Questions tagged [bind]
BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.
2,250
questions
0
votes
0
answers
30
views
Error Configuring DKIM on Bind BIND 9.9.4-RedHat-9.9.4-61.el7_5.1 (Extended Support Version)
I'm trying to configure a DKIM record on my DNS Server running BIND 9.9.4-RedHat-9.9.4-61.el7_5.1 (Extended Support Version), but I'm getting the following error:
10:36:40 ns1 named[14663]: db.domain....
0
votes
1
answer
32
views
Are IPv6 forward and reverse maps required if they match the ipv4 addresses when using bind9?
Using bind 9.18, my named.conf has something like this:
zone "my-domain.com" {
type master;
file "/usr/local/etc/namedb/master/my-domain.com.zone";
};
zone "32/29.114.115....
- 23
0
votes
0
answers
17
views
BIND 9 XML Statistics-channels build modification after server is already up and running
Migrating away from BIND to R53 and would prefer not to use the named.stats file for monitoring activity during the migration period. As such, I checked the current named.conf and verified no ...
0
votes
0
answers
18
views
postfix send for one lan onlyif have 2 eth
I have server ubuntu whit 2 network card and i want output 1 lan for postfix and dns, other lan for http ,dns, ftp etc. My configuracion is :
uname -a
Linux mail.domain.com 5.15.0-72-generic #79-...
- 1
0
votes
1
answer
44
views
Map subdomain to local IP through public IP
I want to map subdomain to local IPs on my machine to achieve a IP for each of my virtual machines.
I know I can setup a DNS on my own machine but that will only resolve the domain on my own machine.
...
- 3
0
votes
0
answers
25
views
Ubuntu Server Configure Bind9 DNS Server for HTTP request
I have configured a Bind9 DNS Server Forward Zone according to the code below. The way is configured, I only can do SSH using the server name <geoportal.geoint.lan>. I tried adding to the code ...
0
votes
0
answers
41
views
Bind forwarding doesn't goes right if using views
I have two server with Bind installed. One is a public dns for resolving domains I own. The other one is another dns that I'd like to use for my customers.
On the first one i set the forwarding to the ...
1
vote
1
answer
56
views
named-checkconf throwing error on previously functioning forward zone file
I wanted to add a zone to my bind9 configuration (BIND 9.16.1). I have about 20 domains serviced by this name server, most of which have worked for > 10 years.
named-checkconf is throwing errors on ...
- 71
0
votes
0
answers
83
views
Forward subdomain to another dns-server with dnsmasq
I have dnsmasq as main dns-server in localnet(192.168.0.14).
It's serve local domain 'example'. Also I have another dns-server(bind9 - 192.168.222.67) that serve domain 'virt.example'
Here part of ...
- 1
1
vote
1
answer
26
views
nsupdate works directly but not via openvpn
I can update my bind server with nsupdate when I start my script directly from the terminal. However when I start the script it from inside openvpn then I get a time out error:
Communication with 1xx....
- 11
0
votes
1
answer
106
views
rndc showzone returns "rndc: 'showzone' failed: failure" on valid zones
I am running BIND 9.18.12-0 on Ubuntu 22.04 and I have the following problem on more than one installation. I have even installed bind locally with a simple test configuration and I am still seeing ...
- 151
0
votes
0
answers
25
views
How to avoid duplicate entries in DNS Bind cache db file?
While running command "rndc dumpdb -cache" it has huge amount of data some duplicate entries like one domain has multiple entries with same target but different TTL, how to reduce like ...
- 1
0
votes
1
answer
95
views
macOS DNS resolve issue in internal network with Bind9 as DNS service
I'm using Bind9 as a DNS service to resolve some domain names internally. The topology is simple, with one router for all internal computers, and all computers using an internal DNS to resolve both ...
- 1
1
vote
0
answers
83
views
All of my DNS zones do not make it on the secondary, what is wrong?
I have a tool (ipmgr) to generate my zones (I had to manage about 35 of them, so that made it easier). All the zones are generated the same way, but one all misbehaves and the secondary DNS server ...
- 2,170
0
votes
1
answer
57
views
BIND DNS - DNSSEC on Internal Private Domain
Question regarding DNSSEC.
I have a internal private TLD eg. corp. Underneath that are multiple subdomains eg. region-a.corp, region-b.corp etc. And possibly underneath the regions, there are further ...
- 1
0
votes
1
answer
27
views
Bind service doesnt reply with local domain
My setup is the following
ServerA (vpn-server with 10.200.0.1) has a Bind9 service running on VPN ip range.
options {
directory "/var/cache/bind";
forwarders {
8.8.8.8;
};
...
- 478
-2
votes
2
answers
78
views
Block IP in DNS Zone File (Instead of Domain)
I'm using bind9 DNS server. I used to block websites using their domain name in RPZ zone file such as:
malicious.example CNAME .
But, I need to block IP rather than domain such as:
192.0.2.4 ...
0
votes
0
answers
60
views
How to resolve NXDOMAIN in centos using bind/named package
I am trying to configure DNS server on centos 7. I am following this link.
when I run dig -x 192.168.40.107 I don't receive any answers record. here is output
; <<>> DiG 9.11.4-P2-RedHat-9....
- 101
0
votes
0
answers
27
views
How do I know the key sizes of my Bind DNSSEC keys?
I set up DNSSEC on my private domain many years ago and unfortunately forgot all about it. Bind now tells me it's about to deprecate auto-dnssec in favour of dnssec-policy and I need to migrate my ...
0
votes
0
answers
18
views
Bind9 with delegation to MS DNS for sub domain
I am wanting to get Bind to answer for primary domain and then onpass queries for sub domain to MS DNS. I dont really want to try and get MS AD to use BIND :)
In Future in the back of my mind DNSSEC ...
0
votes
0
answers
51
views
rndc Zone transfer completed but where is the hosts file?
Good day
When I run the following command from slave
rndc retransfer example.com
(or rndc addzone example.com '{ type slave; masters { masterip; }; };') before it was created
the log returns:
...
- 109
0
votes
0
answers
17
views
iptables redirect IP from bind to another VPN server
I have a prefix /24 announced by Bind, and a VPN network connects my server from home.
Now assume I announced 1.2.3.0/24 to the network, my VPN network prefix is: 192.168.3.0/24
I am trying to use ...
- 1
0
votes
0
answers
231
views
are comments in Bind zone file visible to anyone who can access the view
I just implemented zone transfer restrictions (IP plus tsig key) on my bind server. I assume this should mean that the entire zone contents are not accessible by anyone anymore, correct?
If I place ...
- 181
-2
votes
1
answer
77
views
Bind: (Reverse) zone not loaded due to errors
Using Ubuntu Server and bind9...
Here's the error:
enter image description here
Direct zone:
enter image description here
Reverse zone:
enter image description here
Named.conf.local:
enter image ...
-1
votes
1
answer
64
views
Bind Dns server stopped working after Ip change
So, I have changed my server location from US to Lithuania and my server stopped working
I can connect to my db and virtualmin but only with my IP
/etc/bind/named.conf:
include "/etc/bind/named....
0
votes
1
answer
93
views
bind dns zone notify with multiple view
I experienced some difficulties with zones from what should have been an internal view (with RFC1918 addresses plus public IPv6) leaked to the external view (public IPv4 plus public IPv6). I think I ...
- 181
0
votes
0
answers
40
views
Name server does not have direct parent zone information?
I'm curious about this error that comes up in an online DNS report, and unable to find information about how I might fix it:
Direct Parent Check: The Parent DNS Server [ns1.xxxxxxx.org.uk] does not ...
- 472
0
votes
0
answers
49
views
xml2 Ubuntu equivalent on centos / Rocky
I am setting up monitor for bind service on Rocky Linux.
I need to parse xml output of bind statistics.
On ubuntu I can run the next command and get valid output
root@ubuntu:~# curl -s 172.19.0.30:...
1
vote
0
answers
177
views
Client Listening on 0.0.0.0 when custom network interface doesn't exist?
I'm facing an issue in our environment where I'm starting a ServerSocket (Java), and configuring it to listen on 0.0.0.0.
Then I'm creating a network interface, and my client is attempting to connect ...
0
votes
0
answers
174
views
Bind9 works properly but I can’t ping names from the DNS server machine
I have the machine dnsserver with the bind9 service in domain ent.com. I also boot other machines: firewall and webserver. All machines are operated by Ubuntu-server-22.04.
I’ve configured these files:...
0
votes
0
answers
204
views
docker bind mounts sometimes empty
I am using a docker container with this definition:
webserver:
image: ghcr.io/paperless-ngx/paperless-ngx:latest
volumes:
- /srv/dev-disk-by-id-ata-...
- 1
0
votes
0
answers
183
views
Bind9 server random query failed (timed out) error
i used bind 9.18.1 on Ubuntu 22.04.1.
Some clients have an error while answering their queries.
53 port is open.Already most of the time it returns queries successfully
in query-errors.log ;
05-Jan-...
0
votes
1
answer
209
views
Setup split DNS to external CNAME when resolving within an internal CoreDNS?
I have an internally hosted DNS resolver via Core DNS running on my network. Everything is great aside from one thing, which is I cannot load my apex domain when connected over VPN. The reasoning is ...
- 1
0
votes
1
answer
180
views
How does one query the resolver name of a DNS server?
The Shodan search tool, for some DNS servers, shows a Resolver name value for what it finds on UDP port 53. For example, 80.82.117.140 shows Resolver name: server402.xenserve.com and 103.81.27.118 ...
- 180
0
votes
0
answers
33
views
Bind does not start on a DC Samba 4. What to do?
I'm migrating a Samba DC that uses Bind9, but when I try to start Bind on the new DC, a permission error is displayed. Reading some links I saw that the apparmor can be a problem, however it is not ...
- 17
0
votes
0
answers
167
views
Bind on cifs filesystem overmounts when using `mount -a`
I am using following cifs mount and bind:
//myfiler.example.com/share /mnt/mount-path cifs vers=3.0,credentials=/root/.cred,gid=0,uid=0 0 0
/mnt/mount-path/folder-in-share /mnt/archiv ...
- 101
0
votes
1
answer
169
views
Bind9 one spf record for all zones
I want to create one include with SPF IP address to be used from all dns zones in my server. Can you suggest me how to do it? I work on BIND9. Thank you.
0
votes
0
answers
149
views
Bind9 named recursion only for local zones
I try to configure bind9 as an authority server for several domains.
Entries of some domains are CNAME of another domain.
/etc/bind/named.conf
options{
dnssec-validation no;
directory "/var/...
- 1
-1
votes
1
answer
73
views
bind9 with mysql dlz start failed with Required token $zone$ not found
bind 9.16.33 with mysql dlz start failed with Required token $zone$ not found.
detailed informations:
$ sudo named -d 0 -g
07-Dec-2022 14:54:31.043 starting BIND 9.16.33 (Extended Support Version) <...
- 1
0
votes
0
answers
33
views
Bind9 forwarding with client-side query evaluation
We have a bind9 (version 9.18.4-2) DNS server called ns1.home.arpa at 10.100.200.1 running on Debian which acts as our primary DNS server for multiple local subnets (10.100.0.0/16 and 10.200.0.0/16) ...
- 101
-1
votes
1
answer
73
views
How to turn on safe search using bind 9 without rpz
is it possible to enable safe search using bind9 without rpz?
The point is I don't want to get nslookup results like this image
enter image description here
Because it shows that what is being ...
- 1
1
vote
2
answers
110
views
How do the TLD DNS servers handle so many zone file updates?
I've always wondered how the DNS infrastructure for (say a .com) TLD is designed. It must not only be able to maintain a high level of reliably, but also support high amounts of real-time updates to ...
- 71
0
votes
0
answers
176
views
Is it possible for a PDNS authoritative server , to reply to any queries, irrespective of zone file
I have a powerdns-recursor name server, which forwards, the queries to a powerdns authoritative name server, based on the requesting client IP.
The authoritative server, uses a remote REST API backend,...
- 11
-1
votes
1
answer
336
views
Can a DNS server accept queries from both IPv4 and IPv6 clients?
I have a remote BIND9 server with an IPv4 address that clients use for their DNS queries. This is mainly a forwarding server where most queries get forwarded to Google’s DNS servers. This works ...
- 119
0
votes
0
answers
182
views
Bind9 unable to resolve external nameserver
I have set up a DNS Server within my company's LAN.
Local nameservers works correctly, however those outside such as google.com are not resolved...
By running dig google.it I get this result:
; <&...
- 1
0
votes
1
answer
248
views
Bind9 Returning SERVFAIL for custom Zones
I'm trying to setup a DNS-Server for my Domains using Bind. The Server behaves correctly for noncustom Domains like google.com or github.com, but for my domains it always returns "SERVFAIL". ...
- 103
0
votes
1
answer
100
views
PTR registers for CNAMEs
In my bind9 DNS server, I have my servers described like this:
[...]
prd1frm201 IN A 172.21.10.2
dns IN CNAME prd1frm201.kprd1.
ntp IN CNAME ...
1
vote
1
answer
80
views
BIND auto-dnssec is signing records with ZSK and KSK
I'm doing a rollover of my KSK and ZSK (concurrent with a server transfer) and BIND (version 9.16.23) has started causing problems for me. I have the following keys in my directory:
; Kexample.ca.+007+...
- 912
1
vote
1
answer
232
views
Configure BIND with no local domain or forwarder - just root servers
I'm coming from Windows.
As soon as DNS Server role is installed, Windows downloads list of "Root Servers", sends the query to one of them and caches the response for further use. There's no ...
- 173
0
votes
1
answer
337
views
BIND9 local reverse lookup with public IPs - is the setup broken or is the setup faulty?
We are having a prelaunch-site to test DNS (and other services) before going hot.
I've never involved public IPs here previously and it may not work as I've intended. We have a /29-net from our ISP ...
- 11