is, that the dhcp server doesn't hand out the dns server to the clients but if I manually ...
user avatar
1 vote
0 answers
493 views

Are these BIND update forwarding errors safe to ignore?

I recently replaced my CentOS 5 authoritative BIND servers with CentOS 7. Everything is working fine, but my logs show some weirdness. I use a hidden master and my primary and secondary name servers ...
user avatar
  • 243
0 votes
1 answer
143 views

configure same domain name as external in bind

I want to configure local domain zone in bind9 like "example.com" for local lan to add some hosts only. but if I configure that I am unable to connect to "example.com" which is public registered ...
user avatar
  • 101
1 vote
0 answers
601 views

Bind9 not forwarding DNS

I want to use bind9 to redirect a subdomain.domain.com to my ip or server, I tried doing this in named.conf zone "subdomain.domain.com" { type forward; forward only; forwarders { 192.168....
user avatar
2 votes
2 answers
2k views

How to set use tor DNS as the default DNS? [duplicate]

I want to have all DNS queries passing through tor. How to set my default DNS to go through tor? In other word I want to use the IP given by tor-resolve google.com instead of dig google.com.
user avatar
4 votes
1 answer
4k views

What is the difference between localhost and localnets in named configuration

Reading about acl statement in bind's ARM found the following: localnets: "Matches any host on an IPv4 or IPv6 network for which the system has an interface. When addresses are added or removed, the ...
user avatar
  • 337