BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

-1
votes
2answers
225 views

Is this have any affect on why my BIND9 is not working?

$/etc/init.d/bind9 restart Stopping domain name service...: bind9rndc: connect failed: 127.0.0.1#953: connection refused . Starting domain name service...: bind9. (By the way, this is a continuation ...
1
vote
1answer
299 views

bind: data/named.run permission denied

I just installed Fedora 23 and bind-9.10 on it and the default installation does not run. I only created a zone file (which has ok-ed by the syntax check process), but this error is not related to any ...
0
votes
0answers
50 views

DNSSEC Key Rollover

I trie to get the auto key rollover to get to work on my testsystem: /etc/bind/named.conf.options : options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; //=============...
3
votes
4answers
20k views

Why do I get “ignoring out-of-zone data” when restarting BIND

I've been using my own DNS server but then I moved to a third part DNS provider. Yesterday I wanted to go back to using my own DNS's and cancel this third party service. I've lowered TTL in current ...
3
votes
1answer
39 views

Automatically assuming master for several zone files

Now that I'm moving my main server, I'm spending some time refining and simplifying some of its setup, and it has now come to the DNS server (bind 9.9.5 in the new setup). I noticed that in my config,...
3
votes
2answers
80 views

Block misconfigured DNS entries on BIND DNS Cache

I'm running a web crawler with its own BIND DNS Cache. Our code resolves using our DNS cache and makes GET request with Python's requests library. The problem is that many FQDNs are misconfigured and ...
1
vote
1answer
692 views

named-checkzone falsely identifying my out-of-zone MX records as CNAME. Why?

So, my server's primary hostname is internet.practiceofcode.com. This is defined as an A record, and the reverse lookup has been correctly configured: # host -t a internet.practiceofcode.com ...
1
vote
1answer
65 views

IPv6 resolving as loopback/private IP

I'm running a web crawler and I received some reports from my datacenter about connections directing to private IPs (like 10.0.0.1). I've implemented a loopback/private ip check to my crawler code and ...
0
votes
1answer
481 views

BIND9 zone forwarding is not working at all. How can I troubleshoot?

I've read a lot of other ServerFault BIND9 DNS not forwarding questions and answers. Queries (using DiG) for FQDNs I expect to be forwarded respond as if the public internet has the authoritative ...
3
votes
1answer
69 views

Order of search for name resolution in Unix/Linux

Lets say the /etc/resolv.conf has the following.. nameserver 10.10.10.10 search x.com y.com For a resolution "ping foo" I see that the resolver first tries the FQDN with configured search domains (...
1
vote
1answer
56 views

Using DNSSEC with private TLD

I'm playing with DNSSEC for my domain, my DNS server is dual homed (with suitable limits on what can be queried on the public interface) and covers both my public domain, but also a private top level ...
2
votes
3answers
70 views

BIND (forwarder+cached) - serve cached if forwarder fails

I want to configure BIND as DNS forwarder and utilize caching too. How can I configure it to serve cached results (even if beyond TTL) if forwarder fails? This questions was already asked here but ...
2
votes
2answers
62 views

What is an open DNS resolver, and protect from dns amplification?

I was wondering if I limit ACL access to my nameservers that allow recursive, the worst that could happen is someone launching a dns amplification on any of the allowed host in the ACL? For example: ...
3
votes
3answers
325 views

Block ANY request in Bind

I'm having trouble figuring out how to block ANY dns request on BIND to lower the changes of a DNS Amplification attacks. I've seen guides online but most of them appear to perform rate limit via ...
0
votes
2answers
43 views

Bind allow zone transfer from NS IPs defined in zone files

I am Setting up a Bind Server and am migrating the zone files from a Windows Server 2003 that used to be the DNS Server in charge. (I'm running Bind 9.9.5 on Ubuntu 14.04 LTS) On the Windows Server ...
0
votes
1answer
128 views

dnssec remove keys from zone

is there a way to remove all dnssec related stuff from a zone on a running bind server? I configured bind like like here described. If i use rndc signing -clear all domain.tld nothng happens to the ...
0
votes
1answer
58 views

dnssec-keygen key default validation / expiration time

What is the default expire time/period for a key, generated by dnssec-keygen: If i execute: dnssec-keygen -a RSASHA256 -b 2048 -f KSK mydomain.com I get 2 files: (Kmydomain.com.+008+21346.key) ; ...
0
votes
1answer
48 views

bind9 not resolving specific domains [closed]

Right. So I have set up this bind9 server to act as a local DNS server. Everything worked okay up until recently it refuses to resolve domain names like http://www.google.com.au/ http://www.wikipedia....
0
votes
0answers
51 views

Bind9.10 inline signing 'loadkeys' failing

I have using the exact same rndc method to load inline signing keys as what worked yesterday, but today the same steps are failing? a stuck key? # rndc flush # rndc reconfig # rndc addzone domain.com ...
2
votes
1answer
39 views

bind9 got “bad zone transfer request”

My Debian-server acts as a DNS server for the domain I own. Since my ISP also allocated me a sub-domain, my DNS server also has a few entries for that host. In other words, I have /etc/bind/db.domain-...
0
votes
2answers
63 views

Block access to ns1.example.com, mail.example.com

I have a VPS (CentOS 7) with 2 IP addresses. I am hosting my own DNS server using Bind. Running Apache. Amongst others I have "A" records for ns1.example.com -> X.X.X.X ns2.example.com -> Y.Y....
1
vote
0answers
34 views

FreeBSD Bind locks up, only clue -> in6_ifadd: 2001:~ is already configured

I have an issue where my DNS locks up periodically (about twice a day). All normal and then suddenly denied access to net_if network: error: could not listen on UDP socket: permission denied When ...
-1
votes
1answer
186 views

Bind9 DNS - How to redirect domain to another domain

I'm trying to redirect facebook.com ( and all subdomains ) to google.com, however I appear to be missing something. zone "facebook.com" { type master; file "/etc/bind/nene-block"; }; That ...
0
votes
1answer
176 views

rndc delzone {zonename} : permission denied

System is: Debian GNU/Linux 8.2 (jessie) BIND 9.9.5-9+deb8u3-Debian (Extended Support Version) named.conf.options: options { directory "/var/cache/bind"; key-directory "/etc/bind/keys"; ...
7
votes
1answer
389 views

BIND - increase in outgoing NS queries after upgrade to CentOS 6.7?

After upgrading BIND to 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.2 in a few caching nameservers I've noticed it's doing lots of outgoing NS queries, without changes to incoming traffic volume or patterns. ...
1
vote
3answers
171 views

Intermittent NXDOMAIN responses for certain records with low TTLs

We're experiencing a peculiar issue with our bind installation (version 9.8.4). In this scenario, bind is configured as a caching name server for a small network. For the large majority of queries, ...
0
votes
1answer
39 views

bind9.10 dnssec inline signing failing

I am pretty sure the ultimate error is this: [\u@r2d2:/home/ex-mailer-domains/domain.com] # dig domain.com +dnssec @8.8.8.8 ; <<>> DiG 9.10.3 <<>> domain.com +dnssec @8.8.8.8 ...
0
votes
2answers
47 views

BIND resolved IP address into logfile

I have a challenge where the log files are not recording the resolved IP address in the logged information. How is it possible to enable this? So the url and resolved IP address should be in the ...
1
vote
0answers
357 views

I get “ERR_EMPTY_RESPONSE” on my website when i'm using proxy

I have a dedicated server with: Ubuntu 14.04.3 BIND 9.9.5-3ubuntu0.5-Ubuntu (Extended Support Version) Nginx version 1.9.6 On Port 81 PHP 5.5.30 (cli) with Zend OPcache v7.0.6-dev MySQL 5.5.45 UFW ...
0
votes
1answer
24 views

With bind, is it possible to define one particular A record for any domain?

I want to publish the auto-discovery wpad record for any domain the client is in, without having to declare those domains in my DNS server. Is it possible to define a record for any domain. Such that ...
0
votes
0answers
89 views

Split horizon bind dns server setup

I have two servers. The first is a publicly accessible one held by my web host to which the domain example.com is assigned. The second server is my company's private LAN server which has bind dns ...
1
vote
3answers
91 views

Reverse DNS is not working

I got a mail server that can't send outbound because I don't have my reverse dns entries correct. Admittedly at first I knew it wasn't configured properly but from every single example I could find on ...
2
votes
2answers
2k views

bind9 configure forward zone for local domain without DNSSEC for this zone only

I have a working DNS server for local domain mydomain.local. I am trying to configure bind9 to work in default configuration, except for this zone, for which I want to forward queries to local DNS ...
1
vote
1answer
44 views

what happens if the authoritative DNS servers and the NS records don't agree

What happens if the NS records in a zone don't agree with the root nameserver delegation for that same zone? In other words, if a registrar knows that the authoritative nameservers for example.com ...
1
vote
1answer
178 views

DNS Slave server default limits on transfers?

We have a slave dns server that has been working fine for 2 years. Today we got reached over 100 zones and the slave gives us this error message on the last 2 domains Sep 15 20:27:19 ns1 named[992]: ...
2
votes
2answers
61 views

Bind Server issue: Can not nslookup from client when DNS Master is down, but still can connect to Internet

I setup 2 Bind servers on Ubuntu Server 14.04. The first one is Master DNS and the second is Slave. I have a DHCP server running isc-dhcp-server and assign 2 DNS Server IP for clients Everything seem ...
1
vote
3answers
1k views

dhcpd not pushing ddns updates to bind

BIND and DHCPD are configured but as far as I can tell DHCPD makes no attempt to even send Dynamic DNS update to BIND. I can manually add records using nsupdate with the same key I have configured ...
10
votes
7answers
11k views

bind: blackhole for invalid recursive queries?

I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains. Currently the server is flooded with faked type ANY requests for isc.org, ripe.net ...
0
votes
2answers
1k views

bind: “nsupdate -l” failed with status “update failed: REFUSED”

I just switched to bind 9.9.5 dynamic DNS feature with semi-automatic manage of DNSSEC entries, the whole process went good and my zone files were updated well, but now I can't update or add entries ...
0
votes
1answer
32 views

Split DNS Bind9 views match-client request IP

I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server. Psuedo: If ...
0
votes
1answer
51 views

Resolve DNS Misconfiguration abuse complaint

Today i received a abuse complaint about my dns server. Translation courtesy of Froggiz Hi, The CERT-FR has been informed by one of his partner that one or more domain name server (DNS) ...
0
votes
2answers
76 views

DNS resolution speed

I'm trying to speed up my webpage load time in distant locations. My server is located in Germany and I installed the second one in LA, CA. Then I configured BIND to return LA IP for clients from ...
2
votes
2answers
79 views

The right way to set up master and slave nameservers

I'm wondering about the proper way to set up a master and slave DNS. I read somewhere that your master DNS server should not have an NS record in your zone file - that's sort of secret and then your ...
0
votes
3answers
27 views

Correct way to configure similar prefixes for 2 A records / servers in BIND file?

My domain provider's config tool doesn't seem to support what I'm trying to do and I'm unsure of the proper BIND syntax for the below - any pointers appreciated! I've got separate physical production ...
-6
votes
2answers
84 views

Root hints in Ubuntu

I've checked the /etc/bind/db.root text file and all the root name server IPs are current (I've checked the IPs one by one). So BIND9 reads this file and knows how to find root servers. The output of ...
2
votes
2answers
280 views

Bind9 MUST be restarted for DNS server to work on every restart [closed]

I followed this very nice tutorial to make my first DNS server on Debian Jessie (on my Raspberry Pi). It seems to have worked fine. I can ping: ping myhostname.mydomain and it works fine. The ...
0
votes
1answer
27 views

Need some explanation about BIND9 cache

Cache of BIND is kinda of a "Black hole" for me. I know about TTL and that it can be overridden. I know that there's a way to dump cache into a file that could be viewed in a text editor. But, still, ...
2
votes
3answers
5k views

Disable bind 9.3.6 hostname disclosure

I've bind 9.3.6. How can I disable hostname disclosure ? Issue link http://www.iss.net/security_center/reference/vuln/bind-hostname-disclosure.htm Thanks.
-3
votes
1answer
42 views

how to configure the internal dns?

System:centos 6.5 , bind version:bind-9.8.2-0.17.rc1.el6_4.6.x86_64 I must set up an internal dns , i am not geek new for network jobs so sorry for if it is an idiot question. My centos system cannot ...
1
vote
0answers
69 views

DHCP failover/DNS not working when primary server is offline

In a VMware environment we deploy daily many new virtual hosts and for this we need a failover DHCP/DNS. Based of CentOS 7 I setup two virtual hosts as failover DHCP and dynamic DNS (dns01/dns02). I ...