Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm attempting to create a DNS server to serve copies of a zone for ''.


The current setup includes:

  • Ubuntu 11.10
  • Bind9
  • Apache 2

I have created Glue records at the registrar level, that resemble:

  1. A x.x.x.x
  2. A x.x.x.x

UFW has an exception for port 53.

The Problem

After installing Bind9, I have configured named.conf.local, named.conf.options (using Google DNS as my forwarders) and created a zone file ( for my domain.

Upon testing my configuration via IntoDNS, no A record seems to be appearing, and I receive a slew of errors, including:

ERROR: One or more of your nameservers did not respond: The ones that did not respond are: x.x.x.x

The above error seems to be a recurring issue, even indicated via a tracert provided by Network Tools:

DNS server returned an error: Name server failed

Requesting a Resolution

So, what am I doing wrong? Why aren't my provided nameservers reachable?

I've followed numerous guides with no avail, any suggestions, resources or advice would be greatly appreciated.

share|improve this question

can you show that your named instance is listening on the external interfaces like so;

[root@someserver ~]# netstat -lnp | grep ":53 "
tcp        0      0*       LISTEN      27989/named
udp        0      0*                   27989/named

also that you are able to query the local nameserver using dig (from bind-utils package);

# dig @localhost

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5 <<>> @localhost
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35676
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;                   IN      A

;; ANSWER SECTION:            172800  IN      A

;; AUTHORITY SECTION:            172800  IN      NS            172800  IN      NS

;; Query time: 17 msec
;; WHEN: Sat May 26 03:45:20 2012
;; MSG SIZE  rcvd: 93

(i am not familiar with UFW) but the docs indicate that something like this should dump your running firewall;

# sudo ufw status verbose

Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing)
New profiles: skip

To                         Action      From
--                         ------      ----
22                         ALLOW IN    Anywhere
80/tcp                     ALLOW IN    Anywhere
share|improve this answer
well if that ip is accurate, then your nameserver is up and available, because I can query it. Whats the domain name? – Tom H May 26 '12 at 11:18
Hi Tom, See link for listening instances. See link for dig responses. See link for the db zone file. See link for the UFW status. Hope this helps, thank's for the response! – Drew May 26 '12 at 11:22
the problem seems to be in the zone configuration because you would expect the dig to have an answer field, but its returning SERVFAIL, id: 4530 – Tom H May 26 '12 at 11:28
try to run the following command as root on the nameserver named-checkconf /etc/named.conf – Tom H May 26 '12 at 11:29
Running: named-checkconf /etc/named.conf, produces: root@xen:/etc/bind# named-checkconf /etc/named.conf none:0: open: /etc/named.conf: file not found I didn't believe named.conf had to be in /etc/, I currently have it in /etc/bind/named.conf? /etc/bind/named.conf currently serves as a controller, it includes named.conf.local which includes the zone definition(s). – Drew May 26 '12 at 11:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.