BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

-4
votes
0answers
56 views

Creating zones and editing named.conf - Centos [on hold]

I am running CentOS, with bind(BIND 9.3.6-) installed, and accessing via SSH with PuTTy. My goal is to setup a nameserver for my domain d.org on my dedicated server 44.44.44.44 which also hosts the ...
1
vote
1answer
21 views

Bind views match-client from zone delegation

i've a problem with views using Bind9. I've a Microsoft DNS server with a domain "example.com" configurated to delegate the sub-domain "ds.example.com" to Bind DNS Server. In the Bind server i've ...
-1
votes
1answer
26 views

How to specify a DNS Slave server, that is on a different domain, in the appropriate zone file on the master naming server?

I am unsure if my question makes sense, but I am working on configuring a DNS Master/Slave setup. We currently have two domains. For privacy purposes, I will use "example" as my domain, we have ...
0
votes
0answers
20 views

DNS UDP Load Balancer - Is there X-forward-for like options? [duplicate]

We're using the Rackspace's UDP load balancer - however its only giving us internal 10.x.x.x addresses from our clients, and not the actual "external" of the external connection. On an HTTP Server I ...
3
votes
1answer
228 views

How would you setup a up an A record for any negative query?

How would I go about setting up an A record for in Bind9 for any negative queries? I want to forward our staff to an informational page if they were to visit a non existent domain. We have an internal ...
1
vote
1answer
23 views

IPv6 record will not take for rDNS

I added the following to named.conf zone "3IP6.A.B.C.ip6.arpa" { type master; file "3IP6.A.B.C.ip6.arpa"; allow-update { none; }; }; I then created my dns zone record called 3IP6.A.B.C.ip6.arpa ...
0
votes
0answers
65 views

bind “can't find example: SERVFAIL”

I'm trying to setup a dns server on my LAN because my router doesn't support nat reflection and I have virtualhosts which require a domain (can't be reached by IP address) running on apache. I'm not ...
0
votes
2answers
52 views

How do you load balance a forwarding only server… with no authoritive zones?

New Thought and possible answer to my Question? Would it be possible to change the root config file (the db.root with A/B/C/D/E/F/etc.ROOT-SERVERS.NET) and remove the original entries (i.e: ican ip ...
3
votes
2answers
97 views

bind not able to query some servers / domains

We have been experiencing problems with our company's DNS server when trying to resolve only certain domains, we are running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on a CentOS 6.5 server. We are ...
0
votes
2answers
15 views

Bind dont forward to secondary dns server as specified in “forwarders” under named.options.conf

I have bind9 setup to forward dns queries to machines connected localy trough the 192.168.1/24 network. The ip's that I forward the queries to are also my internet gateways. Sometimes one of the ...
2
votes
1answer
40 views

Performance-wise, is a DNS Slave better to have than two duplicate Masters?

I have two bind9 servers that are not setup with duplicate settings and know nothing about each other. Our CPU usage is sitting around 7% - 10%: mostly bind, which I believe is perfectly in range for ...
-2
votes
1answer
44 views

Iptables doesn't open port 53

I have been trying different ways of opening the port but for some reason doesn't work. The last set of lines that I have used is as follows: iptables -I OUTPUT -p udp --dport 53 -m state --state ...
0
votes
0answers
13 views

setting up DANE fails, error with “could not get cert chain from ssl”

I successfully setup DNSSEC and enabled it on my domain. I'd love to make use of my DANE. I created a standard self signed certificate openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem ...
0
votes
0answers
29 views

my sub domains vanish with time

I have a server running bind9. When the propagation is done and i ping domain.tld i get xx.xx.xx.xx (where xx.xx.xx.xx is the server IP), if i ping test.domain.tld i get xx.xx.xx.xx, at this point ...
0
votes
1answer
35 views

Named failed due to permissions and connect fail error

I'm facing a serious problem which has knocked out my server. For some unknown reason, named is no longer working, despite doing my best to remediation the issues found on the logs. I get this error ...
-2
votes
2answers
32 views

How do I secure a zone with dlv.isc.org's DLV service? [closed]

I'm setting up domain-lookaside validation. I think I got mostly everything correct. I followed the directions here: https://dlv.isc.org/about/using. I registered my domain and uploaded the key ...
2
votes
1answer
45 views

Cannot load reverse lookup zones containing “rich-text” PTR records

Summary I am attempting to set up Wide-Area Bonjour (aka DNS-SD) using ISC Bind 9.9.5, but cannot load reverse lookup zones providing discovery of "rich-text" service domains. Background According ...
1
vote
1answer
24 views

How to configure an additional BIND instance for a domain already described by other public name servers?

Background I have a small virtual server hosted by my provider and there I have configured a relatively simple combination of postfix, dovecot and roundcubemail (backed by nginx) that works OK. I ...
-1
votes
1answer
136 views

Dig shows external configuration? [closed]

I'm already trying for 2 days to deal with an answer for this problem. I have a virtual server somewhere and installed postfix/dovecot/mysql. It works somehow. I can login with Outlook with the ...
0
votes
0answers
22 views

bind9 internal domain name

For our internal network we're using domain names like user.int. I've setup bind to resolve those to the appropriate IP addresses. Since .int is actual top-level domain name(although used for just a ...
0
votes
1answer
50 views

Get a catch-all DNS and set a MX for a special domain

I'm trying to set a catch-all configuration with Bind. I've followed this answer and it works fine : http://serverfault.com/a/397011/179968 Now I'm trying to configure my MX record to configure my ...
2
votes
1answer
23 views

bind zone file setup for dns round robin

I would like to set up load balancing for my website using DNS round robin. My DNS is managed by my own CentOS 6 server running bind. I added the following into my zone file: @ ...
0
votes
1answer
49 views

Classless Reverse DNS with Recursion - BIND

I'm running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on CentOS 6.6. The only zone is for classless reverse DNS, which has been delegated. I'm no BIND or DNS expert, but as I understand it, classless ...
0
votes
1answer
39 views

BIND9 and Zone configuration doesn't “bind” domain

Named.conf File: options { #listen-on port 53 { 127.0.0.1; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file ...
0
votes
2answers
66 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
1
vote
1answer
30 views

Channelizing logs on Bind 8

I am using the following channel clause in my named.conf, logging { channel named_log { file "logs-remote/bind.log"; severity dynamic; print-category yes; print-severity yes; print-time yes; }; ...
0
votes
0answers
34 views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key ...
32
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
1answer
44 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
-1
votes
1answer
40 views

Would it be good idea to share DNS zone files via NFS?

Any expert advice on Bind DNS zone file transfer (master->slave) via NFS? Are there any drawbacks for not using Bind's zone transfer feature? Thanks a lot!
0
votes
2answers
37 views

Bulk Append text to all *.db files in folder (cPanel bulk DNS Insert)

I run my own DNS cluster using 1 server running cPanel/WHM and 4 servers (ns1-ns4) running cPanel DNS Only. I've just added the 4th DNS Only server (ns4.domain.com) but the problem is that all 200 of ...
0
votes
0answers
146 views

web server on a proxmox container using dns server on proxmox

Some background: I've got a little problem here. I have Promox installed on my primary server on which I've configured manually my DNS server with BIND9 with the domain example.com and works fine ...
1
vote
1answer
46 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
-1
votes
2answers
99 views

Bind only works Locally - Ping works locally not externally

I am using Bind on a Centos 6.5 server in order resolve subdomains to an IP. I have *.ddns.example.com and ddns.example.com pointing to my server via A record. I have added a zone for this, see ...
1
vote
2answers
62 views

Microsoft DHCP server and Unix BIND dynamic DNS

Is there any way to make Microsoft DHCP server to securely dynamically update A and PTR records in Unix Bind DNS zone? Microsoft supports secure update using username/password authentication. Bind9 ...
-1
votes
1answer
22 views

DNS zone servicing concepts

Currently I am working out some concepts about how DNS works and am running into a question I can't easily find an answer to on the internet. I am looking for an answer based on a set of questions ...
0
votes
2answers
60 views

Bind DNS not working?

I Know there always lots of answer about Bind. But somehow I can't understand the problem of my settings. Here is my configuration options { listen-on port 53 { 192.168.159.130; }; ...
0
votes
1answer
973 views

BIND failing to resolve with 'WARNING: recursion requested but not available'

there are no errors in the logs and query logging won't initialize iptables is fully disabled but the server will respond with "WARNING: recursion requested but not available" because my client ...
0
votes
2answers
196 views

URIBL_BLOCKED despite caching nameserver

I run a mail server for two people, Ubuntu 10.04 LTS. I have Spamassassin running via Amavis/Postfix. In many messages, I am getting URIBL_BLOCKED in the X-Spam-Status headers, which indicates that ...
1
vote
1answer
70 views

nsupdate failing on localhost - Bind 8

I have added a zone test.net via rndc locally and it is working fine. Next, I want to update it via nsupdate but locally, my zone configurations are, zone test.net {type master; file ...
0
votes
3answers
87 views

bind9 reverse zone dns config error - CNAME

i am trying to set up a reverse zone for my bind dns server, under the subnet 192.168.0.65/29 my zone datafile looks like this: @ IN SOA server.example.com. server.example.com. ...
0
votes
1answer
83 views

BIND: Forcing authoritative nameserver answer with no data on non-recursive requests (Research purposes)

Edit: I've simplified target goal as suggested by Andrew B. The goal is basically setting an authoritative name server to only give real answer on recursive requests, which means breaking the ...
0
votes
1answer
23 views

Nameserver setup Bind

I have setup a domain and nameservers as per below, but when I dig the domain, it is not working. The setup is as follows: I want a domain named iheartlotto.com, and the nameservers to be ...
0
votes
2answers
24 views

Bind Nameserver Setup

I setup bind on my debian box, and have setup my zone files to have my nameserver defined. When I dig, using for example: dig @123.456.789.123 ns1.mynameserver.com where 123.456.789.123 is the ...
1
vote
1answer
86 views

bind9 proper recursion setup

If I remove recursion then I can't resolve external domains but can still resolve domains that are on the DNS server. What is the proper way to setup recursion correctly so external domains can still ...
0
votes
3answers
46 views

bind9 SOA issue

using DNSStuff site to run checks against our bind9 DNS servers and it's coming back with One or more SOA fields are outside recommended ranges. Values that are out of specifications could cause ...
1
vote
2answers
49 views

why does dig +trace sometimes reply with a list of authoritative nameservers as well as the record?

using the examples below dig +trace stackoverflow.com dig +trace google.com dig +trace yahoo.com dig +trace bbc.com the first two show me only the A records for the queried domain, while the last ...
0
votes
0answers
17 views

RNDC is not reloading my ACL list in Bind, how can I make it reload without losing Cache?

I have two ACL's, one expired, and one authorized. When I make a change to the ACL and try: rndc reload and rndc reconfig I do not see that the ACL was refreshed. Any ideas?
-3
votes
1answer
72 views

Overwriting Internet Ads with our own for our Proxy Server [closed]

We offer free internet access to customers. We proxy all we can to improve speed as it is a heavily used service. If not illegal, we would like to offer our own google and non google ads in places on ...
1
vote
1answer
42 views

What is a quicker DNS Setup?

We have two DNS servers that are restarted frequently to update ACL lists. The two servers are independent, and we have the second DNS server set to update its ACL lists 5 seconds after the first one ...