BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

4
votes
1answer
2k views

Set up BIND9 as DNS Firewall

With OpenDNS now needing one to be on the pro package to have filtering turned on, being on a tight budget, we are in need of free DNS filtering. After reading this link on how to block domains with ...
1
vote
1answer
383 views

Lame DNS server

I'm trying to setup my BIND with a domain I own and I'm using dnssy.com and intodns.com to check if everything is ok, but I'm getting errors in both. The error says that my DNS server is "lame" (...
24
votes
8answers
35k views

Overriding some DNS entries in BIND for internal networks

I have an internal network with a DNS server running BIND, connected to the internet through a single gateway. My domain "example.com" is managed by an external DNS provider. Some of the entries in ...
35
votes
4answers
19k views

Bind to ports less than 1024 without root access

I would like to run applications I'm working on that binds to port numbers less than 1000 without requiring root access. I'm using Linux Mint and have root access to set it up. I would ideally like ...
1
vote
1answer
307 views

RHEL5 - Bind doesn't return IPv6 records

I've got two DNS resolvers: RHEL5 - BIND 9.7.0-P2-RedHat-9.7.0-17.P2.el5_9.2 RHEL6 - BIND 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 The configuration is exactly the same, both DNS servers are not ...
11
votes
6answers
20k views

Why aren't our DNS records propagating out into the internet?

We run the name servers for our domain on our network. We use bind/named. Lets call the domain jokerville.com. One thing I've noticed recently, when I goto a website like http://network-tools.com and ...
8
votes
3answers
21k views

What is DNS Delegation?

In an answer to my previous question I noticed theses lines: It's normally this last stage of delegation that is broken with most home user setups. They have gone through the process of buying a ...
3
votes
3answers
292 views

Block ANY request in Bind

I'm having trouble figuring out how to block ANY dns request on BIND to lower the changes of a DNS Amplification attacks. I've seen guides online but most of them appear to perform rate limit via ...
2
votes
3answers
718 views

bind9 in a chroot jail - necessary or not?

I always used to keep my bind9 installation in a chroot jail. Now I upgraded my vServer and have to install bind9 over again. Due to the virtualization solution my hosting provider uses, I cannot ...
8
votes
6answers
50k views

What is the best webinterface to manage BIND? [closed]

I set up BIND DNS which hosts our domain, and I also use it for internal DNS. I set up different views for internal and external hosts and it works OK. My question is which is the best webinterface to ...
7
votes
4answers
2k views

BIND HTTP “API”

First off, I'm a bit of a bind n00b so if I say things that don't make sense just ignore them =) Is there any software that would allow "API" like commands for creating, updating, deleting etc. zones ...
7
votes
3answers
13k views

Configure DNS server to return same IP for all domains

I would like to configure a nameserver that will return the same IP address ("A" record) for any arbitrary host name. For example: example.com subdomain.example.com someotherdomain.com ...
2
votes
3answers
22k views

Conditional DNS forwarding with named on Linux

I have a Centos 5.2 server which runs named for DNS resolution - it doesn't hold any information of its own, and just forwards all requests. From the named.conf: options { [...] forwarders {...
10
votes
2answers
8k views

SOA and Primary NS record (DNS)

The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked? ...
8
votes
2answers
8k views

Force forwarder DNS requests to TCP mode

I have set up a DNS-server on SLES10 (currently bind 9.6) on a multi-homed server. This server can be queried from all internal networks and delivers answers for all internal networks. We have two ...
2
votes
4answers
6k views

How can I override TTL of an Internet Address?

I'm running a caching DNS server currently to improve latency in a network. The question is: can I override the TTL I get from a server using BIND9 or other software on Linux? short "dig www.google....
2
votes
1answer
4k views

ive got dkim=neutral (bad version) header.i with gmail and dkim=fail (unknown key type) with yahoo

I'm having external ip and ubuntu server with exim4.71 and bind9. I'm trying to set valid dkim entry to send mail for gmail Here are my configuration files: bind9: _domainkey.example.com. IN ...
4
votes
1answer
451 views

DNS Lookup to Bind config file

Is there a tool that will take the information from a DNS lookup like dig google.com and turn it into a bind configuration file? (In this case google.com is an example, i would be using a domain ...
2
votes
2answers
4k views

DNS BIND on CENTOS 6.3 and domain nameservers

I am somewhat new in BIND and DNS, so please tolerate my stupid Questions. I having problem running my own custom nameserver. I have a virtual hosting with openVZ (CENTOS 6.3), with 3 IP addresses and ...
2
votes
2answers
827 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...
1
vote
2answers
100 views

What's wrong with my bind zone?

I'm trying to set up my own bind server for swic.me, however i cant make it respond for that domain at all! Asking for other domains like google.com works so the basic config should be ok. Here is my ...
10
votes
7answers
11k views

bind: blackhole for invalid recursive queries?

I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains. Currently the server is flooded with faked type ANY requests for isc.org, ripe.net ...
8
votes
1answer
9k views

In BIND, forward DNS query for specific domain to specific nameserver

Windows Server 2003 has this feature where you can forward queries for domain "example.com" to specific nameserver (not the default DNS server). How do i set this up in BIND? For example, i want to ...
8
votes
3answers
2k views

Returning different DNS records depending on who asks

In BIND 9 (named), is there any way to return different A records depending on the asker's IP address? When receiving a query for a certain DNS name, I'd like to return external IP address for the ...
10
votes
1answer
7k views

dns - BIND - how to return a different IP based on request's subnet

We have an intranet DNS server (system-config-bind on RHEL) serving office A, and a VPN connecting offices A and B. Office A has a server named "dev". In office A, to access a server "dev" on the ...
6
votes
1answer
2k views

measures to take against a dns amplification attack

I recently discovered that my server was being used as part of a DNS DDOS. Basically, my BIND setup allowed recursion, and it was used to attack a certain IP address using IP spoofing. I took the ...
5
votes
7answers
3k views

Managing zone files

We host our very own DNS server (BIND) for various reasons, including the fact that we deploy and kill machines very often and that we sometimes need to load balance via DNS very quickly. However, ...
7
votes
4answers
11k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
4
votes
2answers
8k views

Binary zone file on BIND9

Binary Zone File Problem (FREEBSD) DNS Master transfered zone file to slave But I cannot read zone file less db.example.com "db.example.com "may be a binary file. See it anyway? This happend ...
3
votes
1answer
2k views

Public and private hosts in the same BIND zone

For my particular setup, I've got control of a BIND 9 zone file for, say, example.com. There are several hosts in this zone, such as www.example.com and mail.example.com. I want the public internet ...
16
votes
8answers
7k views

DNS: trailing periods

When I edit my bind dns records, I need to add a trailing period for it to work. What is the point of this? How come when I use everydns.net, they do not require me to add a trailing period? Is this ...
11
votes
4answers
3k views

Why running named(bind) in chroot is so important for security? Or maybe it is not ?

I'm playing with bind and started wondering why this software is for example in CentOS running in chroot. Don't misunderstood me I know what bind is and what chroot (jail) is for. But my main wonder ...
8
votes
7answers
4k views

Two name servers necessary?

I want to use my internet connection to host two personal websites (two different domains). I would also like to host mail for these domains. This requires hosting my own name server. In the ...
6
votes
1answer
10k views

/usr/bin/host being used in HTTP DDoS on Debian? [duplicate]

So I got an abuse complaint for one of my dedicated servers, running Debian 6.0 Sure enough, sometimes, top shows /usr/bin/host using a lot of CPU for no apparent reason, and netstat shows process ...
5
votes
7answers
45k views

Dig returns “status: REFUSED” for external queries?

I can't seem to work out why my DNS isn't working properly, if I run dig from the nameserver it functions correctly: # dig ungl.org ; <<>> DiG 9.5.1-P2.1 <<>> ungl.org ;; ...
4
votes
2answers
4k views

How can I use a Linux BIND DNS server for my Active Directory forest?

I am trying to setup an Active Directory forest that uses a Linux BIND server for DNS. The goal is that the Domain Controller (DC) to be able to make entries in the /etc/bind/db.foresta.net file from ...
3
votes
1answer
3k views

How to set up a BIND DNS server to respond a single IP address to any request on Windows?

I want to configure a BIND DNS server (since Windows Web Server 2008 does not have DNS service, I had to install BIND) that responds any request with a single A record. I had set up a * record but it ...
1
vote
3answers
1k views

Setting up BIND with wildcard nameserver [closed]

I'm looking to set up BIND to return the same IP address for every A record, no matter what the request is. It's working based on the configuration below, however what is not working is that the ns ...
7
votes
2answers
4k views

How can I selectively override some A records on a Bind DNS Server?

I'm guessing there has to be a reasonable way to solve my issue but I'm trying to get some advice on a best practice to implement. I have recently moved to a Web Design company and we need to be able ...
5
votes
1answer
2k views

Bind: “unexpected end of input” due to NS

I have stumbled upon an odd error in a master-slave(s) configuration of Bind. The zone works fine on the master, but on the slaves I'm getting these kind of errors: 21-May-2014 19:06:07.573 general: ...
4
votes
1answer
2k views

Basic DNSSEC configuration under BIND 9.7?

Could anybody provide a step-by-step procedure to set up DNSSEC under BIND 9.7? I think the version is relevant because it is supposed to make life easier. In fact, there is a document published by ...
4
votes
4answers
5k views

Can you have multiple writable, authoritative BIND DNS servers for the same zone, like AD-integrated DNS?

In an AD-integrated DNS system, there really isn't a concept of one "Master" DNS server; all AD-integrated zones are authoritative and updatable across all DNS servers, and send updates to each other ...
3
votes
1answer
7k views

BIND split-view DNS not working with zone transfer

I am setting up two DNS servers. One is on the firewall/router, the other is an internal server. I have lots of experience setting up DNS servers, so this problem is particularly perplexing. Machine ...
3
votes
3answers
17k views

Cisco ASA logs “regular translation creation failed for icmp …” for DNS traffic, yet it works

Every few minutes our Cisco ASA 5505 firewall is logging errors that I can't figure out with my limited Cisco experience. Severity Date Time Syslog ID Source IP Destination IP ...
3
votes
1answer
175 views

What rate limiting options are provided by ISC BIND?

This is a Canonical Question about rate limiting in the ISC BIND nameserver software. Recently I've heard of BIND's rate limiting features. DNS RRL in particular seems to be becoming more ...
2
votes
2answers
724 views

Does my BIND zone really provide redundancy and load balancing?

We have the following IP addresses (for example): 1.1.1.1 2.2.2.2 Each hosts the same website, but on a different server. We want to do some really simple load balancing by having web users visit a ...
2
votes
1answer
394 views

Set up to resolve local ips

I have an apache with following settings. 192.168.0.105:8080/site1 192.168.0.105:8080/site2 and, 192.168.0.103/blog I have 3 other computers in my network. 2 desktops and a laptop. On every ...
2
votes
2answers
959 views

Automatic subdomain wildcard for DHCP-DDNS additions?

I'm running dhcp-4.0.2 server and bind-9.6.1-P3. When a new Mac OSX DHCP client with the name "harry" connects to the network, the DHCP server gives it a lease, and adds appropriate A & PTR ...
2
votes
3answers
3k views

DNS mask for Route53 crazy delegation set

I really don't know the terms to explain this problem, but please bare with me just a little bit. I have an AWS Route53 with a lot of clients, and I would like to build something like a DNS server in ...
2
votes
2answers
943 views

How to setup Dynamic DNS for small fleet of EC2 instances?

I've been setting up Amazon EC2 instances for an upcoming project which will involve hosting multiple websites on multiple web servers. They are all micro instances, running Ubuntu Server 64bit. Here'...