Questions tagged [bind9]
The bind9 tag has no usage guidance.
78
questions
0
votes
0
answers
22
views
RHEL6 BIND9 XML Statistics-channels build library modification after server is already up and running
Migrating away from BIND9 to Route53 and would prefer not to use the named.stats file for monitoring activity during the migration period. As such, I checked the current named.conf and verified no ...
0
votes
0
answers
11
views
Bind9 stops responding to queries every now and then
I am setting up a bind9 service and I am monitoring it with zabbix. I see that zabbix builds me such posts as in the picture. This actually translates to my query. What could be wrong, have any of you ...
0
votes
0
answers
57
views
Best practice to accept RPZ in Bind9
I am currently managing DNS servers using bind9. I have a Master server that serves as the control node for four slave servers and two authoritative servers.
I am interested in implementing remote ...
- 111
0
votes
0
answers
19
views
BIND9 reverse lookup not working
I wanted to setup my own DNS on lan. I managed to get working forward lookup but for some unknown reason reverse lookup is not working.
downloaded bind9
apt-get install bind9
/etc/bind/named.conf....
1
vote
1
answer
85
views
How do I get BIND (DNS) to be authoritative about a tld for more than a minute
I tried to block the .zip TLD on my laptop (running fedora 38) with bind.
Installing bind
Updating named.conf:
options {
listen-on port 53 { 127.0.0.1; };
listen-on-v6 port 53 { ::1; };
...
- 121
0
votes
0
answers
29
views
Bind9 use old file format for zones
with BIND version 9.8
how can I use the old format zone files?
example.com. IN NS ns1.example.com.
instead of the new one
$ORIGIN example. etc etc
thank you so much
- 201
0
votes
0
answers
180
views
How to setup a bind9 server for a private home network
My end goal is to setup a DNS server to use in the network 10.0.0.0/24, the network consists of a TP-Link home switch and a workstation running runtu(ubuntu)linux and a laptop connect to that switch, ...
- 1
1
vote
1
answer
77
views
Add another name to DNS server bind9
I set up a DNS server using the bind9 utility, took the settings from the example, and this is how the configuration turned out:
file: /etc/bind/named.conf.local
//
// Do any local configuration here
/...
- 172
0
votes
2
answers
2k
views
How to use DNS-over-TLS with BIND9 forwarders
BIND9 v9.18 improves support for DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH). However, while the docs explain how to use TLS for the server part, it does not reveal how to enable DNS-over-TLS for ...
- 103
0
votes
0
answers
46
views
Bind9 - Check DNS Propagation a lot has not been reachable
i have web and dns(bind9) server ubuntu one ip
Check DNS Propagation a lot has not been reachable:
https://dnschecker.org/#A/blogprice.ru
for sample manual test:
dig @208.67.222.220 blogprice.ru
;; ...
- 13
0
votes
0
answers
39
views
How Can Compile Bind9 on Debian
I am working on a dns configuration. I need to compile Bind 9. I am using Debian 11. I reviewed the documents and installed the necessary libraries, but not created "makefile". I am new to ...
- 1
0
votes
2
answers
199
views
Bind9 on PI with ipv6 reverse zone help needed
I have bind9 installed on a PI.
And tried to setup a simple ipv4 and ipv6 config.
For ipv4 forward and reverse lookups are working fine.
Also the forward lookups for ipv6 are looking good.
But i ...
0
votes
1
answer
106
views
How to reference another DNS entry from a primary zone ( BIND 9 )
I have two sub zones lets say:
zone "first.com" { type master; file "/etc/bind/zones/first.com.primary";};
zone "second.com" { ...
- 13
0
votes
1
answer
139
views
No "notify" category debug log entries anymore with Bind 9.11.3
On old server with Ubuntu 12 and Bind 9.8.1
I got the following "notify" category log entries as expected (domain names and IP addresses redacted):
27-Dec-2021 12:58:51.786 notify: debug 3: ...
- 31
0
votes
0
answers
53
views
Bind9 for Single Machine DNS Name Server and Host
I'm trying to set up Bind9 on a Debian 10 machine so that I can access it by using its domain name and am having difficulty in getting it to work. I'm sure I'm doing this wrong.
My IP Range is 192.168....
- 4,203
0
votes
1
answer
319
views
The bind9 forward zone more flexible than reverse zone file?
My local network is 192.168.0.1, but of course the cable modem is 192.168.100.1. In my local DNS server I can fudge a lookup for my private domain of 'dd.org', for example 'cable.dd.org' as 192.168....
- 49
3
votes
1
answer
3k
views
bind: forwarding zone does not work when allow-recursive not allowed
I have the following setup:
DNS-Server reachable from the internet, is authoritative for zone foo.com
DNS-Server reachable only locally, should be authoritative for zone test.lab.foo.com
What I try ...
- 201
1
vote
0
answers
36
views
Bind9 named Got recursion not available from 192.168.1.100, trying next server [duplicate]
I use a Raspberry PI as bind and dhcp server.
A strange thing happens to me…
On the clients, the resolv.conf looks like this:
# Generated by NetworkManager
search flab
nameserver 192.168.1.100
...
- 11
1
vote
0
answers
303
views
Configuration that has bind listening on 2 different ip addresses and resolving queries using response-policy
I have a requirement where I need to have a bind server listening on two different private ip addresses. Depending on the server address queried, a particular host entry gets returned.
Server has ...
- 11
0
votes
1
answer
2k
views
Reverse DNS Resolution Not Working After Installing Bind9 in Ubuntu Server
I installed DNS Server (bind9) in my ubuntu server and I am able to do name resolution from hostname to ip address using nslooup and dig; however when I try to do reverse lookups I get an error
...
- 109
3
votes
0
answers
424
views
How do you setup the catalog zone in BIND9?
I've been trying to setup a catalog zone in BIND9 so that way I do not have to manually update my slaves each time I add or remove a domain.
I asked this question and the answer would be to use the ...
- 2,707
0
votes
1
answer
3k
views
How do I list all the domain names that my BIND9 manages as a master?
I'm wondering whether there is a command I can run to get a complete list of the domain names that my BIND9 currently manages on my master DNS server.
Hypothetically, something such as:
named --list
...
- 2,707
1
vote
1
answer
394
views
Why Server is not able to resolve DNS
I setup DNS which will act as external DNS server. All settings are default , administrator told me to use Root hints file which is located under /var/named/named.ca. And root zone is mentioned in /...
- 4,178
0
votes
1
answer
2k
views
Forward reverse lookups with Bind9
I have a DNS server with Bind9 installed, that has IP 192.168.145.119. This works as a resolver for a DNS server on IP 192.168.145.1.
I have setup so it works as a forwarder when using ping, using ...
5
votes
1
answer
1k
views
why host from bind9-host is/was deprecated and when?
I was looking at bind9-host
shirish@debian:"04 Jan 2020 15:48:02" ~$ aptitude show bind9-host=1:9.11.5.P4+dfsg-5.1+b1
Package: bind9-host
Version: 1:9.11.5.P4+dfsg-5.1+b1
State:...
- 12k
0
votes
1
answer
627
views
How to add URI record to bind9 DNS zone?
I want to setup my Kerberos authentication using DNS lookups to define its servers. This can be done with URI records in the DNS database. There is given an example for KDC Discovery that looks like:
...
- 596
0
votes
1
answer
976
views
How to timeout for specific systemd unit?
Is there a way to change timeout for specific systemd unit? I'm okay with the default 90s, except for bind9; we serve tens of thousands of zones so bind9 needs a few minutes to start.
- 113
0
votes
2
answers
7k
views
bind9 named-checkzone failing with SOA record not at top of zone
I set up bind9 perfectly a year ago but neglected to document exactly what I done, and now something has changed and I am struggling to fix it. The problem manifested itself first from the DHCP ...
- 133
1
vote
1
answer
789
views
hostname failing to resolve in CentOS 7
I have a DNS server configured but the hostname is failing to resolve. I keep getting these error when running host:
[root@ns1 ~]# host hostname
Host hostname not found: 5(REFUSED)
And I also get ...
- 11
2
votes
1
answer
7k
views
bind9 - timed out resolving
I have a bind9 server spun up on one of my old test test boxes, and it's close. Everything appears to be working, however I'm getting 'time out resolving' errors spamming my sys.log from what appears ...
5
votes
1
answer
4k
views
How to generate TSIG key for certbot plugin 'certbot-dns-rfc2136'
I'm configuring BIND9 to obtain a wildcard certificate from Let's Encrypt.
When I try to generate TSIG key according to instruction here, I got the following error:
# dnssec-keygen -a HMAC-SHA512 -b ...
- 241
0
votes
2
answers
1k
views
Bind9 shared libraries: libbind vs libdns?
There are two packages libbind and libdns packaged by Debian, they're both described as,
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most ...
- 28.9k
2
votes
1
answer
533
views
Forward DNS requests for a zone except one record?
I've got a domain name and hosting web content with a provider, so have for example server.example.com hosted in the cloud. The provider also manage my DNS.
Now I would like to run nextcloud on my ...
- 21
1
vote
2
answers
5k
views
BIND9 DNS zone file check reveals "ignoring out-of-zone data"
I am running a DNS and DCHP service on a local server (Raspberry on Stretch).
When checking the zone files, I get:
# [2019-02-03 10:32] maxg@rpiserver /etc/bind/zones $
named-checkzone rpiserver ...
- 403
1
vote
1
answer
65
views
There is any difference between this zone syntax?
I'd like to build bind zone files via Ansible. To decide how to structure the jinja2 template I need to know if there is any difference in any of these zone configurations:
1.) good old fashioned way:...
- 61
-1
votes
1
answer
150
views
How to forbid my PC in LAN to make DNS queries? (in a PC -> VPN gateway scenario)
scenario: i have 2 pc's that are connected to each other over ethernet in a lan and one of the pc's is configured as a gateway that tunnels the traffic of the other pc over to a vpn service. ...
0
votes
0
answers
3k
views
Bind - Configure different Forwarders only for Specific Domains CDNs (eg. Wetransfer, Cloudflare, Amazon AWS)
INTRO
I've setup a linux box where there's a BIND that serves me as a local dns.
Basically by taking advantage of RPZ I can restrict some hosts and at same time with DNSCRYPT I forward everything to ...
- 2,714
1
vote
1
answer
1k
views
Can't get authoritative DNS server working (BIND9)
I'm trying to make a BIND9 DNS server work on a Debian server for an assignment at school. The problem is that, when I try to test my DNS server with dig -t soa my.domain.com @ns.my.domain.com, I just ...
- 171
0
votes
1
answer
1k
views
DHCP DNS and Domain resolution NetworkManager
My environment is following, all cabled with gigalan, all latest Debian 9, vm with virtualbox on 2 different physical hosts.
A mikrotik internet router which acts as DHCPD
I configured it setting ...
- 1,569
0
votes
1
answer
2k
views
How to route specific client's traffic to VPN (PPTP)?
The setup:
I have a server set up as a DHCP (isc-dhcp-server) and DNS (bind9) server (acting as a router).
It connects to the internet via pppoe (ppp0) using eth0 device.
The eth1 is connected to a ...
- 3
0
votes
1
answer
1k
views
Is it a best practice to have both Bind and DNSMasq which is running on port 53?
I installed Bind on CentOS7 and noticed that the DNSMasq which is already installed & running on the same port 53 where Bind runs. Looks like DNSMasq is default package comes up with CentOS.
...
- 1
-2
votes
1
answer
2k
views
How to configure bind9 to iteratively resolve recursive requests, starting with a dns root server?
I would like to know how to configure bind9 to resolve all DNS requests given to it iteratively starting with a root server.
My goal with this is to set up bind9 as a dns resolver in my local ...
- 89
0
votes
1
answer
825
views
Host command successful but DNS won't resolve
I'm trying to complete the setup of my Bind9 DNS server.
Both Systems are running Debian Stretch. The serving machine (192.168.0.113) is a VM host and the client machine (192.168.0.104) is its ...
- 103
0
votes
1
answer
1k
views
Samba integration with existing OpenLDAP, MIT Kerberos and Bind9 services
I have a network domain running OpenLDAP, MIT Kerberos and Bind9. Now I want to enable some MS Windows hosts access to a NAS, in such a way that user credentials stay in my LDAP and Kerberos ...
2
votes
1
answer
817
views
Can I exclude some clients from BIND query logging?
We have some BIND DNS servers we are thinking of shutting down.
I turned on query logging to see which clients are contacting these servers. The vast majority of entries are from three known culprits....
- 287
1
vote
0
answers
768
views
Samba4 Bind9 dynamic DNS Update Error GSS failure
I try to register my DHCP Clients to my Samba 4 based domain controller (DC). For this I followed the guide Configure DHCP to update DNS records with BIND9.
I've searched around the internet without ...
- 11
0
votes
1
answer
1k
views
bind9 reverse resolve problem
i use bind for simple setup on my lan, just a cache for external domanin and the LAN internal resolver, the problem that the output of the reverse resolver is wrong, it should return only the domain ...
0
votes
1
answer
2k
views
Bind 9 logging is not working
I am using RHEL 6.5 server for Master DNS server. And using BIND 9.8.
All are working fine. But customized logging is not working.
Here is my configuration file-
logging {
channel general_file {
...
- 131
1
vote
0
answers
646
views
How do I view the DDNS leases from BIND9 and DHCP server?
How do I view the DDNS leases from BIND9 and DHCP server?
I have set up isc-dhcp-server updating leases with a fixed IP address from /etc/dhcp/dhcpd.conf to BIND9 zone and reverse zone.
This command ...
- 129
1
vote
1
answer
11k
views
named-checkzone displays “ignoring out-of-zone” data
I came across a strange problem. Maybe someone knows the answer. I use named-checkzone to check my zone file.
The following zone file will display ignoring out-of-zone data when I use fully qualified ...
- 201