BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

3
votes
3answers
170 views

How do I allow user to reload zone file?

I have a pool of authoritative DNS servers that have to host zones for 5 users each of which have between 2 and 10 zones. Each user can ssh to the servers using public key authentication. The ...
2
votes
2answers
58 views

In windows server 2008, how do I disable recursive dns and continue to navigate the internet?

I have a single win2008 server configured to use vpn and remote desktop. My host provider demanded I remove recursive DNS. If go to dns role / group / properties / advanced and click disable ...
-1
votes
1answer
43 views

Unrealistic number of zones in rndc status

I get 102 zones when I do rndc status. My BIND9 server is only authoritative for 1 zone (that's the site that I host on my LAMP server). I'm aware that it could be an extra ten or so zones, due to the ...
0
votes
0answers
8 views

bind dns configuration in windows

I am configuring BIND DNS in windows.Can I add multiple IP addresses(like two different networks) for an single DNS server to listen on? So we network A request for resolution it perform that and when ...
0
votes
0answers
34 views

NSD/BIND — how to log dns resolver ip and edns

Do BIND and NSD support verbose logging of the DNS resolver's ip address for a query? If the vanilla releases do support that, what's the best practice for enabling/configuring that functionality. ...
2
votes
1answer
76 views

PTR record format for IPv6

What is the difference in the following two IPv6 PTR formats? 4.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR smtp.example.com. ...
0
votes
1answer
21 views

How do I change default WHM nameservers? [closed]

When I originally set up WHM, I listed ns1.example.com and ns2.example.com as the nameservers. They have since changed to ns3 and ns4. When I create a new account, how do I get WHM to automatically ...
0
votes
2answers
44 views

What's the issue of have all dns server as master zone

I want to configure 4 dns server using bind. Is there any problem to configure all of them as master with no dns transfer. # server one zone "example1.com" { type master; file ...
0
votes
1answer
60 views

BIND9 private DNS server with OpenVPN config file errors

I am setting up a private DNS server that will only be accessible by my OpenVPN users. OpenVPN is setup on the tun0 interface of my Ubuntu 14 server. The issue is that I am getting some errors. I am ...
0
votes
1answer
70 views

Master and slave bind DNS servers with different version

I am having issues with my master-slave setup, so I'm trying to release what is an causing troubles. Master is running on CentOS Linux release 7.1.1503 (Core) and using BIND ...
1
vote
2answers
39 views

/etc/resolv.conf to overwrite local bind

I have set up my /etc/bind to set up the following: dig @127.0.0.1 +noall +answer SRV _my-sub._tcp.example.com _my-sub._tcp.example.com. 300 IN SRV 0 0 12379 a0.example.com. ...
0
votes
1answer
34 views

localhost srv record forwarding in ubuntu

I want to each url to be forwarded to in my localmachine. For example: sub1.domain.com ---> http://localhost:1111 sub2.domain.com ---> http://localhost:2222 sub3.domain.com ---> ...
-1
votes
1answer
83 views

NAPTR records in DNS BIND

I am trying to configure Naptr records in dns bind in window 7.I have the following zone file $TTL 6h @ IN SOA sip-udp01.example.org. root.example.org.( 2016010101 ...
3
votes
1answer
141 views

What rate limiting options are provided by ISC BIND?

This is a Canonical Question about rate limiting in the ISC BIND nameserver software. Recently I've heard of BIND's rate limiting features. DNS RRL in particular seems to be becoming more ...
0
votes
1answer
817 views

block DNS Amplification Attack by iptables

Last time I've got warings about DNS Amplification Attack from NFOservers.com DDoS notifier 2015-12-30 23:28:52.609178 IP (tos 0x0, ttl 54, id 42635, offset 0, flags [+], proto UDP (17), length ...
1
vote
1answer
149 views

bind: data/named.run permission denied

I just installed Fedora 23 and bind-9.10 on it and the default installation does not run. I only created a zone file (which has ok-ed by the syntax check process), but this error is not related to any ...
0
votes
0answers
40 views

DNSSEC Key Rollover

I trie to get the auto key rollover to get to work on my testsystem: /etc/bind/named.conf.options : options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; ...
3
votes
1answer
35 views

Automatically assuming master for several zone files

Now that I'm moving my main server, I'm spending some time refining and simplifying some of its setup, and it has now come to the DNS server (bind 9.9.5 in the new setup). I noticed that in my ...
3
votes
2answers
65 views

Block misconfigured DNS entries on BIND DNS Cache

I'm running a web crawler with its own BIND DNS Cache. Our code resolves using our DNS cache and makes GET request with Python's requests library. The problem is that many FQDNs are misconfigured and ...
1
vote
2answers
58 views

Trouble adding a DNS subdomain using Bind9.9, with the NS in the subdomain

I had a setup using an older Bind which is no longer working once I started using Bind9.9... The named.conf is still the same, with recursion active and the zone I'm using has no forwarders. However, ...
1
vote
1answer
57 views

IPv6 resolving as loopback/private IP

I'm running a web crawler and I received some reports from my datacenter about connections directing to private IPs (like 10.0.0.1). I've implemented a loopback/private ip check to my crawler code and ...
3
votes
1answer
65 views

Order of search for name resolution in Unix/Linux

Lets say the /etc/resolv.conf has the following.. nameserver 10.10.10.10 search x.com y.com For a resolution "ping foo" I see that the resolver first tries the FQDN with configured search domains ...
1
vote
1answer
39 views

Using DNSSEC with private TLD

I'm playing with DNSSEC for my domain, my DNS server is dual homed (with suitable limits on what can be queried on the public interface) and covers both my public domain, but also a private top level ...
1
vote
3answers
58 views

BIND (forwarder+cached) - serve cached if forwarder fails

I want to configure BIND as DNS forwarder and utilize caching too. How can I configure it to serve cached results (even if beyond TTL) if forwarder fails? This questions was already asked here but ...
0
votes
2answers
34 views

Bind allow zone transfer from NS IPs defined in zone files

I am Setting up a Bind Server and am migrating the zone files from a Windows Server 2003 that used to be the DNS Server in charge. (I'm running Bind 9.9.5 on Ubuntu 14.04 LTS) On the Windows Server ...
3
votes
3answers
233 views

Block ANY request in Bind

I'm having trouble figuring out how to block ANY dns request on BIND to lower the changes of a DNS Amplification attacks. I've seen guides online but most of them appear to perform rate limit via ...
2
votes
2answers
60 views

What is an open DNS resolver, and protect from dns amplification?

I was wondering if I limit ACL access to my nameservers that allow recursive, the worst that could happen is someone launching a dns amplification on any of the allowed host in the ACL? For example: ...
1
vote
2answers
58 views

Set global DNS server

I've bought domain on GoDaddy. I've installed BIND server on my CentOS VPS. I set its IP on /etc/resolve.conf on other server, and I was able from that other server to ping domain names that are set ...
0
votes
1answer
38 views

bind9 not resolving specific domains [closed]

Right. So I have set up this bind9 server to act as a local DNS server. Everything worked okay up until recently it refuses to resolve domain names like http://www.google.com.au/ ...
0
votes
0answers
32 views

Bind9.10 inline signing 'loadkeys' failing

I have using the exact same rndc method to load inline signing keys as what worked yesterday, but today the same steps are failing? a stuck key? # rndc flush # rndc reconfig # rndc addzone domain.com ...
2
votes
1answer
33 views

bind9 got “bad zone transfer request”

My Debian-server acts as a DNS server for the domain I own. Since my ISP also allocated me a sub-domain, my DNS server also has a few entries for that host. In other words, I have ...
1
vote
0answers
32 views

FreeBSD Bind locks up, only clue -> in6_ifadd: 2001:~ is already configured

I have an issue where my DNS locks up periodically (about twice a day). All normal and then suddenly denied access to net_if network: error: could not listen on UDP socket: permission denied When ...
0
votes
2answers
56 views

Block access to ns1.example.com, mail.example.com

I have a VPS (CentOS 7) with 2 IP addresses. I am hosting my own DNS server using Bind. Running Apache. Amongst others I have "A" records for ns1.example.com -> X.X.X.X ns2.example.com -> ...
-1
votes
1answer
118 views

Bind9 DNS - How to redirect domain to another domain

I'm trying to redirect facebook.com ( and all subdomains ) to google.com, however I appear to be missing something. zone "facebook.com" { type master; file "/etc/bind/nene-block"; }; That ...
0
votes
1answer
105 views

rndc delzone {zonename} : permission denied

System is: Debian GNU/Linux 8.2 (jessie) BIND 9.9.5-9+deb8u3-Debian (Extended Support Version) named.conf.options: options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; ...
0
votes
1answer
28 views

bind9.10 dnssec inline signing failing

I am pretty sure the ultimate error is this: [\u@r2d2:/home/ex-mailer-domains/domain.com] # dig domain.com +dnssec @8.8.8.8 ; <<>> DiG 9.10.3 <<>> domain.com +dnssec @8.8.8.8 ...
0
votes
1answer
78 views

dnssec remove keys from zone

is there a way to remove all dnssec related stuff from a zone on a running bind server? I configured bind like like here described. If i use rndc signing -clear all domain.tld nothng happens to the ...
0
votes
1answer
38 views

dnssec-keygen key default validation / expiration time

What is the default expire time/period for a key, generated by dnssec-keygen: If i execute: dnssec-keygen -a RSASHA256 -b 2048 -f KSK mydomain.com I get 2 files: (Kmydomain.com.+008+21346.key) ; ...
0
votes
2answers
40 views

BIND resolved IP address into logfile

I have a challenge where the log files are not recording the resolved IP address in the logged information. How is it possible to enable this? So the url and resolved IP address should be in the ...
0
votes
1answer
117 views

BIND DNS (with IPA) unable to Forward DNS Requests

I have been trying to install IPA on my CentOS system for several days, but I keep experiencing a problem with DNS forwarding, in that I am unable to get it working. I have tried this with two DNS ...
1
vote
0answers
225 views

I get “ERR_EMPTY_RESPONSE” on my website when i'm using proxy

I have a dedicated server with: Ubuntu 14.04.3 BIND 9.9.5-3ubuntu0.5-Ubuntu (Extended Support Version) Nginx version 1.9.6 On Port 81 PHP 5.5.30 (cli) with Zend OPcache v7.0.6-dev MySQL 5.5.45 UFW ...
0
votes
1answer
21 views

With bind, is it possible to define one particular A record for any domain?

I want to publish the auto-discovery wpad record for any domain the client is in, without having to declare those domains in my DNS server. Is it possible to define a record for any domain. Such that ...
1
vote
3answers
139 views

Intermittent NXDOMAIN responses for certain records with low TTLs

We're experiencing a peculiar issue with our bind installation (version 9.8.4). In this scenario, bind is configured as a caching name server for a small network. For the large majority of queries, ...
0
votes
0answers
58 views

Split horizon bind dns server setup

I have two servers. The first is a publicly accessible one held by my web host to which the domain example.com is assigned. The second server is my company's private LAN server which has bind dns ...
1
vote
1answer
35 views

what happens if the authoritative DNS servers and the NS records don't agree

What happens if the NS records in a zone don't agree with the root nameserver delegation for that same zone? In other words, if a registrar knows that the authoritative nameservers for example.com ...
2
votes
2answers
49 views

Bind Server issue: Can not nslookup from client when DNS Master is down, but still can connect to Internet

I setup 2 Bind servers on Ubuntu Server 14.04. The first one is Master DNS and the second is Slave. I have a DHCP server running isc-dhcp-server and assign 2 DNS Server IP for clients Everything seem ...
1
vote
3answers
85 views

Reverse DNS is not working

I got a mail server that can't send outbound because I don't have my reverse dns entries correct. Admittedly at first I knew it wasn't configured properly but from every single example I could find on ...
0
votes
1answer
26 views

Split DNS Bind9 views match-client request IP

I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server. Psuedo: If ...
0
votes
1answer
44 views

Resolve DNS Misconfiguration abuse complaint

Today i received a abuse complaint about my dns server. Translation courtesy of Froggiz Hi, The CERT-FR has been informed by one of his partner that one or more domain name server (DNS) ...
0
votes
2answers
74 views

DNS resolution speed

I'm trying to speed up my webpage load time in distant locations. My server is located in Germany and I installed the second one in LA, CA. Then I configured BIND to return LA IP for clients from ...