BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

0
votes
1answer
42 views

Multiple DNS records with different networks

So I have Ubuntu 14.04 VMs running in an OpenStack environmnet. The DNS machine has an external IP (10.14.6.3) and an internal IP (192.168.1.3). I have two other machines within the same project [h1] ...
-2
votes
2answers
79 views

How to set BIND9 with the ability to resolve internal domain addresses (CentOS) [closed]

I have some problem. I have a domain controller on windows server 2003 with dns server. IP that dns is: 192.168.110.5. For example, i have some computers with names: guard-01.piduna.pp.ua. ...
1
vote
0answers
18 views

vsftpd adds server own domain name suffix to host name

I have the following issue with vsftp (and asterisk, by the way): When I'm connecting from 37.229.152.222 to vsftpd server, I get timeout and lots of errors in bind log that is running on the same ...
1
vote
1answer
36 views

Bind9 warning on Debian

I'm running a Bind9 (9.8.4-rpz2+rl005.12-P1) DNS on a Debian 7.9 server and all is working fine, but whenever I try to restart the named service I get the following error into syslog: WARNING: key ...
0
votes
2answers
60 views

Why has DNS Stopped Working for new CNAME and TXT records

None of the new CNAME and TXT records I add (through VestaCP) are working. My DNS server has been working fine. Got about 30 domains on it, used to be able to create these records and a few hours ...
0
votes
1answer
37 views

OpenDNS: got insecure response; parent indicates it should be secure

I'm using Ubuntu 14.04.4 LTS on following system: root@ubuntu-1gb-nyc2-01:~# uname -a Linux ubuntu-1gb-nyc2-01 3.13.0-77-generic #121-Ubuntu SMP Wed Jan 20 10:50:42 UTC 2016 x86_64 x86_64 x86_64 ...
4
votes
3answers
1k views

Glibc bug mitigation for getaddrinfo()

Ran across an exploit for glibc today which involves the getaddrinfo() call for DNS resolution. I'm running Ubuntu 12.04 on two Bind9 boxes that face the internet. I'm not sure I totally understand ...
0
votes
0answers
42 views

Ceph Gateway always shows error 500

I have problem with radosgw. I have pass this tutorial but without success: http://docs.ceph.com/docs/hammer/radosgw/config/ When I try: curl http://porunov.com I always get the same page: ... ...
1
vote
1answer
23 views

How to identify that BIND is running under chroot

I am trying to run BIND under chroot on Ubuntu and CentOS. Installing it on CentOS is pretty straight forward with just installing the packages - bind and bind-chroot, while Ubuntu is a little more ...
0
votes
2answers
77 views

why bind9 gives connection refused for permission denied error when it is 777

These questions didn't help: http://askubuntu.com/questions/172030/how-to-allow-bind-in-app-armor Cannot start BIND9 I wanted to start bind9 and saw that it gives permission denied in syslog as ...
0
votes
0answers
27 views

Active Directory DDNS update with a DNS Hidden Master

Active Directory queries DNS server for a SOA(master DNS) record before sending out Dynamic DNS updates to the master DNS. Would AD still work if we set up a hidden master for DNS ? Usually Hidden ...
1
vote
2answers
24 views

How to Master-Master propagate BIND DNS across two or more servers

I have two webservers and plan on adding more. I'm using BIND as a Master Nameserver on each. The issue is that I plan on adding more Servers and need some way to propagate DNS records between each ...
1
vote
0answers
28 views

In a BIND.. Weird DNS issue

I have now somehow replicated a weird issue with one of my DNS zones on two different servers and with two different versions of ISC BIND. I have a sub-domain delegated to my server. The first time ...
1
vote
1answer
46 views

Configure bind9 to forward queries as-is and to reply answers as-is, or in search of perferct forwarder

I use bind9 server (A.A.A.A) as forwarder only: queries are forwarded to other DNS server (B.B.B.B). I manually ask B.B.B.B to resolve domain and got correct result: $ dig a downloadcenter.intel.com ...
0
votes
0answers
35 views

(Apache2 and Bind9) DNS not Resolving IP on Some Sites (Intranet)

I am going to start off by saying I am new to DNS and Ubuntu Headless Servers. However I am not new to computers and programming in general. I got a wild hair one day and built an Ubuntu Server ...
0
votes
1answer
49 views

Recursive forwarding Bind DNS server not answering from cache

Problem Statement I have a bind caching and forwarding server that is functioning almost as expected. All queries are forwarded, their TTL is cached. At first blush, everything appeared normal ...
0
votes
1answer
24 views

bind9 with $GENERATE in PTR records and a lots of 'ignoring out-of-zone data'

I have a next issue. I have subnet 92.222.0.0/17 and I rule reverse records of it. Definitions of zones are the next: zone "123.222.92.in-addr.arpa" { type master; file ...
2
votes
1answer
30 views

How to properly configure a classless reverse zone in BIND 9

I'm trying to configure reverse DNS for a sub Class C block. My ISP has delegated 128/25.2.0.192.in-addr.arpa. I've spent a good few hours reading everything I can find on classless reverse map ...
1
vote
1answer
65 views

DNS RPZ zone queries are being “refused”

I am testing out the BIND Response Policy Zone feature on our lab DNS server. We run a RHEL 6 server with BIND 9.8.2. I have followed the instructions here but I can't get it to work. Here is what I ...
0
votes
1answer
117 views

Bind9, Ubuntu 14.04, rndc: connect failed: 127.0.0.1#953: connection refused, no error logs

I'm attempting to start a DNS slave and It was working yesterday. I'm not sure what I changed but it is giving me (today I added a different method of getting the zone files, but it didn't change any ...
3
votes
3answers
172 views

How do I allow user to reload zone file?

I have a pool of authoritative DNS servers that have to host zones for 5 users each of which have between 2 and 10 zones. Each user can ssh to the servers using public key authentication. The ...
2
votes
2answers
73 views

In windows server 2008, how do I disable recursive dns and continue to navigate the internet?

I have a single win2008 server configured to use vpn and remote desktop. My host provider demanded I remove recursive DNS. If go to dns role / group / properties / advanced and click disable ...
-1
votes
1answer
49 views

Unrealistic number of zones in rndc status

I get 102 zones when I do rndc status. My BIND9 server is only authoritative for 1 zone (that's the site that I host on my LAMP server). I'm aware that it could be an extra ten or so zones, due to the ...
0
votes
0answers
8 views

bind dns configuration in windows

I am configuring BIND DNS in windows.Can I add multiple IP addresses(like two different networks) for an single DNS server to listen on? So we network A request for resolution it perform that and when ...
0
votes
0answers
35 views

NSD/BIND — how to log dns resolver ip and edns

Do BIND and NSD support verbose logging of the DNS resolver's ip address for a query? If the vanilla releases do support that, what's the best practice for enabling/configuring that functionality. ...
2
votes
1answer
82 views

PTR record format for IPv6

What is the difference in the following two IPv6 PTR formats? 4.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR smtp.example.com. ...
0
votes
1answer
21 views

How do I change default WHM nameservers? [closed]

When I originally set up WHM, I listed ns1.example.com and ns2.example.com as the nameservers. They have since changed to ns3 and ns4. When I create a new account, how do I get WHM to automatically ...
0
votes
2answers
44 views

What's the issue of have all dns server as master zone

I want to configure 4 dns server using bind. Is there any problem to configure all of them as master with no dns transfer. # server one zone "example1.com" { type master; file ...
0
votes
1answer
77 views

BIND9 private DNS server with OpenVPN config file errors

I am setting up a private DNS server that will only be accessible by my OpenVPN users. OpenVPN is setup on the tun0 interface of my Ubuntu 14 server. The issue is that I am getting some errors. I am ...
0
votes
1answer
79 views

Master and slave bind DNS servers with different version

I am having issues with my master-slave setup, so I'm trying to release what is an causing troubles. Master is running on CentOS Linux release 7.1.1503 (Core) and using BIND ...
1
vote
2answers
41 views

/etc/resolv.conf to overwrite local bind

I have set up my /etc/bind to set up the following: dig @127.0.0.1 +noall +answer SRV _my-sub._tcp.example.com _my-sub._tcp.example.com. 300 IN SRV 0 0 12379 a0.example.com. ...
0
votes
1answer
35 views

localhost srv record forwarding in ubuntu

I want to each url to be forwarded to in my localmachine. For example: sub1.domain.com ---> http://localhost:1111 sub2.domain.com ---> http://localhost:2222 sub3.domain.com ---> ...
-1
votes
1answer
112 views

NAPTR records in DNS BIND

I am trying to configure Naptr records in dns bind in window 7.I have the following zone file $TTL 6h @ IN SOA sip-udp01.example.org. root.example.org.( 2016010101 ...
3
votes
1answer
157 views

What rate limiting options are provided by ISC BIND?

This is a Canonical Question about rate limiting in the ISC BIND nameserver software. Recently I've heard of BIND's rate limiting features. DNS RRL in particular seems to be becoming more ...
0
votes
1answer
1k views

block DNS Amplification Attack by iptables

Last time I've got warings about DNS Amplification Attack from NFOservers.com DDoS notifier 2015-12-30 23:28:52.609178 IP (tos 0x0, ttl 54, id 42635, offset 0, flags [+], proto UDP (17), length ...
1
vote
1answer
201 views

bind: data/named.run permission denied

I just installed Fedora 23 and bind-9.10 on it and the default installation does not run. I only created a zone file (which has ok-ed by the syntax check process), but this error is not related to any ...
0
votes
0answers
43 views

DNSSEC Key Rollover

I trie to get the auto key rollover to get to work on my testsystem: /etc/bind/named.conf.options : options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; ...
3
votes
1answer
36 views

Automatically assuming master for several zone files

Now that I'm moving my main server, I'm spending some time refining and simplifying some of its setup, and it has now come to the DNS server (bind 9.9.5 in the new setup). I noticed that in my ...
3
votes
2answers
74 views

Block misconfigured DNS entries on BIND DNS Cache

I'm running a web crawler with its own BIND DNS Cache. Our code resolves using our DNS cache and makes GET request with Python's requests library. The problem is that many FQDNs are misconfigured and ...
1
vote
2answers
65 views

Trouble adding a DNS subdomain using Bind9.9, with the NS in the subdomain

I had a setup using an older Bind which is no longer working once I started using Bind9.9... The named.conf is still the same, with recursion active and the zone I'm using has no forwarders. However, ...
1
vote
1answer
61 views

IPv6 resolving as loopback/private IP

I'm running a web crawler and I received some reports from my datacenter about connections directing to private IPs (like 10.0.0.1). I've implemented a loopback/private ip check to my crawler code and ...
3
votes
1answer
66 views

Order of search for name resolution in Unix/Linux

Lets say the /etc/resolv.conf has the following.. nameserver 10.10.10.10 search x.com y.com For a resolution "ping foo" I see that the resolver first tries the FQDN with configured search domains ...
1
vote
1answer
45 views

Using DNSSEC with private TLD

I'm playing with DNSSEC for my domain, my DNS server is dual homed (with suitable limits on what can be queried on the public interface) and covers both my public domain, but also a private top level ...
1
vote
3answers
64 views

BIND (forwarder+cached) - serve cached if forwarder fails

I want to configure BIND as DNS forwarder and utilize caching too. How can I configure it to serve cached results (even if beyond TTL) if forwarder fails? This questions was already asked here but ...
0
votes
2answers
39 views

Bind allow zone transfer from NS IPs defined in zone files

I am Setting up a Bind Server and am migrating the zone files from a Windows Server 2003 that used to be the DNS Server in charge. (I'm running Bind 9.9.5 on Ubuntu 14.04 LTS) On the Windows Server ...
3
votes
3answers
266 views

Block ANY request in Bind

I'm having trouble figuring out how to block ANY dns request on BIND to lower the changes of a DNS Amplification attacks. I've seen guides online but most of them appear to perform rate limit via ...
2
votes
2answers
61 views

What is an open DNS resolver, and protect from dns amplification?

I was wondering if I limit ACL access to my nameservers that allow recursive, the worst that could happen is someone launching a dns amplification on any of the allowed host in the ACL? For example: ...
1
vote
2answers
58 views

Set global DNS server

I've bought domain on GoDaddy. I've installed BIND server on my CentOS VPS. I set its IP on /etc/resolve.conf on other server, and I was able from that other server to ping domain names that are set ...
0
votes
1answer
43 views

bind9 not resolving specific domains [closed]

Right. So I have set up this bind9 server to act as a local DNS server. Everything worked okay up until recently it refuses to resolve domain names like http://www.google.com.au/ ...
0
votes
0answers
38 views

Bind9.10 inline signing 'loadkeys' failing

I have using the exact same rndc method to load inline signing keys as what worked yesterday, but today the same steps are failing? a stuck key? # rndc flush # rndc reconfig # rndc addzone domain.com ...