Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How I can make my myself hosted domain visible to world?

Question Details:

I have a domain donotrape.me which is not visible to world. My System is Debian 7 64BIT, Bind9, Apache.

Debian firewall is on default mode (off, i think so (ref:https://wiki.debian.org/DebianFirewall)), Port 80 is open and forwarded to

named.conf is as under:

        zone "donotrape.me" {
            type master;
            file "/etc/bind/zones/e.donotrape.me";

zone file file is as under:

;; file: /etc/bind/zones/e.donotrape.me
;; domain: donotrape.me
$TTL 86400
donotrape.me   IN  SOA     NS1.IMSINGH.COM. ROOT.IMSINGH.COM. (
20130703021  ;Serial
3600        ;Refresh
1800        ;Retry
604800      ;Expire
86400       ;Minimum TTL
donotrape.me    IN  NS  NS1.IMSINGH.COM.
donotrape.me    IN  NS  NS2.IMSINGH.COM.
donotrape.me    IN  A
www IN  CNAME   NS1

This domain is registered with GoDaddy.com so nameserver there are: ns1.imsingh.com & ns2.imsingh.com

The domain check reports you can see at http://www.intodns.com/donotrape.me Mainly it shows these errors

Nameservers A records ERROR: Some of your DNS servers do not have A records at all. I could not find any A records for the following DNS servers: ns2.imsingh.com ns1.imsingh.com You must have A records for all of your nameservers.

Mismatched NS records WARNING: One or more of your nameservers did not return any of your NS records. Error DNS servers responded ERROR: One or more of your nameservers did not respond: The ones that did not respond are: ns2.imsingh.com ns1.imsingh.com

in lan it is runs well

Can you suggest any solution so that this website is open to world

I finally purged iptables

apt-get purge iptables



share|improve this question
Try replacing the first donotrape.me (on the SOA line) with @. –  Flup Aug 13 '13 at 8:02
port 53 (UDP and TCP) must be opened and forwarded for DNS. –  Laurentiu Roescu Aug 13 '13 at 8:14
@LaurentiuRoescu I think port is open as my ip opens the website –  Nishan Aug 13 '13 at 9:43 is declared as nameserver for your zone. So it will be queried about www.donotrapeme.com. And this query will be on port 53 UDP (and possibly port 53 TCP) but these ports are not opened. So nobody can't find the IP address of your site. –  Laurentiu Roescu Aug 13 '13 at 9:54
@LaurentiuRoescu lsof -i :53 returns COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME named 2241 bind 20u IPv6 6085 0t0 TCP *:domain (LISTEN) named 2241 bind 21u IPv4 6089 0t0 TCP localhost:domain (LISTEN) named 2241 bind 22u IPv4 6091 0t0 TCP global.imsingh.com:domain (LISTEN) named 2241 bind 26u IPv4 10889 0t0 TCP IMSINGH.COM:domain (LISTEN) –  Nishan Aug 13 '13 at 11:03

3 Answers 3

Those two servers ns1.imsingh.com and ns2.imsingh.com do indeed not have a A record.
As far as I can see those servers aren't owned by GoDaddy anyway.

Contact GoDaddy and figure out which servers you need to use.

share|improve this answer
that i know, but please tell me what to do how to add A record. those are my private name server. i also own imsingh.com. A record for imsingh.com is, and same is for ns1, ns2 thanking you –  Nishan Aug 13 '13 at 8:12
Then the problem is in the imsingh.com zone. That zone doesn't respond correctly, queries to it fail with SERVFAIL. –  faker Aug 13 '13 at 8:26
Don't try to run your own nameservers - calling your domain donotrape.me won't stop them from being violated in all sorts of ways until you've learnt a lot more about DNS. –  symcbean Aug 13 '13 at 13:32

dig on imsingh.com shows :

imsingh.com.        172683  IN  NS  ns1.imsingh.com.
imsingh.com.        172683  IN  NS  ns2.imsingh.com.

But ns1 and ns2 does not respond on port 53. You should probably check your fw conf to open DNS traffic to your ns1 and ns2.

share|improve this answer

You should add to your firewall somtehing like:

# Redirect DNS traffic (tcp/53 and udp/53) to DNS server
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 53 \
                              -j DNAT --to-destination

iptables -t nat -A PREROUTING -i eth0 -p udp --dport 53 \
                              -j DNAT --to-destination

iptables        -A FORWARD    -i eth0 -p tcp --dport 53 \
                              -o eth1 -d    \
                              -m conntrack --ctstate NEW -j ACCEPT

iptables        -A FORWARD    -i eth0 -p udp --dport 53 \
                              -o eth1 -d    \
                              -j ACCEPT
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.