BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

0
votes
0answers
7 views

maraDNS NON-AUTH timeout

I've set up maraDNS to provide my own DNS records. I've pointed the domain nameservers at my registrar to ns1.domain.co.uk and ns2.domain.co.uk (using domain in place of actual domain name). I cannot ...
0
votes
0answers
21 views

Debugging private DNS - PTR not working?

I'm using a slightly modified version of named 9.8 to manage an internal-only domain. The forward lookups are working ok but reverse isn't. There aren't any error messages - just no hostname returned. ...
0
votes
1answer
13 views

Bind Requested DNS Server IP Log

I have a DNS Server which runs on a virtual linux box with several IPs. Bind provides some pretty detailed debug logs, however, one piece of information that doesn't seem to be logged is the requested ...
0
votes
1answer
39 views

Forwarder dns not resolving reverse lookups

I have created one new dns server in lab and its working properly. Earlier we were using another dns server for lab pc's as 10.20.30.xx. which is outside the lab premises. now issue with newly created ...
1
vote
1answer
32 views

BIND DNS zone coalfired.net/IN: coalfired.net.coalfired.net/NS 'ns2.thirteen.pm.coalfired.net' has no address records (A or AAAA)

Since I updated my BIND DNS server I seem to be having problems with it. For some reason, when I try to start the server I get errors such as this appear: zone coalfired.net/IN: ...
6
votes
3answers
164 views

How to prevent Bind from responding to requests outside whitelisted IP ranges?

We all know about open resolvers, this question is kind of for the inverse situation. I have a DNS server that is locked down to certain CIDRs acl trusted {[..] options { [..] allow-query { ...
-1
votes
2answers
53 views

How to configure Bind9 to return a fixed IP on non-exist request?

I want that Bind9 returns a fixed IP to the clients when them request invalid(non-exist) domain name to it. For example: Client requests the doesnotexist.co domain. This domain is not found by the ...
1
vote
2answers
71 views

Is ISC BIND unaffected with OpenSSL Heartbleed bug?

There is a bug Heartbleed in OpenSSL. I built ISC BIND 9.9.5 with OpenSSL 1.0.1e enable. Should I re-built BIND with OpenSSL 1.0.1g?
0
votes
2answers
54 views

Why BIND does not use the forwarders any more?

BIND does not use the forwarders to resolve any more. It just goes to the root servers. I do not know when this started happening since everything worked transparently, but for sure bind configuration ...
0
votes
0answers
19 views

DNS secondary server for external domain and DNS lookup fails

Dedicated server CentOS 6, Parallels Plesk Panel 11.0.9 (64 bit) ISP: 1&1 Problem 1 (Solved): Google and other mail providers were classifying as spam, messages sent from mydomain.com using PHP ...
0
votes
0answers
30 views

Master DNS allows External Forward, Slave does not

We have a 2 master setup that was built poorly, so we want to downgrade the second master to a slave configuration, I try and run the conversion and it works well enough internal addresses, but when ...
1
vote
1answer
24 views

PTR record created, but not found

We are a small ISP, using linux DNS servers. Recently a client has asked us to create a rDNS zone for a specific IP address, which is used for a mail server. They keep getting message failures for ...
17
votes
1answer
238 views

When I have a * entry in my zone file, how can I treat a specific name as nonexistent?

On our main domain, example.com we're hosting a lot of websites. So we just added a * A/AAAA record to our zone and pointed it at our webserver. Sadly, this also causes Outlook to constantly hammer ...
0
votes
3answers
44 views

How to correctly register in my DNS servers whose IPs and names are handled by someone else?

I use a virtual server (several similar cases) set up and registered by someone else. Its IP is 10.0.0.1 and name a.example.com (both handled by the "someone else" above). I manage the domain ...
1
vote
2answers
58 views

Failing in resolve reverse name

I can't properly resolve my reverse name. In my configs, I replaced my IP address by X1.X2.X3.X4, and my domain name by domainname. I have been following this tutorial, in which it first resolves the ...
3
votes
0answers
55 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
1
vote
1answer
27 views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
1
vote
1answer
29 views

Is BIND9 what I'm looking for?

I just purchased a dedicated server and have Debian 7 installed. I of course want my server to work with my domain, so I assume what I need to do is install BIND9 on the dedicated server and configure ...
0
votes
1answer
31 views

Why is bind asking for this extra parameter in my zone file?

I'm creating a zone file for a fake root because this is a closed network with no Internet access. I've created the following zone file but for some reason, bind is requiring an extra parameter; ...
1
vote
1answer
32 views

Are there DNS servers supporting ALIAS type for apex records?

DNSimple and AWS Route53 are supporting ALIAS records that allow similar functionality to CNAMES for @ (Apex) records in DNS. I'm running a DNS server (Bind) that is currently hosting around 1500 ...
0
votes
0answers
11 views

apache running 'host' process on CentOS 5 [duplicate]

Over the last two days a pair of my older machines have been spewing out traffic to port 80 on countless other servers to the tune of > 4MB/s. The only thing I've noticed out of whack is that the ...
-1
votes
0answers
11 views

Redirect a domain using bind9 [migrated]

I researched various topics before asking. But found my solution. So sorry if I could have used another topic. My problem: I have a fixed ip and server ip with another fixed. Primary Server: ...
0
votes
0answers
36 views

filter/drop unwanted DNS requests to BIND [duplicate]

I have a public, non-recursive Bind DNS server running on Ubuntu to provide authoritative DNS for our domain. We get a lot of erroneous domain look-ups which I'm sure are an attempt to involve us in ...
4
votes
0answers
76 views

Entropy Deprivation on Bind / Named Servers

I noticed that my DNS servers are having low points in the available entropy: (Note it doesn't stay that low, but within 10 minutes there are several low points (this graph shows the min of 10 min ...
1
vote
1answer
39 views

TLS on SRV Records

The SRV records comply with this format: _service._proto.domain (and some other values here...). I want to know if anyone has ever used in _proto - tls. TLS is not a transport protocol, so, is it ...
2
votes
2answers
74 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
1
vote
0answers
20 views

How to DNSSEC Sign Bind9 Reverse Zone

I'm using bind9 and dnssec-keygen/dnssec-signzone. I've had no problem signing my forward zones however I cannot seem to find any documentation on signing reverse zones. What is the process for this?
1
vote
1answer
46 views

Fix slow SSH login due to reverse lookup without disabling UseDNS

Whenever I try to connect to my server from Azure VM it takes a lot of time due to failing reverse DNS lookup. I can disable lookups with UseDNS no and completely bypass the problem but this makes ...
0
votes
2answers
41 views

Configuring DNS with router and BIND

Goal I am trying to setup a local DNS server here in our office. Problem Apparently Comcast has a loop-back so when we configured the domain to go to our IP it works outside of the office but ...
2
votes
1answer
22 views

Bind9 reverse DNS configuration not working.

I am trying to set up a custom virtual DNS server in Ubuntu. When I try to nslookup with a windows 7 pc within the same virtual environment the reverse DNS seems te fail. My named.conf.local file: ...
2
votes
2answers
88 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...
0
votes
1answer
27 views

How can I configure dhcpd to only update the reverse zone in bind?

I've got dhcpd pushing updates to bind, and it seems to be working fine: named[24161]: client 192.168.10.1#59141: signer "dhcp_updater" approved named[24161]: client 192.168.10.1#59141: updating zone ...
-2
votes
1answer
37 views

domain-search value on my clients computer [closed]

I need help with configure my DNS and DHCP server - I have spent some time searching on google but have not got any informations regarding my problem. I have an Ubuntu 12.04 server running and use ...
0
votes
1answer
42 views

BIND Domain name transclusion/zone mirroring

Is there a way to create a DNS record that fully mirrors another website? Which is to say, *.foo.tld/* maps to *.bar.tld/* so any query for foo.tld will be served up by bar.tldbut the DNS will appear ...
0
votes
1answer
22 views

DNS resolution failure when querying through server IP

I have a DNS zone file with the following config : $TTL 86400 $ORIGIN example.com. @ IN SOA ns1.example.com. dns.example.com. ( 2014022604 ; Serial ...
1
vote
1answer
41 views

Running authoritive nameserver in ipv6 only environment?

What are the arguments against running an authoritive nameserver (primary) e.g. bind in a ipv6 only environment? In the current setup the machine dedicated to the nameserver has only direct ipv6 ...
3
votes
1answer
102 views

What is the syntax of email address with a dot behind it? in DNS zone file, SOA rr

How i can use a email address with a dot in behind. For example at bellow, email address is hostmaster@example.com, How to use host.master@example.com ? example.com. IN SOA ns.example.com. ...
0
votes
1answer
25 views

Effects of publishing DNSSEC DS records without signing public zone?

We at example.com are being pressured to implement DNSSEC by a sub-division of our organisation: security.example.com. Our current name servers ns1.example.com and ns2.example.com are unsigned, ...
3
votes
3answers
138 views

How to combine Active Directory with Split-Horizon DNS?

I'm in a quandary. I need to implement Split-Horizon DNS in my office based on subnet. For example: Users in 10.170.0.0/16 need to resolve "srv01.extra.company.com" to 10.170.0.5 10.25.0.170 Users ...
2
votes
1answer
36 views

DNSSEC auto signing and file handling

I would like to know how files are handled in a auto-dnssec environment. My current setup (non-DNSSEC) places the zones files in /var/named/data. These files are then read by the bind server. If I ...
0
votes
1answer
68 views

BIND9 DNSSEC: should I care about occasional “insecure” log messages

A small number of my forwarded DNS queries cause BIND 9 to log messages such as: 184.in-addr.arpa SOA: got insecure response; parent indicates it should be secure validating @0x7f93140c0870: ...
0
votes
1answer
34 views

bind did not responde out of server

I have problem with bind server configuration. ​Result for lookup on 8.8.4.4: root@server1:~# dig @8.8.4.4 webexamplesite.com ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @8.8.4.4 ...
-1
votes
1answer
36 views

DNS how to dynamically bind subdomains to ip and port pairs [duplicate]

I'm using bind9 I have a zone file setup with a few subdomain A records. I'm wondering if I can create a subdomain record that points to an ip address on a specific port. I'm currently updating the ...
-1
votes
1answer
50 views

Masking CNAME/A Record Requirements from Clients

I'm reselling hosting services to non-technical clients. With regards to associating domains/IPs, the host I'm reselling requires that once a VPS is deployed i then go to the domain's registrar and ...
0
votes
0answers
24 views

RPZ in Bind and wildcards

I'n not sure if this is possible. I am able to setup a DNS with RPZ zones for blacklisted domains and whitelisted domains. The problem is that I want to whitelist only a couple domains while ...
0
votes
2answers
47 views

BIND: Whitelist IPs using nsupdate

I know that we can add any kind of DNS records in BIND DNS server using nsupdate. Can we whitelist or blacklist any ip in realtime using nsupdate. We whitelist only certain IPs to prevent our DNS ...
1
vote
0answers
38 views

Woes with named/bind and forwarding zones

I'm sadly restricted to a very old version of bind (9.4.2) This is the think. If I setup bind with a named.conf and only forwarding it works perfect. acl clients { any ; }; options { ...
1
vote
1answer
165 views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
1answer
38 views

Is it possible to make one public ip point at different servers within a local network? [closed]

Title is a bit vague so here i go! Basically i have setup a local dns server that allows me to use my local network using hostnames. e.g. dns.subdomain.home i would like all these servers to be ...
2
votes
1answer
62 views

Publishing long domain key records in bind9

I am setting up a mail system based on exim4. This system implements DKIM signing and checking (among other things). Signing seems to work without problems but checking doesn't work and exim4 ...