Skip to main content
Share Your Experience: Take the 2024 Developer Survey
9 votes
Accepted

How to generate TSIG key for certbot plugin 'certbot-dns-rfc2136'

After a bit searching, I found the document of plugin certbot-dns-rfc2136 is obsolete! In BIND9's official git repository, I found the following commit message: [func] The use of dnssec-...
KaiserKatze's user avatar
8 votes
Accepted

why host from bind9-host is/was deprecated and when?

host is not deprecated by Internet Systems Consortium, the BIND company. It does not even deprecate nslookup as it once did. This deprecation of host was done in 2018 by a Debian Developer, on xyr ...
JdeBP's user avatar
  • 69.2k
7 votes
Accepted

What is the difference between localhost and localnets in named configuration

I guess localhost refer to one IP address which is by default 127.0.0.1, but, localnet refer to every network that you have an IP address from it on interface on your machine. For example, if you ...
Wissam Roujoulah's user avatar
4 votes
Accepted

named-checkzone displays “ignoring out-of-zone” data

The command was wrong. Instead of the FQDN the first parameter has to be the zone: sudo named-checkzone example.com /var/named/example.com.zone
Ely's user avatar
  • 203
3 votes

hostname failing to resolve in CentOS 7

It looks like you're putting content that should be in /etc/hosts into /etc/host.conf. /etc/host.conf is a file that defines how the host command should work. It is not a lookup database. On ...
Tim Kennedy's user avatar
  • 19.7k
3 votes
Accepted

bind9 reverse resolve problem

IN NS ns.example.com. 131 IN PTR ns.example.com 102 IN PTR laptop.example.com 130 IN PTR server1.example.com You used a fully qualified domain name once, and then did not use it in any of the ...
JdeBP's user avatar
  • 69.2k
2 votes

configure same domain name as external in bind

If you do not have ownership of the domain in question, you should never do this; it is considered rather rude. For exactly example.com, however, when testing things, that's fine. DNS clients will ...
Wouter Verhelst's user avatar
2 votes

Bind 9 logging is not working

I got the solution :). My RHEL 6.5 server is using named chrooted. So, actual location of all log will be /var/named/chroot/var/log/named . So create named directory into /var/named/chroot/var/log/...
Samrat's user avatar
  • 131
2 votes

Is it a best practice to have both Bind and DNSMasq which is running on port 53?

Only one service will be able to bind to port 53 at a time (on the same IP address) You should disable/uninstall DNSMasq if you want to run bind. You /etc/resolv.conf is probably set to localhost or ...
rusty shackleford's user avatar
2 votes
Accepted

How to configure bind9 to iteratively resolve recursive requests, starting with a dns root server?

It appears i did not do my homework properly, as pointed out in the comment by user996142 this is indeed the default configuration for bind9.
UXELDUXEL's user avatar
  • 119
2 votes
Accepted

How to forbid my PC in LAN to make DNS queries? (in a PC -> VPN gateway scenario)

Drop all DNS queries that don't go to the VPN. DNS can use UDP port 53 or TCP port 53. iptables -A FORWARD -i eth0 ! -o tun0 -p udp --dport 53 -j DROP iptables -A FORWARD -i eth0 ! -o tun0 -p tcp --...
RalfFriedl's user avatar
  • 9,021
2 votes

bind9 named-checkzone failing with SOA record not at top of zone

With this zone configuration: zone "0.168.192.in-addr.arpa" { type master; notify no; file "/var/cache/bind/db.192.168.0"; and the beginning of the zone file like this: $TTL 86400 ...
telcoM's user avatar
  • 98.1k
2 votes

Removing Incorrect WINS record

On debian, # service smbd stop # service nmbd stop # find / -name gencache.tdb -o -name wins.tdb -o -name wins.dat | xargs rm # service smbd start # service nmbd start For me the WINS entry that was ...
Joseph's user avatar
  • 21
2 votes
Accepted

How do I list all the domain names that my BIND9 manages as a master?

First of all, usually, one only ask one question per post since its better for site lisibility and referencing... For your first question, you can ask bind to dump the zones it's currently managing, ...
binarym's user avatar
  • 2,647
1 vote

How to use DNS-over-TLS with BIND9 forwarders

The documentation indicates that the forwarders statement grammar has been extended to: forwarders [ port <integer> ] [ tls <string> ] { ( <ipv4_address> | <ipv6_address> ) [ ...
telcoM's user avatar
  • 98.1k
1 vote

bind: forwarding zone does not work when allow-recursive not allowed

This can be solved using the following configuration, using c1.k8s.ooo as an example domain that is hosted on 2a0a:e5c0:2:f::a: options { ... allow-recursion { ::/0; 0.0.0.0/0; }; ...
Nico Schottelius's user avatar
1 vote

Reverse DNS Resolution Not Working After Installing Bind9 in Ubuntu Server

Based on your forward.example.com zone file, your reverse.example.com zone file should look like this: $TTL 604800 $ORIGIN 137.168.192.in-addr.arpa. @ IN SOA example.com. root....
telcoM's user avatar
  • 98.1k
1 vote

Why Server is not able to resolve DNS

First off, ping isn't the best way to diagnose dns issues; you want dig: shadur@vigil:~$ dig google.com @localhost ; <<>> DiG 9.10.3-P4-Debian <<>> google.com @localhost ;; ...
Shadur-don't-feed-the-AI's user avatar
1 vote
Accepted

Forward reverse lookups with Bind9

In one of the configurations I had a lot of empty zones. I had to add empty-zones-enable no; to my named.conf. Now it looks like this: include "/etc/bind/named.conf.local"; include "/etc/bind/named....
Sebastian Berglönn's user avatar
1 vote
Accepted

How to add URI record to bind9 DNS zone?

When you run nsupdate to add a record, you must specify a Time-To-Live value (TTL) for it to specify the maximum time the record can be cached by any resolver DNS server before querying an ...
telcoM's user avatar
  • 98.1k
1 vote
Accepted

bind9 - timed out resolving

I just had this and fixed it by removing the faulty forwarders. At the end of each timeout error is an IP from a forwarder from your config, but the errors never complain about google's ns (8.8.8.8). ...
ki9's user avatar
  • 413
1 vote

Bind9 shared libraries: libbind vs libdns?

As Stephen Kitt wrote that these packages have different descriptions: libbind9-161: This package delivers the libbind9 shared library used by BIND's daemons and clients. libdns1104: This package ...
Gnat's user avatar
  • 366
1 vote

Forward DNS requests for a zone except one record?

Since you are the owner of the domain, the easiest solution is to setup in BIND all the records of your domain and replace that one IP address, unless dynamic DNS is involved. For larger ...
Rui F Ribeiro's user avatar
1 vote

BIND9 DNS zone file check reveals "ignoring out-of-zone data"

It's the full stops - in the first file the final line needs to be: www IN CNAME argylecourt.org. Without a full stop on the end it'll append the domain name again. In your ...
Dave C's user avatar
  • 1,292
1 vote
Accepted

There is any difference between this zone syntax?

Answer: yes, they're all the same. Though note I haven't actually loaded these zones in to a DNS server to confirm; e.g., I may have missed a typo when reading the question. Load them in to a DNS ...
derobert's user avatar
  • 110k
1 vote

Can't get authoritative DNS server working (BIND9)

From the configuration you show us, there are several points to mention that need to be fixed: The domain name file should be zones/db.mydomain,com and not zones/db.mydomaon.com; As for the error you ...
Rui F Ribeiro's user avatar
1 vote
Accepted

Prevent resolvconf package assign localhost if named bind9/dnsmasq is found on host

Fine seems after some tries i found a solution... By commenting all the localhost lines in interface-order file, expecially this two lines: # lo.@(dnsmasq|pdnsd) # lo.!(pdns|pdns-recursor) ...
user3450548's user avatar
  • 2,944
1 vote

How to set use tor DNS as the default DNS?

It is explained here. For short, add DNSPort 9053 to the torrc and server=127.0.0.1#9053 listen-address=127.0.0.1 to /etc/dnsmasq.conf
 j1088099.mvrht.com.'s user avatar
1 vote

How to set use tor DNS as the default DNS?

More information is needed. Many modern linux systems overwrite your /etc/resolv.conf automatically (resolvconf for example), and several run their own local caching dns (nscd for example). Without ...
number9's user avatar
  • 1,074
1 vote
Accepted

BIND9: DNS resolves sometimes (!) take very long or don't work at all

After more research, the problem appears to be the following: The initial setup contained both forwarders that were DNSSEC-capable (GoogleDNS 8.8.8.8, 8.8.4.4) and some that weren't (OpenDNS 208.67....
Nick's user avatar
  • 131

Only top scored, non community-wiki answers of a minimum length are eligible