BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

0
votes
1answer
22 views

Protection of a dns server

I recently started to host my own domains on my servers. I can already see a fair bit of bogus queries arriving to my servers. Some dns amplification attacks, etc. What can I do in order to further ...
0
votes
1answer
15 views

Bind9 Master Slave replication

I have Bind9 on Debian for NS1 and NS2 They are two virtual machines. I create a file /etc/bind/zones/db.domain.com Then I have to add this to the /etc/bind/named.conf.local zone "domain.com" { ...
2
votes
2answers
1k views

How to setup redundant dns and dhcp servers with automatic dns updates on Ubuntu?

I'm trying to configure two virtual servers running Ubuntu to act as primary and secondary DNS and DHCP servers in my lan. I was able to get bind9 working as master and slave DNS servers. I was able ...
1
vote
3answers
891 views

Setting up BIND with wildcard nameserver

I'm looking to set up BIND to return the same IP address for every A record, no matter what the request is. It's working based on the configuration below, however what is not working is that the ns ...
0
votes
1answer
25 views

Problems with CNAME In GeoDNS Setup

I'm trying to setup something similar to a CDN (Content Delivery Network) setup. What I want to do is use DNS records that return an A record based on where the user is geographically located. I was ...
1
vote
1answer
2k views

Bind FORMERR errors in syslog

I've recently switched out a failed router... and, a while later, I discovered a lot (at least an order or magnitude more than the number of queries) of errors reported in /var/log/syslog - of the ...
6
votes
3answers
190 views

How to prevent Bind from responding to spoofed IP addresses?

We all know about open resolvers, this question is kind of for the inverse situation. I have a DNS server that is locked down to certain CIDRs acl trusted {[..] options { [..] allow-query { ...
-2
votes
0answers
34 views

Named Failed. Restart fail. I got this error. What to do?

root@host [~]# service named status WARNING: key file (/etc/rndc.key) exists, but using default configuration file (/etc/rndc.conf) rndc: connect failed: 127.0.0.1#953: connection refused named dead ...
1
vote
1answer
71 views

Fix slow SSH login due to reverse lookup without disabling UseDNS

Whenever I try to connect to my server from Azure VM it takes a lot of time due to failing reverse DNS lookup. I can disable lookups with UseDNS no and completely bypass the problem but this makes ...
-1
votes
2answers
58 views

How to configure Bind9 to return a fixed IP on non-exist request?

I want that Bind9 returns a fixed IP to the clients when them request invalid(non-exist) domain name to it. For example: Client requests the doesnotexist.co domain. This domain is not found by the ...
0
votes
0answers
7 views

maraDNS NON-AUTH timeout

I've set up maraDNS to provide my own DNS records. I've pointed the domain nameservers at my registrar to ns1.domain.co.uk and ns2.domain.co.uk (using domain in place of actual domain name). I cannot ...
0
votes
0answers
22 views

Debugging private DNS - PTR not working?

I'm using a slightly modified version of named 9.8 to manage an internal-only domain. The forward lookups are working ok but reverse isn't. There aren't any error messages - just no hostname returned. ...
0
votes
1answer
14 views

Bind Requested DNS Server IP Log

I have a DNS Server which runs on a virtual linux box with several IPs. Bind provides some pretty detailed debug logs, however, one piece of information that doesn't seem to be logged is the requested ...
1
vote
2answers
1k views

DNS (bind) : How do I redirect an http request to a different domain, based on the requested domain

I host my own DNS server and would like to be able to redirect links from within the DNS server so that redirection is seamless. Example: redirect all requests for www.yahoo.com to www.google.com. ...
1
vote
1answer
44 views

Forwarder dns not resolving reverse lookups

I have created one new dns server in lab and its working properly. Earlier we were using another dns server for lab pc's as 10.20.30.xx. which is outside the lab premises. now issue with newly created ...
0
votes
5answers
264 views

Allow external domains to use my nameserver without using BIND

Is it possible to allow users to point their domains to my nameservers from their domain provider, e.g. GoDaddy, 123-reg, etc. For example, they enter my nameservers: ns1.domain.com, ns2.domain.com ...
2
votes
3answers
9k views

Conditional DNS forwarding with named on Linux

I have a Centos 5.2 server which runs named for DNS resolution - it doesn't hold any information of its own, and just forwards all requests. From the named.conf: options { [...] forwarders ...
0
votes
2answers
863 views

bind view clause causes fail

I'm trying to setup views in my bind9 configuration. I use ubuntu 10.04. When I add view "general" { match-clients { any; }; }; I try to reload bind9 and rndc but it fails. rndc: 'reload' ...
1
vote
1answer
33 views

BIND DNS zone coalfired.net/IN: coalfired.net.coalfired.net/NS 'ns2.thirteen.pm.coalfired.net' has no address records (A or AAAA)

Since I updated my BIND DNS server I seem to be having problems with it. For some reason, when I try to start the server I get errors such as this appear: zone coalfired.net/IN: ...
1
vote
2answers
76 views

Is ISC BIND unaffected with OpenSSL Heartbleed bug?

There is a bug Heartbleed in OpenSSL. I built ISC BIND 9.9.5 with OpenSSL 1.0.1e enable. Should I re-built BIND with OpenSSL 1.0.1g?
7
votes
6answers
5k views

bind: blackhole for invalid recursive queries?

I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains. Currently the server is flooded with faked type ANY requests for isc.org, ripe.net ...
0
votes
2answers
59 views

Why BIND does not use the forwarders any more?

BIND does not use the forwarders to resolve any more. It just goes to the root servers. I do not know when this started happening since everything worked transparently, but for sure bind configuration ...
0
votes
2answers
3k views

DNS and name server in centos 6.3 64 bit is not pinged out side

I got a problem with centOS 6.3 64-bit. I want to setup my nameserver with bind here. I am listing all my configuration [root@izyon92 ~]# cat/etc/hosts -------------- 127.0.0.1 localhost ...
0
votes
0answers
22 views

DNS secondary server for external domain and DNS lookup fails

Dedicated server CentOS 6, Parallels Plesk Panel 11.0.9 (64 bit) ISP: 1&1 Problem 1 (Solved): Google and other mail providers were classifying as spam, messages sent from mydomain.com using PHP ...
0
votes
0answers
33 views

Master DNS allows External Forward, Slave does not

We have a 2 master setup that was built poorly, so we want to downgrade the second master to a slave configuration, I try and run the conversion and it works well enough internal addresses, but when ...
2
votes
2answers
713 views

Automatic subdomain wildcard for DHCP-DDNS additions?

I'm running dhcp-4.0.2 server and bind-9.6.1-P3. When a new Mac OSX DHCP client with the name "harry" connects to the network, the DHCP server gives it a lease, and adds appropriate A & PTR ...
1
vote
1answer
24 views

PTR record created, but not found

We are a small ISP, using linux DNS servers. Recently a client has asked us to create a rDNS zone for a specific IP address, which is used for a mail server. They keep getting message failures for ...
17
votes
1answer
242 views

When I have a * entry in my zone file, how can I treat a specific name as nonexistent?

On our main domain, example.com we're hosting a lot of websites. So we just added a * A/AAAA record to our zone and pointed it at our webserver. Sadly, this also causes Outlook to constantly hammer ...
0
votes
3answers
46 views

How to correctly register in my DNS servers whose IPs and names are handled by someone else?

I use a virtual server (several similar cases) set up and registered by someone else. Its IP is 10.0.0.1 and name a.example.com (both handled by the "someone else" above). I manage the domain ...
2
votes
3answers
2k views

How to use numbers in DNS host names?

I want to setup an DNS record which contains only digits, for example: www1 A 1.2.3.4 1 CNAME www1 However, the pure number seems not work. I know ...
4
votes
1answer
1k views

BIND slave doesn't sync up with master until it is restarted

I have two DNS servers running BIND9, one master and one slave. When the zone file is updated on the master, I want the slave server to immediately start serving the changed record(s), but BIND is ...
4
votes
4answers
4k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
2
votes
1answer
86 views

How prevent that Bind DNS updates remove $INCLUDE directive

I have a DNS server up and running with a zone configured for my domain with the allow-update directive enabled. I have the initial configuration for the domain in the file ...
1
vote
1answer
29 views

BIND 9.9.3 slave updates: received notify for zone 'domain': not authoritative

I am having problems with getting a zone loaded properly on a slave DNS server. Both servers are running BIND 9.9.3-P2. I am already serving ~150 zones and they are all working properly. However when ...
1
vote
2answers
58 views

Failing in resolve reverse name

I can't properly resolve my reverse name. In my configs, I replaced my IP address by X1.X2.X3.X4, and my domain name by domainname. I have been following this tutorial, in which it first resolves the ...
3
votes
0answers
67 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
0
votes
1answer
616 views

BIND DNS Master with Zerigo Slaves - BIND won't update the slave servers

I've tried to resolve this myself and have looked through Google and Stack but haven't found the answer I'm looking for. Currently on a VPS server I have BIND DNS installed as a MASTER DNS Server. I ...
1
vote
1answer
272 views

Why is my bind9 totally messed up?

I'm completely dumbfolded by this situation, the deal is this: I'm currently setting up an uml-instance of debian to work as a network server as part of a university course. One part is installing a ...
1
vote
1answer
732 views

Connecting to RDS database from EC2 instance using bind9 CNAME alias

Update: it's working by now. Turns out I was missing a valid DNS forwarder inside the named.conf.options file. I'm trying to get internal DNS up and running on a EC2 instance. The main goal is to be ...
1
vote
1answer
32 views

Is BIND9 what I'm looking for?

I just purchased a dedicated server and have Debian 7 installed. I of course want my server to work with my domain, so I assume what I need to do is install BIND9 on the dedicated server and configure ...
0
votes
1answer
31 views

Why is bind asking for this extra parameter in my zone file?

I'm creating a zone file for a fake root because this is a closed network with no Internet access. I've created the following zone file but for some reason, bind is requiring an extra parameter; ...
1
vote
1answer
35 views

Are there DNS servers supporting ALIAS type for apex records?

DNSimple and AWS Route53 are supporting ALIAS records that allow similar functionality to CNAMES for @ (Apex) records in DNS. I'm running a DNS server (Bind) that is currently hosting around 1500 ...
0
votes
0answers
11 views

apache running 'host' process on CentOS 5 [duplicate]

Over the last two days a pair of my older machines have been spewing out traffic to port 80 on countless other servers to the tune of > 4MB/s. The only thing I've noticed out of whack is that the ...
0
votes
0answers
37 views

filter/drop unwanted DNS requests to BIND [duplicate]

I have a public, non-recursive Bind DNS server running on Ubuntu to provide authoritative DNS for our domain. We get a lot of erroneous domain look-ups which I'm sure are an attempt to involve us in ...
4
votes
0answers
79 views

Entropy Deprivation on Bind / Named Servers

I noticed that my DNS servers are having low points in the available entropy: (Note it doesn't stay that low, but within 10 minutes there are several low points (this graph shows the min of 10 min ...
1
vote
1answer
41 views

TLS on SRV Records

The SRV records comply with this format: _service._proto.domain (and some other values here...). I want to know if anyone has ever used in _proto - tls. TLS is not a transport protocol, so, is it ...
3
votes
1answer
68 views

Bypass DNSSEC for local Stub zones

I am using bind 9.9.2 as a DNSSEC validating recursive resolver in an Internet DMZ. I want to point to my internal DNS servers as stub zones (ideally) or anything except slave zones (to avoid very ...
2
votes
2answers
76 views

Can DNS RPZ firewalls protect against IP Access?

I am looking into DNS-RPZ firewalls. Can they protect against users browsing to http://{ip-address}? If so how does that work? Given no name resolution is required?
5
votes
1answer
2k views

Why does my EC2 nameserver (correctly) resolve names to private IPs and then switches to public IPs?

I'm running a nameserver for a few machines on EC2. This nameserver is not reachable via the public Internet. I want all my EC2 instances to use it to be able to find each other and to resolve all ...
2
votes
2answers
94 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...