Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
11 views

DNS Monitoring Tool Bind9 or Powerdns Monitoring Tool (Open Source) [closed]

Hello guys hope you all fine kindly suggest me any good monitoring tool for DNS monitoring, Tool should monitor Query per second, Query types, query fail, drops, and other important things related to ...
user avatar
-1 votes
0 answers
22 views

Getting SERVFAIL / NOTAUTH on Zone Transfer - ISC BIND 9

I have two BIND servers running BIND 9: BIND 9.11.36-RedHat-9.11.36-3.el8 (Extended Support Version) <id:68dbd5b> running on Linux x86_64 4.18.0-372.9.1.el8.x86_64 #1 SMP Tue May 10 08:57:35 EDT ...
user avatar
  • 11
-1 votes
0 answers
12 views

Bind9 DNS rate limit or QPS optimization

Hello everyone hope you all fine, I am working on DNS bind on centOS 7, need to optimize, in our environment currently 30000 to 40000 qps checked by dnstop command, at peak hours DNS start dropped ...
user avatar
0 votes
0 answers
16 views

Failed to start Berkeley Internet Name Domain...S). Centos7

I'm new to linux environment and trying to build a web hosting server for my few webistes. But my name servers are not pointing towards my server. I red many articles on many forums and used this ...
user avatar
-1 votes
0 answers
20 views

BIND9 installed on CentOs security points

Hope you all doing Well. Actually we are running a DNS servers on CentOs using BIND9, they are recursive/authoritative. My question is any way to filter/Stop/Limit DNS query based types like (TXT, ...
user avatar
0 votes
0 answers
18 views

Bind9 - cache all forwarded queries for a while

My servers was keep asking similar dns queries to 8.8.8.8 and it cost around 30 ms every time. So that I have installed a Bind server and forwarded all dns requests to 8.8.8.8 like this: zone ".&...
user avatar
0 votes
0 answers
10 views

How to configure bind9 for forwarding some of domains?

I have a list of domains. I want the DNS queries of domains in the list being forwarded to 8.8.8.8 and other domains being resolved by bind9. How can I configure bind9?
user avatar
  • 101
0 votes
1 answer
24 views

bind9 docker container doesn't start after changing named.conf.options

I started docker bind9 container using ubuntu/bind9 image. but after changing a line of /etc/bind/named.conf.options it won't start.how can i change configuration while it won't start? here is my ...
user avatar
  • 5
0 votes
1 answer
15 views

BIND9 how to have 2 reverse resolutions for 2 different domains

I have one server Bind9 and 2 different domains. I'ld like to have reverse resolution for each domain. I've tried this configuration below but I get the error in named-checkconf : /etc/bind/named.conf:...
user avatar
  • 3
-2 votes
1 answer
23 views

FQDN as a Forwarder in BIND [closed]

My provider is changing his DNS infrastructure and we have to change forwarders IP to fqdn (Bind). Is there any option to handle that kind of change?
user avatar
0 votes
1 answer
32 views

How to log verbose details about DNS update queries in bind

Is there any way to log failed DNS update queries with Bind 9 (9.16.22 on Debian) in a more verbose format? I tried all logging categories and found update messages in an update-security one. But ...
user avatar
  • 1
0 votes
0 answers
38 views

Centos - Unbboud and URIBL_BLOCKED blacklist

I am facing the following problem: My websites have contact forms. People reach out to me via contact form. I receive 1 email after every contact form sent. Since about 1 week Ms Outlook is marking my ...
user avatar
  • 329
0 votes
1 answer
31 views

What does 0.0.0.0/0 mean?

For example in an 'allow' statement in BIND or in Chrony config files. Does allow 0.0.0.0/0 mean allowing any clients or allowing no clients? My question isn't about the specific programs, but just ...
user avatar
  • 185
0 votes
0 answers
11 views

how to implement edns client tagoption code

I've been searching for edns and found these documents. They mention something called client tag and server tag. Is there any way I can implent those tags? Here is my use case: Our product teams have ...
user avatar
0 votes
0 answers
10 views

how to disable additional section for rpz domains in bind 9

Bind 9 with RPZ implementation, returns the SOA details of RPZ zone under additional section, when a domain is restricted through RPZ mechanism and this can lead to leakage of information. Is there a ...
user avatar
0 votes
0 answers
22 views

Cloudflare not resolving adobe.com?

in my setup, a local Bind9 server forwards DNS requests to Cloudflare (1.1.1.1) with DNSSEC activated. My syslog shows many timeout entries for well known domain names (like adobe.com): Apr 28 19:39:...
user avatar
  • 239
0 votes
0 answers
12 views

DS requests sent to Cloudflare for internal TLD

I created a Bind9 configuration to provide DNS entries for an internal TLD. Bind9 uses Cloudflare as forwarder: options { directory "/var/cache/bind"; dnssec-validation auto; ...
user avatar
  • 239
1 vote
1 answer
28 views

BIND - list of forwarders used on several zones

I am setting up a BIND (v9.16) nameserver. Its main purpose is to work as a regular recursor for our internal hosts. For a couple of specific zones though (the ones that we host), I need to set it up ...
user avatar
0 votes
1 answer
17 views

Bind DDNS change receiving `update failed: NOTAUTH`, how to fix that authorization issue?

I have the following zone definition: zone "madetoorder.software" { type master; file "/var/lib/bind/example.com.zone"; allow-transfer { trusted-servers; }; check-names ...
user avatar
  • 1,952
0 votes
0 answers
31 views

IPTABLES rule in DNS rec running bind

We have 4 DNS Recursive server and 2 authoritative server all of them running CentOs7 and Bind. So we authorize only DNS 53 port for the anycast interface in rec servers. For iptables we found this ...
user avatar
1 vote
1 answer
17 views

Bind mount ONLY if Samba mount is present? (Ex: BIND MOUNT Requires NFS Mount \\172.16.x.x\files... )

I have a mount with SAMBA using the following in fstab: //source/files /mnt/files cifs user,_netdev,cache=none,credentials=/usr/src/access.smb 0 0 And then i have the following mount --bind line: /...
user avatar
0 votes
2 answers
47 views

reverse DNS (bind) for single ip/machine on non-private network

I have a simple problem: my DNS does not answer a reverse lookup of my public ip address (e.g. 11.22.33.44) correct ... it just answers SOA and NS (taken from SOA record), but no PTR (additional extra ...
user avatar
-1 votes
1 answer
47 views

Setup bind9 dns for setup DKIM and SPF records [closed]

Currently emails from my mail server is blocked by gmail. I want to setup DKIM and SPF records for my mail server.But web domain register doesn't allow me to setup DKIM and SPF records it says I need ...
user avatar
  • 1
0 votes
1 answer
30 views

force mysqld to use etc hosts for reverse lookup

I have a server hosted by hetzner running mysqld. I already setup some "ddns for poor ones" to add my dial-on IP (Telekom) to the server's /etc/hosts. Now all Users in mysql are limited to ...
user avatar
0 votes
1 answer
46 views

Achieving high DNS QPS throughput

I'm trying to find the maximum QPS (Query Per Second) of the DNS Resolver VM. We have our infrastructure hosted on Azure, having a VM (bind based) acting as a resolver querying Azure native DNS (168....
user avatar
  • 101
0 votes
2 answers
68 views

Configuring BIND9 (ver 9.16) to allow TXT DNS updates from Letsncrypt

Solution to the below problem: Use $ddns-confgen or $tsig-keygen, the former provides you with the syntax to paste into your named.conf file Problem: I am trying to configure a BIND9 (ver9.161-Ubuntu) ...
user avatar
  • 1
0 votes
0 answers
79 views

Bind9 Response Policy Zone (RPZ), does not work on clients

On my single DNS server, bind9 (version 9.11.5-P4-5.1), I have configured a Response Policy Zone (RPZ) to block certain domains. The IP of the DNS server is 192.168.1.5 Now I am going to put the ...
user avatar
-1 votes
1 answer
109 views

DNS record with multiple IPs + 512 bytes UDP limit

I had a DNS record (ex: test.example.com) pointing to a single IP: test.example.com IN A 192.0.2.1 Working fine. Now I have +30 IPs answering for it, example: teste.example.com IN A 192.0.2.1 teste....
user avatar
  • 131
0 votes
0 answers
74 views

#ASK Reverse Zone: Server Can't Find .in-addr.arpa : NXDOMAIN

I figure it out about reverse zone, so I already config my local DNS with this simple config: 1. named.conf.options acl internal { 192.168.1.0/24; // data 192.168.2.0/24; // data ...
user avatar
0 votes
0 answers
186 views

Bind9 unable to listen on any configured interfaces

im trying to configure a DNS Server on a VM (VirtualBox). OS is Ubuntu 18.04. I used netstat -tulpn and no port were being used. Can anyone help me? Error: ● bind9.service - BIND Domain Name Server ...
user avatar
  • 1
0 votes
1 answer
61 views

Internal DNS with BIND, how to resolve one IP address differently?

I have an internal DNS (it is completely internal, ie. the network is not connected to Internet) for a group of networks. They are set up as follows: Each network has a different address range of 10....
user avatar
  • 392
0 votes
2 answers
34 views

What commands can I use to simulate letsencrypt adding the TXT field to my server?

I'm trying to debug my DNS setup for the letsencrypt challenge. I understand that BIND9 may not be receiving the requests, although it was earlier in the day. The .jnl does not get created, ...
user avatar
  • 1,952
0 votes
2 answers
52 views

How can you de-couple DNS server from the AD Domain Controller?

I have an environment where Active Directory Domain Controllers host their own DNS domains (as is common). However we are trying to separate DNS and host it on a standalone server (to eventually move ...
user avatar
  • 185
0 votes
1 answer
105 views

BIND 9.16 dnssec-policy default is not automatically renewing keys

Three months ago I upgraded my DNS servers to BIND 9.16 (currently running 9.16.25) to take advantage of the new dnssec-policy default option which would allow me to easily run DNSSEC for my domains. ...
user avatar
0 votes
1 answer
37 views

How will requests to DNS servers be processed?

I plan to move the external ns zone outside the country, 3 entries at the domain registrar will indicate external addresses(outside the country) and 1 entries will indicate my local ns(inside the ...
user avatar
0 votes
1 answer
36 views

Wildcard Use in Bind Records to Match some Subdomains

I have a main domain ( aa.example.com) with hunderds of subdomains ( bb.aa.example.com). I made a wildcard record to forward all subdomains (bb.) to a list of addresses in round-robin fashion. The ...
user avatar
0 votes
0 answers
12 views

Additional Bind caching nameserver next to domain controllers

In an environment where I already have two domain controllers acting as name servers I would like to run the Bind cache server installed on Ubuntu 20.04.3 LTS to act as nameserver for specific hosts. ...
user avatar
  • 1
0 votes
2 answers
36 views

zone file error and named does not start

we have deployed a new zone on our dns : named.conf for the new zone (like others) zone "db.0.30.10.in-addr.arpa" { type master; file "/etc/named/...
user avatar
0 votes
0 answers
29 views

/etc/bind/rrset-order: order 'fixed' was disabled at compilation time

How do I recompile bind9 so that I can enable rrset-order fixed? /etc/bind/named.conf.options:9: rrset-order: order 'fixed' was disabled at compilation time My OS is Ubuntu 20.04 It said I need ...
user avatar
0 votes
1 answer
32 views

Bind9 resolve based on server's (own) IP address requested

I have a bind9 DNS server with two (2) IP addresses assigned on it. Let's call them IP#1 and IP#2. I need a way to know which IP address the clients are using and respond with different results in ...
user avatar
  • 101
0 votes
0 answers
30 views

BIND and RD flag, why does it bypass RPZ?

Im running BIND for testing, and here is a part my RPZ: example.com IN CNAME . ; local block against example.com *.example.com IN CNAME . ; local block against ...
user avatar
  • 77
0 votes
2 answers
64 views

How to disable reverse DNS lookup in Apache 2.2 or in recursive bind

I would like to stop Apache (2.2) from doing reverse lookups for client IP addresses. I have HostnameLookups Off and LogFormat "%h %l %u %t %V \"%r\" %>s %b \"%{Referer}i\"...
user avatar
0 votes
1 answer
29 views

I need an explaination as to what is happening when I change the zone file of a DNSSEC enabled domain

I recently moved our hidden DNS master service to a new host, DNS38. The original master service is still running but is not being polled at the present time. The old master, and all the ...
user avatar
0 votes
1 answer
49 views

Bind9 with dyndns refuses to update one zone, works OK on another with the same key

I have a Bind9 server (RHEL 8.5) in my lab that was working perfectly fine until a couple of hours ago. Then, it stopped updating one of the 2 zones for which I have setup dynamic DNS. The example.com ...
user avatar
0 votes
1 answer
57 views

Make special query log for a certain zone bind9

How do I make special query log file from a certain zone. While my current log config is logging { channel query_logging { file "/var/log/named/query.log" versions 5&...
user avatar
0 votes
1 answer
30 views

need Bind9 architecture advices

i need your advices for a DNS architecture. This schema describes the DNS architecture as i think to build: DNS architecture In my company, every desktops/laptops are configured with DNS of the LAN (...
user avatar
  • 1
0 votes
1 answer
28 views

Recursive Bind DNS server working in the cloud, but not in VM

I'm using ansible to bring up an identical server in the cloud, as well as in a VM (Virtualbox) on my workstation. The instance uses a non-public-facing recursive Bind DNS server to cache queries and ...
user avatar
  • 435
0 votes
1 answer
50 views

Difference of Dynamic DNS and Change Zone Automatically by Program

I know DDNS is translating Dynamic IP (IP which always changes in a device) to a Domain, but I don't know how the story behind it or I don't know how does it work. I'm using bind9 as DNS server, we ...
user avatar
0 votes
0 answers
62 views

Bind timeout and ICMP reply port unreachable

This days i got a strange behavior in my network/bind server. Each 20/30 minutes and lasting about 5 minutes i got 'timeout' in bind querys. After that time everything works fine again. My bind server ...
user avatar
  • 1
1 vote
2 answers
93 views

Bind9 allow zones only as part of recursive resolution

In my cloud environment, I have a bind9 server functioning as a proxy for all outgoing DNS queries generated in the environment. I'm currently trying to configure Bind to perform the following ...
user avatar

1
2 3 4 5
44