Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

BIND9, Kea and Dynamic DNS

I'm working on setting up DNS and DHCP on my homelab network using BIND9 and Kea, and I'm having trouble getting my zone files to update consistently. My setup is BIND 9.18.26 and Kea 2.4.1 on the ...
Darwin von Corax's user avatar
1 vote
1 answer
32 views

Regarding the issue of degraded query performance after upgrading bind9

I would like to ask if anyone has encountered a problem where query performance deteriorates after upgrading the bind version. Here are the performance test results for versions 9.16.49, 9.18.25, and ...
zcchann's user avatar
  • 11
-2 votes
1 answer
83 views

DNS server bind9 can not be accessed from external network, but seems to work properly in LAN

I try to set up a DNS on my home server to provide some readable addresses for other computers outside of my home LAN. I think I was able to install and set up bind9 server, at least I get a proper IP ...
ivan's user avatar
  • 1
0 votes
1 answer
41 views

Do I need to create own server zone in BIND?

Newbie question. In BIND I have to create two Name Servers, ns1 and ns2, to resolve 3 domains related to 3 websites in Apache. Apache and its 3 domains are on a dedicated server named srv1.domain.tld ...
Dark Corner's user avatar
-2 votes
1 answer
47 views

Zones cannot load correctly

I don't know where my zones have errors. I dont understand. after executing the named-checkzone command I get these responses. Could someone direct me to the correct vocabulary in the zone? root@...
Doujinx's user avatar
0 votes
0 answers
139 views

Error with resolv.conf and nslookup

I put my DNS server in resolv.conf 10.0.2.5, but only the nameserver of 127.0.0.53 allows me to resolve lookups when I use nslookup 10.0.2.5 or nslookup 10.0.2.6. I read that there should be a DNS ...
Doujinx's user avatar
0 votes
0 answers
26 views

Bind keeps resigning one zone and sending updates

I have multiple zones on a master NS server, which transfer to public faced servers. But after enabling DNSSEC for every zone, one zone continues doing IXFR (has been doing it for 2 weeks now), every ...
HWM's user avatar
  • 1
0 votes
1 answer
89 views

Is there a good way to transfer a DNS Zone from a bind9 server to a new domain with the same name running on freeIPA? [zone to ldif]

I'm working within a company network that has DNS servers but did not have an actual Domain. After installing a FreeIPA server and setting up the domain (same name as the DNS zone in the bind9 DNS ...
Alexander Wryn's user avatar
-1 votes
1 answer
76 views

BIND9 conditional forwarding not working as expected

Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain xyz.com. I use the private DNS for certain secure nodes on our local network. I want ...
Yousuf's user avatar
  • 35
1 vote
1 answer
65 views

How to delegate subdomain to samba DC?

I set up a samba server and I'd like all the clients on my network to use the same DNS server. Diagram I have configured the servers (ubuntu/bind9:9.18-22.04_beta) as below. I don't quite understand ...
GaMMachiPo's user avatar
0 votes
1 answer
98 views

using include in named.conf returns file not found although the file does exist

I have a named service running fine but when I try to use an additional "include" statement, it doesn't work. I'm using Linux Server, and I have the same problem in CentOS and AlmaLinux. I ...
David's user avatar
  • 1
2 votes
1 answer
239 views

Bind9 extremely slow upstream resolving

I have a bind9 docker container serving DNS for my home lab. It provides a .lan domain for local devices, and a private domain name for my internal services. However, resolving any external DNS entry ...
t348575's user avatar
  • 123
-1 votes
1 answer
156 views

Linux Bind9 DNS server, configuration throwing errors

I am having problem with DNS configuration in Linux. I am using isc-dhcp-server as DHCP server and bind9 as DNS server, but I it returning me errors. This is my Setup Internet <--enp0s3 interface--&...
mitas1c's user avatar
  • 99
0 votes
1 answer
242 views

Bind9 on Docker can't resolve on host

I have a PC on my local network that will run services that I want to access with URL's instead of IP's. I have followed many guides and articles on how to use Bind9 (and dnsmasq) but always get stuck....
Jonas Birkelöf's user avatar
0 votes
1 answer
144 views

Updating Bind with nsupdate works locally, not remotely or on private IP

I am attempting to get nsupdate/RFC2136 working for a remote BIND server, but I've been scratching my head for two days trying to figure out what is going on. BIND 9.16.23 is running on an internal ...
dolomike's user avatar
0 votes
0 answers
30 views

Is is possible to set up different DNS records based on the realtime qps using bind?

I'm trying to set up a self hosted DNS server for my website using bind and I want to set it to redirect to a custom error site (set all records to CNAME of error.my.domain maybe) if the qps reaches a ...
Francie Jiang's user avatar
0 votes
0 answers
214 views

bind9, named not accessible over local network behind router ubuntu 20.04

i have a zte F6600R router from my isp provider with following configuration DHCP SERVER : ON LAN IP ADDR : 192.168.1.1 SUBNET MASK : 255.255.255.0 DHCP start IP : 192.168.1.10 DHCP end IP : 192.168.1....
Andrei Claudiu Viziru's user avatar
-4 votes
2 answers
95 views

Should we use the LAN IP or the public IP for bind settings such as A records, etc.?

I'm a newcomer to working with bind, and a while ago, I purchased a static IP from an ISP. I used bind to bring up a domain, and now it's working without any issues. For example: the LAN network IP ...
ahmadreza1383's user avatar
0 votes
0 answers
79 views

How this specific DNS configuration works?

Recently, a partner asked us to do following in one of our DNS zones: _dmarc.send.domain.com. TXT "v=DMARC1; p=none" send.domain.com. NS ns1.otherdomain.com. send.domain.com. ...
Nick's user avatar
  • 882
0 votes
1 answer
157 views

Where does ddns-confgen save its key(s)?

I hesitate to ask this question as I suspect I'm being stupid, but... On Ubuntu server 22.04 running bind 9.18.18, when I run ddns-confgen -k host.example.com, it outputs some instructions referring ...
TommyPeanuts's user avatar
-1 votes
1 answer
49 views

How to make DNS Server return different answers based on network availability? [closed]

I Have a Bind9 docker container acting as the DNS Server of my network, I want this behavior when bind9 is asked about example.com: If (Network is available): ask from 8.8.8.8 about example.com If (...
Navid777's user avatar
  • 153
1 vote
0 answers
94 views

BIND DNSSEC Keys remain active although expired

Szenario: BIND9 (9.18) running on Debian 12 "bookworm" as primary DNS for a whole bunch of zones. A dnssec-policy is in place, which establishs automatic signing of zone entries. Keys (KSK &...
joergd's user avatar
  • 111
0 votes
1 answer
271 views

Bind dynamic DNS: can records be removed or expired automatically after some time

I have a dynamic DNS zone on my Bind 9 server and use nsupdate from a script to update records in it. When a record has not been updated for some time, I would like to remove it. Do I need to manage ...
mivk's user avatar
  • 4,522
1 vote
0 answers
101 views

NGINX Proxy + BIND9 issue

Before finding the courage to write in here I have been reading for days to find a possible solution myself. This is the problem. I have a NGINX Proxy manager installed on a docker container that ...
Luca's user avatar
  • 11
0 votes
1 answer
172 views

How to set RRSIG signature expiry validity manually (BIND9)

The default Resource record signature validity is 30 days of bind9 and we have to renew the signature validity by resigning the zone file every time. Otherwise the DNS resolver will unable to resolve ...
Sadhukhan007's user avatar
0 votes
2 answers
320 views

Bind9 - Forward specific record to another name server

I have a master zone (example.com) and several A records that belong to that zone (server1.example.com, server2.example.com, etc.). Those records resolve to internally hosted servers. I want to ...
Intrepid's user avatar
  • 163
0 votes
0 answers
225 views

bind9 behind nginx reverse proxy DoH

I'm trying to setup bind9, in a container, behind a nginx reverse proxy. Basic DNS requests work fine, but I struggle with DoH... Right now, dig +https @BASE_URL gnu.org gives me this error: ;; ...
ange's user avatar
  • 33
0 votes
0 answers
63 views

Using bind9 forwarding to openvpn does not work

i have an openvpn running on my server. It works, and when i check with traceroute, i see that the first ip address is 10.12.4.1, so i think my vpn? Heres my openvpn conf from my ubuntu server client ...
jelkaa's user avatar
  • 1
1 vote
0 answers
256 views

Bind9 Permission issue, unable to sign zone

fellow experts, I am new. I am on Ubuntu 22, I am looking to enable dnssec on my side by using Bind9. However, I don't exactly know where and how to do it. After some trials, I have come up with ...
Hern's user avatar
  • 11
0 votes
0 answers
84 views

Bind9 with multiple RPZ files and multiple views causing overload on memory and CPU

I am running BIND 9.18.18-0ubuntu0.22.04.1-Ubuntu (Extended Support Version) <id:> on "22.04.3 LTS (Jammy Jellyfish)" My use case is as follows. I need to implement a DNS firewall of ...
apocalypse0's user avatar
1 vote
0 answers
86 views

Forward DNS does not work. BIND and DIG find nothing

The company's DC is in the Oracle Cloud, and I connect it to the companies via IPSec, and foward the DNS via Domain Override in pfSense or Bind9. I recently picked up a Dream Machine from Ubiquiti to ...
Raphael Aracelli's user avatar
0 votes
0 answers
55 views

Getting TSIG update error (PeerBadKey) when running Bind9 role

I am getting this kind of error fatal: [bobul-2]: FAILED! => {"changed": false, "msg": "TSIG update error (PeerBadKey): The peer didn't know the key we used"} when I ...
valga's user avatar
  • 1
0 votes
1 answer
163 views

Setup Reverse DNS for a VPS host on a public network

Bassically, I'm trying to revive this question that got no correct answer: reverse DNS (bind) for single ip/machine on non-private network So, I am trying to configure my own public DNS server for ...
Bestmank's user avatar
1 vote
1 answer
69 views

How can I change the default permissions for `/run/named/session.key` in Bind9?

I'm using nsupdate -l from a local script to update DNS records in Bind9. It's working, except, I need for PHP to have read access to the key at /run/named/session.key. I can give PHP access by ...
Nick's user avatar
  • 4,636
-1 votes
1 answer
129 views

Why am I not able to resolve names on subnet behind a lab network?

I have gotten the task of setting up a network where there is an existing gateway for my "public ip" 10.200.3.2/28 already. I am to setup a gw/dhcp which uses the existing gateway the given ...
Danders's user avatar
0 votes
2 answers
354 views

Why do I have to specify the DNS server when doing a forward lookup?

I'm trying to set up a small, private DNS server. I'm using Bind9 and systemd resolved, netplan for managing the network. I've specified the DNS server in both the netplan configuration and /etc/...
sysad noob's user avatar
0 votes
1 answer
176 views

How can i fix source ports in BIND 9.16.xx?

The older cache DNS server in my team is configured with BIND 9.11.4; it uses 53 as the source port number. options { ... query-source port 53; ... } Meanwhile, the new one has BIND 9.16.23 ...
JYC's user avatar
  • 1
1 vote
1 answer
126 views

Bind rpz only gives max TTL of 5 seconds

When I configure BIND with response policy zone so I can override DNS for LAN network I have noticed that TTL returned by this DNS servers max out at 5 seconds. I can lower TTL to 1-4 seconds but ...
JKalousek's user avatar
0 votes
0 answers
26 views

Bind9 forwarded zones statistics

Is it possible to get a statistics count for forwarded zones similar to other zone types? I have the following definitions in my named.conf.local and am able to successfully make queries for both ...
Andrei_T's user avatar
0 votes
1 answer
108 views

Bind9 works internally and as forward but not reversing internet dns

I setup a Bind9 to be my network DNS. I'm using it as both a forwarder and an internal IP resolution. The problem is that I cannot reverse DNS from internet IPs. For example, I have a proxy server ...
Igor's user avatar
  • 13
0 votes
0 answers
31 views

Move Nameserver from crashed BIND servers (DNSSEC Enabled)

The situation basically is: The BIND servers that are authoritative for a domain crashed and are utilizing DNSSEC (Ie; I can't change the DNS entries for the zone), is it enough to have the registrar ...
questionanswer1133's user avatar
0 votes
0 answers
160 views

DNS configuration using bind9

I am currently encountering DNS configuration issues with bind9. I have installed bind9 and made the following adjustments to the configuration files: In the "named.conf.options" file, I ...
Linuxmodex's user avatar
1 vote
0 answers
152 views

ISC Bind bind to non-local IP

I need to get ISC Bind to bind to a non-local IP on Linux. I have net.ipv6.ip_nonlocal_bind=1 set but unfortunately Bind's bind code seems to treat listen-on-v6 as more of a whitelist of what ...
Scoopta's user avatar
  • 111
0 votes
0 answers
132 views

Disable IPv6 dbug logging in BIND

Using BIND on Arch. I have /etc/named.conf only containing include "/var/named/named.conf" where named.conf is: include "/var/named/named.conf.options"; include "/var/named/...
Err488's user avatar
  • 1
0 votes
0 answers
235 views

BIND9 on Ubuntu 20 - Cannot configure Zone to work properly

I installed it on Ubunto 20 and configured two zones Options config file acl internal { localhost; localnets; 192.168.70.0/24; 10.200.157.0/24; }; options { ...
Wism Esmel's user avatar
0 votes
0 answers
29 views

How to Forward an authorative zone in BIND between internal and public clients

I have a dns server authorative for my public records and my internal records , I want to forward a zone in my internal dns server so internal clients can access certain records without using the ...
John Adams's user avatar
1 vote
0 answers
76 views

How to forward subdomain DNS to Windows Server DNS while keeping the parent in local zone

I have a Bind9 (Ubuntu) as my primary DNS server in my lab environment and hosts zone files. I recently added Active Directory to the environment. My plan is to keep Bind9 as my Primary DNS and any ...
NaniK's user avatar
  • 11
0 votes
1 answer
254 views

bind9 multiple ports zone and dns64

When I add the zone it stops working. How can I use them together? I want to go to the zone "." via port 5353 And go to DNS64 via port 53 zone "." { type slave; masters port 5353 { ...
Abdulkader Alrezej's user avatar
0 votes
1 answer
291 views

Can't resolve private domains using bind9 with Wireguard VPN connection

I have a VPS with static external IP and Ubuntu 22.04. I configured the Wireguard VPN connection to my server tunneling all traffic through VPS. I also have UFW enabled. I want to resolve some domains ...
andryuhat's user avatar
0 votes
0 answers
88 views

How to stop bind to do a separate CNAME query again?

I have a local DNS server like the following: client -> bind (only handle local names) -> dnsmasq (handle other names) This problem is when a name is a CNAME, dnsmasq return both CNAME and IPs, ...
Hoping White's user avatar

1
2 3 4 5
47