0

we are trying to configure a bind9 server. We have two different views, one for the internal zone (dmz) and another for external users who want to access to the dmz web.

The problem is that we may be lacking any configuration option because the server is unable to resolv anything related with the external view. In this link you will see the error image: error image

Our configuration is the following:

/etc/bind/named.conf.options

    directory "/var/cache/bind";
    forwarders {
        10.45.1.2;
        10.40.1.2;
        10.40.1.108;
    };

    auth-nxdomain no;
};

/etc/bind/named.conf.local

view "Lab1A.int"{
    recursion yes;
    match-clients{172.16.0.0/24;198.18.10.0/28;localhost;};
    zone "lab10.int" {
        type master;
        file "/etc/bind/db.grup1A.int";
    };

    zone "0.16.172.in-addr.arpa" {
        type master;
        file "/etc/bind/db.172";
        notify no;
    };

    zone "10.dmz" {
        type master;
        file "/etc/bind/db.grup1A.dmz";
    };

    zone "10.18.198.in-addr.arpa" {
        type master;
        file "/etc/bind/db.198";
        notify no;
    };
    include "/etc/bind/named.conf.default-zones";
};

view "Lab1A.ext"{
    match-clients{any;};
    recursion no;
    zone "grup10.gsx" {
        type master;
        file "/etc/bind/db.grup1A.ext";
        allow-transfer{ localhost; };
    };

    zone "10.in-addr-arpa" {
        type master;
        file "/etc/bind/db.ext.rev";
        notify no;
    };
};

The files of the external zone are the following:

forward file, db.grup1A.ext

; file "db.grup1A.ext";
$TTL    604800
@   IN  SOA ns.grup10.gsx.   root.grup10.gsx.   (
    1   ; Serial
    604800  ; Refresh
    86400   ; Retry
    2419200 ; Expire
    604800 )    ; Negative Cache TTL
;
@   IN  NS  ns
ns  IN  A   10.21.1.17

www IN  A   10.21.1.17

reverse file, db.ext.rev

; file "db.ext.rev";
$TTL    604800
@       IN      SOA     ns.grup10.gsx.   root.grup10.gsx.     (
    1       ; Serial
    604800       ; Refresh
    86400       ; Retry
    2419200       ; Expire
    604800 )     ; Negative Cache TTL
    ;
@       IN      NS      ns.grup10.gsx.

17.1.21       IN      PTR     ns.grup10.gsx.

17.1.21 IN  PTR correu.grup10.gsx.
17.1.21 IN  PTR www.grup10.gsx.

/etc/default/bind9

# run resolvconf?
RESOLVCONF=no

# startup options for the server
OPTIONS="-4 -u bind"

The ip of the server is 10.21.1.17 and it corresponds to the domain www.grup10.gsx

After trying the following command, there were no errors detacted.

named-checkzone grup10.gsx db.grup1A.ext

Thanks in advance!

  • gsx is not a valid top level domain (yet). – Michael Hampton May 23 at 18:37
  • Nor dmz in fact. – Patrick Mevzek Jun 2 at 4:39
  • You should more clearly explain, as text and not as an image, what you exactly tried, what errors you got and what results you expected instead. You can also use named-checkconf, look at your logfiles, and use external tools such as DNSViz and Zonemaster if your nameservers are reachable publicly. – Patrick Mevzek Jun 2 at 4:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.