Questions tagged [bind]

BIND is the de facto standard DNS server

Filter by
Sorted by
Tagged with
3
votes
2answers
1k views

$ORIGIN directive in IPv6 zone files

I have often seen similar BIND zone files: $ORIGIN 2.0.3.0.8.b.d.0.1.0.0.2.ip6.arpa. $TTL 604800 @ IN SOA ns1.example.org. hostmaster.example.org. ( 1978022513 ; Serial 10800 ...
3
votes
2answers
495 views

How to configure BIND for domain name with own nameservers?

I am using BIND 9.10.3_P2 to setup DNS records for domain speedydrive.net. The domain itself has glue records on parent servers with 2 IP addresses for NS servers. Everything looks fine except the ...
3
votes
2answers
1k views

Running my own dynamic DNS record hosting

I intend to run a debian server at home, it will host various websites, SSH server and email. I have a dynamic IP address and I am unwilling to pay the extra for a static IP. I was thinking I could ...
3
votes
1answer
23k views

How can I use CNAME in Bind properly?

I'm new to Bind/DNS and want to point/map SMTP, webmail and IMAP to my domain but a check in nslookup is failing. How can I nslookup SMTP this way? The error I get is: smtp.stylez24.com: NXDOMAIN ...
3
votes
2answers
2k views

Cannot install BIND dns with yum on Oracle Enterprise Linux 6.1

I am currently using Oracle Enterprise Linux 6.1 to use for Oracle RAC. However I am stuck at installing BIND (DNS Server) at the VM I've set up. I've used the following command: yum install ...
3
votes
1answer
993 views

One non-root user run jetty by port 512 which less that port1024

Customer asks us to create a non-root user to run our web system which bind port 512, less than 1024. When web server(jetty) runs, this is the exception: 2013-10-16 14:49:51.406:WARN::failed Server@...
3
votes
1answer
4k views

How to override TTL in a caching-only bind9?

I have a caching-only DNS here. I want it to override the TTL fields of its cached records to reduce the mean network latency. Ideally I could set the TTL somewhere in the configuration, which would ...
3
votes
1answer
2k views

/var/named/chroot/var/named: device is busy

When I restart the named service, it gives me this error: ./etc/init.d/named restart Stopping named: [ OK ] Starting named: Error in named configuration:...
3
votes
1answer
109 views

Do I need a new zone for each domain I have on my server?

I currently have a working BIND nameserver Running on my dedicated ubuntu server box. I have one zone set up.. example.com with its own nameservers. If I want to add a new domain to point to the ...
3
votes
0answers
906 views

How to bind ppp0 interface (PPTP VPN) as 'external' in proxy server?

I'm trying to bind ppp0 interface (PPTP VPN) as 'external' interface in proxy server (Tinyproxy). Unfortunately it does not work. Using route add -net default gw 10.9.0.1 I can make all the traffic ...
3
votes
1answer
260 views

Can AppArmor restrict access to a specific interface?

A deceptively simple question; Can Apparmor on Ubuntu (any release) restrict network access for a specific application to a specific network interface? If it can; an example/tutorial/etc link would ...
2
votes
1answer
2k views

How to configure a catch-all CNAME on Ubuntu Linux using BIND 9

I'm trying to set up APE server on my local system. I'm using Ubuntu and BIND and I need to set up a catch-all CNAME record. What would be required for this?
2
votes
4answers
48 views

How to reformat named.conf's zone blocks into single lines?

For reasons I won't go into here, I need to make a copy of an old CentOS 5.10 server's named.conf file and perform some text manipulation on the copy. The final result should consolidate each zone's ...
2
votes
1answer
78 views

BIND file serials - unique to all zones or to self only?

I am again managing a BIND installation with manual edits of the zone files. After performing an update of adding one A record to a forward file and the corresponding PTR to a reverse file I asked a ...
2
votes
1answer
559 views

possible spots to configure BIND-DNS forwarders

i'm investigating our BIND's configuration and can not figure out how it is aware of it's next name server to ask for some domain he's not authorative server for... e.g. home domain is 'workgroup.lan'...
2
votes
1answer
521 views

How to bind mount from a symlink

This is similar like How do I do a bind mount over a symlink? But here the question is how to do a mount --bind from a symlink? I have /linux-4.13.0 and a symlink linux pointing to that: /linux -> /...
2
votes
1answer
2k views

Local NS list does not match Parent NS list

I installed a new BIND server "dns4.clicplus.com" which resolves correctly from the local network and externally. The problem is when I test with: # dig @8.8.8.8 dns4.clicplus.com Nothing is ...
2
votes
2answers
4k views

How to use different DNS forwarders based on the source IP or MAC?

How would one configure BIND on a Linux system to forward DNS queries to a different upstream forwarder, based upon the source IP and/or MAC of the requesting host? For example, I might want to send ...
2
votes
2answers
299 views

Unable to resolve 1.2.3.4.list.dsbl.org

History: Everything starts with this log entry postfix/smtpd[10001]: warning: x.x.x.x.list.dsbl.org: RBL lookup error: Host or domain name not found. Name service error for name=x.x.x.x.list.dsbl.org ...
2
votes
1answer
480 views

Bind - proper reverse config

I'm using CentOS 7 and want to configure Bind 9 to work on both simple queries & Reverse DNS lookups. so far Bind works on queries but not on reverse ones. this is part of "named.conf" file: ...
2
votes
1answer
2k views

dig does not resolve unqualified domain names, but nslookup does

I have a lab set up with DNS running on a CentOS7 server (dns01.local.lab). The local.lab domain is defined in named.conf: zone "local.lab" IN { type master; file "local.lab.zone"; allow-...
2
votes
1answer
724 views

Named serial increment SED oneliner

I need to increment named serial and I want to do it with sed. I've done it like this: echo 2015092315 | gsed s/20[0-9][0-9][0-9][0-9]*/`date +%Y%m%d%H`/g But then I realized that updates to zone ...
2
votes
1answer
2k views

Bind DNS A Record priority

I am working on 2 scenarios: Scenario 1: DNS A Record with 2 IPs [Default it works on Round Robin], but I am looking for option where if First IP not reachable then share 2nd IP. Scenario 2: DNS A ...
2
votes
1answer
1k views

Managing (Dynamic) DNS Zone files with Puppet

I'm running a Debian 7.0 (Wheezy) server and I have a dynamic DNS setup wherein my clients make DHCP requests and the DHCP server updates the DNS zone files with whatever IP was assigned to each ...
2
votes
1answer
542 views

Why is BIND not automatically trying all nameservers, especially when an IPv6 nameserver is unreachable?

I am running a recursive local name server using BIND on Ubuntu. I have an IPv4 network at the moment. It appears as though BIND defaults to listen for queries and recursively resolve names on both ...
2
votes
4answers
913 views

what is the query flow when name server's resolv.conf only contains 127.0.0.1?

I setup my name server based on this link: https://www.digitalocean.com/community/tutorials/an-introduction-to-dns-terminology-components-and-concepts Normally the name server resolv.conf would ...
2
votes
1answer
2k views

unexpected characters in BIND DNS zone slave files

I have this configuration in my named server's (master server) /etc/named.conf : zone "example.com." IN { type master; file "example.com"; notify yes; allow-transfer { 172....
2
votes
2answers
13k views

Redhat 7 DNS Bind Failed to restart

I am getting Error while Restarting the Named.service in Red-hat 7 Here is my Lab Status and all the Command. Configure DNS in REDHAT 7 DNS Name p1.linux.com IP address 192.168.1.1/24 N/W ID 192....
2
votes
1answer
120 views

rndc -k ddns.key status

rndc: unsupported algorithm: HMAC-MD5.SIG-ALG.REG.INT I've created a new key using this command: dnssec-keygen -a HMAC-MD5 -b 128 -r /dev/urandom -n USER DDNS_UPDATE I didn't found any way to solve ...
2
votes
1answer
12k views

bind9: client update denied

I've a bind9.7.3 running on Debian squeeze. I've configured a zone to accept dynamic update using a key: (I've replaced the key and the actual domain names ...) key "yme" { algorithm hmac-...
2
votes
1answer
5k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this too ...
2
votes
2answers
4k views

BIND server doesn't recognize my zone properly

I'm pretty new to BIND so I was hoping maybe someone can help me understand why I can't resolve. What is wrong? named.conf options { listen-on port 53 { localhost; 10.30.0.10; }; ...
2
votes
1answer
1k views

How to add another domain to my chrooted named server

Firstly I successfully have a domain working in a chroot named. There are files in /var/named/chroot/var/named called mydomain.com.db and named.local and named.root. Also in /var/named/chroot/etc ...
2
votes
1answer
220 views

Do rndc keys expire after a year?

Yesterday, I noticed an error in a bind zone file, and after correcting it, I tried to restart bind9, but the service refused to stop, displaying this error: rndc: connect failed: 127.0.0.1#953: ...
2
votes
1answer
180 views

Cannot replicate DNS zone data from master on LAN to slave behind firewall in a DMZ

Here is some information about my setup. I have a master DNS server in my LAN subnet running on a Ubuntu 16.04 box. In addition, I have some slave DNS servers on my various other subnets (DMZ subnet, ...
2
votes
1answer
81 views

BIND9, name resolution with two views and networks

I have a BIND setup with two views, internal and external. internal responds to queries sent by hosts from the internal network, external responds to public queries. Some hosts have only public ...
2
votes
1answer
2k views

how do you include variables in Bind9 configuration files?

I am trying to create a auto install script since I have to do this installation task on multiple servers. I have setup all the bind9 configuration files with my variables and thought it would have ...
2
votes
1answer
553 views

bind's path to 'named.pid' looks a bit weird after a not-so-smooth package installation

I had a fresh VPS hosting account running Ubuntu LTS (Lucid Lynx) with Plesk 10.2.0 (and etckeeper package) I used Plesk's web interface to install Plesk Health Monitor. It took two attempts because ...
2
votes
0answers
970 views

named[862]: resolver priming query complete: every 20 seconds

BIND 9.11.3 Ubuntu 18.04 kernel 4.15.0-23 I am running bind9 as my LAN DNS and it is working for all hosts and forwarding to internet through the google DNS IPs Why does my log have many instances ...
2
votes
1answer
296 views

BIND as a DNS server host command is refused

I am attempting to run my host machine as a DNS server, it will also function as the gateway. My /etc/named.conf is as follows: options { directory "/var/named/"; allow-query {127.0.0.1;...
2
votes
0answers
1k views

Server can't find XXX.in-addr.arpa: NXDOMAIN

I am trying to make a DNS server with bind9 on ubuntu, but when I nslookup the ip I only get the NXDOMAIN status. Same thing happens with my domain www.peliluolaXXX.net. How to solve this? Here are ...
2
votes
3answers
586 views

Common DNS for virtual machines - with iptables/netfilter

I have a Bind9 on a host. I have several guest virtual machines. I want my virtual machines to use the Bind9 located on the host. I know how to make Bind9 accept requests from my vitual machines (...
2
votes
0answers
210 views

How to configure Bind for Spamassassin

I'm wondering if anyone can help me out with following the directions I found here https://wiki.apache.org/spamassassin/CachingNameserver to set up a working configuration for Spamassassin. I think ...
2
votes
0answers
517 views

BIND 9 intermittently slow

I'm running several Bind servers (v9.10.4) to provide DNS services to my users. Intermittently (about 30 seconds every 15 minutes) all recursive requests will fail and timeout. CPU and Memory on all ...
2
votes
1answer
111 views

What are the most restrictive external firewall / DNS listening port settings I can have for my DNS server (internal clients only)

This question relates specifically to hardening the configuration of DNS, firewalls and at the limit, ntp. (not proxys, http access,vpn's or other services). This is about the externally-facing side ...
2
votes
0answers
246 views

'Named' slave the same as having forwarders?

I have a slave DNS server that dumped a bunch of... " error (unexpected RCODE REFUSED) resolving 'xxx.xxx.xxx.xxx.in-addr.arpa/PTR/IN'" messages all the sudden, and DNS lookups to the slave server ...
2
votes
1answer
601 views

TTL values for external DNS records

Upon setting up my zone files, I went back to review my TTL values. The default is set for 24 hours and I have individual TTL values set for each individual record. My thought was NS, MX, and CNAME ...
2
votes
0answers
154 views

Configure Bind to use specific server as starting point for recursive query?

I'm attempting to setup a Bind DNS server which (for security purposes) is highly limiting. Essentially I only want to allow DNS queries to be made to a particular set of DNS servers which do not ...
2
votes
1answer
464 views

Is it possible to mix zones with DNSSEC enabled and disabled in BIND?

I have a dozen domains configured in a set of zones in BIND and I need to add a new one with DNSSEC enabled. If I enable DNSSEC: options { dnssec-enable yes; dnssec-validation yes; }; Will ...
2
votes
0answers
78 views

Bind a directory as me

Analogous for a regular user running a thin FTP server (where others can access the file system with his/her permissions), can a regular user (through fuse maybe) "mount" a directory for others to use ...