Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
10 views

how to make pdns to sent notification to slaves not in "IN NS" record

I have a cpanel box with powerdns as it's DNS server. it's IP address is 192.168.1.101 It act as a master, with 2 slaves (192.168.8.78 and 192.168.8.79) running pure BIND9 Here is it's configuration [...
Bino Oetomo's user avatar
0 votes
1 answer
35 views

bind9 conditional forwarding not working as expected

Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain xyz.com. I use the private DNS for certain secure nodes on our local network. I want ...
Yousuf's user avatar
  • 37
1 vote
1 answer
27 views

How to delegate subdomain to samba DC?

I set up a samba server and I'd like all the clients on my network to use the same DNS server. Diagram I have configured the servers (ubuntu/bind9:9.18-22.04_beta) as below. I don't quite understand ...
GaMMachiPo's user avatar
0 votes
1 answer
32 views

using include in named.conf returns file not found although the file does exist

I have a named service running fine but when I try to use an additional "include" statement, it doesn't work. I'm using Linux Server, and I have the same problem in CentOS and AlmaLinux. I ...
David's user avatar
  • 1
2 votes
1 answer
129 views

Bind9 extremely slow upstream resolving

I have a bind9 docker container serving DNS for my home lab. It provides a .lan domain for local devices, and a private domain name for my internal services. However, resolving any external DNS entry ...
t348575's user avatar
  • 123
-1 votes
1 answer
104 views

Linux Bind9 DNS server, configuration throwing errors

I am having problem with DNS configuration in Linux. I am using isc-dhcp-server as DHCP server and bind9 as DNS server, but I it returning me errors. This is my Setup Internet <--enp0s3 interface--&...
mitas1c's user avatar
  • 99
0 votes
0 answers
54 views

Bind9 on Docker can't resolve on host

I have a PC on my local network that will run services that I want to access with URL's instead of IP's. I have followed many guides and articles on how to use Bind9 (and dnsmasq) but always get stuck....
Jonas Birkelöf's user avatar
0 votes
0 answers
52 views

Updating Bind with nsupdate works locally, not remotely or on private IP

I am attempting to get nsupdate/RFC2136 working for a remote BIND server, but I've been scratching my head for two days trying to figure out what is going on. BIND 9.16.23 is running on an internal ...
dolomike's user avatar
0 votes
0 answers
30 views

Is is possible to set up different DNS records based on the realtime qps using bind?

I'm trying to set up a self hosted DNS server for my website using bind and I want to set it to redirect to a custom error site (set all records to CNAME of error.my.domain maybe) if the qps reaches a ...
Francie Jiang's user avatar
0 votes
0 answers
209 views

bind9, named not accessible over local network behind router ubuntu 20.04

i have a zte F6600R router from my isp provider with following configuration DHCP SERVER : ON LAN IP ADDR : 192.168.1.1 SUBNET MASK : 255.255.255.0 DHCP start IP : 192.168.1.10 DHCP end IP : 192.168.1....
Andrei Claudiu Viziru's user avatar
-4 votes
2 answers
71 views

Should we use the LAN IP or the public IP for bind settings such as A records, etc.?

I'm a newcomer to working with bind, and a while ago, I purchased a static IP from an ISP. I used bind to bring up a domain, and now it's working without any issues. For example: the LAN network IP ...
ahmadreza1383's user avatar
0 votes
0 answers
78 views

How this specific DNS configuration works?

Recently, a partner asked us to do following in one of our DNS zones: _dmarc.send.domain.com. TXT "v=DMARC1; p=none" send.domain.com. NS ns1.otherdomain.com. send.domain.com. ...
Nick's user avatar
  • 852
0 votes
1 answer
116 views

Where does ddns-confgen save its key(s)?

I hesitate to ask this question as I suspect I'm being stupid, but... On Ubuntu server 22.04 running bind 9.18.18, when I run ddns-confgen -k host.example.com, it outputs some instructions referring ...
TommyPeanuts's user avatar
-1 votes
1 answer
39 views

How to make DNS Server return different answers based on network availability? [closed]

I Have a Bind9 docker container acting as the DNS Server of my network, I want this behavior when bind9 is asked about example.com: If (Network is available): ask from 8.8.8.8 about example.com If (...
Navid777's user avatar
  • 153
1 vote
0 answers
55 views

BIND DNSSEC Keys remain active although expired

Szenario: BIND9 (9.18) running on Debian 12 "bookworm" as primary DNS for a whole bunch of zones. A dnssec-policy is in place, which establishs automatic signing of zone entries. Keys (KSK &...
joergd's user avatar
  • 111
0 votes
1 answer
169 views

Bind dynamic DNS: can records be removed or expired automatically after some time

I have a dynamic DNS zone on my Bind 9 server and use nsupdate from a script to update records in it. When a record has not been updated for some time, I would like to remove it. Do I need to manage ...
mivk's user avatar
  • 4,402
0 votes
0 answers
83 views

NGINX Proxy + BIND9 issue

Before finding the courage to write in here I have been reading for days to find a possible solution myself. This is the problem. I have a NGINX Proxy manager installed on a docker container that ...
Luca's user avatar
  • 1
0 votes
1 answer
102 views

How to set RRSIG signature expiry validity manually (BIND9)

The default Resource record signature validity is 30 days of bind9 and we have to renew the signature validity by resigning the zone file every time. Otherwise the DNS resolver will unable to resolve ...
Sadhukhan007's user avatar
0 votes
2 answers
127 views

Bind9 - Forward specific record to another name server

I have a master zone (example.com) and several A records that belong to that zone (server1.example.com, server2.example.com, etc.). Those records resolve to internally hosted servers. I want to ...
Intrepid's user avatar
  • 163
0 votes
0 answers
158 views

bind9 behind nginx reverse proxy DoH

I'm trying to setup bind9, in a container, behind a nginx reverse proxy. Basic DNS requests work fine, but I struggle with DoH... Right now, dig +https @BASE_URL gnu.org gives me this error: ;; ...
ange's user avatar
  • 33
0 votes
0 answers
43 views

Using bind9 forwarding to openvpn does not work

i have an openvpn running on my server. It works, and when i check with traceroute, i see that the first ip address is 10.12.4.1, so i think my vpn? Heres my openvpn conf from my ubuntu server client ...
jelkaa's user avatar
  • 1
1 vote
0 answers
187 views

Bind9 Permission issue, unable to sign zone

fellow experts, I am new. I am on Ubuntu 22, I am looking to enable dnssec on my side by using Bind9. However, I don't exactly know where and how to do it. After some trials, I have come up with ...
Hern's user avatar
  • 11
0 votes
0 answers
54 views

Bind9 with multiple RPZ files and multiple views causing overload on memory and CPU

I am running BIND 9.18.18-0ubuntu0.22.04.1-Ubuntu (Extended Support Version) <id:> on "22.04.3 LTS (Jammy Jellyfish)" My use case is as follows. I need to implement a DNS firewall of ...
apocalypse0's user avatar
1 vote
0 answers
75 views

Forward DNS does not work. BIND and DIG find nothing

The company's DC is in the Oracle Cloud, and I connect it to the companies via IPSec, and foward the DNS via Domain Override in pfSense or Bind9. I recently picked up a Dream Machine from Ubiquiti to ...
Raphael Aracelli's user avatar
0 votes
0 answers
44 views

Getting TSIG update error (PeerBadKey) when running Bind9 role

I am getting this kind of error fatal: [bobul-2]: FAILED! => {"changed": false, "msg": "TSIG update error (PeerBadKey): The peer didn't know the key we used"} when I ...
valga's user avatar
  • 1
0 votes
1 answer
137 views

Setup Reverse DNS for a VPS host on a public network

Bassically, I'm trying to revive this question that got no correct answer: reverse DNS (bind) for single ip/machine on non-private network So, I am trying to configure my own public DNS server for ...
Bestmank's user avatar
1 vote
1 answer
49 views

How can I change the default permissions for `/run/named/session.key` in Bind9?

I'm using nsupdate -l from a local script to update DNS records in Bind9. It's working, except, I need for PHP to have read access to the key at /run/named/session.key. I can give PHP access by ...
Nick's user avatar
  • 4,656
-1 votes
1 answer
124 views

Why am I not able to resolve names on subnet behind a lab network?

I have gotten the task of setting up a network where there is an existing gateway for my "public ip" 10.200.3.2/28 already. I am to setup a gw/dhcp which uses the existing gateway the given ...
Danders's user avatar
0 votes
2 answers
318 views

Why do I have to specify the DNS server when doing a forward lookup?

I'm trying to set up a small, private DNS server. I'm using Bind9 and systemd resolved, netplan for managing the network. I've specified the DNS server in both the netplan configuration and /etc/...
sysad noob's user avatar
0 votes
1 answer
104 views

How can i fix source ports in BIND 9.16.xx?

The older cache DNS server in my team is configured with BIND 9.11.4; it uses 53 as the source port number. options { ... query-source port 53; ... } Meanwhile, the new one has BIND 9.16.23 ...
JYC's user avatar
  • 1
1 vote
1 answer
100 views

Bind rpz only gives max TTL of 5 seconds

When I configure BIND with response policy zone so I can override DNS for LAN network I have noticed that TTL returned by this DNS servers max out at 5 seconds. I can lower TTL to 1-4 seconds but ...
JKalousek's user avatar
0 votes
0 answers
21 views

Bind9 forwarded zones statistics

Is it possible to get a statistics count for forwarded zones similar to other zone types? I have the following definitions in my named.conf.local and am able to successfully make queries for both ...
Andrei_T's user avatar
0 votes
1 answer
79 views

Bind9 works internally and as forward but not reversing internet dns

I setup a Bind9 to be my network DNS. I'm using it as both a forwarder and an internal IP resolution. The problem is that I cannot reverse DNS from internet IPs. For example, I have a proxy server ...
Igor's user avatar
  • 13
0 votes
0 answers
28 views

Move Nameserver from crashed BIND servers (DNSSEC Enabled)

The situation basically is: The BIND servers that are authoritative for a domain crashed and are utilizing DNSSEC (Ie; I can't change the DNS entries for the zone), is it enough to have the registrar ...
questionanswer1133's user avatar
0 votes
0 answers
137 views

DNS configuration using bind9

I am currently encountering DNS configuration issues with bind9. I have installed bind9 and made the following adjustments to the configuration files: In the "named.conf.options" file, I ...
Linuxmodex's user avatar
0 votes
0 answers
132 views

ISC Bind bind to non-local IP

I need to get ISC Bind to bind to a non-local IP on Linux. I have net.ipv6.ip_nonlocal_bind=1 set but unfortunately Bind's bind code seems to treat listen-on-v6 as more of a whitelist of what ...
Scoopta's user avatar
  • 101
0 votes
0 answers
87 views

Disable IPv6 dbug logging in BIND

Using BIND on Arch. I have /etc/named.conf only containing include "/var/named/named.conf" where named.conf is: include "/var/named/named.conf.options"; include "/var/named/...
Err488's user avatar
  • 1
0 votes
0 answers
226 views

BIND9 on Ubuntu 20 - Cannot configure Zone to work properly

I installed it on Ubunto 20 and configured two zones Options config file acl internal { localhost; localnets; 192.168.70.0/24; 10.200.157.0/24; }; options { ...
Wism Esmel's user avatar
0 votes
0 answers
27 views

How to Forward an authorative zone in BIND between internal and public clients

I have a dns server authorative for my public records and my internal records , I want to forward a zone in my internal dns server so internal clients can access certain records without using the ...
John Adams's user avatar
1 vote
0 answers
68 views

How to forward subdomain DNS to Windows Server DNS while keeping the parent in local zone

I have a Bind9 (Ubuntu) as my primary DNS server in my lab environment and hosts zone files. I recently added Active Directory to the environment. My plan is to keep Bind9 as my Primary DNS and any ...
NaniK's user avatar
  • 11
0 votes
1 answer
185 views

bind9 multiple ports zone and dns64

When I add the zone it stops working. How can I use them together? I want to go to the zone "." via port 5353 And go to DNS64 via port 53 zone "." { type slave; masters port 5353 { ...
Abdulkader Alrezej's user avatar
0 votes
1 answer
244 views

Can't resolve private domains using bind9 with Wireguard VPN connection

I have a VPS with static external IP and Ubuntu 22.04. I configured the Wireguard VPN connection to my server tunneling all traffic through VPS. I also have UFW enabled. I want to resolve some domains ...
andryuhat's user avatar
0 votes
0 answers
69 views

How to stop bind to do a separate CNAME query again?

I have a local DNS server like the following: client -> bind (only handle local names) -> dnsmasq (handle other names) This problem is when a name is a CNAME, dnsmasq return both CNAME and IPs, ...
Hoping White's user avatar
1 vote
0 answers
527 views

Traefik dashboard returns 404 page not found + TLS handshake error: remote error: tls: bad certificate (traefik + bind9 + CloudFlare + Let's Encrypt)

I configured Traefik in docker using the guide: Put Wildcard Certificates and SSL on EVERYTHING - Traefik Tutorial But when trying to access the dashboard - I see an error: 404 Page not found I have ...
Riven's user avatar
  • 11
1 vote
1 answer
123 views

umount a bind source won't work, and device out of space

I think I may have shot myself in the foot. Long ago I tried to backup a old linux machine to a nas using the mount bind command: mount --bind / /mnt/src tar -C /mnt/src -c . > /mnt/backup_to_nas/...
Codejoy's user avatar
  • 149
0 votes
0 answers
20 views

Postfix 2nd domain

I have two postfix servers(virtual machines) on same host 1st domain = mail.xyz.org 2nd domain = mail.xyz.edu I want to send mail from 1st domain to 2nd domain. If i try, it gives error: Recipient ...
munishhh's user avatar
0 votes
1 answer
49 views

Issue with Bind9 and wildcards

I set up both bind9 and DNSMASQ servers to forward public-ubiservices.ubi.com to my IP address, but client kept failing to connect to it, I checked bind9 logs and found out the client is trying to ...
elifes's user avatar
  • 1
0 votes
1 answer
34 views

Bind Authoritive cluster upgrade order

We are running BIND 9.16.6 Red Hat v7.7. I am looking for some tips on the order of the upgrade and what command to run in order to shut down each node gracefully. We have a separate hidden master and ...
Derek Mahon's user avatar
0 votes
2 answers
157 views

What is the behavior of a DNS resolver if one authoritative name server does not have particular record but another one does

Say I have sent a query for TXT record for m1._domainkey.amazon.com nslookup -q=txt m1._domainkey.amazon.com Say the authoritative nameservers for amazon.com are amazon.com nameserver = ns1.amzndns....
Hassu's user avatar
  • 19
0 votes
0 answers
1k views

BIND9: Host xxxxx not found: 2(SERVFAIL)

I've installed and set up the bind9 DNS server on UbuntuServer 22.04.3. Then I've checked my hosts. And I have got an error: host host1 Host host1 not found: 2(SERVFAIL) But the reverse operation ...
Ilya Shmadchenko's user avatar

1
2 3 4 5
47