Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bind]

BIND is the de facto standard DNS server

17
votes
1answer
25k views

How to let `named` (bind9) forward certain domains to a different nameserver?

In dnsmasq, it's possible to forward domains to different nameservers. How can I do that in named? server=/foo.com/10.0.10.1 server=/vpn.foo.com/8.8.8.8
11
votes
1answer
17k views

“Fake” DNS for a single host

I am running a bind9 dns server at my home network, serving for all my internal servers in my domain local / 192.168.x.x - one of those, extweb.local 192.168.1.33 is also visible from the internet as ...
11
votes
3answers
6k views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 www....
9
votes
2answers
14k views

How can I reset or lower the serial used in BIND DNS server's SOA record?

I use BIND as my DNS server at home. For my Start Of Authority (SOA record) I always use a serial in the recommended format YYYYMMDD## where ## is the counter for changes on that day. ...
9
votes
3answers
23k views

Why doesn't systemd-resolved use my local DNS server?

I'm using a local BIND9 server to host some local dns records. When trying to dig for a local domain name I can't find it if I don't explicitly tell dig to use my local BIND9 server. user@heimdal:~$ ...
9
votes
3answers
2k views

Is it possible to execute scripts in BIND based on lookup

Is it possible, to set up BIND as DNS server on my local network, and make execute scripts when it gets a lookup? I would like to execute a Python or Bash script, based on the incoming DNS lookup, ...
7
votes
3answers
7k views

Resolving hostname takes 5 seconds

I've a master bind9 DNS server and 2 slave servers running on IPv4 (Debian Jessie), using /etc/bind/named.conf: listen-on-v6 { none; }; When I try to connect from different server(s) each connection ...
7
votes
1answer
458 views

How to deal with underscores in hostnames?

I got DNS set up on my company's server and it works just fine, except I got problem with some phones. For example one of the phones is “Huawei P9 lite”, and it's hostname (set on the phone, no chance ...
6
votes
3answers
3k views

Unable to delete files to trash in a bind-mounted filesystem

I'm trying to set up shared home directory for two Linux installations and thus I'm using bind-mounts. My user is named dbz and his home directory is /home/dbz. I also have shared directory /home/...
6
votes
3answers
16k views

How to increment serial number in bind9 dns zone

I have a dns zone, which has serial number: 2015040500 Today I am going to add some CNAME records there, so I am interested in how to increment serial number, I mean should I change it based on today'...
6
votes
1answer
4k views

Why are NS records needed in zone-files?

I installed BIND and I am aware that it is required to have at least two NS(Name Server) records in zone-file. This is true also for reverse-zone files. I understand that NS records point to ...
6
votes
2answers
18k views

how can I add records to the zone file without restarting the named service?

I'm working on centos6.5 and bind9 and I have managed to add records to a DNS zone by doing this steps: creating the key: dnssec-keygen -a HMAC-MD5 -b 128 -n HOST example.com. editing conf. file: ...
6
votes
1answer
1k views

Setup of DNS zone with secure zone updates

How do I run a dns server with a zone for a local domain and be able to add dynamic entries to the dns zone securely from selected hosts? I have tried to setup a domain 'rag.local' with bind9. I have ...
6
votes
1answer
2k views

BIND9: DNS resolves sometimes (!) take very long or don't work at all

I have a BIND 9.9.5-9+deb8u8-Raspbian DNS server running on a RPi3 in my network. It is - for everything that's not my home-zone - configured as a "forward only" with the forwarders "{ 8.8.8.8; 8.8.4....
5
votes
1answer
10k views

Configure BIND to be a simple forwarder (no root-servers queries)

I would like to setup a simple bind server able to act as simple forwarder to the OpenDNS servers. I don't want my bind however being able to query the root servers, i want all the traffic go only to ...
5
votes
1answer
13k views

PID file /var/run/named/named.pid not readable (yet?) after start [duplicate]

Feb 24 15:54:34 ns1 named[20308]: all zones loaded Feb 24 15:54:34 ns1 named[20308]: running Feb 24 15:54:34 ns1 systemd[1]: PID file /var/run/named/named.pid not readable (yet?) after start. Feb 24 ...
5
votes
1answer
7k views

bind mounting and df output

I have a partition, /dev/sdb1, that gets mounted at /data. In /etc/fstab I have: /dev/sdb1 /data ext4 defaults 1 2 After that partition gets mounted, I then have the following ...
5
votes
2answers
5k views

Socket connect to a ports bound to IP vs localhost

It is my understanding that sockets bound to ports using localhost will not be visible to the subnet because the binding is not with the nic IP address. Local processes connecting to such port will ...
5
votes
2answers
4k views

Creating a new TLD for private network

I want to setup a new TLD (foo.) for my the private network so that I can host some child domains which will be accessible from within the network. For this purpose I have setup a DNS server (172.16....
5
votes
2answers
10k views

BIND9 as a DNS server refuses requests

I am trying to set up a DNS server on Amazon Linux using BIND9. It has to act as a master nameserver for a lot of domains. I have imported all of the DNS zone files using NamedManager (a web ...
5
votes
0answers
357 views

Server-side move between NFS shares

I have these folders on my server: /share1 /home/user Both are actually on the same partition. Now I want to be able to move files between these two folders directly on the server (without any data ...
4
votes
1answer
4k views

Large zone file for bind9 : ad-blocking

I was successfully using a small (20,000 entries) zone file with bind9 server, but today my data provider sent an update which caused the zone file to become 300,000+ entries large (30Mb+). The ...
4
votes
2answers
2k views

Bind9 — How to find which programs are making which dns lookups?

Using bind9 on a laptop shows lots of nonsense domains when network connectivity is down: Oct 18 19:56:18 lap3 named[1536]: error (network unreachable) resolving './NS/IN': 128.63.2.53#53 Oct 18 19:...
4
votes
2answers
1k views

Looking up a local domain name without specifying the local DNS server

I've set up a local domain name by creating a zone (by following the steps in this tutorial). Why I look the domain using dig, I get the right results when using the following command: dig debian....
4
votes
2answers
2k views

How to return multiple DNS A records in a specific order using bind9?

I have a bind9 testing environment in Debian wheezy that I am trying to set up two A records that are returned in a fixed order. In my named.conf.options file I have the following configuration: ...
4
votes
1answer
3k views

How can we make Squid do a reverse nslookup?

We all know that access.log file logs the access Info of Squid: 1286536351.746 41762 192.168.1.17 TCP_MISS/200 5340945 GET http://v15.lscache3.c.youtube.com/videoplayback? - DIRECT/122.160.120.150 ...
4
votes
1answer
627 views

Can you Chroot a program from an OpenVZ environment?

I just recently purchased a Virtual Private Server, and it is OpenVZ virtualization. I am setting up my LAMP stack, and in the past I have always just set up my BIND dns set up in a chrooted ...
4
votes
1answer
6k views

Configure BIND as Forwarder only (no root hints), encrypted + RPZ blacklist / whitelist all together

My setup is getting more complex, generally I tend to divide things in pieces and assemble them together by myself. But it seems this time I need more help to get the whole gears working together. ...
4
votes
1answer
454 views

How to bind to a privileged port from a non-root process, on a Synology NAS

I want to run a custom DNS server (NxFilter to be precise) on a Synology DS115j NAS, which of course binds on port 53. This works when running as root, but I want to lock down the process now. This ...
4
votes
1answer
14k views

TCP buffers keep filling up (Recv-Q full): named unresponsive

Using netstat -an, I set the message that the Recv-Q is full. It is filling up to the rmem_max: Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address ...
4
votes
3answers
1k views

Unabled to get rid of BIND 9 chroot

I had installed bind-chroot from yum not long ago, and saw that there were errors in the daily logs from named. Under further investigation, I noticed a directory loop. The named files resided under /...
4
votes
1answer
769 views

BIND, in-view and dynamic updates

I have one zone in two views in BIND 9.10, sharing the same information via "in-view": Zone included in view A: zone "foo.tld" in { type master; allow-update { key "some.key.id"; ...
4
votes
1answer
7k views

postfix log messages: RBL lookup error: Host or domain name not found

I'm finding quite a few of these types of messages in my postfix log: 17:40:55 smtpd: warning: 34.77.82.185.b.barracudacentral.org: RBL lookup error: Host or domain name not found. Name service error ...
4
votes
1answer
1k views

Split-horizon on DNSMasq?

Is it possible to perform Split-horizon with DNSMasq? I've googled and it seems like it is only possible with Bind9, any advice would be much appericated
4
votes
0answers
364 views

Unable to view mounted directories in a chroot [closed]

Here is a quick description of what I have done: I have a chrooted user (username: clientdev) which I have jailed inside their home directory. This chroot directory is /home/clientdev/ which is ...
3
votes
3answers
336 views

How to host a website on personal computer

I want to start hosting my website at my own computer as well websites of my friends too (say mini hosting platform). I learned Debian, Bind9 and Apache for this purpose. On my system everything is ...
3
votes
1answer
2k views

What does the Bind bindkeys-file directive do?

Just trying to understand the bindkeys-file directive related to the DNSSEC extension in the Bind configuration. Is that a public key? Does it sign the response in the same way as digital signatures?
3
votes
3answers
14k views

When to use BIND vs internal DNS for Samba 4 backend

I am using Samba 4 as an AD DC with NetBIOS disabled, as I have it in Windows. The Samba documentation says: Bind as DNS backend is recommended, if you plan setup a complexer DNS setup, than the ...
3
votes
1answer
3k views

can't generate key via dnssec-keygen

$ dnssec-keygen -a HMAC-MD5 -b 512 -n HOST {host} above results in blank line and endless waiting $ dnssec-keygen -T DNSKEY -a HMAC-MD5 -b 512 -n HOST {host} the same entropy: $ cat /proc/...
3
votes
2answers
10k views

Bind9 denied query

I created a bind9 based DNS server to work only in forwarding mode: This is my named.conf.options file: #acl goodclients { # localhost; # localnets; #}; options { directory "/...
3
votes
1answer
8k views

Reverse DNS with BIND and IPv6

So I'm trying to set up reverse DNS for an IPv6 address using BIND9, and I'm having a little trouble getting it to work. Assume I have 2001:41D0:2:D447::/64 assigned to my server and I want 2001:...
3
votes
1answer
260 views

Local DNS Server Refuses to Ask itself for DNS

I am running Debian 7 and have set up a DHCP and DNS server. Everything is working nicely, except for the server itself not following the DNS entries in BIND. The problem is that /etc/resolv.conf is ...
3
votes
3answers
4k views

I want to expose “easy” URL's for machines on a home network. Is custom DNS/BIND the answer?

I recently convinced my room mates to cut the cord and go cable free, and they've found it pretty great so far. I'm in the process of setting up a pretty sweet, mostly automated home theater setup ...
3
votes
1answer
1k views

What is the difference between localhost and localnets in named configuration

Reading about acl statement in bind's ARM found the following: localnets: "Matches any host on an IPv4 or IPv6 network for which the system has an interface. When addresses are added or removed, the ...
3
votes
2answers
5k views

What happens in a recursive dns query, if ttl = 0?

In name resolution (current version of bind), what happens when a recursive answer reaches ttl 0 on the return trip?
3
votes
1answer
3k views

DNS query response logging

I have configured a CC TLD with bind9. I have successfully configured query logging also. But I can not do logging of query responses. Please have a look of what I have configured for query logging: ...
3
votes
1answer
461 views

Bind - proper reverse config

I'm using CentOS 7 and want to configure Bind 9 to work on both simple queries & Reverse DNS lookups. so far Bind works on queries but not on reverse ones. this is part of "named.conf" file: ...
3
votes
2answers
955 views

Override TTL Setting External DNS Records

I have a Bind Version as shown below 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6.1.2 I have two Domain Specific Forwarders namely test.example.com and internal-test.example.cloud.com The Local DNS Client ...
3
votes
2answers
871 views

Bind RPZ no effect with Views

I have a DNS server which has two views, one for internal users and one for external (internet for example). I want to config RPZ so that when internal users request (external recursive queries will ...
3
votes
1answer
22k views

how to update Records using nsupdate?

We know that we can update a record (its IP) by doing these steps: nsupdate server ns.bar44.com zone bar44.com update delete somehost.bar44.com. A update add somehost.bar44.com. 86400 A 10.10.10.1 ...