Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a bind DNS where I have installed SAMBA and made it a BDC. I plan to promote it to PDC and take out the Win2003 AD server to replace it with Samba.

Bind is installed on that same server as Samba and internal resolving work fine. However forwarding to the external DNS server for some reason does now work.

dig @ yields the correct output so I expect no connection issues.

The OS is Ubuntu (2.6.32) and Bind 9.7.3

What I have tried so far,

1) Adding to named.conf.options

recursion yes;
    allow-recursion { localhost; };

2) Adding to named.conf.options

recursion yes;
    allow-recursion { localhost;; };

3) Adding to named.conf.local

zone "." {
        type hint;
        file "/etc/bind/root_servers.hosts";

4) Adding to named.conf.options

forwarders {

5) Adding to named.conf.local where the zone info is saved

zone "DOMAIN.COM" {
        type master;
        file "/var/lib/bind/DOMAIN.COM.hosts";
        check-names ignore;
        forwarders {;

None have worked so far,

Please advice.


share|improve this question
What system are you querying the server from? What response do you get? – Shane Madden Aug 3 '12 at 5:53

I had a similar issue with the latest ubuntu server version (12.04 LTS). The problem was that the dnssec-validation option in /etc7bind/named.conf.options was set to auto. I changed it to no:

dnssec-validation no;

This solved my problem. In fact dnssec tries to validate the forwarder, and this was failling for my forwarder. You can check in /var/log/syslog for an DNS error similar to:

Aug 31 19:38:06 srv1 named[3208]: error (no valid RRSIG) resolving 'ch/DS/IN':

(my forwarder is

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.