Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am using Fedora 17 with bind 9.

I tried to manually configure a DNS for a network, editing /etc/named.conf:

options {
listen-on port 53 { localhost; };
listen-on-v6 port 53 { ::1; };
directory   "/var/named";
dump-file   "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query     { any;};
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

logging {
    channel default_debug {
            file "data/named.run";
            severity dynamic;

zone "." IN {//Per tutte le zone di cui non è autoritario;
type hint;
file "named.ca";

zone "gruppo13.labreti.it" {
type master;
file "gruppo13.labreti.it.zone";

zone "13.168.192.in-addr.arpa" IN {
type master;
file "gruppo13.labreti.it.reverse.zone";

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

PS: In the original file there are more tabulations, I just edited it to format it as code. If I look for syntax errors with named-checkconf it says it's all ok.

This is gruppo13.labreti.it.zone:

$TTL 48h
@   IN  SOA gruppo13.labreti.it.    master.gruppo13.labreti.it. (

IN  NS  dns
MX  1   mail
localhost   A
gruppo13.labreti.it.    A
        AAAA    2000:0::d:1
dns A
AAAA    2000:0::d:2
www A
AAAA    2000:0::d:8
ftp CNAME   gruppo13.labreti.it.
mail    A
AAAA    2000:0::d:3

PS: Same thing is valid for this file and the following file.

And this is gruppo13.labreti.it.reverse.zone:

$TTL 48h
@   IN  SOA gruppo13.labreti.it. master.gruppo13.labreti.it. (
NS  gruppo13.labreti.it.
2   PTR dns
8   PTR www
3   PTR mail

I make named start with the following command:

$ sudo systemctl start named.service

Then I enter this command:

$ sudo ifconfig eth0 netmask broadcast

After this I edit resolv.conf in a way that the DNS has the address

But if I run dig:

$ dig gruppo13.labreti.it

I get no answer, this is the log:

; <<>> DiG 9.9.2-rl.028.23-P1-RedHat-9.9.2-5.P1.fc17 <<>> gruppo13.labreti.it
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 58814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

; EDNS: version: 0, flags:; udp: 4096
;gruppo13.labreti.it.       IN  A

;; Query time: 13 msec
;; WHEN: Mon Mar 25 23:31:28 2013
;; MSG SIZE  rcvd: 48
share|improve this question

1 Answer 1

up vote 3 down vote accepted

If you do this in this order then you need to reload bind before it starts listen on this IP. You can check where bind is listening by:

netstat -an | grep :53

(for normal queries udp is interesting, like this:

udp        0      0  *
udp        0      0  *


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.