Questions tagged [bind]
BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.
2,312
questions
5
votes
2
answers
26k
views
bind: "nsupdate -l" failed with status "update failed: REFUSED"
I just switched to bind 9.9.5 dynamic DNS feature with semi-automatic management of DNSSEC entries, the whole process went good and my zone files were updated well, but now I can't update or add ...
- 468
5
votes
1
answer
12k
views
Resolve hostname without FQDN
I'm trying to configure Bind for internal LAN usage only (Linux server, Windows clients) and I would like to resolve workstation both by fqdn and shortname.
For example, without DNS server, supposing ...
- 547
5
votes
6
answers
909
views
Nameserver Checker
I've got Bind running on a server and although access to the domains I've set up is correct. I was wondering if there was an online (or offline) tool to check if I had setup the service correctly?
...
- 243
5
votes
2
answers
8k
views
Return A records but not AAAA records on specific domain in bind9
I've setup a caching DNS server with bind9 using a root-hints method (like this). It works as desired--but, our IPv6 traffic goes through a gateway outside of my country that makes Netflix think we're ...
- 440
5
votes
2
answers
4k
views
Setting different NS records as authoritative on authoritative DNS
I have DNS servers for a domain set to one set of authoritative DNS servers on the registrar. However, those DNS servers zone file for the domain have a different set of NS records for it. Some DNS ...
- 83
5
votes
2
answers
11k
views
BIND9 reverse DNS, /16 zone
I'm trying to set up a reverse zone for the entire 10.200.x.x/16 subnet. I've configured everything according to named.conf and several different blog posts, but no luck.
Note that the A-records ...
- 19.7k
5
votes
2
answers
4k
views
Slave DNS server (bind) zone files transffered but data is unreadable
I've set up a slave DNS server on Linux using bind. On starting the named service the zone files transffered to slaves/ but the information in the files looks like its in strange computer symbols (i'm ...
- 997
5
votes
1
answer
8k
views
Adding static DNS entries on a dynamic BIND setup
I've got a DNS (BIND9) and DHCP (ISC-DHCP-SERVER) setup in which the DHCP server dynamically updates the DNS when hosts grab an IP address. I'm currently resubnetting a portion of my network that's ...
- 407
5
votes
1
answer
36k
views
BIND - zone not loaded due to errors
After upgrading from Ubuntu 8.04 to 10.04 my DNS isn't working properly anymore.
I keep getting this error when I run named-checkzone example.com /var/cache/bind/example.com.zone.db
zone example.com/...
5
votes
1
answer
30k
views
Reverse DNS/bind named-checkzone "zone NS has no address records (A or AAAA) error"
This is my reverse dns file.
$TTL 1D
@ IN SOA dns.prv.server.co.uk. root.prv.server.co.uk. (
2014090402 ; serial
...
- 997
5
votes
2
answers
28k
views
unexpected RCODE REFUSED - eating up log files
I have a website which I host myself, and I use bind9 as my DNS server (host my own nameservers etc.).
I am having a problem with traffic bandwidth, and my syslog is full of the following type of ...
- 249
5
votes
2
answers
19k
views
bind9 configure forward zone for local domain without DNSSEC for this zone only
I have a working DNS server for local domain mydomain.local. I am trying to configure bind9 to work in default configuration, except for this zone, for which I want to forward queries to local DNS ...
- 806
5
votes
2
answers
3k
views
Why is Denic not accepting my nameservers?
I'm currently in the process of moving all of our domains to our own nameservers. Which wasn't an issue until I hit our own .de domain. I (think I) understand the implications of having the NS inside ...
- 4,667
5
votes
1
answer
5k
views
Bind9 Forwarders/Redirect
We are using Bind9 on our DNS servers. We have all of our zone files structured with the following format in our /var/named/slaves directory:
mywebsite.com.hosts
mysecondwebsite.com.hosts
Each ....
- 132
5
votes
4
answers
4k
views
Web based BIND9 DNS tools?
Are there any good front end tools to manage a BIND9 server? I'd like to offer users the ability to have a login and manage their hosted zones.
- 959
5
votes
1
answer
3k
views
Setting up an automatic DNS server on OpenVPN server
I have a number of networks in remote locations, which I want to be able to access over a VPN. The topology of each network is simply a NAT router, and a machine running an SSH server. The router has ...
- 211
5
votes
1
answer
62k
views
server can't find XXX.in-addr.arpa: NXDOMAIN
I am facing a problem while configuring BIND DNS showing server can't find XXX.in-addr.arpa: NXDOMAIN while reverse dns check!
everything works on forward DNS lookup but reverse DNS lookup fails. ...
- 157
5
votes
2
answers
16k
views
BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative
I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2.
I am already serving ~150 zones and they are all working properly. However when ...
5
votes
3
answers
12k
views
BIND zone also-notify syntax
Given the following my BIND 9 is not able to start.
acl ns2 { 192.168.10.50; };
zone "10.168.192.in-addr.arpa" IN {
also-notify { ns2 port 53; };
type master;
file "192.168.10....
- 931
5
votes
1
answer
2k
views
Variables in named.conf
My server have one IP and several domains hosted.
One and same IP appear in named.conf and several zone files.
When the IP address of the server changes, I need manually to change all those IP's.
...
- 862
5
votes
1
answer
9k
views
BIND authoritative name server: SERVFAIL?
I have a BIND 9.6 instance that acts as a caching NS for the whole building and is also authoritative for an internal zone ("example" below):
zone "example" {
type master;
file "example";
...
- 876
5
votes
3
answers
63k
views
Why do I get "ignoring out-of-zone data" when restarting BIND
I've been using my own DNS server but then I moved to a third part DNS provider. Yesterday I wanted to go back to using my own DNS's and cancel this third party service. I've lowered TTL in current ...
- 805
5
votes
2
answers
12k
views
How can I use a Linux BIND DNS server for my Active Directory forest?
I am trying to setup an Active Directory forest that uses a Linux BIND server for DNS. The goal is that the Domain Controller (DC) to be able to make entries in the /etc/bind/db.foresta.net file from ...
- 187
5
votes
2
answers
2k
views
Bypass DNSSEC for local Stub zones
I am using bind 9.9.2 as a DNSSEC validating recursive resolver in an Internet DMZ. I want to point to my internal DNS servers as stub zones (ideally) or anything except slave zones (to avoid very ...
- 103
5
votes
1
answer
3k
views
Why does my EC2 nameserver (correctly) resolve names to private IPs and then switches to public IPs?
I'm running a nameserver for a few machines on EC2. This nameserver is not reachable via the public Internet. I want all my EC2 instances to use it to be able to find each other and to resolve all ...
- 735
5
votes
1
answer
6k
views
slow DNS resolution
I have a DNS server that resolves all queries for an internal group of servers.
It is a bind on CentOS 5.5 (same as RHEL5) and I have set it up to allow recursion and resolve direction without any ...
- 175
5
votes
2
answers
20k
views
BIND issue: nsupdate unable to update reverse zone
I'm testing my ddns update config (for ISC DHCP hosted on same server) with nsupdate, and while the forward zone updates correctly:
# nsupdate
> server 127.0.0.1
> key dhcpupdate ...
- 123
5
votes
1
answer
2k
views
BIND 9.10 constantly killed on FreeBSD 10.0 with out of swap space
In one of our slave DNS servers BIND, version bind910-9.10.0P2_3, constantly get killed with the following message in /var/log/messages:
Jul 30 01:00:10 cinnabar kernel: pid 602 (named), uid 53, was ...
- 5,620
5
votes
2
answers
12k
views
DNS answer with/without authority, additional sections
dig @ns7.embarqservices.net www.126.com A +dnssec +multiline
; <<>> DiG 9.7.3 <<>> @ns7.embarqservices.net www.126.com A +dnssec +multiline
; (1 server found)
;; global ...
- 215
5
votes
2
answers
2k
views
Null MX records
The IETF appears to have had a draft to specify a null mx record whereby a domain would not handle mail and mail delivery systems would fail and return a undeliverable system immediately by directing ...
- 310
5
votes
1
answer
1k
views
Large AXFR through dnsmasq causes dig to hang with partial results
I'm attempting to set up dnsmasq as a local cache for consul. While this seems to work fine for normal digs, dnsmasq seems to only allow partial zone transfers.
My resolv.conf:
search x.domain.com y....
- 146
5
votes
0
answers
4k
views
BIND: DNS failover and high availability with dynamic updates
I am trying to design a system with 2 servers that act as both DHCP and DNS servers with dynamic updates. I am using ISC DHCP and BIND9.
It looks like this.
Server1 - DHCP primary and DNS master. IP ...
5
votes
0
answers
3k
views
Understanding (and partially disabling?) DNSSEC for an internal domain
I am setting up a new DNS infrastructure for our internal HPC cluster environment. This involves providing a migration path from our existing DNS authorities and domains.
For sake of example, let's ...
- 226
5
votes
2
answers
48k
views
Too many Bind query (cache) denied, DNS attack?
Once Bind crashed and I did: tail -f /var/log/messages
I see a massive number of logs every second. Is this a DNS attack? or is there something wrong?
Sometimes I see a domain in logs like this: ...
- 1,544
4
votes
2
answers
9k
views
Override a DNS record using BIND9?
Sorry if this has been asked before, but I can't seem to find any information specific to my case.
I run a server where users can connect with a Nintendo DS game if they change their DS' primary DNS ...
- 143
4
votes
2
answers
3k
views
How to I make a domain resolve to different IP's when resolved from internal network and external network?
So I looked through BIND and Dnsmasq and unable to figure this out.
I have a few of servers on DigitalOcean, and they are on the same datacenter. I want to be able to use internal IPs to get better ...
- 151
4
votes
3
answers
7k
views
Configure DNS to forward email to google
I'm trying to reconfigure a bind record on an Ubuntu 9.04 server so that email is redirected out to gmail My existing records look like this (not the real ip)
; MX Records
@ IN MX 10 mail
; ...
- 429
4
votes
4
answers
21k
views
Internal and External DNS from Different Servers, Same Zone
I am either having trouble understanding how DNS works, or I am having trouble configuring my DNS correctly (either one isn't good). I am currently working with a domain, I'll call it webdomain.com, ...
- 117
4
votes
2
answers
29k
views
Error in Bind9 named.conf file. Bind won't start
I'm trying to setup a DNS server on an Ubuntu Server machine (10.04). I configured an entry in named.conf.local to test it, but when trying to restart bind9 I get the following error:
* Starting ...
- 484
4
votes
4
answers
23k
views
Why am I seeing IPv6 resolve errors despite having disabled IPv6 in bind?
I see lines such as
Feb 13 21:45:48 srv named[2355]: address not available resolving 'secure.gravatar.com/A/IN': 2a04:fa87:ffff::c6b5:7405#53
Feb 13 21:42:29 srv named[2355]: address not available ...
- 3,657
4
votes
4
answers
11k
views
Can you have multiple writable, authoritative BIND DNS servers for the same zone, like AD-integrated DNS?
In an AD-integrated DNS system, there really isn't a concept of one "Master" DNS server; all AD-integrated zones are authoritative and updatable across all DNS servers, and send updates to each other ...
- 407
4
votes
3
answers
7k
views
Bind 9 - allow-query-on versus listen-on
I was just wondering about differences in behavior between Bind 9's allow-query-on and listen-on statements. They appear to perform similar functions. According to Chapter 6 of the ARM ("Bind 9 ...
- 175
4
votes
3
answers
2k
views
Glibc bug mitigation for getaddrinfo()
Ran across an exploit for glibc today which involves the getaddrinfo() call for DNS resolution. I'm running Ubuntu 12.04 on two Bind9 boxes that face the internet. I'm not sure I totally understand ...
- 3,784
4
votes
3
answers
852
views
Should I avoid using git to track individual files with separate history, such as in /var/named?
In January 2012 Randal Schwartz gave a talk called Introduction to Git that I very much enjoyed, but I was left confused about his admonition not to use git to track individual files with unrelated or ...
- 1,641
4
votes
3
answers
8k
views
Multiple DNS answers for same domain eg google.com -- what does it mean?
I noticed that dig google.com produces four distinct IP addresses. What does that mean? It could be
use any, doesn't matter
try the first, if it doesn't respond, try the next (and so forth)
or ...?
...
- 1,117
4
votes
1
answer
9k
views
named not serving letsencrypt TXT records
Am trying to renew/create letsencrypt certs using DNS auth:
certbot-auto -d xxx.it -d mail.xxx.it --manual --preferred-challenges dns certonly
However, after inserting the requested records:
Please ...
- 2,328
4
votes
2
answers
3k
views
Print the BIND9 default configuration
Postfix has the command postconf which prints the entire Postfix configuration including its default values (default can also be shown using the -d option).
Samba has a similar command which prints ...
- 75
4
votes
2
answers
10k
views
Zone transfer between PowerDNS and Bind9
I have a problem when trying to transfer a full zone from a PowerDNS server to a Bind9 one. The weird part is that there are several zones on the PowerDNS server which serves as a hidden master (with ...
- 51
4
votes
1
answer
7k
views
Bind 9.7.3 not forwarding to ISP DNS server (only local resolving successful)
I have a bind DNS where I have installed SAMBA and made it a BDC. I plan to promote it to PDC and take out the Win2003 AD server to replace it with Samba.
Bind is installed on that same server as ...
4
votes
3
answers
13k
views
BIND: one forward, multiple reverse?
How do I deal with the case where a domain has addresses in more than one subnet?
EG: (bob.com)
joe.bob.com A 14400 10.20.0.10
jim.bob.com A 14400 10.20.0.11
mary.bob.com A 14400 ...
- 2,379