Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

How can I use bindfs with macfuse to create a bind mount on MacOS? (or any other way of presenting a tree at another path on the filesystem)

I'm attempting to replicate a linux file tree for the MacOS systems on my network. I've come across macFuse to expose bindfs, but I'm unclear on what I would need to do for this to work, since it ...
-1
votes
0answers
17 views

REST API for recursive queries [closed]

I have ~700k (and growing) domain names that should be resolved daily. I'm trying to make it efficient as possible using the recursive BIND server (do you know a better option?), the goal is to get ...
0
votes
0answers
32 views

Bind9 completely stops responding to queries

Due to a massive number of requests on each of the application servers (sending a few thousand api calls each second to a few hundreds domains) I've decided to install Bind9 on each app server as a ...
-1
votes
0answers
17 views

Bind9 multiple interfaces

I was wondering if the following question is possible I have a website that runs on nginx and I have a bind server on that same machine that redirects certain domains to that website This machine has ...
-1
votes
0answers
22 views

FreeIPA/IdM - delegate subdomain to separate BIND server

I've attempted to follow the instructions in these ariticles, along with a 3rd article in Red Hat Solutions. They all pretty much say the same thing, as far as steps to follow: Setup your subdomain's ...
-1
votes
1answer
24 views

Nginx redirects www but no non-www

I've configured a DNS server with Bind9 in a server with 192.123.100.251 IP adress with the following configuration: named.conf ========== include "/etc/bind/named.conf.options"; include &...
-2
votes
0answers
18 views

bind9 master transfer to hidden master

--------------- ------------------- ------------- | BIND9 | transfer to hidden | BIND9 | transfer to slave | NS1 | NS3 | | (OT-master) | -------...
-2
votes
2answers
72 views

bind9 separated zone file for *.sub.domain.com

I want to create sub subdomain that are only visible from my private network. My named.conf.local looks like this: acl internals { 127.0.0.0/8; 192.168.1.0/24; }; view "internal" { ...
-1
votes
1answer
17 views

bind9 takes a long time before forwarding a query

tcpdump says: 1619344994.943919 IP (tos 0x0, ttl 63, id 39270, offset 0, flags [DF], proto UDP (17), length 54) 10.107.2.10.52446 > 10.107.3.4.53: [udp sum ok] 7139+ A? censored.de. (26) ...
0
votes
1answer
29 views

Bind9 forward top level domain

Hi all just starting working professionally with bind9 and dns, say I have an AD/DC server (with dns) running on internal.com but my bind9 is authoritative for sub.internal.com can I do a forward zone ...
-1
votes
2answers
46 views

Conditional forwarder for subdomain through DNS proxy

I have a Windows AD domain : contoso.local I want to forward all requests to some.contoso.local to another DNS server through forwarding DNS server: contoso.Local.DNS => Proxy.DNS => some....
0
votes
1answer
33 views

DNSSEC automatic signing isn't automatic

I'm having trouble with getting DNSSEC automatic signing to actually be automatic. It fails to sign automatically (well, it does sign automatically, but apparently signs the wrong thing, see below). ...
0
votes
1answer
28 views

systemd-resolve fails to resolve hostnames when using bind9

I'm running Ubuntu 20.04. I set up bind9 inside a docker-container that I want to use as the dns-server. The container is running fine and will resolve correctly if queried with dig. Running dig on ...
1
vote
1answer
121 views

Bind9: Disable DNSSEC validation on per zone basis?

I am trying to make a caching / forwarding only DNS server using Bind9 with DNSSEC validation being enabled by default. Assume you have the following informations from my config file: acl "home-...
0
votes
1answer
33 views

How not to redirect the server name to an application?

In the domain file "db.myplace.mydomain.com" I configured a name for the reverse proxy (proxy.myplace.mydomain.com) and a name for a web application (myapp.myplace.mydomain.com). However, ...
-1
votes
1answer
39 views

dnssec-signzone: error: dns_master_load: domain.tld.zone:3: domain.tld: not at top of zone

I'm trying to sign a NSD zone but I'm getting the following error and I don't understand why: $ dnssec-keygen -a ed25519 -3 -K /etc/dnssec/mykeys/ example.com Generating key pair. Kexample.com.+015+...
1
vote
1answer
74 views

Fail2Ban with named and systemd on Debian 10

default in Debian 10 named is logging to systemd. Latest filter in fail2ban: https://github.com/fail2ban/fail2ban/blob/master/config/filter.d/named-refused.conf is working only with /var/log/named/...
0
votes
1answer
63 views

I'm Under attacks even with mod_evasive mod_security and fail2ban [closed]

I have my centos fresh server with no problem, I have httpd, named but I get 150 failed logins per 10 minute. I also use Fail2Ban with maxretry 1 findtime 6h. and mod_evasive mod_security default ...
0
votes
1answer
26 views

Windows AD not updating Linux DDNS in hybrid integration

I am setting up a Windows AD server, with a Linux DDNS setup. The Linux DDNS runs perfectly fine as expected. However, when I try to add the AD role to the Windows Enterprise 2019 server, the role ...
0
votes
0answers
92 views

Bind9 vs Unbound. Which is better for VPN node and why?

I am currently in the process of developing a VPN service. One of the necessary things for a proper VPN node is a DNS server that will prevent DNS leaks, and whilst working on this project I stumbled ...
0
votes
0answers
69 views

named/bind on opensuse leap 15.2 - temporarily no name resolution using second ip address

For the name resolution in my network I use named/bind based on openSuse Leap 15.2. On that server I have two IP addresses configured. The one for the server itself - e.g. 192.168.3.150 - and a second ...
-1
votes
1answer
50 views

Error in my server logs

I get this whenever I check my bind status. Any ideas?? Mar 17 01:03:19 node070 bash[15777]: _default/uzbekistan.jhasb006.cts4348.fiu.edu/IN: file not found Mar 17 01:03:19 node070 bash[15777]: zone ...
0
votes
1answer
71 views

How to mitigate peacecorps.gov DOS attack on bind9 DNS Server?

I newly configured bind9 on my ubuntu server and set allow-query to { any; } as I want my DNS server to be accessible for anywhere. However, I am now facing DOS attack using peacecorps.gov domain with ...
0
votes
1answer
61 views

I setup a DNS but I don't Get Response From my Domain And IntoDNS have errors why?

I Setup DNS in my VPS with BIND 9 and Everything is OK but in IntoDNS There Are Some errors 30 min ago I also Added 2nd Nameserver but I am Getting Error here is the output. Reverse MX A records (...
0
votes
1answer
48 views

Errors setting up DNSSEC automatic signing with bind

I followed the exact tutorial from here https://ftp.isc.org/isc/dnssec-guide/html/dnssec-guide.html#easy-start-guide-for-authoritative-servers to set up DNSSEC on my domain domain.example.com. When I ...
1
vote
1answer
37 views

Error adding DS records for my subdomain to the zone file of parent domain - using bind

I have domain example.company.com which is DNSSEC secured and has sent its DS records to the parent company.com. I want to create 2 other subdomains, both DNSSEC secured, sub1.example.company.com and ...
0
votes
1answer
22 views

BIND: Migrate zones from named.conf to rndc addzone without downtime?

There are two ways to ways to tell bind9 which zones to load: list them in named.conf (or the files included from it), and manage them with rndc addzone, rndc delzone etc. If I want to move from the ...
0
votes
1answer
27 views

Bind9 - How to allow DNS lookup from any machine

My goal is to have a DNS server and allow others to make a DNS lookup using my DNS server IP address. I installed bind9 and modified the named.conf.options file as below. However from a remote machine ...
0
votes
1answer
15 views

custom domain resolves through google but not company servers

I just set up a domain and when asking for the A records using the @8.8.8.8 server I get the correct record in no time. When I run +trace I see the company servers along the pathway, but when I run ...
2
votes
0answers
47 views

Need help configuring BIND on Pfsense as an authoritative DNS Server

For a few weeks now I've tried configuring BIND Server on my Pfsense Router as an authoritative DNS Server. I own a domain bought from RoTLD, I've set my nameservers to my external static ip, and they ...
1
vote
1answer
22 views

MX record for domain and subdomain

Is it possible to setup a MX record for example.com and a.example.com on the same DNS server in the same zone and is this a good practice? Some like this: example.com. IN A 10.24.233.214 a....
0
votes
1answer
87 views

Unable to add forward map SERVFAIL/REFUSED DDNS

I am using bind9 on a primary dns server with two secondary dns servers in a master/slave relationship. I am attempting to implement DDNS but seem to be running into a problem when it comes to adding ...
0
votes
1answer
74 views

BIND plus Google Cloud DNS

I am relatively new in DNS management and I want to ask what is the best way to go about this. We currently have our own Name Server as Authoritative ns1.ourcompany.com There are 5 other Name Servers ...
0
votes
0answers
189 views

Failed to start Berkeley Internet Name Domain (DNS)

I am on VPS using CentOS7 with CyberPanel. Today after updating the Custom Nameserver details; I have got an error when I am trying to restart/reload BINDS. Here is the error message: [root@scandalous-...
0
votes
0answers
46 views

how to set up apparmor for Bind in Ubuntu 20.04

Apparmor has caused a lot of headache to me today before I could even realize it was apparmor preventing Bind to start normally. I have disabled it and rebooted my server and Bind seems to work just ...
0
votes
0answers
59 views

How to setup OpenVPN server with bind9 as private DNS server?

Recently I was setting up a VPN node with OpenVPN server and Bind9 to prevent DNS leaks and got a problem with Bind9. Setting up OpenVPN server was mostly easy, but bind9 is a bit more tricky ...
1
vote
0answers
61 views

Using BIND DLZ through LDAPS or LDAPI

Before hardening this server, I had the bind DNS server working flawlessly and storing the DNS database within the OpenLDAP directory through LDAP:// using the following configuration under named.conf:...
-2
votes
1answer
66 views

BIND9 sends notify to slave only with also-notify

I have a problem that has been driving me crazy for three days! I'm replacing my Authoritative DNS servers with new ones and then I'm resetting all BIND9 configurations again to do a bit more "...
0
votes
1answer
52 views

Advanced zone delegation with bind, delegate part of delegated zone elsewhere

I'm having trouble with bind9 to configure the following dns setup: I want to delegate a zone to a remote dns server. But I want to delegate a sub-zone of that zone to a different dns server. Example: ...
0
votes
1answer
57 views

Is there a DNS cache that can automatically re-resolve its cache around the TTL timeout?

This is for a server setup with a wobbly upstream DNS for company internal server names. Sometimes, when an entry has fallen from the cache due to TTL, and our system tries to resolve it, the upstream ...
1
vote
1answer
43 views

Looking outside the internal DNS zone when using the same domain

So inside my network, we have a local DNS server (bind9). Let's say our internal zone is veridani.com, when I make local entries such as test.veridani.com it would work normally, and when I'm looking ...
0
votes
0answers
17 views

Can isc-dhcpd be configured to remove DNS records when leases expire?

I've configured my dhcp server so it can successfully add records to a private DNS zone when it issues a lease for a client. I never see it removing a lease however. Is it supposed to do so or is ...
1
vote
1answer
34 views

How to configure bind to not to do internal recursion?

While quering my authoritative-name-server (implemented with bind locally in VM) for "A" record of "host1.cool.com", it internally resolves the query using recursion (maybe) and ...
-1
votes
1answer
52 views

BIND server serial number not updated

Please help with the following problem. Serial number is not updated / incremented after I run "rndc reload" Configuration: OS: CentOS 7; BIND: 9.11.4; Port 53 is not blocked, listening, but ...
1
vote
1answer
75 views

Forward domain resolution to AWS's namesever

I am attempting to configure local bind DNS server to resolve a domain via AWS Route 53. So far, I have created a Hosted zone within Route 53, for which I've got the nameservers: ns-1474.awsdns-56....
-1
votes
1answer
64 views

dns bind config: how do I specify in dns forward zone entry to use a different source address when forwarding to another dns server?

I have a dns-server setup and below is the high-level of what I am trying to do: setup: DNS server with three IP's: mgmt, localInterfaceIP, PublicInterfaceIP. DNS named.conf: has "query-source ...
0
votes
1answer
8 views

Can you specify just the host portion of an A record in a bind zone file?

Say I have a zone file with entries like this: gateway A 192.168.1.3 Is there some way I can specify the network part as a prefix, say 192.168.1 and then only list the host part in ...
-1
votes
3answers
156 views

Pointing My Domain Name to my VPS

I have purchased a domain name and I asked them how to bind to my VPS. They answered, I should either use a control panel or create my own DNS server. So following guidelines about how to install BIND ...
0
votes
1answer
80 views

Can I stop BIND from sending response code for bad queries?

I am running an authorative bind dns server. I'm following all the recommended practices and my server is authorative only (none-recursive) with rate-limiting enabled. BIND responds to queries for ...
0
votes
1answer
2k views

Bind: query (cache) './ANY/IN' denied - is it a DDos attack?

My syslog is getting floated with messages like Jan 12 11:09:25 xxx named[902]: client 74.74.75.74#47561 (.): query (cache) './ANY/IN' denied Jan 12 11:09:25 xxx named[902]: client 74.74.75.74#47561 (....

1
2 3 4 5
42