BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

-1
votes
1answer
54 views

Unrealistic number of zones in rndc status

I get 102 zones when I do rndc status. My BIND9 server is only authoritative for 1 zone (that's the site that I host on my LAMP server). I'm aware that it could be an extra ten or so zones, due to the ...
0
votes
0answers
9 views

bind dns configuration in windows

I am configuring BIND DNS in windows.Can I add multiple IP addresses(like two different networks) for an single DNS server to listen on? So we network A request for resolution it perform that and when ...
1
vote
0answers
45 views

NSD/BIND — how to log dns resolver ip and edns

Do BIND and NSD support verbose logging of the DNS resolver's ip address for a query? If the vanilla releases do support that, what's the best practice for enabling/configuring that functionality. ...
2
votes
1answer
93 views

PTR record format for IPv6

What is the difference in the following two IPv6 PTR formats? 4.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR smtp.example.com. 4.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.0.a.4.f.7.0.6....
0
votes
1answer
23 views

How do I change default WHM nameservers? [closed]

When I originally set up WHM, I listed ns1.example.com and ns2.example.com as the nameservers. They have since changed to ns3 and ns4. When I create a new account, how do I get WHM to automatically ...
0
votes
2answers
53 views

What's the issue of have all dns server as master zone

I want to configure 4 dns server using bind. Is there any problem to configure all of them as master with no dns transfer. # server one zone "example1.com" { type master; file "example1.com....
1
vote
1answer
118 views

BIND9 private DNS server with OpenVPN config file errors

I am setting up a private DNS server that will only be accessible by my OpenVPN users. OpenVPN is setup on the tun0 interface of my Ubuntu 14 server. The issue is that I am getting some errors. I am ...
0
votes
1answer
91 views

Master and slave bind DNS servers with different version

I am having issues with my master-slave setup, so I'm trying to release what is an causing troubles. Master is running on CentOS Linux release 7.1.1503 (Core) and using BIND 9.9.4-RedHat-9.9.4-29....
1
vote
2answers
48 views

/etc/resolv.conf to overwrite local bind

I have set up my /etc/bind to set up the following: dig @127.0.0.1 +noall +answer SRV _my-sub._tcp.example.com _my-sub._tcp.example.com. 300 IN SRV 0 0 12379 a0.example.com. _my-sub._tcp.example.com....
0
votes
1answer
41 views

localhost srv record forwarding in ubuntu

I want to each url to be forwarded to in my localmachine. For example: sub1.domain.com ---> http://localhost:1111 sub2.domain.com ---> http://localhost:2222 sub3.domain.com ---> http://...
-1
votes
1answer
173 views

NAPTR records in DNS BIND

I am trying to configure Naptr records in dns bind in window 7.I have the following zone file $TTL 6h @ IN SOA sip-udp01.example.org. root.example.org.( 2016010101 ...
3
votes
1answer
189 views

What rate limiting options are provided by ISC BIND?

This is a Canonical Question about rate limiting in the ISC BIND nameserver software. Recently I've heard of BIND's rate limiting features. DNS RRL in particular seems to be becoming more ...
0
votes
1answer
2k views

block DNS Amplification Attack by iptables

Last time I've got warings about DNS Amplification Attack from NFOservers.com DDoS notifier 2015-12-30 23:28:52.609178 IP (tos 0x0, ttl 54, id 42635, offset 0, flags [+], proto UDP (17), length 1500)...
1
vote
1answer
299 views

bind: data/named.run permission denied

I just installed Fedora 23 and bind-9.10 on it and the default installation does not run. I only created a zone file (which has ok-ed by the syntax check process), but this error is not related to any ...
0
votes
0answers
50 views

DNSSEC Key Rollover

I trie to get the auto key rollover to get to work on my testsystem: /etc/bind/named.conf.options : options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; //=============...
3
votes
1answer
39 views

Automatically assuming master for several zone files

Now that I'm moving my main server, I'm spending some time refining and simplifying some of its setup, and it has now come to the DNS server (bind 9.9.5 in the new setup). I noticed that in my config,...
3
votes
2answers
80 views

Block misconfigured DNS entries on BIND DNS Cache

I'm running a web crawler with its own BIND DNS Cache. Our code resolves using our DNS cache and makes GET request with Python's requests library. The problem is that many FQDNs are misconfigured and ...
1
vote
2answers
81 views

Trouble adding a DNS subdomain using Bind9.9, with the NS in the subdomain

I had a setup using an older Bind which is no longer working once I started using Bind9.9... The named.conf is still the same, with recursion active and the zone I'm using has no forwarders. However, ...
1
vote
1answer
65 views

IPv6 resolving as loopback/private IP

I'm running a web crawler and I received some reports from my datacenter about connections directing to private IPs (like 10.0.0.1). I've implemented a loopback/private ip check to my crawler code and ...
3
votes
1answer
69 views

Order of search for name resolution in Unix/Linux

Lets say the /etc/resolv.conf has the following.. nameserver 10.10.10.10 search x.com y.com For a resolution "ping foo" I see that the resolver first tries the FQDN with configured search domains (...
1
vote
1answer
56 views

Using DNSSEC with private TLD

I'm playing with DNSSEC for my domain, my DNS server is dual homed (with suitable limits on what can be queried on the public interface) and covers both my public domain, but also a private top level ...
2
votes
3answers
70 views

BIND (forwarder+cached) - serve cached if forwarder fails

I want to configure BIND as DNS forwarder and utilize caching too. How can I configure it to serve cached results (even if beyond TTL) if forwarder fails? This questions was already asked here but ...
0
votes
2answers
43 views

Bind allow zone transfer from NS IPs defined in zone files

I am Setting up a Bind Server and am migrating the zone files from a Windows Server 2003 that used to be the DNS Server in charge. (I'm running Bind 9.9.5 on Ubuntu 14.04 LTS) On the Windows Server ...
3
votes
3answers
326 views

Block ANY request in Bind

I'm having trouble figuring out how to block ANY dns request on BIND to lower the changes of a DNS Amplification attacks. I've seen guides online but most of them appear to perform rate limit via ...
2
votes
2answers
62 views

What is an open DNS resolver, and protect from dns amplification?

I was wondering if I limit ACL access to my nameservers that allow recursive, the worst that could happen is someone launching a dns amplification on any of the allowed host in the ACL? For example: ...
1
vote
2answers
59 views

Set global DNS server

I've bought domain on GoDaddy. I've installed BIND server on my CentOS VPS. I set its IP on /etc/resolve.conf on other server, and I was able from that other server to ping domain names that are set ...
0
votes
1answer
48 views

bind9 not resolving specific domains [closed]

Right. So I have set up this bind9 server to act as a local DNS server. Everything worked okay up until recently it refuses to resolve domain names like http://www.google.com.au/ http://www.wikipedia....
0
votes
0answers
51 views

Bind9.10 inline signing 'loadkeys' failing

I have using the exact same rndc method to load inline signing keys as what worked yesterday, but today the same steps are failing? a stuck key? # rndc flush # rndc reconfig # rndc addzone domain.com ...
2
votes
1answer
39 views

bind9 got “bad zone transfer request”

My Debian-server acts as a DNS server for the domain I own. Since my ISP also allocated me a sub-domain, my DNS server also has a few entries for that host. In other words, I have /etc/bind/db.domain-...
1
vote
0answers
34 views

FreeBSD Bind locks up, only clue -> in6_ifadd: 2001:~ is already configured

I have an issue where my DNS locks up periodically (about twice a day). All normal and then suddenly denied access to net_if network: error: could not listen on UDP socket: permission denied When ...
0
votes
2answers
63 views

Block access to ns1.example.com, mail.example.com

I have a VPS (CentOS 7) with 2 IP addresses. I am hosting my own DNS server using Bind. Running Apache. Amongst others I have "A" records for ns1.example.com -> X.X.X.X ns2.example.com -> Y.Y....
-1
votes
1answer
186 views

Bind9 DNS - How to redirect domain to another domain

I'm trying to redirect facebook.com ( and all subdomains ) to google.com, however I appear to be missing something. zone "facebook.com" { type master; file "/etc/bind/nene-block"; }; That ...
0
votes
1answer
176 views

rndc delzone {zonename} : permission denied

System is: Debian GNU/Linux 8.2 (jessie) BIND 9.9.5-9+deb8u3-Debian (Extended Support Version) named.conf.options: options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; ...
0
votes
1answer
39 views

bind9.10 dnssec inline signing failing

I am pretty sure the ultimate error is this: [\u@r2d2:/home/ex-mailer-domains/domain.com] # dig domain.com +dnssec @8.8.8.8 ; <<>> DiG 9.10.3 <<>> domain.com +dnssec @8.8.8.8 ...
0
votes
1answer
128 views

dnssec remove keys from zone

is there a way to remove all dnssec related stuff from a zone on a running bind server? I configured bind like like here described. If i use rndc signing -clear all domain.tld nothng happens to the ...
0
votes
1answer
58 views

dnssec-keygen key default validation / expiration time

What is the default expire time/period for a key, generated by dnssec-keygen: If i execute: dnssec-keygen -a RSASHA256 -b 2048 -f KSK mydomain.com I get 2 files: (Kmydomain.com.+008+21346.key) ; ...
0
votes
2answers
47 views

BIND resolved IP address into logfile

I have a challenge where the log files are not recording the resolved IP address in the logged information. How is it possible to enable this? So the url and resolved IP address should be in the ...
0
votes
1answer
193 views

BIND DNS (with IPA) unable to Forward DNS Requests

I have been trying to install IPA on my CentOS system for several days, but I keep experiencing a problem with DNS forwarding, in that I am unable to get it working. I have tried this with two DNS ...
1
vote
0answers
357 views

I get “ERR_EMPTY_RESPONSE” on my website when i'm using proxy

I have a dedicated server with: Ubuntu 14.04.3 BIND 9.9.5-3ubuntu0.5-Ubuntu (Extended Support Version) Nginx version 1.9.6 On Port 81 PHP 5.5.30 (cli) with Zend OPcache v7.0.6-dev MySQL 5.5.45 UFW ...
0
votes
1answer
24 views

With bind, is it possible to define one particular A record for any domain?

I want to publish the auto-discovery wpad record for any domain the client is in, without having to declare those domains in my DNS server. Is it possible to define a record for any domain. Such that ...
1
vote
3answers
171 views

Intermittent NXDOMAIN responses for certain records with low TTLs

We're experiencing a peculiar issue with our bind installation (version 9.8.4). In this scenario, bind is configured as a caching name server for a small network. For the large majority of queries, ...
0
votes
0answers
89 views

Split horizon bind dns server setup

I have two servers. The first is a publicly accessible one held by my web host to which the domain example.com is assigned. The second server is my company's private LAN server which has bind dns ...
1
vote
1answer
44 views

what happens if the authoritative DNS servers and the NS records don't agree

What happens if the NS records in a zone don't agree with the root nameserver delegation for that same zone? In other words, if a registrar knows that the authoritative nameservers for example.com ...
2
votes
2answers
61 views

Bind Server issue: Can not nslookup from client when DNS Master is down, but still can connect to Internet

I setup 2 Bind servers on Ubuntu Server 14.04. The first one is Master DNS and the second is Slave. I have a DHCP server running isc-dhcp-server and assign 2 DNS Server IP for clients Everything seem ...
1
vote
3answers
91 views

Reverse DNS is not working

I got a mail server that can't send outbound because I don't have my reverse dns entries correct. Admittedly at first I knew it wasn't configured properly but from every single example I could find on ...
0
votes
1answer
32 views

Split DNS Bind9 views match-client request IP

I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server. Psuedo: If ...
0
votes
1answer
51 views

Resolve DNS Misconfiguration abuse complaint

Today i received a abuse complaint about my dns server. Translation courtesy of Froggiz Hi, The CERT-FR has been informed by one of his partner that one or more domain name server (DNS) ...
0
votes
2answers
76 views

DNS resolution speed

I'm trying to speed up my webpage load time in distant locations. My server is located in Germany and I installed the second one in LA, CA. Then I configured BIND to return LA IP for clients from ...
0
votes
1answer
27 views

Need some explanation about BIND9 cache

Cache of BIND is kinda of a "Black hole" for me. I know about TTL and that it can be overridden. I know that there's a way to dump cache into a file that could be viewed in a text editor. But, still, ...
0
votes
3answers
27 views

Correct way to configure similar prefixes for 2 A records / servers in BIND file?

My domain provider's config tool doesn't seem to support what I'm trying to do and I'm unsure of the proper BIND syntax for the below - any pointers appreciated! I've got separate physical production ...