Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two Ubuntu 12.04LTS servers on different locations: points to master DNS server with IP and points to slave DNS server with IP

named.conf.local include for domain is:

zone "" {
        type master;
        file "/var/lib/bind/";
        allow-update { none; };
        allow-transfer { none; };

My zone file is:

$TTL 86400             IN SOA (
                                2013042201 ; serial
                                3600       ; refrenski
                                1800       ; retry
                                604800     ; expire
                                86400      ; minimum

I get an error on

Name server does not answer queries over TCP or UDP.

syslog looks fine: server named[3871]: zone loaded serial 2013042201 Port 53 is opened.

What am I doing wrong, what am I missing?

share|improve this question

migrated from Mar 24 '14 at 11:52

This question came from our site for pro webmasters.

What address(es) is port 53 bound to, iptables, firewall for your network? If that domain is new, the serial should be YYYYMMDD00. – NickW Mar 24 '14 at 12:11
The domain is not new (it is a few years old), server is behind router with firewall, port 53 is forwarded. I dont't think the problem is in the network, becuase untill now server on ns1 location was my only dns server and it worked fine. – Nejc Vidrih Mar 24 '14 at 13:28
The serial is used to inform the slave that the zone has been updated, but that isn't your primary problem. What does the listen: stanza state in your named.conf? – NickW Mar 24 '14 at 13:35
Ok, I have fixed the serial. I don't have any listen: in named.conf(.options). – Nejc Vidrih Mar 24 '14 at 13:40
Hmmm, what do you get if you type netstat -pan | grep :53 ? – NickW Mar 24 '14 at 14:20

The solution is simple, you need to add a line like this to your named.conf

listen-on port 53 {;; };

As the default setting for bind 9+ is to listen by default only on

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.