Tagged Questions

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

1
vote
1answer
53 views

PTR record created, but not found

We are a small ISP, using linux DNS servers. Recently a client has asked us to create a rDNS zone for a specific IP address, which is used for a mail server. They keep getting message failures for ...
18
votes
1answer
302 views

When I have a * entry in my zone file, how can I treat a specific name as nonexistent?

On our main domain, example.com we're hosting a lot of websites. So we just added a * A/AAAA record to our zone and pointed it at our webserver. Sadly, this also causes Outlook to constantly hammer ...
0
votes
3answers
53 views

How to correctly register in my DNS servers whose IPs and names are handled by someone else?

I use a virtual server (several similar cases) set up and registered by someone else. Its IP is 10.0.0.1 and name a.example.com (both handled by the "someone else" above). I manage the domain ...
1
vote
2answers
99 views

Failing in resolve reverse name

I can't properly resolve my reverse name. In my configs, I replaced my IP address by X1.X2.X3.X4, and my domain name by domainname. I have been following this tutorial, in which it first resolves the ...
3
votes
0answers
413 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
1
vote
1answer
877 views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
1
vote
1answer
36 views

Is BIND9 what I'm looking for?

I just purchased a dedicated server and have Debian 7 installed. I of course want my server to work with my domain, so I assume what I need to do is install BIND9 on the dedicated server and configure ...
0
votes
1answer
46 views

Why is bind asking for this extra parameter in my zone file?

I'm creating a zone file for a fake root because this is a closed network with no Internet access. I've created the following zone file but for some reason, bind is requiring an extra parameter; ...
1
vote
2answers
526 views

Are there DNS servers supporting ALIAS type for apex records?

DNSimple and AWS Route53 are supporting ALIAS records that allow similar functionality to CNAMES for @ (Apex) records in DNS. I'm running a DNS server (Bind) that is currently hosting around 1500 ...
4
votes
1answer
139 views

Entropy Deprivation on Bind / Named Servers

I noticed that my DNS servers are having low points in the available entropy: (Note it doesn't stay that low, but within 10 minutes there are several low points (this graph shows the min of 10 min ...
1
vote
1answer
111 views

TLS on SRV Records

The SRV records comply with this format: _service._proto.domain (and some other values here...). I want to know if anyone has ever used in _proto - tls. TLS is not a transport protocol, so, is it ...
2
votes
2answers
126 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
1
vote
1answer
118 views

How to DNSSEC Sign Bind9 Reverse Zone

I'm using bind9 and dnssec-keygen/dnssec-signzone. I've had no problem signing my forward zones however I cannot seem to find any documentation on signing reverse zones. What is the process for this?
2
votes
1answer
1k views

Fix slow SSH login due to reverse lookup without disabling UseDNS

Whenever I try to connect to my server from Azure VM it takes a lot of time due to failing reverse DNS lookup. I can disable lookups with UseDNS no and completely bypass the problem but this makes ...
0
votes
2answers
185 views

Configuring DNS with router and BIND

Goal I am trying to setup a local DNS server here in our office. Problem Apparently Comcast has a loop-back so when we configured the domain to go to our IP it works outside of the office but ...
2
votes
1answer
406 views

Bind9 reverse DNS configuration not working.

I am trying to set up a custom virtual DNS server in Ubuntu. When I try to nslookup with a windows 7 pc within the same virtual environment the reverse DNS seems te fail. My named.conf.local file: ...
2
votes
2answers
265 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...
0
votes
1answer
143 views

How can I configure dhcpd to only update the reverse zone in bind?

I've got dhcpd pushing updates to bind, and it seems to be working fine: named[24161]: client 192.168.10.1#59141: signer "dhcp_updater" approved named[24161]: client 192.168.10.1#59141: updating zone ...
-2
votes
1answer
62 views

domain-search value on my clients computer [closed]

I need help with configure my DNS and DHCP server - I have spent some time searching on google but have not got any informations regarding my problem. I have an Ubuntu 12.04 server running and use ...
0
votes
1answer
81 views

BIND Domain name transclusion/zone mirroring

Is there a way to create a DNS record that fully mirrors another website? Which is to say, *.foo.tld/* maps to *.bar.tld/* so any query for foo.tld will be served up by bar.tldbut the DNS will appear ...
0
votes
1answer
43 views

DNS resolution failure when querying through server IP

I have a DNS zone file with the following config : $TTL 86400 $ORIGIN example.com. @ IN SOA ns1.example.com. dns.example.com. ( 2014022604 ; Serial ...
1
vote
1answer
50 views

Running authoritive nameserver in ipv6 only environment?

What are the arguments against running an authoritive nameserver (primary) e.g. bind in a ipv6 only environment? In the current setup the machine dedicated to the nameserver has only direct ipv6 ...
3
votes
1answer
298 views

What is the syntax of email address with a dot behind it? in DNS zone file, SOA rr

How i can use a email address with a dot in behind. For example at bellow, email address is hostmaster@example.com, How to use host.master@example.com ? example.com. IN SOA ns.example.com. ...
1
vote
1answer
108 views

Effects of publishing DNSSEC DS records without signing public zone?

We at example.com are being pressured to implement DNSSEC by a sub-division of our organisation: security.example.com. Our current name servers ns1.example.com and ns2.example.com are unsigned, ...
3
votes
3answers
373 views

How to combine Active Directory with Split-Horizon DNS?

I'm in a quandary. I need to implement Split-Horizon DNS in my office based on subnet. For example: Users in 10.170.0.0/16 need to resolve "srv01.extra.company.com" to 10.170.0.5 10.25.0.170 Users ...
2
votes
2answers
135 views

DNSSEC auto signing and file handling

I would like to know how files are handled in a auto-dnssec environment. My current setup (non-DNSSEC) places the zones files in /var/named/data. These files are then read by the bind server. If I ...
0
votes
1answer
648 views

BIND9 DNSSEC: should I care about occasional “insecure” log messages

A small number of my forwarded DNS queries cause BIND 9 to log messages such as: 184.in-addr.arpa SOA: got insecure response; parent indicates it should be secure validating @0x7f93140c0870: ...
0
votes
1answer
41 views

bind did not responde out of server

I have problem with bind server configuration. ​Result for lookup on 8.8.4.4: root@server1:~# dig @8.8.4.4 webexamplesite.com ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @8.8.4.4 ...
-1
votes
1answer
445 views

DNS how to dynamically bind subdomains to ip and port pairs [duplicate]

I'm using bind9 I have a zone file setup with a few subdomain A records. I'm wondering if I can create a subdomain record that points to an ip address on a specific port. I'm currently updating the ...
-1
votes
1answer
79 views

Masking CNAME/A Record Requirements from Clients

I'm reselling hosting services to non-technical clients. With regards to associating domains/IPs, the host I'm reselling requires that once a VPS is deployed i then go to the domain's registrar and ...
0
votes
0answers
77 views

RPZ in Bind and wildcards

I'n not sure if this is possible. I am able to setup a DNS with RPZ zones for blacklisted domains and whitelisted domains. The problem is that I want to whitelist only a couple domains while ...
0
votes
2answers
105 views

BIND: Whitelist IPs using nsupdate

I know that we can add any kind of DNS records in BIND DNS server using nsupdate. Can we whitelist or blacklist any ip in realtime using nsupdate. We whitelist only certain IPs to prevent our DNS ...
1
vote
0answers
277 views

Woes with named/bind and forwarding zones

I'm sadly restricted to a very old version of bind (9.4.2) This is the think. If I setup bind with a named.conf and only forwarding it works perfect. acl clients { any ; }; options { ...
2
votes
1answer
2k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
1answer
67 views

Is it possible to make one public ip point at different servers within a local network? [closed]

Title is a bit vague so here i go! Basically i have setup a local dns server that allows me to use my local network using hostnames. e.g. dns.subdomain.home i would like all these servers to be ...
2
votes
1answer
748 views

Publishing long domain key records in bind9

I am setting up a mail system based on exim4. This system implements DKIM signing and checking (among other things). Signing seems to work without problems but checking doesn't work and exim4 ...
1
vote
2answers
80 views

What happens to DNS cache server when the zone DNS server fails?

I have DNS server running which caches for records from a main DNS server. What would happen when the main DNS server is down? Will the cache DNS server still serve the records it has or will all the ...
0
votes
1answer
619 views

BIND/named: zone sigilhosting.com/IN: not loaded due to errors

It's been working perfectly until my cPanel license expired and I had to renew it. I keep getting this error when running named-checkzone: zone sigilhosting.com/IN: NS 'ns1.sigilhosting.com' has no ...
1
vote
0answers
96 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...
0
votes
1answer
102 views

domain not accessable without www prefix

I configured bind nameserver for my domain on a VPS with a zone file like this: $TTL 604800 @ IN SOA mydomain.com. root.mydomain.com. ( 5 ; Serial 604800 ...
0
votes
1answer
281 views

Is named.conf and rndc.key supposed to be only accessible by root?

Referencing CentOS / RedHat guide on BIND here, it says the following... Because /etc/named.conf is world-readable, it is advisable to place the key statement in a separate file, readable only ...
0
votes
1answer
371 views

BIND zone also-notify syntax

Given the following my BIND 9 is not able to start. acl ns2 { 192.168.10.50; }; zone "10.168.192.in-addr.arpa" IN { also-notify { ns2 port 53; }; type master; file ...
0
votes
1answer
213 views

Bind9 on Debian : nslookup point on localhost not my ip server

i have just install bind9 on Debian. I think i haven't configured not everything because i still have a problem with the DNS and the propagation. I think the problem is say by nslookup : Server: ...
0
votes
0answers
46 views

How to diagnose flaky nslookup/bind9?

BACKGROUND I have a long running DNS (bind9) server running on Ubuntu that works most of the time (from Ubuntu, Win8 or OSX): $ nslookup gitserver Server: 127.0.1.1 Address: ...
1
vote
0answers
46 views

How to make BIND return old cached enties if all forwarders are failed?

I have a local forwarding BIND server installed at localhost. In its configuration there is a couple of forwarders: options { ... forwarders { 1.2.3.4; 5.6.7.8; }; ... }; Servers which are pointed ...
0
votes
1answer
50 views

Calculate requirements for a caching/forwarding-only nameserver

I am considering a caching/forwarding nameserver to be used by internal servers to speed up name resolving. Is there a way to calculate some reference values to figure out its requirements? I simply ...
0
votes
3answers
240 views

How to prevent sub-domain 'hijacking' on the same DNS server?

I'm trying to understand how (or if) a DNS server differentiates between a sub-domain setup as a zone and one setup as a record within a domain zone on the same server. Say I were to create a DNS ...
0
votes
0answers
448 views

CentOS DHCP server not updating DNS nameserver on Ubuntu Client

I have a working DHCP server on CentOS, with /etc/dhcp/dhcpd.conf set up as follows: subnet 192.168.1.0 netmask 255.255.255.0 { option routers 192.168.1.1; option subnet-mask 255.255.255.0; ...
2
votes
1answer
273 views

the dnssec-keygen works very slow on Centos if we run it with inputting domain name only

From this ISC BIND article example: https://kb.isc.org/article/AA-00626/0/Inline-Signing-in-ISC-BIND-9.9.0-Examples.html $ dnssec-keygen example.com Generating key ...
0
votes
1answer
148 views

dhcp dns not resolving queries

I having been working through a lot issues with a setup and I reached another where I may have been staring at it for too long to see the issue. The server is reachable from the outside world. ...