BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

4
votes
1answer
952 views

Set up BIND9 as DNS Firewall

With OpenDNS now needing one to be on the pro package to have filtering turned on, being on a tight budget, we are in need of free DNS filtering. After reading this link on how to block domains with ...
1
vote
1answer
276 views

Lame DNS server

I'm trying to setup my BIND with a domain I own and I'm using dnssy.com and intodns.com to check if everything is ok, but I'm getting errors in both. The error says that my DNS server is "lame" ...
21
votes
8answers
27k views

Overriding some DNS entries in BIND for internal networks

I have an internal network with a DNS server running BIND, connected to the internet through a single gateway. My domain "example.com" is managed by an external DNS provider. Some of the entries in ...
5
votes
3answers
9k views

Configure DNS server to return same IP for all domains

I would like to configure a nameserver that will return the same IP address ("A" record) for any arbitrary host name. For example: example.com subdomain.example.com someotherdomain.com ...
31
votes
4answers
15k views

Bind to ports less than 1024 without root access

I would like to run applications I'm working on that binds to port numbers less than 1000 without requiring root access. I'm using Linux Mint and have root access to set it up. I would ideally like ...
11
votes
6answers
14k views

Why aren't our DNS records propagating out into the internet?

We run the name servers for our domain on our network. We use bind/named. Lets call the domain jokerville.com. One thing I've noticed recently, when I goto a website like http://network-tools.com and ...
9
votes
7answers
9k views

bind: blackhole for invalid recursive queries?

I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains. Currently the server is flooded with faked type ANY requests for isc.org, ripe.net ...
2
votes
3answers
684 views

bind9 in a chroot jail - necessary or not?

I always used to keep my bind9 installation in a chroot jail. Now I upgraded my vServer and have to install bind9 over again. Due to the virtualization solution my hosting provider uses, I cannot ...
8
votes
3answers
1k views

Returning different DNS records depending on who asks

In BIND 9 (named), is there any way to return different A records depending on the asker's IP address? When receiving a query for a certain DNS name, I'd like to return external IP address for the ...
5
votes
1answer
1k views

measures to take against a dns amplification attack

I recently discovered that my server was being used as part of a DNS DDOS. Basically, my BIND setup allowed recursion, and it was used to attack a certain IP address using IP spoofing. I took the ...
7
votes
4answers
1k views

BIND HTTP “API”

First off, I'm a bit of a bind n00b so if I say things that don't make sense just ignore them =) Is there any software that would allow "API" like commands for creating, updating, deleting etc. zones ...
5
votes
4answers
9k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
2
votes
3answers
16k views

Conditional DNS forwarding with named on Linux

I have a Centos 5.2 server which runs named for DNS resolution - it doesn't hold any information of its own, and just forwards all requests. From the named.conf: options { [...] forwarders ...
1
vote
3answers
1k views

Setting up BIND with wildcard nameserver [closed]

I'm looking to set up BIND to return the same IP address for every A record, no matter what the request is. It's working based on the configuration below, however what is not working is that the ns ...
7
votes
2answers
6k views

Force forwarder DNS requests to TCP mode

I have set up a DNS-server on SLES10 (currently bind 9.6) on a multi-homed server. This server can be queried from all internal networks and delivers answers for all internal networks. We have two ...
5
votes
3answers
12k views

What is DNS Delegation?

In an answer to my previous question I noticed theses lines: It's normally this last stage of delegation that is broken with most home user setups. They have gone through the process of buying a ...
5
votes
2answers
4k views

Dns server which is better bind or mydns?

I am going to start a new website which is going to require DNS servers. It might have over 10,000 zones and will get more zone files as we get bigger. The problem is, which dns server software do you ...
2
votes
1answer
3k views

ive got dkim=neutral (bad version) header.i with gmail and dkim=fail (unknown key type) with yahoo

I'm having external ip and ubuntu server with exim4.71 and bind9. I'm trying to set valid dkim entry to send mail for gmail Here are my configuration files: bind9: _domainkey.example.com. IN ...
1
vote
1answer
9k views

Configuring Bind - Error About SOA Record When Starting named Service

It's been entirely too long since I setup a bind server. I've creating a lot of Windows DNS servers lately so I wanted to try my hand at it on CentOS 6. Unfortunately I'm having a slew of trouble ...
4
votes
1answer
363 views

DNS Lookup to Bind config file

Is there a tool that will take the information from a DNS lookup like dig google.com and turn it into a bind configuration file? (In this case google.com is an example, i would be using a domain ...
3
votes
1answer
636 views

How to make BIND behave differently depending on query source?

How would one make BIND behave differently depending on the source IP address? For example, I want to use different forwarding DNS servers for different people on my network.
2
votes
2answers
494 views

Windows DNS servers repeatedly requesting records in zone when they get SERVFAIL response

We're seeing high levels (over 2000 requests/second) of DNS queries from our caching DNS servers to external servers. This may have been happening for a long time - this came to light recently because ...
1
vote
1answer
55 views

What is a quicker DNS Setup?

We have two DNS servers that are restarted frequently to update ACL lists. The two servers are independent, and we have the second DNS server set to update its ACL lists 5 seconds after the first one ...
1
vote
1answer
231 views

RHEL5 - Bind doesn't return IPv6 records

I've got two DNS resolvers: RHEL5 - BIND 9.7.0-P2-RedHat-9.7.0-17.P2.el5_9.2 RHEL6 - BIND 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.4 The configuration is exactly the same, both DNS servers are not ...
1
vote
1answer
4k views

DNS BIND on CENTOS 6.3 and domain nameservers

I am somewhat new in BIND and DNS, so please tolerate my stupid Questions. I having problem running my own custom nameserver. I have a virtual hosting with openVZ (CENTOS 6.3), with 3 IP addresses and ...
0
votes
1answer
62 views

Reviewing source of DNS requests

Is there a way to know the source of DNS requests which were handed to the Forwarder (requests which were handled by the DC are of no interest)? If I set up a BIND server which is a forwarder to the ...
0
votes
3answers
231 views

Unable to do automatic updation in the slave server

I've installed BIND 9.5.2-P1 running in Windows Server 2003. There is 1 master server and 1 slave server. i already have master that work well for our zones. The problem is my slave server didn't ...
3
votes
3answers
3k views

A tool to change the default bind interface for a given command?

This is somehow related to Change interface for doing a whois The differece is that I'd like to know if it's possible to specify the default interface only for a specific program - not system-wide. ...
6
votes
1answer
6k views

In BIND, forward DNS query for specific domain to specific nameserver

Windows Server 2003 has this feature where you can forward queries for domain "example.com" to specific nameserver (not the default DNS server). How do i set this up in BIND? For example, i want to ...
5
votes
7answers
2k views

Managing zone files

We host our very own DNS server (BIND) for various reasons, including the fact that we deploy and kill machines very often and that we sometimes need to load balance via DNS very quickly. However, ...
4
votes
4answers
12k views

Internal and External DNS from Different Servers, Same Zone

I am either having trouble understanding how DNS works, or I am having trouble configuring my DNS correctly (either one isn't good). I am currently working with a domain, I'll call it webdomain.com, ...
35
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
8
votes
1answer
5k views

dns - BIND - how to return a different IP based on request's subnet

We have an intranet DNS server (system-config-bind on RHEL) serving office A, and a VPN connecting offices A and B. Office A has a server named "dev". In office A, to access a server "dev" on the ...
3
votes
1answer
2k views

Public and private hosts in the same BIND zone

For my particular setup, I've got control of a BIND 9 zone file for, say, example.com. There are several hosts in this zone, such as www.example.com and mail.example.com. I want the public internet ...
12
votes
8answers
5k views

DNS: trailing periods

When I edit my bind dns records, I need to add a trailing period for it to work. What is the point of this? How come when I use everydns.net, they do not require me to add a trailing period? Is this ...
8
votes
7answers
4k views

Two name servers necessary?

I want to use my internet connection to host two personal websites (two different domains). I would also like to host mail for these domains. This requires hosting my own name server. In the ...
7
votes
2answers
5k views

SOA and Primary NS record (DNS)

The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked? ...
2
votes
1answer
3k views

How to set up a BIND DNS server to respond a single IP address to any request on Windows?

I want to configure a BIND DNS server (since Windows Web Server 2008 does not have DNS service, I had to install BIND) that responds any request with a single A record. I had set up a * record but it ...
18
votes
4answers
11k views

What does the “IN” mean in a zone file?

Sometimes a record is listed as www IN A 192.168.1.1 and sometimes it is listed as www A 192.168.1.1. What is the purpose of the IN and when is it required/not required?
10
votes
4answers
2k views

Why running named(bind) in chroot is so important for security? Or maybe it is not ?

I'm playing with bind and started wondering why this software is for example in CentOS running in chroot. Don't misunderstood me I know what bind is and what chroot (jail) is for. But my main wonder ...
5
votes
1answer
990 views

Bind: “unexpected end of input” due to NS

I have stumbled upon an odd error in a master-slave(s) configuration of Bind. The zone works fine on the master, but on the slaves I'm getting these kind of errors: 21-May-2014 19:06:07.573 general: ...
5
votes
1answer
7k views

/usr/bin/host being used in HTTP DDoS on Debian? [duplicate]

So I got an abuse complaint for one of my dedicated servers, running Debian 6.0 Sure enough, sometimes, top shows /usr/bin/host using a lot of CPU for no apparent reason, and netstat shows process ...
4
votes
4answers
3k views

Can you have multiple writable, authoritative BIND DNS servers for the same zone, like AD-integrated DNS?

In an AD-integrated DNS system, there really isn't a concept of one "Master" DNS server; all AD-integrated zones are authoritative and updatable across all DNS servers, and send updates to each other ...
3
votes
2answers
2k views

How can I selectively override some A records on a Bind DNS Server?

I'm guessing there has to be a reasonable way to solve my issue but I'm trying to get some advice on a best practice to implement. I have recently moved to a Web Design company and we need to be able ...
3
votes
1answer
2k views

Basic DNSSEC configuration under BIND 9.7?

Could anybody provide a step-by-step procedure to set up DNSSEC under BIND 9.7? I think the version is relevant because it is supposed to make life easier. In fact, there is a document published by ...
3
votes
3answers
14k views

Cisco ASA logs “regular translation creation failed for icmp …” for DNS traffic, yet it works

Every few minutes our Cisco ASA 5505 firewall is logging errors that I can't figure out with my limited Cisco experience. Severity Date Time Syslog ID Source IP Destination IP ...
2
votes
3answers
3k views

DNS mask for Route53 crazy delegation set

I really don't know the terms to explain this problem, but please bare with me just a little bit. I have an AWS Route53 with a lot of clients, and I would like to build something like a DNS server in ...
2
votes
2answers
900 views

How to setup Dynamic DNS for small fleet of EC2 instances?

I've been setting up Amazon EC2 instances for an upcoming project which will involve hosting multiple websites on multiple web servers. They are all micro instances, running Ubuntu Server 64bit. ...
2
votes
1answer
381 views

Set up to resolve local ips

I have an apache with following settings. 192.168.0.105:8080/site1 192.168.0.105:8080/site2 and, 192.168.0.103/blog I have 3 other computers in my network. 2 desktops and a laptop. On every ...
2
votes
2answers
688 views

Does my BIND zone really provide redundancy and load balancing?

We have the following IP addresses (for example): 1.1.1.1 2.2.2.2 Each hosts the same website, but on a different server. We want to do some really simple load balancing by having web users visit a ...