Questions tagged [bind]
BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.
500
questions with no upvoted or accepted answers
11
votes
2
answers
1k
views
Unable to bind OSX 10.9 to Active Directory 2008
I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
- 111
6
votes
0
answers
2k
views
Caching, forwarding Bind 9.9.4 server works for weeks, suddenly SERVFAIL on all queries (rebooting fixes it)
I have bind 9.9.5 running on two servers (CentOS 6 and 7), for caching and forwarding DNS queries for a mail server. The servers run fine for weeks, then suddenly respond to all queries with SERVFAIL. ...
- 548
5
votes
0
answers
3k
views
BIND: DNS failover and high availability with dynamic updates
I am trying to design a system with 2 servers that act as both DHCP and DNS servers with dynamic updates. I am using ISC DHCP and BIND9.
It looks like this.
Server1 - DHCP primary and DNS master. IP ...
5
votes
0
answers
3k
views
Understanding (and partially disabling?) DNSSEC for an internal domain
I am setting up a new DNS infrastructure for our internal HPC cluster environment. This involves providing a migration path from our existing DNS authorities and domains.
For sake of example, let's ...
- 226
4
votes
0
answers
247
views
Keeping DNSSEC KSKs offline with BIND9
I am looking to move the private part of the KSK for my domains off my main nameserver. I've tried this with a test domain and get errors like this:
dns_dnssec_keylistfromrdataset: error reading /etc/...
- 143
4
votes
0
answers
337
views
Bind notifies on DNS views
I have configured two Cent OS based DNS servers one for master and one for slave with internal and external views for a domain. The problem is that i get notifies and automatic zone updates when i ...
- 57
4
votes
1
answer
5k
views
request has invalid signature: TSIG rndc-test-key: tsig verify failure (BADKEY)
I am pretty much new to bind DNS and during nsupdate , i am getting BADKEY error.I have /root/named/chroot/etc/rndc.key as below :-
key "rndc-test-...
- 141
4
votes
0
answers
232
views
Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name
We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago.
Simplified Current ...
- 41
4
votes
0
answers
807
views
How do I set up openshift’s bind correctly
I have set up an instance of redhat’s Openshift origin and am sometimes having troubles resolving the individual apps’ domains from the outside.
I have two physical machines running, both with their ...
4
votes
0
answers
2k
views
Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10
I’m with a problem trying to enable GSS-TSIG with BIND 9.10.
Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
- 5,480
4
votes
2
answers
1k
views
Caching DNS server returns invalid ip address for external lookups
I'm trying to resolve a DNS issue and am running short of ideas. Google doesn't seem to be helping, either.
When I use my local caching name server to resolve external host names, it always returns ...
4
votes
2
answers
874
views
DNS delegation on same server with DDNS and second slave server
I have two servers running BIND, the first is setup as the master of two zones and the second as a slave for those zones. The zones are example.com and ddns.example.com. I have DDNS running and ...
- 41
3
votes
0
answers
2k
views
DNSSEC for private internal sub zones of an external domain
Consider the following scenario:
example.com is hosted on CloudFlare and it's signed by CloudFlare DNSSEC. Everything works as expected for example.com.
Inside the company we have some internal ...
- 5,480
3
votes
0
answers
107
views
What is the practical difference between krb5-self and krb5-subdomain in BIND9 update-policy statement?
What is the practical difference between krb5-self and krb5-subdomain policies in BIND9 on update-policy statement while dealing with dynamic DNS updates on zones?
From the BIND9 documentation it ...
- 5,480
3
votes
0
answers
227
views
Restricting query types in Bind9
The network is relatively straightforward: on the inside there is Active Directory, in the DMZ is a BIND9 DNS forwarder. The Active Directory domain controller is the internal DNS server for all ...
- 31
3
votes
0
answers
9k
views
Centos bind DNS server configuration with ipv6
in order to APPLE , after 1 June all applications must support the ipv6 so i need to reconfigure my ios app. So i create a local network with ipv6. My topology is below. i configured bind 9.8 on ...
- 46
3
votes
0
answers
3k
views
Can't bind UDP socket but port is free
I've been struggling for a while now with this so maybe someone here is able to help me.
I'm setting up a CS:GO server that's going to be running on port 27059.
(This is a copy&paste from a ...
- 1,387
3
votes
1
answer
1k
views
Error using dnssec-signzone in chroot'd bind 9.8 when a zone file includes other files
Using bind 9.8.2 on RHEL 6.5, running chroot'd.
I have a zone file that includes other files (it's a zone with a large number of servers in different datacenters, and there's one included file per ...
- 41
3
votes
0
answers
236
views
Windows 2012 Master & Ubuntu Bind 9 Slave & SOA
I'm kinda like the maid... I don't do Windows. But thanks to new things we're implementing, I'm now attempting replicating a single zone from our AD cluster. We had this working just fine but ...
- 253
3
votes
1
answer
815
views
Solaris 10: BIND 9 Chroot Service fails to start with SVCADM but works when run manually from root
I recently upgraded with Solaris patches and after the reboot my Bind Named services go into maintenance mode.
bash-3.2# svcs -xv
svc:/network/dns/server:chroot (?)
State: maintenance since Thu Nov ...
- 31
3
votes
0
answers
2k
views
BIND seems to ignore glue records
We have a problem with some caching nameservers running BIND on CentOS in that they appear to be acting incorrectly and not properly handling the 'Additional Records' which contain the glue records. ...
- 93
3
votes
1
answer
1k
views
Bind DNS doesn't start, error as file not found; after a /usr/sbin command it works
I get a strange error whenever I restart the server.
Bind doesn't autostart or start. I get the following error when I do service named start:
_default/0.168.192.in-addr.arpa/IN: file not found
...
- 151
3
votes
1
answer
828
views
Windows 2003 DNS TSIG transfer?
I am trying to use a Windows 2003 R2 server as a secondary dns server for my BIND 9 master. The problem is I use keys to control transfers and I dont know how to add the key to Windows so its able to ...
- 1,975
2
votes
0
answers
1k
views
Unable to resolve private dns zone over vpn with bind9 DNS
The Problem
I have a VPC in which I need to access the servers using private FQDNs. The VPC is accessible through a wireguard VPN. The VPN server also serves as a DNS server running BIND9. I have set ...
2
votes
0
answers
3k
views
Bind9 vs Unbound. Which is better for VPN node and why?
I am currently in the process of developing a VPN service. One of the necessary things for a proper VPN node is a DNS server that will prevent DNS leaks, and whilst working on this project I stumbled ...
- 21
2
votes
0
answers
473
views
Need help configuring BIND on Pfsense as an authoritative DNS Server
For a few weeks now I've tried configuring BIND Server on my Pfsense Router as an authoritative DNS Server.
I own a domain bought from RoTLD, I've set my nameservers to my external static ip, and they ...
2
votes
0
answers
203
views
How to block AAAA answers for certain domains using RPZ?
Is it possible to block AAAA answers being sent back to clients from a local dns server, but only for certain forward dns domains?
I know I can do the filtering based on ipv6 subnet (working sample ...
- 193
2
votes
0
answers
2k
views
Bind9 caching DNS server works only when forwarders enabled
So i used bind9 in a small server with multiple NICs in order to setup a cache-only recursive DNS server for my home network.
Unfortunately its not working, meaning DNS queries from the hosts ...
- 1,734
2
votes
1
answer
3k
views
bind forwarder not working as expected
I want to setup a local DNS Server which hosts fld.example.com with a forwarder based on a zone.
Bind is running on CentOS7 with BIND 9.11.4-P2-RedHat-9.11.4-9.P2.el7 (Extended Support Versiion). When ...
- 21
2
votes
1
answer
314
views
Samba4 server visible with IP on the network
I have a Samba4 AD setup. I cannot understand why the server is visible on the net only by its IP address and not by hostname.
The configuration looks ok to me, the same as we have in other places ...
- 292
2
votes
0
answers
3k
views
Dynamic DNS (DDNS) updates from dnsmasq for use with bind9
Previously I ran dnsmasq on an OpenWRT to provide DNS and DHCP functionality, because this is, what it is intended for. I want to offload the DNS part to an already configured bind9 (running on Ubuntu)...
- 21
2
votes
0
answers
173
views
DNS doesn't resolve some domains on huge amount of requests
I need to check 200kk (200,000,000) domains for availability and CMS information.
I'm using php 7.1 and simulating multi-thread check.
Hardware and config
The server hardware: Multicore CPU, 64GB ...
- 181
2
votes
0
answers
92
views
BIND logging - general vs. unmatched
The BIND9 Administrator's reference manual states that the general category is "the catch-all; many things still aren't classified into categories, and they all end up here."
On the other hand, the ...
- 21
2
votes
0
answers
1k
views
Bind forward zone stopped working after upgrade to 9.13.4
I am running a BIND9 at a network edge. All internal clients query this server, requests should be forwarded to external DNS-servers except if it's for an internal domain. The latter should be ...
- 21
2
votes
0
answers
1k
views
Configure Bind9 to try next forwarder on NXDOMAIN
I am trying to configure a Bind9 server onto my machine to try to allow a resolver to resolve addresses uniformly, because the DNS servers on my local network do not have forwarders or root hints ...
- 299
2
votes
0
answers
996
views
How to delegate DNS for a subdomain to my own BIND9 server?
I have a VPS (running Debian) and a domain ("mydomain.net"). What I want to achieve is this: I want to create a subdomain "home.mydomain.net" for dynamic hosts in my home, e.g. my NAS etc., so that I ...
- 194
2
votes
0
answers
2k
views
Bind is not resigning DNSSEC zone after zone update and service restart
I'm facing an issue with BIND 9.9.11p1.
My configuration is:
zone "example1.com" {
type master;
file "zones/example1.com";
allow-query { any; };
allow-transfer { 1.2.3.4; };
also-notify { ...
2
votes
1
answer
761
views
BIND9 DNS Sec Fails at New COLO
I'm working on setting up a new site including new infrastructure and services. I have a Bind DNS server running on CentOS 7.3 and I recently noticed that recursive lookups for external resources are ...
- 21
2
votes
0
answers
414
views
BIND different forwarder based on response ip (rpz-ip)
I have a recursive BIND dns server .
forwarders {
8.8.8.8;
};
Is it possible to change the forwarder based on respone ip ?
For example if the response is 192.168.1.1 then forward/...
- 620
2
votes
1
answer
1k
views
BIND9 can't resolve in-addr arpa
I am trying to configure my nameservers to resolve a PTR zone for which we are authoritative. I have several forward zones that work just fine, but when I try to resolve a PTR, the result does not ...
- 167
2
votes
0
answers
109
views
BIND 9.8.4 on debian, forwarding a zone failes to resolve
I have an authoritative DNS server which I want to forward example.com to another server.
I have this in my options
dnssec-validation no;
forwarders { 209.200.164.69; 209.200.164.74; };
and this in ...
- 181
2
votes
0
answers
892
views
BIND cache dump file format parsing
I'm trying to analyze the contents of BIND's cache by looking into dump files, the ones generated by rndc dumpdb -cachedb.
;
; Start view _default
;
;
; Cache dump of view '_default' (cache _default)
...
- 969
2
votes
0
answers
789
views
dig not giving AD-bit when dnssec is configured
I am working on this Deterlab exercise and I run into some problems when adding DNSSEC to Bind. The server runs BIND 9.7.0-P1.
The configurations I have done is the following:
Signed zone for google....
- 21
2
votes
0
answers
2k
views
BIND9 logging into file
I want to change the logging behavior of Bind9 on my server (Ubuntu 14.04.4 LTS).
I found a intuitive manual for this here: Help.Ubuntu.
In their example they only changed the logging behavior for ...
- 193
2
votes
2
answers
835
views
Bind Server issue: Can not nslookup from client when DNS Master is down, but still can connect to Internet
I setup 2 Bind servers on Ubuntu Server 14.04. The first one is Master DNS and the second is Slave. I have a DHCP server running isc-dhcp-server and assign 2 DNS Server IP for clients
Everything seem ...
- 21
2
votes
1
answer
1k
views
Bind9 recursive queries have intermittent very long response times
I'm running BIND 9.8.1-P1 caching server on Ubuntu 12.04 LTS on kernel 3.2.0-86-generic-pae.
I've been banging my head against the wall trying to figure this out for weeks and I just have no idea ...
- 21
2
votes
1
answer
3k
views
how to disable forwarder in freeipa servers named.conf
My IPA server's named.conf has this in it since I chose to enter a forwarder address during the ipa-server-install.
forward first;
forwarders {
132.206.44.21;
132.216.44....
- 21
2
votes
0
answers
936
views
How to allow applications in network namespace access to global filesystem?
I have several applications that are potentially high-risk and high-throughput (like bind, ntpd, etc.). I plan on having a "management domain" for OS tasks, updates, SNMP, automation, etc. and a "...
- 21
2
votes
0
answers
2k
views
BIND/Linux limiting concurrent UDP connections
I'm seeing an issue where the number of concurrent UDP connections to BIND appears to be getting limited. I've previously increased recursive-clients in named.conf and I've increased the socket limit ...
- 121
2
votes
0
answers
78
views
Failover web hosting with multiple NS
Are there any drawbacks in having each nameserver entry in a domain name point to different failover server? In this setup, the same DNS server will also serve the content - so if it's down, the ...
- 145