BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

0
votes
2answers
401 views

Bind DNS server respond timeout

I've set up a BIND DNS server on centos 7. I've created the master zone record, it is the following: $ttl 38400 loool.ro. IN SOA ns1.loool.ro. owner.yahoo.com. ( 1421842090 ...
0
votes
2answers
110 views

Forward requests from registrar to black hole / captive portal DNS?

I have a number of domains that that I would like to set to change the nameserver for to rewrite.mydomain.org. The goal is to have any domain names with this nameserver be routed to a specific Apache ...
3
votes
1answer
438 views

Why is my dns server being queried for domains that I don't host?

I installed dnstop to monitor my nameserver running bind9 and was surprised to see it being queried for other domains that I don't host. I am just wondering if this is normal behaviour, or have I ...
4
votes
2answers
350 views

Can BIND alter a response based on requesting IP address?

Hello Serverfault, I work for a hospital who set up their network using 192.168.0.0/23 (before I arrived). We are wanting to have laptops and mobile clients connect from remote locations using VPN, ...
-1
votes
2answers
100 views

Subdomains are not resolving [closed]

I have an Ubuntu+Virtualmin server with multiple sites on board. Sites are working fine but for some reason "www." and other subdomains are not resolving. My server IP is 107.170.xxx.xx. If I add ...
2
votes
1answer
240 views

bind dig no answer for www

I'm trying to set up a domain. It works for vumila.com, but not with www.vumila.com. Here are my files: db.vumila.com: $TTL 3h @ IN SOA ns1.vumila.com. admin.vumila.com. ( ...
1
vote
0answers
110 views

How do I restrict the domain name for reverse DNS updates with bind and nsupdate?

I've set up Bind to allow hosts to update only their own DNS entries, but I'm having trouble with the reverse DNS portion of this. My configuration is as follows: named.conf options { listen-on ...
0
votes
0answers
89 views

`<domain> has no MX record` even though it's configured

I'm trying to set up a mailserver, but I'm stuck with configuring bind. I set the forwarders in /etc/bind/named.conf.options options { directory "/var/cache/bind"; forwarders { ...
2
votes
2answers
369 views

Understand the TTL in DNS zone SOA record

Lets say I create a reverse zone-file for 192.0.2.0/24 network in my DNS server and my DNS server will be the authoritative for reverse-zone 2.0.192.in-addr.arpa. In this reverse zone-file I create ...
0
votes
1answer
96 views

Finding BIND Queries Per Month

I need to find out the number of queries that my BIND server is handling a month. I have dumped the stats out to named.stats, but I am having problems understanding it. How can I find out what time ...
1
vote
1answer
94 views

How to have resolvconf -u not put 127.0.01 in resolv.conf

I have an Ubuntu server running Bind9, which does not do recursion. I also don't want to use it for any kind of local DNS, because it may not reflect what the outside world sees (getting stale ...
1
vote
0answers
33 views

BIND Delegation to primary AD site only [closed]

First-question, be nice please. On a physically distributed internal network we have BIND running our top level DNS at our primary site, with Active Directory serving a single subdomain locally AND ...
0
votes
0answers
39 views

BIND logging to find “resolved address”

Currently my logging is set up like this : logging { channel query_log { file "/var/log/named/query.log"; severity info; }; category queries { query_log; }; Which results in: client ...
0
votes
0answers
108 views

Bind9 Zone with own dns forwarder

Installed bind9 on my server to forward 1 domain to another DNS server Client -> Vps bind9 server -> www.facebook.com must be resolved by dns 8.8.8.8 (GoogleDNS). All other websites must be resolved ...
1
vote
0answers
77 views

ipv6 address assignment via local server from isp assigned block

I have been looking around and found the information confusing as best. Is there a way to have a server "recieve" the /64 ipv6 block from the isp and then use dhcp or something to assign it out to ...
0
votes
2answers
57 views

Point subdomain to VPS

I would like to setup a subdomain on my VPS. I have read a tutorial(http://crm.vpscheap.net/knowledgebase.php?action=displayarticle&id=10), but I think it isn't for subdomains. This section ...
2
votes
1answer
172 views

named can not find a certain domain

I have setup named in chroot and it has been working for some days. Now it does not find a certain domain's IP: # dig arstechnica.com ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1 ...
1
vote
1answer
112 views

Bind views match-client from zone delegation

i've a problem with views using Bind9. I've a Microsoft DNS server with a domain "example.com" configurated to delegate the sub-domain "ds.example.com" to Bind DNS Server. In the Bind server i've ...
-1
votes
1answer
45 views

How to specify a DNS Slave server, that is on a different domain, in the appropriate zone file on the master naming server?

I am unsure if my question makes sense, but I am working on configuring a DNS Master/Slave setup. We currently have two domains. For privacy purposes, I will use "example" as my domain, we have ...
3
votes
1answer
236 views

How would you setup a up an A record for any negative query?

How would I go about setting up an A record for in Bind9 for any negative queries? I want to forward our staff to an informational page if they were to visit a non existent domain. We have an internal ...
1
vote
1answer
89 views

IPv6 record will not take for rDNS

I added the following to named.conf zone "3IP6.A.B.C.ip6.arpa" { type master; file "3IP6.A.B.C.ip6.arpa"; allow-update { none; }; }; I then created my dns zone record called 3IP6.A.B.C.ip6.arpa ...
0
votes
0answers
1k views

bind “can't find example: SERVFAIL”

I'm trying to setup a dns server on my LAN because my router doesn't support nat reflection and I have virtualhosts which require a domain (can't be reached by IP address) running on apache. I'm not ...
0
votes
2answers
86 views

How do you load balance a forwarding only server… with no authoritive zones?

New Thought and possible answer to my Question? Would it be possible to change the root config file (the db.root with A/B/C/D/E/F/etc.ROOT-SERVERS.NET) and remove the original entries (i.e: ican ip ...
3
votes
2answers
684 views

bind not able to query some servers / domains

We have been experiencing problems with our company's DNS server when trying to resolve only certain domains, we are running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on a CentOS 6.5 server. We are ...
0
votes
2answers
113 views

Bind dont forward to secondary dns server as specified in “forwarders” under named.options.conf

I have bind9 setup to forward dns queries to machines connected localy trough the 192.168.1/24 network. The ip's that I forward the queries to are also my internet gateways. Sometimes one of the ...
2
votes
1answer
64 views

Performance-wise, is a DNS Slave better to have than two duplicate Masters?

I have two bind9 servers that are not setup with duplicate settings and know nothing about each other. Our CPU usage is sitting around 7% - 10%: mostly bind, which I believe is perfectly in range for ...
-2
votes
1answer
127 views

Iptables doesn't open port 53 [closed]

I have been trying different ways of opening the port but for some reason doesn't work. The last set of lines that I have used is as follows: iptables -I OUTPUT -p udp --dport 53 -m state --state ...
0
votes
0answers
59 views

setting up DANE fails, error with “could not get cert chain from ssl”

I successfully setup DNSSEC and enabled it on my domain. I'd love to make use of my DANE. I created a standard self signed certificate openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem ...
0
votes
0answers
35 views

my sub domains vanish with time

I have a server running bind9. When the propagation is done and i ping domain.tld i get xx.xx.xx.xx (where xx.xx.xx.xx is the server IP), if i ping test.domain.tld i get xx.xx.xx.xx, at this point ...
0
votes
1answer
301 views

Named failed due to permissions and connect fail error [closed]

I'm facing a serious problem which has knocked out my server. For some unknown reason, named is no longer working, despite doing my best to remediation the issues found on the logs. I get this error ...
-2
votes
2answers
81 views

How do I secure a zone with dlv.isc.org's DLV service? [closed]

I'm setting up domain-lookaside validation. I think I got mostly everything correct. I followed the directions here: https://dlv.isc.org/about/using. I registered my domain and uploaded the key ...
2
votes
1answer
134 views

Cannot load reverse lookup zones containing “rich-text” PTR records

Summary I am attempting to set up Wide-Area Bonjour (aka DNS-SD) using ISC Bind 9.9.5, but cannot load reverse lookup zones providing discovery of "rich-text" service domains. Background According ...
1
vote
1answer
43 views

How to configure an additional BIND instance for a domain already described by other public name servers?

Background I have a small virtual server hosted by my provider and there I have configured a relatively simple combination of postfix, dovecot and roundcubemail (backed by nginx) that works OK. I ...
-1
votes
1answer
771 views

Dig shows external configuration? [closed]

I'm already trying for 2 days to deal with an answer for this problem. I have a virtual server somewhere and installed postfix/dovecot/mysql. It works somehow. I can login with Outlook with the ...
0
votes
0answers
38 views

bind9 internal domain name

For our internal network we're using domain names like user.int. I've setup bind to resolve those to the appropriate IP addresses. Since .int is actual top-level domain name(although used for just a ...
0
votes
1answer
119 views

Get a catch-all DNS and set a MX for a special domain

I'm trying to set a catch-all configuration with Bind. I've followed this answer and it works fine : http://serverfault.com/a/397011/179968 Now I'm trying to configure my MX record to configure my ...
2
votes
1answer
78 views

bind zone file setup for dns round robin

I would like to set up load balancing for my website using DNS round robin. My DNS is managed by my own CentOS 6 server running bind. I added the following into my zone file: @ ...
1
vote
1answer
283 views

Classless Reverse DNS with Recursion - BIND

I'm running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on CentOS 6.6. The only zone is for classless reverse DNS, which has been delegated. I'm no BIND or DNS expert, but as I understand it, classless ...
0
votes
1answer
77 views

BIND9 and Zone configuration doesn't “bind” domain

Named.conf File: options { #listen-on port 53 { 127.0.0.1; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file ...
0
votes
2answers
74 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
1
vote
1answer
34 views

Channelizing logs on Bind 8

I am using the following channel clause in my named.conf, logging { channel named_log { file "logs-remote/bind.log"; severity dynamic; print-category yes; print-severity yes; print-time yes; }; ...
0
votes
0answers
310 views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key ...
35
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
1answer
62 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
-1
votes
1answer
52 views

Would it be good idea to share DNS zone files via NFS?

Any expert advice on Bind DNS zone file transfer (master->slave) via NFS? Are there any drawbacks for not using Bind's zone transfer feature? Thanks a lot!
0
votes
2answers
101 views

Bulk Append text to all *.db files in folder (cPanel bulk DNS Insert) [closed]

I run my own DNS cluster using 1 server running cPanel/WHM and 4 servers (ns1-ns4) running cPanel DNS Only. I've just added the 4th DNS Only server (ns4.domain.com) but the problem is that all 200 of ...
1
vote
1answer
112 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
-1
votes
2answers
358 views

Bind only works Locally - Ping works locally not externally

I am using Bind on a Centos 6.5 server in order resolve subdomains to an IP. I have *.ddns.example.com and ddns.example.com pointing to my server via A record. I have added a zone for this, see ...
1
vote
2answers
265 views

Microsoft DHCP server and Unix BIND dynamic DNS

Is there any way to make Microsoft DHCP server to securely dynamically update A and PTR records in Unix Bind DNS zone? Microsoft supports secure update using username/password authentication. Bind9 ...
-1
votes
1answer
26 views

DNS zone servicing concepts

Currently I am working out some concepts about how DNS works and am running into a question I can't easily find an answer to on the internet. I am looking for an answer based on a set of questions ...