BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

0
votes
1answer
132 views

Problems with CNAME In GeoDNS Setup

I'm trying to setup something similar to a CDN (Content Delivery Network) setup. What I want to do is use DNS records that return an A record based on where the user is geographically located. I was ...
0
votes
0answers
168 views

Spamassassin: using specific DNS server for DNSBL lookups

High volume mailserver. I need 2 things operating simultaneously: local caching nameserver (BIND) rev dns server for DNSBL (SORBS) lookups The way I set it up for now is using RBLDNSD bound to ...
0
votes
0answers
139 views

maraDNS NON-AUTH timeout

I've set up maraDNS to provide my own DNS records. I've pointed the domain nameservers at my registrar to ns1.domain.co.uk and ns2.domain.co.uk (using domain in place of actual domain name). I cannot ...
0
votes
0answers
144 views

Debugging private DNS - PTR not working?

I'm using a slightly modified version of named 9.8 to manage an internal-only domain. The forward lookups are working ok but reverse isn't. There aren't any error messages - just no hostname returned. ...
0
votes
1answer
116 views

Bind Requested DNS Server IP Log

I have a DNS Server which runs on a virtual linux box with several IPs. Bind provides some pretty detailed debug logs, however, one piece of information that doesn't seem to be logged is the requested ...
2
votes
1answer
855 views

Forwarder dns not resolving reverse lookups

I have created one new dns server in lab and its working properly. Earlier we were using another dns server for lab pc's as 10.20.30.xx. which is outside the lab premises. now issue with newly created ...
1
vote
1answer
290 views

BIND DNS zone coalfired.net/IN: coalfired.net.coalfired.net/NS 'ns2.thirteen.pm.coalfired.net' has no address records (A or AAAA)

Since I updated my BIND DNS server I seem to be having problems with it. For some reason, when I try to start the server I get errors such as this appear: zone coalfired.net/IN: ...
6
votes
3answers
401 views

How to prevent Bind from responding to spoofed IP addresses?

We all know about open resolvers, this question is kind of for the inverse situation. I have a DNS server that is locked down to certain CIDRs acl trusted {[..] options { [..] allow-query { ...
-1
votes
2answers
103 views

How to configure Bind9 to return a fixed IP on non-exist request?

I want that Bind9 returns a fixed IP to the clients when them request invalid(non-exist) domain name to it. For example: Client requests the doesnotexist.co domain. This domain is not found by the ...
1
vote
2answers
137 views

Is ISC BIND unaffected with OpenSSL Heartbleed bug?

There is a bug Heartbleed in OpenSSL. I built ISC BIND 9.9.5 with OpenSSL 1.0.1e enable. Should I re-built BIND with OpenSSL 1.0.1g?
0
votes
2answers
965 views

Why BIND does not use the forwarders any more?

BIND does not use the forwarders to resolve any more. It just goes to the root servers. I do not know when this started happening since everything worked transparently, but for sure bind configuration ...
0
votes
0answers
291 views

Master DNS allows External Forward, Slave does not

We have a 2 master setup that was built poorly, so we want to downgrade the second master to a slave configuration, I try and run the conversion and it works well enough internal addresses, but when ...
1
vote
1answer
84 views

PTR record created, but not found

We are a small ISP, using linux DNS servers. Recently a client has asked us to create a rDNS zone for a specific IP address, which is used for a mail server. They keep getting message failures for ...
19
votes
1answer
321 views

When I have a * entry in my zone file, how can I treat a specific name as nonexistent?

On our main domain, example.com we're hosting a lot of websites. So we just added a * A/AAAA record to our zone and pointed it at our webserver. Sadly, this also causes Outlook to constantly hammer ...
0
votes
3answers
55 views

How to correctly register in my DNS servers whose IPs and names are handled by someone else?

I use a virtual server (several similar cases) set up and registered by someone else. Its IP is 10.0.0.1 and name a.example.com (both handled by the "someone else" above). I manage the domain ...
1
vote
2answers
119 views

Failing in resolve reverse name

I can't properly resolve my reverse name. In my configs, I replaced my IP address by X1.X2.X3.X4, and my domain name by domainname. I have been following this tutorial, in which it first resolves the ...
3
votes
0answers
525 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
2
votes
2answers
1k views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
1
vote
1answer
37 views

Is BIND9 what I'm looking for?

I just purchased a dedicated server and have Debian 7 installed. I of course want my server to work with my domain, so I assume what I need to do is install BIND9 on the dedicated server and configure ...
0
votes
1answer
50 views

Why is bind asking for this extra parameter in my zone file?

I'm creating a zone file for a fake root because this is a closed network with no Internet access. I've created the following zone file but for some reason, bind is requiring an extra parameter; ...
1
vote
3answers
801 views

Are there DNS servers supporting ALIAS type for apex records?

DNSimple and AWS Route53 are supporting ALIAS records that allow similar functionality to CNAMES for @ (Apex) records in DNS. I'm running a DNS server (Bind) that is currently hosting around 1500 ...
4
votes
1answer
144 views

Entropy Deprivation on Bind / Named Servers

I noticed that my DNS servers are having low points in the available entropy: (Note it doesn't stay that low, but within 10 minutes there are several low points (this graph shows the min of 10 min ...
1
vote
1answer
159 views

TLS on SRV Records

The SRV records comply with this format: _service._proto.domain (and some other values here...). I want to know if anyone has ever used in _proto - tls. TLS is not a transport protocol, so, is it ...
2
votes
2answers
147 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
1
vote
1answer
174 views

How to DNSSEC Sign Bind9 Reverse Zone

I'm using bind9 and dnssec-keygen/dnssec-signzone. I've had no problem signing my forward zones however I cannot seem to find any documentation on signing reverse zones. What is the process for this?
2
votes
1answer
2k views

Fix slow SSH login due to reverse lookup without disabling UseDNS

Whenever I try to connect to my server from Azure VM it takes a lot of time due to failing reverse DNS lookup. I can disable lookups with UseDNS no and completely bypass the problem but this makes ...
0
votes
2answers
244 views

Configuring DNS with router and BIND

Goal I am trying to setup a local DNS server here in our office. Problem Apparently Comcast has a loop-back so when we configured the domain to go to our IP it works outside of the office but ...
2
votes
1answer
818 views

Bind9 reverse DNS configuration not working.

I am trying to set up a custom virtual DNS server in Ubuntu. When I try to nslookup with a windows 7 pc within the same virtual environment the reverse DNS seems te fail. My named.conf.local file: ...
2
votes
2answers
340 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...
1
vote
1answer
237 views

How can I configure dhcpd to only update the reverse zone in bind?

I've got dhcpd pushing updates to bind, and it seems to be working fine: named[24161]: client 192.168.10.1#59141: signer "dhcp_updater" approved named[24161]: client 192.168.10.1#59141: updating zone ...
-2
votes
1answer
75 views

domain-search value on my clients computer [closed]

I need help with configure my DNS and DHCP server - I have spent some time searching on google but have not got any informations regarding my problem. I have an Ubuntu 12.04 server running and use ...
0
votes
1answer
99 views

BIND Domain name transclusion/zone mirroring

Is there a way to create a DNS record that fully mirrors another website? Which is to say, *.foo.tld/* maps to *.bar.tld/* so any query for foo.tld will be served up by bar.tldbut the DNS will appear ...
0
votes
1answer
60 views

DNS resolution failure when querying through server IP

I have a DNS zone file with the following config : $TTL 86400 $ORIGIN example.com. @ IN SOA ns1.example.com. dns.example.com. ( 2014022604 ; Serial ...
1
vote
1answer
53 views

Running authoritive nameserver in ipv6 only environment?

What are the arguments against running an authoritive nameserver (primary) e.g. bind in a ipv6 only environment? In the current setup the machine dedicated to the nameserver has only direct ipv6 ...
3
votes
1answer
409 views

What is the syntax of email address with a dot behind it? in DNS zone file, SOA rr

How i can use a email address with a dot in behind. For example at bellow, email address is hostmaster@example.com, How to use host.master@example.com ? example.com. IN SOA ns.example.com. ...
1
vote
1answer
138 views

Effects of publishing DNSSEC DS records without signing public zone?

We at example.com are being pressured to implement DNSSEC by a sub-division of our organisation: security.example.com. Our current name servers ns1.example.com and ns2.example.com are unsigned, ...
3
votes
3answers
492 views

How to combine Active Directory with Split-Horizon DNS?

I'm in a quandary. I need to implement Split-Horizon DNS in my office based on subnet. For example: Users in 10.170.0.0/16 need to resolve "srv01.extra.company.com" to 10.170.0.5 10.25.0.170 Users ...
2
votes
2answers
259 views

DNSSEC auto signing and file handling

I would like to know how files are handled in a auto-dnssec environment. My current setup (non-DNSSEC) places the zones files in /var/named/data. These files are then read by the bind server. If I ...
0
votes
1answer
1k views

BIND9 DNSSEC: should I care about occasional “insecure” log messages

A small number of my forwarded DNS queries cause BIND 9 to log messages such as: 184.in-addr.arpa SOA: got insecure response; parent indicates it should be secure validating @0x7f93140c0870: ...
0
votes
1answer
43 views

bind did not responde out of server

I have problem with bind server configuration. ​Result for lookup on 8.8.4.4: root@server1:~# dig @8.8.4.4 webexamplesite.com ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @8.8.4.4 ...
-1
votes
1answer
1k views

DNS how to dynamically bind subdomains to ip and port pairs [duplicate]

I'm using bind9 I have a zone file setup with a few subdomain A records. I'm wondering if I can create a subdomain record that points to an ip address on a specific port. I'm currently updating the ...
-1
votes
1answer
103 views

Masking CNAME/A Record Requirements from Clients

I'm reselling hosting services to non-technical clients. With regards to associating domains/IPs, the host I'm reselling requires that once a VPS is deployed i then go to the domain's registrar and ...
0
votes
2answers
130 views

BIND: Whitelist IPs using nsupdate

I know that we can add any kind of DNS records in BIND DNS server using nsupdate. Can we whitelist or blacklist any ip in realtime using nsupdate. We whitelist only certain IPs to prevent our DNS ...
1
vote
0answers
542 views

Woes with named/bind and forwarding zones

I'm sadly restricted to a very old version of bind (9.4.2) This is the think. If I setup bind with a named.conf and only forwarding it works perfect. acl clients { any ; }; options { ...
2
votes
1answer
3k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
1answer
71 views

Is it possible to make one public ip point at different servers within a local network? [closed]

Title is a bit vague so here i go! Basically i have setup a local dns server that allows me to use my local network using hostnames. e.g. dns.subdomain.home i would like all these servers to be ...
2
votes
1answer
1k views

Publishing long domain key records in bind9

I am setting up a mail system based on exim4. This system implements DKIM signing and checking (among other things). Signing seems to work without problems but checking doesn't work and exim4 ...
1
vote
2answers
95 views

What happens to DNS cache server when the zone DNS server fails?

I have DNS server running which caches for records from a main DNS server. What would happen when the main DNS server is down? Will the cache DNS server still serve the records it has or will all the ...
0
votes
1answer
962 views

BIND/named: zone sigilhosting.com/IN: not loaded due to errors

It's been working perfectly until my cPanel license expired and I had to renew it. I keep getting this error when running named-checkzone: zone sigilhosting.com/IN: NS 'ns1.sigilhosting.com' has no ...
1
vote
0answers
132 views

BIND session key

When I restart or start my BIND DNS server, I'm getting the following in the /var/log/messages log file. Jan 26 07:50:30 dev named[306]: could not create /jail/bind-9.9.4-P2/var/run/named/session.key ...