BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

0
votes
1answer
163 views

Classless Reverse DNS with Recursion - BIND

I'm running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on CentOS 6.6. The only zone is for classless reverse DNS, which has been delegated. I'm no BIND or DNS expert, but as I understand it, classless ...
0
votes
1answer
67 views

BIND9 and Zone configuration doesn't “bind” domain

Named.conf File: options { #listen-on port 53 { 127.0.0.1; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file ...
34
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
2answers
69 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
0
votes
0answers
194 views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key ...
1
vote
1answer
33 views

Channelizing logs on Bind 8

I am using the following channel clause in my named.conf, logging { channel named_log { file "logs-remote/bind.log"; severity dynamic; print-category yes; print-severity yes; print-time yes; }; ...
0
votes
1answer
59 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
0
votes
1answer
220 views

BIND: Forcing authoritative nameserver answer with no data on non-recursive requests (Research purposes)

Edit: I've simplified target goal as suggested by Andrew B. The goal is basically setting an authoritative name server to only give real answer on recursive requests, which means breaking the ...
1
vote
1answer
2k views

need to configure BIND server query logging with versions

I've been trying to get BIND server query logging working, creating 3 versions, max 100mb each. The system is SUSE SLES 11. I have found numerous how to articles on the web but none of them do ...
1
vote
2answers
657 views

URIBL_BLOCKED despite caching nameserver

I run a mail server for two people, Ubuntu 10.04 LTS. I have Spamassassin running via Amavis/Postfix. In many messages, I am getting URIBL_BLOCKED in the X-Spam-Status headers, which indicates that ...
-1
votes
1answer
46 views

Would it be good idea to share DNS zone files via NFS?

Any expert advice on Bind DNS zone file transfer (master->slave) via NFS? Are there any drawbacks for not using Bind's zone transfer feature? Thanks a lot!
1
vote
1answer
86 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
3
votes
5answers
473 views

Automatic way to increase zone file serial number by one in BIND9

I've a BIND9 server with a lot of zones and I need to increase the serial number of the zone files by one. Some zones are using the YYYYMMDDXX format but other zones just increase it by one, as they ...
3
votes
2answers
4k views

Local DNS server (bind) and the router DHCP

I just set up an internal http server for internal use (I set up Redmine), in a small network (30 or so PCs). I set up the http server on a virtual box ubuntu, that runs also the DNS server (bind). ...
-1
votes
1answer
25 views

DNS zone servicing concepts

Currently I am working out some concepts about how DNS works and am running into a question I can't easily find an answer to on the internet. I am looking for an answer based on a set of questions ...
0
votes
1answer
3k views

BIND failing to resolve with 'WARNING: recursion requested but not available'

there are no errors in the logs and query logging won't initialize iptables is fully disabled but the server will respond with "WARNING: recursion requested but not available" because my client ...
0
votes
2answers
155 views

Bind DNS not working?

I Know there always lots of answer about Bind. But somehow I can't understand the problem of my settings. Here is my configuration options { listen-on port 53 { 192.168.159.130; }; ...
0
votes
1answer
7k views

Bind9: Permission denied and file not found when loading from master file, only first time

I have installed bind9 on ubuntu server 10.04.1. And there is some strange things. Just after boot here is my log file: Feb 26 18:30:57 myserver init: apport pre-start process (793) terminated ...
1
vote
6answers
356 views

Cannot start BIND9

I followed everything EXACTLY in this tutorial for setting up DNS. I set up everything on a blank server. However, starting BIND9 failed: rndc: connect failed: 127.0.0.1#953: connection refused I ...
1
vote
1answer
267 views

nsupdate failing on localhost - Bind 8

I have added a zone test.net via rndc locally and it is working fine. Next, I want to update it via nsupdate but locally, my zone configurations are, zone test.net {type master; file ...
0
votes
3answers
119 views

bind9 reverse zone dns config error - CNAME

i am trying to set up a reverse zone for my bind dns server, under the subnet 192.168.0.65/29 my zone datafile looks like this: @ IN SOA server.example.com. server.example.com. ...
21
votes
8answers
24k views

Overriding some DNS entries in BIND for internal networks

I have an internal network with a DNS server running BIND, connected to the internet through a single gateway. My domain "example.com" is managed by an external DNS provider. Some of the entries in ...
0
votes
1answer
28 views

Nameserver setup Bind

I have setup a domain and nameservers as per below, but when I dig the domain, it is not working. The setup is as follows: I want a domain named iheartlotto.com, and the nameservers to be ...
0
votes
2answers
39 views

Bind Nameserver Setup

I setup bind on my debian box, and have setup my zone files to have my nameserver defined. When I dig, using for example: dig @123.456.789.123 ns1.mynameserver.com where 123.456.789.123 is the ...
1
vote
1answer
1k views

bind9 start fails on ubuntu, but i can't purge and reinstall

please help me, i screwed my server. root@...:/etc/apache2/sites-available# dpkg --configure -a Setting up bind9 (1:9.7.0.dfsg.P1-1ubuntu0.8) ... * Starting domain name service... bind9 ...
1
vote
1answer
277 views

bind9 proper recursion setup

If I remove recursion then I can't resolve external domains but can still resolve domains that are on the DNS server. What is the proper way to setup recursion correctly so external domains can still ...
0
votes
3answers
88 views

bind9 SOA issue

using DNSStuff site to run checks against our bind9 DNS servers and it's coming back with One or more SOA fields are outside recommended ranges. Values that are out of specifications could cause ...
3
votes
1answer
702 views

Samba4 as an Active Directory Controller and bind9 zones

I am trying to setup Samba4 as an active directory controller by following these two tutorials: http://www.matrix44.net/cms/notes/gnulinux/samba-4-ad-domain-with-ubuntu-12-04 ...
0
votes
0answers
38 views

RNDC is not reloading my ACL list in Bind, how can I make it reload without losing Cache?

I have two ACL's, one expired, and one authorized. When I make a change to the ACL and try: rndc reload and rndc reconfig I do not see that the ACL was refreshed. Any ideas?
-3
votes
1answer
85 views

Overwriting Internet Ads with our own for our Proxy Server [closed]

We offer free internet access to customers. We proxy all we can to improve speed as it is a heavily used service. If not illegal, we would like to offer our own google and non google ads in places on ...
1
vote
1answer
50 views

What is a quicker DNS Setup?

We have two DNS servers that are restarted frequently to update ACL lists. The two servers are independent, and we have the second DNS server set to update its ACL lists 5 seconds after the first one ...
0
votes
1answer
48 views

Bind 10 - Reverse zone file error

As I stated in the title I have a problem with BIND 10 . More exactly , I am looking to make a reverse zone file. I am using BIND on Windows 7. I know, there were warnings about how ISC doesn't ...
0
votes
1answer
123 views

Why is BIND 9.8.4 using a lot more CPU time than BIND 9.7.0?

I recently migrated a small DNS setup from one machine to another. The only thing that changed was the version of bind in use: root@old_box:~ $ named -V BIND 9.7.0-P1 built with '--prefix=/usr' ...
1
vote
1answer
93 views

Do I need Bind for my dedicated server?

On the onset, would like to declare myself as a newbie, I have used managed servers before, this time around wanted to go for nginx, and my host did not have a control panel for nginx only, and ...
6
votes
2answers
6k views

BIND slave doesn't sync up with master until it is restarted

I have two DNS servers running BIND9, one master and one slave. When the zone file is updated on the master, I want the slave server to immediately start serving the changed record(s), but BIND is ...
2
votes
1answer
338 views

DNS Lookups no longer working - administratively prohibited

I'm running into a strange issue where my server now refuses to do DNS lookups (using bind). I use a CentOS box as an OpenVPN gateway and provide DNS service to the clients. For month everything was ...
0
votes
0answers
29 views

Priorities or ambiguos DNS reverse zone with Bind

In my internal DNS running on Bind9 all machines are available at up to 3 different domain names, i.e. all machines are listed as machine.legacy.domain and machine.new.domain. Some machines are joined ...
2
votes
1answer
268 views

How can I disable DNSSC for Google Apps (GMail) MX records on my authoritative domains?

I'm running a BIND Master / Slave setup with DNSSEC, but some of my domains use Google Apps for e-mail services. Google doesn't support DNSSEC and BIND doesn't like it at all. Log output: Sep 6 ...
-1
votes
1answer
59 views

BIND with external web server [closed]

I am trying to get up and running my own DNS server but something is wrong. I do not get any error but when I access to www.example.org the page is not loaded. I am using Linux. My registered ...
0
votes
1answer
720 views

dns external lookup servfail

I assure you I have searched far and wide for a clue to this problem! I have a DNS server running CentOS 5.5 and BIND 9.3. Most external lookups work fine, but lookups on one particular domain ...
1
vote
1answer
176 views

how can I define subdomains for a subdomain in bind?

I have a domain "example.com" with subdomain "sub1.example.com" defined as an "A" record in the bind zone file. How can I define something like "sub2.sub1.example.com"?
0
votes
0answers
158 views

how to “match-clients” on Bind9 to match with IP of who use the DNS

I just setup a GeoDNS server with bind9.9.5 with geoip patch following this kind of configuration: http://www.caraytech.com/geodns/ The server dns work very well and geoip modules do the job. What ...
0
votes
1answer
275 views

How can I get bind to return the same dns answer as DNSMASQ returns?

As Dnsmasq does not support Views, I have installed and configured bind9. Everything works, however I am noticing on a specific entry that my bind server is not returning the same answer/response as ...
2
votes
0answers
17k views

How to properly configure BIND forward zone for an internal DNS server?

I have: internal DNS server ns1.internal with IP 192.168.0.4. external DNS server with an external TLD mydns.example.com and internal IP 192.168.0.5. It's accessible both from the Internet and from ...
1
vote
1answer
65 views

Connecting local web server to local dns server

I have 1 local webserver "192.168.91.100" and 1 local DNS server "192.168.91.101" to do name resolve for the local web server. I have configured few zones in local DNS server. I wanted to link this ...
0
votes
1answer
160 views

DNS delegation does not work

I am quite newcomer to BIND and am trying to understand why is my environment not working. I have 3 DNS servers, ns1.ixlabs.net, ns2.ixlabs.net and ns1.plesk.ixlabs.net. ns1 and ns2 on ixlabs, are ...
1
vote
1answer
2k views

Bind slave slow to update zones

I two Bind servers in a master/slave configuration. When the serial is incremented on the master zone file, it takes longer than expect for the zone to update on the slave. I have replicated the ...
3
votes
1answer
233 views

Caching DNS server returns invalid ip address for external lookups

I'm trying to resolve a DNS issue and am running short of ideas. Google doesn't seem to be helping, either. When I use my local caching name server to resolve external host names, it always returns ...
3
votes
0answers
190 views

Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10

I’m with a problem trying to enable GSS-TSIG with BIND 9.10. Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
1
vote
1answer
1k views

Graph Bind9 requests statistic with Cacti: named.stats => Permission denied

I set up, sometimes ago, a Cacti plugin on a Linux Debian that allows to collect DNS statistics, through SNMP/rndc queries, for generating beautiful graphics. It was working fine until some weeks ...