Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am using Fedora 17 with bind 9.

I tried to manually configure a DNS for a network, editing /etc/named.conf:

options {
listen-on port 53 { localhost; };
listen-on-v6 port 53 { ::1; };
directory   "/var/named";
dump-file   "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query     { any;};
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

logging {
    channel default_debug {
            file "data/";
            severity dynamic;

zone "." IN {//Per tutte le zone di cui non è autoritario;
type hint;
file "";

zone "" {
type master;
file "";

zone "" IN {
type master;
file "";

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

PS: In the original file there are more tabulations, I just edited it to format it as code. If I look for syntax errors with named-checkconf it says it's all ok.

This is

$TTL 48h
@   IN  SOA (

IN  NS  dns
MX  1   mail
localhost   A    A
        AAAA    2000:0::d:1
dns A
AAAA    2000:0::d:2
www A
AAAA    2000:0::d:8
mail    A
AAAA    2000:0::d:3

PS: Same thing is valid for this file and the following file.

And this is

$TTL 48h
@   IN  SOA (
2   PTR dns
8   PTR www
3   PTR mail

I make named start with the following command:

$ sudo systemctl start named.service

Then I enter this command:

$ sudo ifconfig eth0 netmask broadcast

After this I edit resolv.conf in a way that the DNS has the address

But if I run dig:

$ dig

I get no answer, this is the log:

; <<>> DiG 9.9.2-rl.028.23-P1-RedHat-9.9.2-5.P1.fc17 <<>>
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 58814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

; EDNS: version: 0, flags:; udp: 4096
;       IN  A

;; Query time: 13 msec
;; WHEN: Mon Mar 25 23:31:28 2013
;; MSG SIZE  rcvd: 48
share|improve this question

1 Answer 1

up vote 3 down vote accepted

If you do this in this order then you need to reload bind before it starts listen on this IP. You can check where bind is listening by:

netstat -an | grep :53

(for normal queries udp is interesting, like this:

udp        0      0  *
udp        0      0  *


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.