BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

1
vote
3answers
2k views

DNSSEC - Ad Flag not activated

I have some doubts regarding DNSSEC. I have one server acting as an Authoritative Name Server and another one as a Cache/Resolver. I'm using Bind 9.7.1-P2 and these are my configuration files: ...
0
votes
0answers
90 views

Bind9 Zone with own dns forwarder

Installed bind9 on my server to forward 1 domain to another DNS server Client -> Vps bind9 server -> www.facebook.com must be resolved by dns 8.8.8.8 (GoogleDNS). All other websites must be resolved ...
6
votes
2answers
5k views

How to solve call trace produced by security_ops_task_setrlimit() with bind

I have a machine with CentOS 5.9 and VMware installed. Currently I am using BIND 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6 (default shipped with distribution). When I restart the machine, I can see this ...
1
vote
2answers
793 views

Something's up with BIND9…slave zone giving SERVAIL for all queries in domain

I've got a domain set up with bind9 on Debian Lenny acting as a slave to my DNS hosting provider's servers. The exact circumstances are I think irrelevant, but I have allowed transfers out to my ...
2
votes
2answers
241 views

bind is not validating dnssec

Strange. My bind is not validating dnssec even though I configured it to. Version according to named -V is BIND 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.2 which has a built-in DLV key. Under options in ...
1
vote
0answers
69 views

ipv6 address assignment via local server from isp assigned block

I have been looking around and found the information confusing as best. Is there a way to have a server "recieve" the /64 ipv6 block from the isp and then use dhcp or something to assign it out to ...
0
votes
2answers
47 views

Point subdomain to VPS

I would like to setup a subdomain on my VPS. I have read a tutorial(http://crm.vpscheap.net/knowledgebase.php?action=displayarticle&id=10), but I think it isn't for subdomains. This section ...
2
votes
1answer
145 views

named can not find a certain domain

I have setup named in chroot and it has been working for some days. Now it does not find a certain domain's IP: # dig arstechnica.com ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1 ...
2
votes
2answers
2k views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
1
vote
1answer
95 views

Bind views match-client from zone delegation

i've a problem with views using Bind9. I've a Microsoft DNS server with a domain "example.com" configurated to delegate the sub-domain "ds.example.com" to Bind DNS Server. In the Bind server i've ...
1
vote
1answer
224 views

Cleanup DHCPD leases as well as DDNS Entries

I have a fairly simple set up on a Debian server I'm running. I currently have isc-dhcp-server installed along with bind9. I set up my zone and my reverse lookup zones and set up dynamic updates, it's ...
5
votes
4answers
9k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
3
votes
1answer
235 views

How would you setup a up an A record for any negative query?

How would I go about setting up an A record for in Bind9 for any negative queries? I want to forward our staff to an informational page if they were to visit a non existent domain. We have an internal ...
1
vote
3answers
1k views

Are there DNS servers supporting ALIAS type for apex records?

DNSimple and AWS Route53 are supporting ALIAS records that allow similar functionality to CNAMES for @ (Apex) records in DNS. I'm running a DNS server (Bind) that is currently hosting around 1500 ...
1
vote
1answer
64 views

IPv6 record will not take for rDNS

I added the following to named.conf zone "3IP6.A.B.C.ip6.arpa" { type master; file "3IP6.A.B.C.ip6.arpa"; allow-update { none; }; }; I then created my dns zone record called 3IP6.A.B.C.ip6.arpa ...
3
votes
2answers
366 views

bind not able to query some servers / domains

We have been experiencing problems with our company's DNS server when trying to resolve only certain domains, we are running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on a CentOS 6.5 server. We are ...
0
votes
2answers
72 views

How do you load balance a forwarding only server… with no authoritive zones?

New Thought and possible answer to my Question? Would it be possible to change the root config file (the db.root with A/B/C/D/E/F/etc.ROOT-SERVERS.NET) and remove the original entries (i.e: ican ip ...
0
votes
2answers
70 views

Bind dont forward to secondary dns server as specified in “forwarders” under named.options.conf

I have bind9 setup to forward dns queries to machines connected localy trough the 192.168.1/24 network. The ip's that I forward the queries to are also my internet gateways. Sometimes one of the ...
0
votes
0answers
46 views

setting up DANE fails, error with “could not get cert chain from ssl”

I successfully setup DNSSEC and enabled it on my domain. I'd love to make use of my DANE. I created a standard self signed certificate openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem ...
2
votes
1answer
53 views

Performance-wise, is a DNS Slave better to have than two duplicate Masters?

I have two bind9 servers that are not setup with duplicate settings and know nothing about each other. Our CPU usage is sitting around 7% - 10%: mostly bind, which I believe is perfectly in range for ...
-2
votes
1answer
93 views

Iptables doesn't open port 53 [closed]

I have been trying different ways of opening the port but for some reason doesn't work. The last set of lines that I have used is as follows: iptables -I OUTPUT -p udp --dport 53 -m state --state ...
0
votes
0answers
35 views

my sub domains vanish with time

I have a server running bind9. When the propagation is done and i ping domain.tld i get xx.xx.xx.xx (where xx.xx.xx.xx is the server IP), if i ping test.domain.tld i get xx.xx.xx.xx, at this point ...
2
votes
1answer
112 views

Cannot load reverse lookup zones containing “rich-text” PTR records

Summary I am attempting to set up Wide-Area Bonjour (aka DNS-SD) using ISC Bind 9.9.5, but cannot load reverse lookup zones providing discovery of "rich-text" service domains. Background According ...
-2
votes
2answers
73 views

How do I secure a zone with dlv.isc.org's DLV service? [closed]

I'm setting up domain-lookaside validation. I think I got mostly everything correct. I followed the directions here: https://dlv.isc.org/about/using. I registered my domain and uploaded the key ...
0
votes
1answer
213 views

Named failed due to permissions and connect fail error [closed]

I'm facing a serious problem which has knocked out my server. For some unknown reason, named is no longer working, despite doing my best to remediation the issues found on the logs. I get this error ...
1
vote
1answer
39 views

How to configure an additional BIND instance for a domain already described by other public name servers?

Background I have a small virtual server hosted by my provider and there I have configured a relatively simple combination of postfix, dovecot and roundcubemail (backed by nginx) that works OK. I ...
-1
votes
1answer
704 views

Dig shows external configuration? [closed]

I'm already trying for 2 days to deal with an answer for this problem. I have a virtual server somewhere and installed postfix/dovecot/mysql. It works somehow. I can login with Outlook with the ...
0
votes
0answers
31 views

bind9 internal domain name

For our internal network we're using domain names like user.int. I've setup bind to resolve those to the appropriate IP addresses. Since .int is actual top-level domain name(although used for just a ...
0
votes
1answer
87 views

Get a catch-all DNS and set a MX for a special domain

I'm trying to set a catch-all configuration with Bind. I've followed this answer and it works fine : http://serverfault.com/a/397011/179968 Now I'm trying to configure my MX record to configure my ...
2
votes
1answer
58 views

bind zone file setup for dns round robin

I would like to set up load balancing for my website using DNS round robin. My DNS is managed by my own CentOS 6 server running bind. I added the following into my zone file: @ ...
0
votes
1answer
193 views

Classless Reverse DNS with Recursion - BIND

I'm running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on CentOS 6.6. The only zone is for classless reverse DNS, which has been delegated. I'm no BIND or DNS expert, but as I understand it, classless ...
0
votes
1answer
70 views

BIND9 and Zone configuration doesn't “bind” domain

Named.conf File: options { #listen-on port 53 { 127.0.0.1; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file ...
35
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
2answers
70 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
0
votes
0answers
211 views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key ...
1
vote
1answer
34 views

Channelizing logs on Bind 8

I am using the following channel clause in my named.conf, logging { channel named_log { file "logs-remote/bind.log"; severity dynamic; print-category yes; print-severity yes; print-time yes; }; ...
0
votes
1answer
60 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
0
votes
1answer
228 views

BIND: Forcing authoritative nameserver answer with no data on non-recursive requests (Research purposes)

Edit: I've simplified target goal as suggested by Andrew B. The goal is basically setting an authoritative name server to only give real answer on recursive requests, which means breaking the ...
1
vote
1answer
2k views

need to configure BIND server query logging with versions

I've been trying to get BIND server query logging working, creating 3 versions, max 100mb each. The system is SUSE SLES 11. I have found numerous how to articles on the web but none of them do ...
1
vote
2answers
740 views

URIBL_BLOCKED despite caching nameserver

I run a mail server for two people, Ubuntu 10.04 LTS. I have Spamassassin running via Amavis/Postfix. In many messages, I am getting URIBL_BLOCKED in the X-Spam-Status headers, which indicates that ...
-1
votes
1answer
46 views

Would it be good idea to share DNS zone files via NFS?

Any expert advice on Bind DNS zone file transfer (master->slave) via NFS? Are there any drawbacks for not using Bind's zone transfer feature? Thanks a lot!
1
vote
1answer
90 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
3
votes
5answers
524 views

Automatic way to increase zone file serial number by one in BIND9

I've a BIND9 server with a lot of zones and I need to increase the serial number of the zone files by one. Some zones are using the YYYYMMDDXX format but other zones just increase it by one, as they ...
3
votes
2answers
4k views

Local DNS server (bind) and the router DHCP

I just set up an internal http server for internal use (I set up Redmine), in a small network (30 or so PCs). I set up the http server on a virtual box ubuntu, that runs also the DNS server (bind). ...
-1
votes
1answer
26 views

DNS zone servicing concepts

Currently I am working out some concepts about how DNS works and am running into a question I can't easily find an answer to on the internet. I am looking for an answer based on a set of questions ...
0
votes
1answer
3k views

BIND failing to resolve with 'WARNING: recursion requested but not available'

there are no errors in the logs and query logging won't initialize iptables is fully disabled but the server will respond with "WARNING: recursion requested but not available" because my client ...
0
votes
2answers
183 views

Bind DNS not working?

I Know there always lots of answer about Bind. But somehow I can't understand the problem of my settings. Here is my configuration options { listen-on port 53 { 192.168.159.130; }; ...
0
votes
1answer
7k views

Bind9: Permission denied and file not found when loading from master file, only first time

I have installed bind9 on ubuntu server 10.04.1. And there is some strange things. Just after boot here is my log file: Feb 26 18:30:57 myserver init: apport pre-start process (793) terminated ...
1
vote
6answers
358 views

Cannot start BIND9

I followed everything EXACTLY in this tutorial for setting up DNS. I set up everything on a blank server. However, starting BIND9 failed: rndc: connect failed: 127.0.0.1#953: connection refused I ...
1
vote
1answer
328 views

nsupdate failing on localhost - Bind 8

I have added a zone test.net via rndc locally and it is working fine. Next, I want to update it via nsupdate but locally, my zone configurations are, zone test.net {type master; file ...