BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

5
votes
4answers
6k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
2
votes
1answer
101 views

How prevent that Bind DNS updates remove $INCLUDE directive

I have a DNS server up and running with a zone configured for my domain with the allow-update directive enabled. I have the initial configuration for the domain in the file ...
1
vote
1answer
329 views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
1
vote
2answers
81 views

Failing in resolve reverse name

I can't properly resolve my reverse name. In my configs, I replaced my IP address by X1.X2.X3.X4, and my domain name by domainname. I have been following this tutorial, in which it first resolves the ...
3
votes
0answers
236 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
0
votes
1answer
677 views

BIND DNS Master with Zerigo Slaves - BIND won't update the slave servers

I've tried to resolve this myself and have looked through Google and Stack but haven't found the answer I'm looking for. Currently on a VPS server I have BIND DNS installed as a MASTER DNS Server. I ...
1
vote
1answer
299 views

Why is my bind9 totally messed up?

I'm completely dumbfolded by this situation, the deal is this: I'm currently setting up an uml-instance of debian to work as a network server as part of a university course. One part is installing a ...
1
vote
1answer
35 views

Is BIND9 what I'm looking for?

I just purchased a dedicated server and have Debian 7 installed. I of course want my server to work with my domain, so I assume what I need to do is install BIND9 on the dedicated server and configure ...
0
votes
1answer
38 views

Why is bind asking for this extra parameter in my zone file?

I'm creating a zone file for a fake root because this is a closed network with no Internet access. I've created the following zone file but for some reason, bind is requiring an extra parameter; ...
1
vote
1answer
62 views

TLS on SRV Records

The SRV records comply with this format: _service._proto.domain (and some other values here...). I want to know if anyone has ever used in _proto - tls. TLS is not a transport protocol, so, is it ...
3
votes
1answer
108 views

Bypass DNSSEC for local Stub zones

I am using bind 9.9.2 as a DNSSEC validating recursive resolver in an Internet DMZ. I want to point to my internal DNS servers as stub zones (ideally) or anything except slave zones (to avoid very ...
5
votes
1answer
2k views

Why does my EC2 nameserver (correctly) resolve names to private IPs and then switches to public IPs?

I'm running a nameserver for a few machines on EC2. This nameserver is not reachable via the public Internet. I want all my EC2 instances to use it to be able to find each other and to resolve all ...
2
votes
2answers
189 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...
0
votes
2answers
84 views

Configuring DNS with router and BIND

Goal I am trying to setup a local DNS server here in our office. Problem Apparently Comcast has a loop-back so when we configured the domain to go to our IP it works outside of the office but ...
0
votes
1answer
300 views

Setting up Reverse DNS Zone BIND9 Ubuntu 13.10 Server [closed]

I am trying to configure a reverse DNS zone on my new dedicated server. I have tried several things but for some reason i cannot get my reverse zone to properly resolve. When checking my dns, i get ...
0
votes
1answer
79 views

How can I configure dhcpd to only update the reverse zone in bind?

I've got dhcpd pushing updates to bind, and it seems to be working fine: named[24161]: client 192.168.10.1#59141: signer "dhcp_updater" approved named[24161]: client 192.168.10.1#59141: updating zone ...
2
votes
1answer
88 views

Bind9 reverse DNS configuration not working.

I am trying to set up a custom virtual DNS server in Ubuntu. When I try to nslookup with a windows 7 pc within the same virtual environment the reverse DNS seems te fail. My named.conf.local file: ...
3
votes
1answer
293 views

Solaris 10: BIND 9 Chroot Service fails to start with SVCADM but works when run manually from root

I recently upgraded with Solaris patches and after the reboot my Bind Named services go into maintenance mode. bash-3.2# svcs -xv svc:/network/dns/server:chroot (?) State: maintenance since Thu Nov ...
5
votes
2answers
3k views

SOA and Primary NS record (DNS)

The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked? ...
0
votes
1answer
63 views

BIND Domain name transclusion/zone mirroring

Is there a way to create a DNS record that fully mirrors another website? Which is to say, *.foo.tld/* maps to *.bar.tld/* so any query for foo.tld will be served up by bar.tldbut the DNS will appear ...
-2
votes
1answer
47 views

domain-search value on my clients computer [closed]

I need help with configure my DNS and DHCP server - I have spent some time searching on google but have not got any informations regarding my problem. I have an Ubuntu 12.04 server running and use ...
0
votes
1answer
35 views

DNS resolution failure when querying through server IP

I have a DNS zone file with the following config : $TTL 86400 $ORIGIN example.com. @ IN SOA ns1.example.com. dns.example.com. ( 2014022604 ; Serial ...
1
vote
1answer
325 views

Syntax for DNS BIND full domain ?

I created zone file zone "example.com" { type master; file "/etc/bind/db.example.com"; forwarders{}; }; db.example.com $TTL 604800 @ IN SOA pgdebian.example.com. ...
1
vote
1answer
44 views

Running authoritive nameserver in ipv6 only environment?

What are the arguments against running an authoritive nameserver (primary) e.g. bind in a ipv6 only environment? In the current setup the machine dedicated to the nameserver has only direct ipv6 ...
0
votes
1answer
188 views

BIND9 DNSSEC: should I care about occasional “insecure” log messages

A small number of my forwarded DNS queries cause BIND 9 to log messages such as: 184.in-addr.arpa SOA: got insecure response; parent indicates it should be secure validating @0x7f93140c0870: ...
3
votes
1answer
196 views

What is the syntax of email address with a dot behind it? in DNS zone file, SOA rr

How i can use a email address with a dot in behind. For example at bellow, email address is hostmaster@example.com, How to use host.master@example.com ? example.com. IN SOA ns.example.com. ...
1
vote
1answer
72 views

Effects of publishing DNSSEC DS records without signing public zone?

We at example.com are being pressured to implement DNSSEC by a sub-division of our organisation: security.example.com. Our current name servers ns1.example.com and ns2.example.com are unsigned, ...
3
votes
3answers
257 views

How to combine Active Directory with Split-Horizon DNS?

I'm in a quandary. I need to implement Split-Horizon DNS in my office based on subnet. For example: Users in 10.170.0.0/16 need to resolve "srv01.extra.company.com" to 10.170.0.5 10.25.0.170 Users ...
1
vote
2answers
304 views

trustwave pci scan: dns amplification denial of service, Bind 9.8.1-P1, doesn't seem like it

In our last TW PCI scan, one of our flags was "DNS Amplification Denial of Service". Right now, the DNS server is running Bind 9.8.1-P1. It seems like the CVEs are for a much older version: ...
0
votes
1answer
39 views

bind did not responde out of server

I have problem with bind server configuration. ​Result for lookup on 8.8.4.4: root@server1:~# dig @8.8.4.4 webexamplesite.com ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @8.8.4.4 ...
0
votes
2answers
75 views

BIND: Whitelist IPs using nsupdate

I know that we can add any kind of DNS records in BIND DNS server using nsupdate. Can we whitelist or blacklist any ip in realtime using nsupdate. We whitelist only certain IPs to prevent our DNS ...
0
votes
3answers
1k views

view external: query (cache) denied on bind9/named

Is this an attack? I get a lot of : view external: query (cache) denied in the /var/log/messages
2
votes
2answers
3k views

setting up bind to work with nsupdate (SERVFAIL)

I'm trying to update my DNS-Server dynamically using nsupdate. Prerequisite I'm using Debian 6 on my DNS-Server and Debian 4 on my client. I created a public/private key pair using: dnssec-keygen ...
-1
votes
1answer
151 views

DNS how to dynamically bind subdomains to ip and port pairs [duplicate]

I'm using bind9 I have a zone file setup with a few subdomain A records. I'm wondering if I can create a subdomain record that points to an ip address on a specific port. I'm currently updating the ...
-1
votes
1answer
64 views

Masking CNAME/A Record Requirements from Clients

I'm reselling hosting services to non-technical clients. With regards to associating domains/IPs, the host I'm reselling requires that once a VPS is deployed i then go to the domain's registrar and ...
2
votes
4answers
3k views

bind9: Disabling error logging for recursive queries

inadvertedly, a bind9 server I ran was an open resolver. Whoops. Now it's been months and the recursive queries for isc.org are still incoming. I would not mind if my /var/log/syslog did not look ...
1
vote
0answers
99 views

Woes with named/bind and forwarding zones

I'm sadly restricted to a very old version of bind (9.4.2) This is the think. If I setup bind with a named.conf and only forwarding it works perfect. acl clients { any ; }; options { ...
0
votes
1answer
56 views

Is it possible to make one public ip point at different servers within a local network? [closed]

Title is a bit vague so here i go! Basically i have setup a local dns server that allows me to use my local network using hostnames. e.g. dns.subdomain.home i would like all these servers to be ...
2
votes
1answer
267 views

Publishing long domain key records in bind9

I am setting up a mail system based on exim4. This system implements DKIM signing and checking (among other things). Signing seems to work without problems but checking doesn't work and exim4 ...
1
vote
2answers
71 views

What happens to DNS cache server when the zone DNS server fails?

I have DNS server running which caches for records from a main DNS server. What would happen when the main DNS server is down? Will the cache DNS server still serve the records it has or will all the ...
0
votes
1answer
842 views

Trying to configure NIS on a centos client and getting error Domain not bound

I'm trying to set a host to use NIS. I've instlled ypbind and yp-tools. edited /etc/yp.conf: domain mydomain.local server hostname then edited: /etc/sysconfig/network and added: ...
0
votes
1answer
258 views

BIND/named: zone sigilhosting.com/IN: not loaded due to errors

It's been working perfectly until my cPanel license expired and I had to renew it. I keep getting this error when running named-checkzone: zone sigilhosting.com/IN: NS 'ns1.sigilhosting.com' has no ...
1
vote
0answers
66 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
0
votes
1answer
57 views

domain not accessable without www prefix

I configured bind nameserver for my domain on a VPS with a zone file like this: $TTL 604800 @ IN SOA mydomain.com. root.mydomain.com. ( 5 ; Serial 604800 ...
0
votes
1answer
64 views

Is named.conf and rndc.key supposed to be only accessible by root?

Referencing CentOS / RedHat guide on BIND here, it says the following... Because /etc/named.conf is world-readable, it is advisable to place the key statement in a separate file, readable only ...
0
votes
1answer
189 views

BIND zone also-notify syntax

Given the following my BIND 9 is not able to start. acl ns2 { 192.168.10.50; }; zone "10.168.192.in-addr.arpa" IN { also-notify { ns2 port 53; }; type master; file ...
0
votes
1answer
119 views

Bind9 on Debian : nslookup point on localhost not my ip server

i have just install bind9 on Debian. I think i haven't configured not everything because i still have a problem with the DNS and the propagation. I think the problem is say by nslookup : Server: ...
-2
votes
2answers
335 views

Bind/DNS unqualified name problems

All, I have a question regarding NXDOMAIN/Unqualified Domain searches in BIND/DNS What we want: We want the ability to have unresolved queries or unqualified searches go against a default bind zone. ...
2
votes
3answers
251 views

Is it possible to recover a deleted named.conf if named still running?

If, for example, you spend some time working on a named.conf, and then by mistake clear it and save it (thanks to vi), is there a saved copy of the named.conf in the running instance that I could ...
0
votes
0answers
39 views

How to diagnose flaky nslookup/bind9?

BACKGROUND I have a long running DNS (bind9) server running on Ubuntu that works most of the time (from Ubuntu, Win8 or OSX): $ nslookup gitserver Server: 127.0.1.1 Address: ...