Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have fairly simple BIND setup on CentOS 5.5 (in a chrooted env) that handles DNS for two domains. I just added a third domain, but it's not working. It has to be something simple.

Here's an excerpt of my named.conf:

acl "trusted" {;

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named.stats";
        zone-statistics yes;
        notify no;
        transfer-format many-answers;
        max-transfer-time-in 60;
        interface-interval 0;
        version "Not Available";

        forwarders {;;

        allow-query {

zone "." {
        type hint;
        file "named.root";

zone "localdomain." IN {
        type master;
        file "";

zone "localhost" {
        type master;
        file "";

zone "example.corp" {
        type master;
        file "";

zone "" {
        type master;
        notify no;
        file "";

And here's my zone file:

$TTL    3600
@       3600    SOA     dns1.example.corp. sean.example.corp. (
                        2011030306      ; serial YYYYMMDDnn
                        24h             ; Refresh (24 hours)
                        2h              ; Retry (2 hours)
                        1000h           ; Expire (1000 hours)
                        2d )            ; Minimum (2 days)

       IN      NS      dns1.example.corp.

@               IN      A
s               IN      A

When I query the DNS server, I don't get an answer back:

$ dig @ ANY

; <<>> DiG 9.7.1-P2 <<>> @ ANY
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 64075
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;                     IN      ANY

;; Query time: 0 msec
;; WHEN: Thu Mar  3 15:16:32 2011
;; MSG SIZE  rcvd: 27

I'm sure I'm missing something obvious. Any suggestions?

share|improve this question
This would certainly fall under the realm of "something obvious," but have you reloaded the config since adding the zone file and changing named.conf? – Shane Madden Mar 3 '11 at 21:23
Check your logs for something like "not loaded due to errors". They usually accompany SERVFAIL. – Cakemox Mar 3 '11 at 21:35
up vote 1 down vote accepted

Have you looked in /var/log/messages for any warnings/errors from named ? You can start named in the foreground and increase the debug level with

/usr/sbin/named -f -d 3 -t /path/to/chroot

and it will output messages to stdout.

share|improve this answer
I had run named-checkconf successfully before reloading and everything appeared fine. Lo and behold, hidden quietly in /var/log/messages: "one loading master file permission denied". I had created the zone file by hand and the group ownership was wrong. – organicveggie Mar 3 '11 at 22:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.