Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

1
vote
1answer
16 views

Bind, force zone update on slave

I have two test servers master and slave: Master is updating slave but very slowly. How to speed this up. Master (192.168.0.122) /etc/named.conf zone "domain.com." { type master; file "...
0
votes
0answers
18 views

How to set TXT TTL to 1

I am trying to verify my domain ownership to Let's Encrypt by adding a TXT record to mydomain.zone located in /var/named. Let's Encrypt wants me to add it with a TTL of 1 second. However, I find no ...
1
vote
2answers
7 views

'query_getzonedb()failed: Zone Not Loaded' error in DNS logs

While investigating an incident, I noticed an error in my syslog that looks like this (anonymized): Feb 3 21:59:59 ns1 named[18824]: client xxx.xxx.xxx.xxx#2091 (us-east1-aws.api.snapchat.com): view ...
0
votes
1answer
17 views

What's the expected behavior with BIND slave that's been offline for some time?

We have a situation where a BIND slave server was not able to write any zone data to the file system. When this server was rebooted and BIND restarted it started with an older version of the zone ...
-1
votes
0answers
25 views

Forward a public zone inside a view from a private BIND

I have a private BIND server with three views in order to match DNS clients according to their source IP address. One of these views is just to forward the queries for "teamviewer.com" to another ...
-1
votes
1answer
20 views

Bind9 DNS does not work Ubuntu 18.04

I can't get my BIND9 server to work for internal name resolution. My clients always get an external IP back. I guess the internal fails and I get redirected out and someone has homenet.com for ...
-1
votes
2answers
17 views

Not receiving “Fixed/Ordered” query response

We are testing a query: FQDN: test.example.net Query Type: AAAA Client > DNS A > DNS B Simplified DNS query flow: Client queries test.example.net -t AAAA Query goes to DNS A which then forwards ...
1
vote
1answer
19 views

centos7 - named starts manually, but systemctl reports timeout

named starts and runs fine if I start it manually ("/usr/sbin/named -u named"), but when I start it with systemctl, it fails: # systemctl start named Job for named.service failed because a timeout ...
2
votes
1answer
29 views

Bind: Overwrite one host of foreign domain [duplicate]

Our customer has a domain. Let's call it example.com. We are running a VM in the network of our customer. Let's call it "our-vm". The customer is accessing the vm with this name: our-vm.example.com. ...
0
votes
2answers
31 views

Windows 7 and two BIND9 nameservers

The setup: Two BIND9 nameservers (running on Debian 9.6) Windows 7 workstations as DHCP clients, the two nameservers acquired via DHCPD (option domain-name-servers 10.0.0.1, 10.0.0.2;) Now, at least ...
0
votes
0answers
19 views

BIND Error on AWS - No Authorative DNS Response

We have recently setup and new EC2 Instance on AWS and are running WHM on the server. I can Ping the server and do the required, but cannot get the NS to register with the domains. the DIG give me the ...
2
votes
1answer
54 views

BIND DNS rate-limit: qps-scale understanding

I have a few questions concerning qps-scale and how it is used when rate-limit option is used in BIND. Referencing: http://www.zytrax.com/books/dns/ch7/hkpng.html#rate-limit and https://ftp.isc.org/...
0
votes
1answer
28 views

DNS server with bind in Debian 9

I have a project to do for college. The project is a DNS server with client. I created the DNS server but when i want to see how it works i use the command dig myservername. 1. How can i proceed to ...
-1
votes
1answer
39 views

Authenticating DNS Queries

Is there any way to use a TSIG (or other) key in combination with a DNS query to authenticate into a DNS view for use with recursion? Something like: key trusted-key { algorithm HMAC-SHA256; ...
-1
votes
1answer
32 views

DNS Spoofing in Bind9 DNS Server

I configured Ubuntu Server 18.04 as a master DNS server. zone ==> google.com ; ; BIND data file for local loopback interface ; $TTL 12h @ IN SOA ns1.google.com. root.google.com. ( ...
1
vote
1answer
40 views

Can isc-dhcp-server update bind running on a non default port?

I'm running the following on the same server: pi-hole, bind9, isc-dhcp-server and cloudflared (for DNS over HTTPS). The order goes like this: Pihole:53 -> Bind9:54 -> cloudflared:5353 I'm now ...
-3
votes
2answers
71 views

How to use nameservers instead of A name record in bind

Sorry if my question is wrong, Suppose I have a domain called ab.com and I want to use nameservers instead of A record using bind DNS, how can I achieve it? For example, Namecheap Domain Panel:- ab....
0
votes
0answers
25 views

(BIND9) Domains within certain Zone stop resolving randomly / intermittently

I've been stuck for a while with an error related to bind9 and particular domains within a zone. Sometimes the resolution of one or more random domains within the zone ("errorzone", let's say) stops ...
0
votes
2answers
40 views

Bind - Resolve two domains with a single server

I need a bit of help with BIND (Centos 7.5) Bit of a back story: We are running two domains on the network. One called company.domain.com and one called comp.domain.com company.domain.com has ...
0
votes
1answer
28 views

Exclude a single record from DNSSEC - is it possible?

In a domain running DNSSEC, is it possible to exclude a single record from DNSSEC? For example, would it be possible to have mail.example.com running DNSSEC, but www.example.com not running DNSSEC? ...
2
votes
0answers
26 views

Should (or can) master and slave DNS servers have different RRSIG entries?

I've just configured DNSSEC on my master DNS server and in testing with dig from each server to the other, I found that while each server had RRSIG entries they were different. Is this expected ...
0
votes
1answer
55 views

The `zones.rfc1918` file for Bind9 and other 'good practice' for the Ubuntu 18.04 era?

I am setting up Bind9 on Ubuntu 18.04 and found this SF article for Ubuntu 10.04: What is the point of the zones.rfc1918 file for Bind9?, with a comment citing documentation from Penn State in 1996. ...
2
votes
0answers
28 views

BIND logging - general vs. unmatched

The BIND9 Administrator's reference manual states that the general category is "the catch-all; many things still aren't classified into categories, and they all end up here." On the other hand, the ...
1
vote
0answers
61 views

Setup DNS Forward Server to forward only specific domains

I want to setup DNS Forwarding Server to forward DNS resolution requests for only specific zones. I am using the following config. acl "trusted" { localhost; 10.x.x.x/24; }; options ...
-5
votes
1answer
86 views

Why does my VPS have a default domain name? [closed]

I have purchased a new VPS with a dedicated IP address. I noticed that its hostname is something like vmi223344.example.net. I then was able to access the Apache server by browsing http://vmi223344....
2
votes
3answers
71 views

Block any query in BIND

I've been trying to block ANY queries in my BIND server with no success. I followed this post Block ANY request in Bind which says that I can use minimal-responses but it doesn't work. None of the ...
4
votes
1answer
112 views

bind9 DNS server and virtualhosts apache2: getting to work multiple virtualhost like foo.myenterprise.com

My goal is to host various sites (local virtualhosts) on my apache webserver in the LAN of my enterprise (Debian 9 server). So that: openproject.myenterprise.local => /opt/openproject wiki....
1
vote
1answer
76 views

Bind, common zone on views possibilities

Hi I've created 3 bind server for public resolution (authoritative). i got 3 view : World (with an Any acl) East-Asia (with a GeoIP acl) Internal (for internal IP) i would like to share some ...
1
vote
2answers
75 views

Advertising as DNS server

I have a DHCP and DNS server running from BIND on CentOS 7. Clients (Windows and Linux) automatically DHCP to the CentOS server and everything works hunky-dory. However, the only way DNS works is if ...
1
vote
1answer
85 views

Resolve specific Domain query using View in BIND9 (Forward)

I am trying to setup a whitelisted domain forwarder in my bind9 but it wasn't successfully accomplish maybe due to the configuration that I applied. A couple months ago, I did setup the same ...
0
votes
3answers
104 views

BIND - DNS Reverse zone : No current Owner

I'm doing a internal test (Centos 7 Virtual) about how to setup a DNS server. Using bind i had no problem to get a named-checkzone -D with an OK syntax at the end. but when i'll try to get the ...
0
votes
1answer
38 views

BIND doesn't seem to be fowarding properly

I'm trying to use BIND as a forwarding server to two different DNS. When querying example1.example.local I receive an IP but when I query example2.example.local, It can't resolve it. When I directly ...
0
votes
2answers
35 views

Different PTR record resolve in DNS my DNS server and the public DNS server

I have created a PTR Record for Mail matters on my DNS server which can be seen as public. But after a day it is not recognized by mxtoolbox.com. I have checked every possible syntax errors but there ...
3
votes
1answer
202 views

Edgerouter DNSmasq send updates to BIND

TL;DR: How do I configure the Ubiquiti EdgeRouter, running DNSmasq or DHCPd, and NSupdate, to send its DHCP leases to a central BIND server? I have a system comprised of a few Ubiquiti EdgeRouter X's ...
1
vote
2answers
229 views

Can BIND setup with only A names and fully qualified host names work properly?

I recently came across a zone file for BIND which used only Address records with fully qualified domain names for each IP. Example snippet: subdomain1.example.com. IN A 192.168.1.10 subdomain2....
0
votes
2answers
59 views

List dynamically added DNS records

I can't figure out how to list dynamically added DNS records. Lets say I add a record like this: ~$ nsupdate > update add test.domain.com 3600 A 1.2.3.4 > send After this I can look up the sub ...
4
votes
1answer
182 views

PTR not showing in dig request

I am trying to set up a PTR for reverse DNS so that mail that gets sent from me scripts doesn't get blocked due to reverse DNS failure. I beleive my zone is set up correctly, however me "thinking" it'...
5
votes
2answers
67 views

Malware DNS A record points to my ip address

I've used BIND for about ten years but am by no means an expert, at all. Having said that, I just wiped my VPS due to a crytomining malware infection. While I was getting BIND set back up I noticed ...
-3
votes
1answer
98 views

Reverse DNS works on our Bind9 server, not anywhere else

Up until a couple of days ago, our reverse DNS for our class C IP space was working fine. Now, other mail servers are reporting that they cannot find the RDNS response for the IP address of our ...
6
votes
1answer
323 views

Exposure of hidden-master stealth DNS server on public-facing authoritative slave

In a typical hidden-master DNS network layout, there are basically two components: Hidden master DNS server, may be behind a NAT or firewall, or be totally exposed Slave authoritative non-recursive ...
2
votes
1answer
51 views

BIND9 - How to change ZONE-Info on secondary NS if primary is down?

I have a primary (master) and a secondary (slave) BIND9 DNS on DEBIAN9. See full config here: old Post root@server1:/etc/bind# named -v BIND 9.10.3-P4-Debian <id:ebd72b3> On my secondary NS (...
-5
votes
2answers
250 views

Disable root servers in bind [closed]

I installed a simple bind server on fedora 28. By default dns-queries for which it has no answers are sent to the root servers. However I want them to go to the openDNS servers. I have removed the ...
1
vote
0answers
97 views

opendkim on lokal net not working

I have a assignment in school to setup bind9, postfix, spf, dkim and dovecot on the same machine for the address mcduckcorp.duckburg.cali on a Debian 9 OS. I have managed to setup bind9, postfix and ...
1
vote
2answers
83 views

External DNS to manage Domain // Ways to test the own external DNS server

i have several domains at Strato. I want set up my own external DNS to manage my domains. To do this at Strato I used the option "Domainverwaltung: NS-Records ändern". I had to provide 2 Nameservers ...
0
votes
3answers
73 views

Delegating only a third level zone (a.b.example) to CloudFlare

I am in the process of trying out CloudFlare. I host my own DNS (b.example), and I have created a distinct third level zone (a.b.example). I put glue records in the b.example zone and setup the a.b....
1
vote
0answers
32 views

Why does my Bind RPZ config work for one host, but not the other (SERVFAIL)

I have some hosts in a DMZ which need to use LDAP resources on the LAN. We don't forward DNS into the LAN, so instead of adding entries in individual /etc/hosts, I decided to try a Bind RPZ zone to ...
-1
votes
1answer
40 views

How can I prevent BIND from sending “Authoritative answers can be found from:”?

Here is an example from performing an nslookup from a Unix server (IPs and domains all fake): $ nslookup > set type=srv > _kerberos._tcp.example.com Server: 192.168.1.100 Address: ...
5
votes
1answer
151 views

Large AXFR through dnsmasq causes dig to hang with partial results

I'm attempting to set up dnsmasq as a local cache for consul. While this seems to work fine for normal digs, dnsmasq seems to only allow partial zone transfers. My resolv.conf: search x.domain.com y....
2
votes
0answers
94 views

Bind forward zone stopped working after upgrade to 9.13.4

I am running a BIND9 at a network edge. All internal clients query this server, requests should be forwarded to external DNS-servers except if it's for an internal domain. The latter should be ...
3
votes
1answer
393 views

bind: loading from master file failed: file not found

So I'm kinda a newbie and I'm following this to connect a domain to my server. here is my codes: named.conf.options: acl "trusted" { 124.243.241.164; 124.243.241.164; 124.243....