Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

How I can make my myself hosted domain visible to world?

Question Details:

I have a domain donotrape.me which is not visible to world. My System is Debian 7 64BIT, Bind9, Apache.

Debian firewall is on default mode (off, i think so (ref:https://wiki.debian.org/DebianFirewall)), Port 80 is open and forwarded to 192.168.1.2

named.conf is as under:

        zone "donotrape.me" {
            type master;
            file "/etc/bind/zones/e.donotrape.me";
    };

zone file file is as under:

;; file: /etc/bind/zones/e.donotrape.me
;; domain: donotrape.me
$TTL 86400
donotrape.me   IN  SOA     NS1.IMSINGH.COM. ROOT.IMSINGH.COM. (
20130703021  ;Serial
3600        ;Refresh
1800        ;Retry
604800      ;Expire
86400       ;Minimum TTL
)
donotrape.me    IN  NS  NS1.IMSINGH.COM.
donotrape.me    IN  NS  NS2.IMSINGH.COM.
donotrape.me    IN  A   59.177.154.251
NS1 IN  A   59.177.154.251
NS2 IN  A   59.177.154.251
www IN  CNAME   NS1

This domain is registered with GoDaddy.com so nameserver there are: ns1.imsingh.com & ns2.imsingh.com

The domain check reports you can see at http://www.intodns.com/donotrape.me Mainly it shows these errors

Nameservers A records ERROR: Some of your DNS servers do not have A records at all. I could not find any A records for the following DNS servers: ns2.imsingh.com ns1.imsingh.com You must have A records for all of your nameservers.

Mismatched NS records WARNING: One or more of your nameservers did not return any of your NS records. Error DNS servers responded ERROR: One or more of your nameservers did not respond: The ones that did not respond are: ns2.imsingh.com ns1.imsingh.com

in lan it is runs well

Can you suggest any solution so that this website is open to world

I finally purged iptables

apt-get purge iptables

BUT STILL NO SOLUTION

SO I THINK FIREWALL IS NOT AN ISSUE OR THERE IS NO PROBLEM WITH MY SYSTEM

share|improve this question
    
Try replacing the first donotrape.me (on the SOA line) with @. –  Flup Aug 13 '13 at 8:02
    
port 53 (UDP and TCP) must be opened and forwarded for DNS. –  Laurentiu Roescu Aug 13 '13 at 8:14
    
@LaurentiuRoescu I think port is open as my ip 59.177.154.251 opens the website –  Nishan Aug 13 '13 at 9:43
    
59.177.154.251 is declared as nameserver for your zone. So it will be queried about www.donotrapeme.com. And this query will be on port 53 UDP (and possibly port 53 TCP) but these ports are not opened. So nobody can't find the IP address of your site. –  Laurentiu Roescu Aug 13 '13 at 9:54
    
@LaurentiuRoescu lsof -i :53 returns COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME named 2241 bind 20u IPv6 6085 0t0 TCP *:domain (LISTEN) named 2241 bind 21u IPv4 6089 0t0 TCP localhost:domain (LISTEN) named 2241 bind 22u IPv4 6091 0t0 TCP global.imsingh.com:domain (LISTEN) named 2241 bind 26u IPv4 10889 0t0 TCP IMSINGH.COM:domain (LISTEN) –  Nishan Aug 13 '13 at 11:03

3 Answers 3

Those two servers ns1.imsingh.com and ns2.imsingh.com do indeed not have a A record.
As far as I can see those servers aren't owned by GoDaddy anyway.

Contact GoDaddy and figure out which servers you need to use.

share|improve this answer
    
that i know, but please tell me what to do how to add A record. those are my private name server. i also own imsingh.com. A record for imsingh.com is 59.177.154.251, and same is for ns1, ns2 thanking you –  Nishan Aug 13 '13 at 8:12
1  
Then the problem is in the imsingh.com zone. That zone doesn't respond correctly, queries to it fail with SERVFAIL. –  faker Aug 13 '13 at 8:26
    
Don't try to run your own nameservers - calling your domain donotrape.me won't stop them from being violated in all sorts of ways until you've learnt a lot more about DNS. –  symcbean Aug 13 '13 at 13:32

dig on imsingh.com shows :

imsingh.com.        172683  IN  NS  ns1.imsingh.com.
imsingh.com.        172683  IN  NS  ns2.imsingh.com.

But ns1 and ns2 does not respond on port 53. You should probably check your fw conf to open DNS traffic to your ns1 and ns2.

share|improve this answer

You should add to your firewall somtehing like:

# Redirect DNS traffic (tcp/53 and udp/53) to DNS server
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 53 \
                              -j DNAT --to-destination 192.168.1.2:53

iptables -t nat -A PREROUTING -i eth0 -p udp --dport 53 \
                              -j DNAT --to-destination 192.168.1.2:53

iptables        -A FORWARD    -i eth0 -p tcp --dport 53 \
                              -o eth1 -d 192.168.1.2    \
                              -m conntrack --ctstate NEW -j ACCEPT

iptables        -A FORWARD    -i eth0 -p udp --dport 53 \
                              -o eth1 -d 192.168.1.2    \
                              -j ACCEPT
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.