BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the ...

learn more… | top users | synonyms (2)

32
votes
10answers
4k views

Run antivirus software on linux DNS servers. Does it make sense?

During a recent audit we were requested to install antivirus software on our DNS servers that are running linux (bind9). The servers were not compromised during the penetration testing but this was ...
29
votes
4answers
10k views

Bind to ports less than 1024 without root access

I would like to run applications I'm working on that binds to port numbers less than 1000 without requiring root access. I'm using Linux Mint and have root access to set it up. I would ideally like ...
19
votes
11answers
6k views

djbdns vs bind [closed]

I'm a newbie who wants to learn how to set up a DNS nameserver. Should I use djbdns, BIND, or something else? Current network requirements include subdomain support, SSL, and mail service, all on ...
19
votes
1answer
310 views

When I have a * entry in my zone file, how can I treat a specific name as nonexistent?

On our main domain, example.com we're hosting a lot of websites. So we just added a * A/AAAA record to our zone and pointed it at our webserver. Sadly, this also causes Outlook to constantly hammer ...
18
votes
8answers
21k views

Overriding some DNS entries in BIND for internal networks

I have an internal network with a DNS server running BIND, connected to the internet through a single gateway. My domain "example.com" is managed by an external DNS provider. Some of the entries in ...
16
votes
1answer
579 views

What's the importance of the email address in the DNS SOA lookup?

Is there a real importance in this, except to publish the email address of the person responsible for some DNS zone? In our BIND configuration, we put a mailling list as the responsible for our ...
14
votes
4answers
8k views

What does the “IN” mean in a zone file?

Sometimes a record is listed as www IN A 192.168.1.1 and sometimes it is listed as www A 192.168.1.1. What is the purpose of the IN and when is it required/not required?
12
votes
4answers
3k views

Changing DNS serial number to be in the past

I have some DNS servers for our organization that was setup by my predecessor. He did not use the standard format for serial numbers, instead he used an odd format starting with 2033. What I want to ...
12
votes
1answer
3k views

How does DNS nameserver fall back work?

We have two DNS servers listed in our NS record. Last night, one of our DNS servers went down. As expected, some DNS servers were not resolving our hostnames. I assumed this would be temporary and ...
11
votes
8answers
4k views

DNS: trailing periods

When I edit my bind dns records, I need to add a trailing period for it to work. What is the point of this? How come when I use everydns.net, they do not require me to add a trailing period? Is this ...
11
votes
6answers
10k views

Why aren't our DNS records propagating out into the internet?

We run the name servers for our domain on our network. We use bind/named. Lets call the domain jokerville.com. One thing I've noticed recently, when I goto a website like http://network-tools.com and ...
10
votes
2answers
942 views

Can I completely remove the Windows DNS in favour of BIND9 in an AD network?

I would like to remove the DNS feature of Windows Domain Controllers and point the DNS servers to our BIND9 servers. I know it's possible to setup coexistence but this requires a number of extra ...
10
votes
1answer
1k views

Amplified reflected attack on DNS servers

The term Amplified reflected attack is new to me, and I have a few questions about it. I've heard it mostly happens with DNS servers - is that true? How do you protect against it? How do you know if ...
10
votes
2answers
688 views

packet queue performance discrepencies with BIND nameserver

Background: I've inherited a high volume caching nameserver environment (Redhat Enterprise Linux 5.8, IBM System x3550) that has inconsistent ring buffer settings: 1020 for eth0 and 255 for eth1. ...
9
votes
3answers
8k views

Bind zone transfer refused

UPDATE: BIND Version: [root@10.224.45.130] $ named -v BIND 9.3.6-P1-RedHat-9.3.6-16.P1.el5 Operating System: CentOS release 5.6 (Final) After running [root@10.224.45.131] $ dig @10.224.45.130 ...
8
votes
4answers
735 views

Why running named(bind) in chroot is so important for security? Or maybe it is not ?

I'm playing with bind and started wondering why this software is for example in CentOS running in chroot. Don't misunderstood me I know what bind is and what chroot (jail) is for. But my main wonder ...
8
votes
7answers
3k views

Two name servers necessary?

I want to use my internet connection to host two personal websites (two different domains). I would also like to host mail for these domains. This requires hosting my own name server. In the ...
8
votes
4answers
40k views

DNS - Any way to force a nameserver to update the record of a domain?

I am doing some work on some domain names. I'm updating them. By using dig I can query our nameserver and I can see that the correct name has been updated. However our office dns cache is still ...
8
votes
6answers
30k views

What is the best webinterface to manage BIND?

I set up BIND DNS which hosts our domain, and I also use it for internal DNS. I set up different views for internal and external hosts and it works OK. My question is which is the best webinterface to ...
8
votes
3answers
1k views

Returning different DNS records depending on who asks

In BIND 9 (named), is there any way to return different A records depending on the asker's IP address? When receiving a query for a certain DNS name, I'd like to return external IP address for the ...
8
votes
7answers
8k views

bind: blackhole for invalid recursive queries?

I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains. Currently the server is flooded with faked type ANY requests for isc.org, ripe.net ...
8
votes
1answer
3k views

dns - BIND - how to return a different IP based on request's subnet

We have an intranet DNS server (system-config-bind on RHEL) serving office A, and a VPN connecting offices A and B. Office A has a server named "dev". In office A, to access a server "dev" on the ...
7
votes
6answers
3k views

lots of dns requests from China, should I worry?

I have turned on dns query logs, and when running "tail -f /var/log/syslog" I see that I get hundreds of identical requests from a single ip address: Apr 7 12:36:13 server17 named[26294]: client ...
7
votes
8answers
10k views

Automatically sync all zones between BIND 9

Is there a way to automatically synchronize all zones between BIND (9) servers so that I don't have to add zones to the slave when I add them to the master?
7
votes
1answer
5k views

What is the point of the zones.rfc1918 file for Bind9?

Using an Ubuntu 10.04 LTS server in a standalone environment and trying to use views to serve two different subnets of clients. Getting errors regarding the zones.rfc1918 file, so I'd like to know ...
7
votes
4answers
985 views

BIND HTTP “API”

First off, I'm a bit of a bind n00b so if I say things that don't make sense just ignore them =) Is there any software that would allow "API" like commands for creating, updating, deleting etc. zones ...
7
votes
1answer
254 views

Why does the wildcard not work?

my bind config carrie IN A 192.253.253.4 *.carrie IN A 192.253.253.6 *.test.carrie IN A 192.253.253.7 execute nslookup carrie Address: 192.253.253.4 nslookup a.test.carrie ...
7
votes
2answers
1k views

Can I delegate part of a zone to another server?

I guess I'm wondering something similar to Can I create DNS records for some hosts, delegate other queries in the same domain to another DNS server?, but I'm hoping I'll get a different answer with ...
7
votes
2answers
527 views

Secondary nameserver keeps trying to transfer a domain and succeeds every time

We're using BIND 9.7.3 on the stable version of Debian (updated weekly), and we see some very strange behaviour for one particular domain. We host a few hundred, but this one is ours. Basically, the ...
6
votes
3answers
350 views

How to prevent Bind from responding to spoofed IP addresses?

We all know about open resolvers, this question is kind of for the inverse situation. I have a DNS server that is locked down to certain CIDRs acl trusted {[..] options { [..] allow-query { ...
6
votes
5answers
3k views

Resolving host names to their domain name in an internal BIND domain

I'm setting up a domain on my home network for learning purposes, using BIND on CentOS to act as the name server. I've got the name server up and running as type master for my internal domain ...
6
votes
5answers
5k views

Any way to reduce bind9 memory footprint?

I am running my own Authoritative DNS on bind9 for like 5 of my domains with little traffic. I am running them on 2 separate VPS servers (so every Mb of memory costs me some $x2). Is there any way to ...
6
votes
2answers
4k views

Force forwarder DNS requests to TCP mode

I have set up a DNS-server on SLES10 (currently bind 9.6) on a multi-homed server. This server can be queried from all internal networks and delivers answers for all internal networks. We have two ...
6
votes
1answer
558 views

How to setup a simple DNS server to answer just for one name and forward all the rest?

I would like to setup a small Linux (Ubuntu) server for a school project. This school server should forward all the request to the primary DNS server of the network and reply with an IPv6 address when ...
6
votes
1answer
4k views

In BIND, forward DNS query for specific domain to specific nameserver

Windows Server 2003 has this feature where you can forward queries for domain "example.com" to specific nameserver (not the default DNS server). How do i set this up in BIND? For example, i want to ...
6
votes
3answers
5k views

Wildcard DNS with BIND

I'm trying to setup BIND so that it catches any and all requests made to it, and points them to a specific set of NS servers, and a specific A record. I have around 500 domains, and I'm adding new ...
6
votes
1answer
832 views

BIND9: Do forwarders have any priority?

I am just setting up my BIND9-Server and it works well so far. I decided to integrate a little gimmick into the abilities of my DNS. I want it to resolve IANA-compliant domains like *.com and *.net by ...
5
votes
3answers
1k views

Difference between Named and BIND

Can someone explain to me what the exact difference is between named and BIND?
5
votes
4answers
7k views

Bind DNS rate-limit and values for responses-per-second and window

In my DNS server's named.conf I see rate-limit { responses-per-second 5; window 5; }; What does this actually mean? And can it cause DNS clients problems? Is this ...
5
votes
4answers
423 views

Production BIND DNS servers - Do you use the package manager or compile the latest stable edition?

I manage several BIND DNS servers (on RHEL/Centos) for authoritative lookups (forward and reverse) as well as dedicated caching-only services. I've always just used the latest stable BIND in the ...
5
votes
5answers
9k views

How to migrate a BIND DNS server to new hardware?

I got a job to migrate 2x BIND DNS servers to new hardware. Apparently they are using 3U prehistoric servers running Ubuntu server 8.04. I'll get to install 2x 1U servers with Ubuntu server 9.04. ...
5
votes
4answers
21k views

Centos 6.3 Bind hangs on “Generating /etc/rndc.key”

I'm installing bind on a clean Centos 6.3 system. In previous versions that would work like a charm, but now I get Generating /etc/rndc.key when trying to start bind after the installation. ...
5
votes
6answers
282 views

Using Microsoft DNS in the wild

Anyone on here using MSDNS out in the wild? We have a requirement to get a couple of backup DNS servers up in case our provider gets DDoS'd (as happened recently), and my first instinct is to get a ...
5
votes
4answers
3k views

DNS Reverse lookup not working

I am creating an authoritative bind server. I have not worked on DNS in a while. My reverse lookups are failing on the internet, but when I connect directly to the server on nslookup I am able to do ...
5
votes
4answers
2k views

Read only bind-mount?

I use mount -o bind to mount directories inside chroots, which works really well. The problem is that I'd like some of these bind-mounted directories to be read only in chroot. Is it possible? If not ...
5
votes
7answers
2k views

Managing zone files

We host our very own DNS server (BIND) for various reasons, including the fact that we deploy and kill machines very often and that we sometimes need to load balance via DNS very quickly. However, ...
5
votes
1answer
3k views

BIND, Master, Slaves and Notify

It might seem like a very basic question, but, how is a master DNS server aware of its slaves? I mean, does it parse the zone file and determine where to send the NOTIFY message? And if that is the ...
5
votes
6answers
681 views

Nameserver Checker

I've got Bind running on a server and although access to the domains I've set up is correct. I was wondering if there was an online (or offline) tool to check if I had setup the service correctly? ...
5
votes
2answers
4k views

SOA and Primary NS record (DNS)

The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked? ...
5
votes
2answers
2k views

When should .local be used?

So, I've set up a few Win Servs in my time and always did the .local thing when there was a router that sepearated my internal from external networks. Now that I'm setting up an *nix box for the ...