BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

-4
votes
0answers
55 views

Creating zones and editing named.conf - Centos [on hold]

I am running CentOS, with bind(BIND 9.3.6-) installed, and accessing via SSH with PuTTy. My goal is to setup a nameserver for my domain d.org on my dedicated server 44.44.44.44 which also hosts the ...
1
vote
1answer
21 views

Bind views match-client from zone delegation

i've a problem with views using Bind9. I've a Microsoft DNS server with a domain "example.com" configurated to delegate the sub-domain "ds.example.com" to Bind DNS Server. In the Bind server i've ...
1
vote
1answer
117 views

Cleanup DHCPD leases as well as DDNS Entries

I have a fairly simple set up on a Debian server I'm running. I currently have isc-dhcp-server installed along with bind9. I set up my zone and my reverse lookup zones and set up dynamic updates, it's ...
-1
votes
1answer
25 views

How to specify a DNS Slave server, that is on a different domain, in the appropriate zone file on the master naming server?

I am unsure if my question makes sense, but I am working on configuring a DNS Master/Slave setup. We currently have two domains. For privacy purposes, I will use "example" as my domain, we have ...
0
votes
0answers
20 views

DNS UDP Load Balancer - Is there X-forward-for like options? [duplicate]

We're using the Rackspace's UDP load balancer - however its only giving us internal 10.x.x.x addresses from our clients, and not the actual "external" of the external connection. On an HTTP Server I ...
5
votes
4answers
7k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
3
votes
1answer
227 views

How would you setup a up an A record for any negative query?

How would I go about setting up an A record for in Bind9 for any negative queries? I want to forward our staff to an informational page if they were to visit a non existent domain. We have an internal ...
1
vote
3answers
620 views

Are there DNS servers supporting ALIAS type for apex records?

DNSimple and AWS Route53 are supporting ALIAS records that allow similar functionality to CNAMES for @ (Apex) records in DNS. I'm running a DNS server (Bind) that is currently hosting around 1500 ...
1
vote
1answer
22 views

IPv6 record will not take for rDNS

I added the following to named.conf zone "3IP6.A.B.C.ip6.arpa" { type master; file "3IP6.A.B.C.ip6.arpa"; allow-update { none; }; }; I then created my dns zone record called 3IP6.A.B.C.ip6.arpa ...
0
votes
0answers
64 views

bind “can't find example: SERVFAIL”

I'm trying to setup a dns server on my LAN because my router doesn't support nat reflection and I have virtualhosts which require a domain (can't be reached by IP address) running on apache. I'm not ...
1
vote
2answers
2k views

DNS mask for Route53 crazy delegation set

I really don't know the terms to explain this problem, but please bare with me just a little bit. I have an AWS Route53 with a lot of clients, and I would like to build something like a DNS server in ...
3
votes
2answers
96 views

bind not able to query some servers / domains

We have been experiencing problems with our company's DNS server when trying to resolve only certain domains, we are running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on a CentOS 6.5 server. We are ...
2
votes
1answer
3k views

Failed to bind to server ldap://<ipaddress> Error: Can't contact LDAP server

We are running a Linux 2.6.32-431.3.1.el6.x86_64 kernel and keep seeing the following messages in /var/log/messages periodically showing up on our user space server. When the messages appear we also ...
0
votes
2answers
52 views

How do you load balance a forwarding only server… with no authoritive zones?

New Thought and possible answer to my Question? Would it be possible to change the root config file (the db.root with A/B/C/D/E/F/etc.ROOT-SERVERS.NET) and remove the original entries (i.e: ican ip ...
0
votes
2answers
15 views

Bind dont forward to secondary dns server as specified in “forwarders” under named.options.conf

I have bind9 setup to forward dns queries to machines connected localy trough the 192.168.1/24 network. The ip's that I forward the queries to are also my internet gateways. Sometimes one of the ...
0
votes
0answers
13 views

setting up DANE fails, error with “could not get cert chain from ssl”

I successfully setup DNSSEC and enabled it on my domain. I'd love to make use of my DANE. I created a standard self signed certificate openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem ...
2
votes
1answer
40 views

Performance-wise, is a DNS Slave better to have than two duplicate Masters?

I have two bind9 servers that are not setup with duplicate settings and know nothing about each other. Our CPU usage is sitting around 7% - 10%: mostly bind, which I believe is perfectly in range for ...
-2
votes
1answer
44 views

Iptables doesn't open port 53

I have been trying different ways of opening the port but for some reason doesn't work. The last set of lines that I have used is as follows: iptables -I OUTPUT -p udp --dport 53 -m state --state ...
0
votes
1answer
3k views

SLES DHCP Dynamic DNS: Unable to add forward map…: not found

I have a SUSE Linux Enterprise Server 11.3 install running on Amazon EC2 based off the official AMI. With DHCP and BIND configured (via yast) I'm having issues with Dynamic DNS. When a client ...
0
votes
0answers
29 views

my sub domains vanish with time

I have a server running bind9. When the propagation is done and i ping domain.tld i get xx.xx.xx.xx (where xx.xx.xx.xx is the server IP), if i ping test.domain.tld i get xx.xx.xx.xx, at this point ...
2
votes
1answer
45 views

Cannot load reverse lookup zones containing “rich-text” PTR records

Summary I am attempting to set up Wide-Area Bonjour (aka DNS-SD) using ISC Bind 9.9.5, but cannot load reverse lookup zones providing discovery of "rich-text" service domains. Background According ...
-2
votes
2answers
32 views

How do I secure a zone with dlv.isc.org's DLV service? [closed]

I'm setting up domain-lookaside validation. I think I got mostly everything correct. I followed the directions here: https://dlv.isc.org/about/using. I registered my domain and uploaded the key ...
0
votes
1answer
35 views

Named failed due to permissions and connect fail error

I'm facing a serious problem which has knocked out my server. For some unknown reason, named is no longer working, despite doing my best to remediation the issues found on the logs. I get this error ...
1
vote
1answer
24 views

How to configure an additional BIND instance for a domain already described by other public name servers?

Background I have a small virtual server hosted by my provider and there I have configured a relatively simple combination of postfix, dovecot and roundcubemail (backed by nginx) that works OK. I ...
-1
votes
1answer
134 views

Dig shows external configuration? [closed]

I'm already trying for 2 days to deal with an answer for this problem. I have a virtual server somewhere and installed postfix/dovecot/mysql. It works somehow. I can login with Outlook with the ...
2
votes
2answers
805 views

Automatic subdomain wildcard for DHCP-DDNS additions?

I'm running dhcp-4.0.2 server and bind-9.6.1-P3. When a new Mac OSX DHCP client with the name "harry" connects to the network, the DHCP server gives it a lease, and adds appropriate A & PTR ...
0
votes
0answers
22 views

bind9 internal domain name

For our internal network we're using domain names like user.int. I've setup bind to resolve those to the appropriate IP addresses. Since .int is actual top-level domain name(although used for just a ...
0
votes
1answer
50 views

Get a catch-all DNS and set a MX for a special domain

I'm trying to set a catch-all configuration with Bind. I've followed this answer and it works fine : http://serverfault.com/a/397011/179968 Now I'm trying to configure my MX record to configure my ...
2
votes
1answer
23 views

bind zone file setup for dns round robin

I would like to set up load balancing for my website using DNS round robin. My DNS is managed by my own CentOS 6 server running bind. I added the following into my zone file: @ ...
3
votes
1answer
1k views

samba_dnsupdate dns_tkey_negotiategss: TKEY is unacceptable

I'm trying to configurate dinamic update to bind I have samba4.0.0rc5 running with bind 9.8 on Ubuntu 12.04. by default the provision command dont create necesary dns.keytab. i've tested with the ...
-2
votes
0answers
27 views

BIND forwarders working but not root servers

I took a system with an old version of Fedora on it and bare metal loaded Fedora 20. I used the KDE install option and then added Bind via KPACKAGEKIT. After adding a local zone it could resolve my ...
0
votes
1answer
49 views

Classless Reverse DNS with Recursion - BIND

I'm running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on CentOS 6.6. The only zone is for classless reverse DNS, which has been delegated. I'm no BIND or DNS expert, but as I understand it, classless ...
0
votes
1answer
39 views

BIND9 and Zone configuration doesn't “bind” domain

Named.conf File: options { #listen-on port 53 { 127.0.0.1; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file ...
32
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
0
votes
2answers
66 views

Name Server with Multiple IPs

We have multiple internet connections attached to my company's network, from different providers, and there are authoritative name servers on the network as well, also with an IP from each of those ...
0
votes
0answers
34 views

new dkim config -> opendkim-testkey: record not found

I am trying to set up dkim and I cannot get it to work or test properly, and I get the following error: opendkim-testkey -vvvv -d domain.com -s default opendkim-testkey: checking key ...
1
vote
1answer
30 views

Channelizing logs on Bind 8

I am using the following channel clause in my named.conf, logging { channel named_log { file "logs-remote/bind.log"; severity dynamic; print-category yes; print-severity yes; print-time yes; }; ...
0
votes
1answer
44 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
1
vote
1answer
1k views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
0
votes
1answer
83 views

BIND: Forcing authoritative nameserver answer with no data on non-recursive requests (Research purposes)

Edit: I've simplified target goal as suggested by Andrew B. The goal is basically setting an authoritative name server to only give real answer on recursive requests, which means breaking the ...
1
vote
1answer
1k views

need to configure BIND server query logging with versions

I've been trying to get BIND server query logging working, creating 3 versions, max 100mb each. The system is SUSE SLES 11. I have found numerous how to articles on the web but none of them do ...
0
votes
2answers
193 views

URIBL_BLOCKED despite caching nameserver

I run a mail server for two people, Ubuntu 10.04 LTS. I have Spamassassin running via Amavis/Postfix. In many messages, I am getting URIBL_BLOCKED in the X-Spam-Status headers, which indicates that ...
-1
votes
1answer
40 views

Would it be good idea to share DNS zone files via NFS?

Any expert advice on Bind DNS zone file transfer (master->slave) via NFS? Are there any drawbacks for not using Bind's zone transfer feature? Thanks a lot!
-1
votes
2answers
99 views

Bind only works Locally - Ping works locally not externally

I am using Bind on a Centos 6.5 server in order resolve subdomains to an IP. I have *.ddns.example.com and ddns.example.com pointing to my server via A record. I have added a zone for this, see ...
0
votes
2answers
37 views

Bulk Append text to all *.db files in folder (cPanel bulk DNS Insert)

I run my own DNS cluster using 1 server running cPanel/WHM and 4 servers (ns1-ns4) running cPanel DNS Only. I've just added the 4th DNS Only server (ns4.domain.com) but the problem is that all 200 of ...
0
votes
0answers
144 views

web server on a proxmox container using dns server on proxmox

Some background: I've got a little problem here. I have Promox installed on my primary server on which I've configured manually my DNS server with BIND9 with the domain example.com and works fine ...
2
votes
2answers
3k views

Why is my DNS server not forwarding?

I have setup bind like this: // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a localhost DNS resolver only). ...
1
vote
1answer
46 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
1
vote
2answers
62 views

Microsoft DHCP server and Unix BIND dynamic DNS

Is there any way to make Microsoft DHCP server to securely dynamically update A and PTR records in Unix Bind DNS zone? Microsoft supports secure update using username/password authentication. Bind9 ...
3
votes
5answers
200 views

Automatic way to increase zone file serial number by one in BIND9

I've a BIND9 server with a lot of zones and I need to increase the serial number of the zone files by one. Some zones are using the YYYYMMDDXX format but other zones just increase it by one, as they ...