Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

Filter by
Sorted by
Tagged with
0
votes
0answers
24 views

Overriding a .local Domain to a Public IP

I am using a BIND9 DNS server for my org, and I have an application that was published with a .local domain: example.website.local. There is an .com alternative that I want to re-map the .local to ...
0
votes
0answers
12 views

With BIND9 - Is there a way to segment forwarders + zones in views

Beginning to think there is no clean way to do this All internal facing. Each location has it's own DNS server (70 locations) - In case their connection to the internet sd-wan is down. Each location ...
0
votes
0answers
44 views
+50

How do I prevent Bind from retiring non-expiring DNSSEC keys when using DNSSEC Policy?

To control when signatures expire, I've switched to using dnssec-policy to generate DNSSEC records for my zones. This has solved the issue of getting RRSIG records to expire when they should but ...
0
votes
0answers
17 views

Hostname is still resolving even after removing entry from zone file of BIND DNS server

I have deleted a RHEL server recently . I need to remove the server hostname record entry from bind dns server so I did remove A record entry from zone file also I removed reverse entry from reverse ...
0
votes
0answers
17 views

Why would DNS fail on the DNS server, but not on a host using the same DNS server?

I have set up Bind on a server running Centos Stream. The server has two interfaces, one to a corporate network and the other a private network. The DNS is set up for the private (192.168.0.0) network....
1
vote
1answer
76 views

How do I extend the expiration date of every DNSSEC signature in bind9?

I have a dnssec-secured domain that needs to remain valid for 8 weeks when all masters become unreachable. To my understanding, setting sig-validity-interval to 64 7 in the zone's configuration file ...
0
votes
0answers
17 views

BIND9 DNS Issue : connection timed out; no servers could be reached from outside network

I am learning Bind9 and have setup Bind9 on Ubuntu 20.04.3 LTS Here is named.conf file options { directory "/var/cache/bind"; listen-on { any; }; listen-on port 53 { any; }; ...
0
votes
1answer
130 views

How to force BIND 9.16 to resign my zones after editing zone file

I'm using BIND 9.16 new dnssec-policy feature on my zones, following the guide to enable DNSSEC. Everything worked like a charm. Now, I need to add another record to one of my zones, but after editing ...
0
votes
1answer
35 views

Fritz!Box & Ubuntu: Expose URL in LAN with Apache Httpd and Bind

I hope someone can help me with this - I thought - simple task. Situation: On my private LAN I run an Internet-Router ("Fritz!Box") and a Raspberry Pi with Ubuntu 20.04 LTS on it. I ...
0
votes
0answers
26 views

How to make bind force clients to connect via TCP only?

I want to set up an experimental nameserver that asks clients to send requests via TCP only by sending back packets with the TC bit set. For that purpose I tried to work with the rate-limit parameter ...
-1
votes
0answers
25 views

Setting up standalone BIND9 servers

I am a web developer and have a few small servers, a couple unmanaged ones and one cPanel. These all currently run all services in the same machine. In an effort to improve my infrastructure, I have ...
1
vote
1answer
29 views

Is it possible to have both static and a dynamic A record created for the same host on an internal DNS server?

I am working on a case study related to risks from insecure dynamic DNS updates. Suppose there is an internal DNS configured that has a mix of static and dynamically created addresses. Consider a ...
-3
votes
1answer
38 views

How can I setup two or multiple reverse zone for one IP with bind9?

When I try to define reverse zone with same IP the as reverse zone named-checkconf throws: $ named-checkconf named.conf.cust_zone named.conf:63: zone '70.231.168.192.in-addr.arpa': already exists ...
1
vote
1answer
42 views

Why won't my recursive DNS resolver resolve this domain?

I am using bind9 as a recursive resolver and it works beautifully for 99% of domains. However it returns an NXDOMAIN for this one michaelkors.scene7.com even though some public nameservers return an ...
1
vote
0answers
15 views

named rate limiting - DDOS prevention

I'm wanting to implement some rate-limiting onto our named servers and am looking for some help on making sure the values are "sane". This is what I'm thinking... rate-limit { errors-per-...
-1
votes
1answer
34 views

bind9: forward to local name server does not work when internet connection is down

I have the following setup: A bind9 instance (referred as L below) on very limited hardware for resolving the names on my local networks. It is an authoritative master for the zone home.mydomain.com. ...
0
votes
0answers
12 views

How to whitelist known clients in DNS RRL using DNS Cookies [BIND 9.16.18 and above]

I want to whitelist the clients who are coming with valid DNS Cookies in DNS RRL (in BIND 9.16.18 and above). Any help is much appreciated.
0
votes
1answer
29 views

How to forward some sub-domain of a zone to default forwarders

I want to use bind9 to hijacking a zone,for example "qq.com",my zone configuration is zone "qq.com" IN { type master; file "db.qq.com"; forwarders { 119.29.29.29; 8....
0
votes
0answers
10 views

Apply RPZ only to a certain client IPs with rpz-client-ip

Is it possible to apply a set of RPZ substitute policies but only for a given client IPs? Esentially i need the opposite from: 48.zz.101.db8.2001.rpz-client-ip CNAME rpz-passthru.
1
vote
1answer
82 views

How to log DNS query response in BIND

In Bind, when we enable query logging , it logs the query's details like "query asked", "timestamp" and other stuff. Do we have any options by which i can store the "ANSWER&...
0
votes
0answers
15 views

Moving AD DNS records from bind to AD

I have a BIND DNS server serving example.com zone. Many hosts belong to example.com but one of hosts is a domain controller of ad.example.com. AD was installed without DNS support and store its ...
-1
votes
1answer
88 views

Tell bind to ignore SOA domain check on forwarder zones

I've a weird issue with bind. Premise: I'm using bind (version 9.16_11) installed on pfSense, but despite this I can change almost anything on bind configuration. I've configured a simple forward zone,...
1
vote
1answer
65 views

BIND9 not getting queries over IPv6

I'm testing the upgrade of a Debian 10 server to Debian 11. The server runs bind9 as a primary authoritative DNS for a number of domains and on Debian 10 has been working fine for two years. (BIND v.9....
0
votes
0answers
22 views

ban `./ANY/IN` DNS queries using iptables

I am getting some denied DNS queries I'd like to ban using iptables, to avoid bind to send augmented replies to the server ... and that they're simply annoying in my logs. (.): query (cache) './ANY/IN'...
0
votes
0answers
47 views

DNS Times out for non-local connections

I am setting up an email server, nextcloud files server and DNS server on a machine running Ubuntu 20.04. I've used iRedmail for email and it seems to be working correctly. I need to setup the DNS ...
0
votes
1answer
68 views

Support with configuring bind9 DNS server for a private network

I have a number of servers on my home network (192.168.0.0/24) and would like to setup bind9 as a DNS server, so I can more easily resolve IP addresses of these machines by name. I installed and ...
0
votes
0answers
18 views

DNS delegation with BIND and Cloudflare

probably just an ordinary question, but I've been wasting hours on this for months. If you need other logs/output/explanation/etc. just ask :) Thanks in advance! What I need The zone local.example....
2
votes
2answers
82 views

named/bind is refusing to serve some domains after resolving them itself

Why is bind refusing some of my queries? This only happens for certain domains. A query through named fails: $ dig -t A fedoraproject.org @127.0.0.1 ;; ->>HEADER<<- opcode: QUERY, status: ...
2
votes
1answer
70 views

Secondary DNS is not responding to dig

We are new to DNS. we are trying to configure a secondary DNS server using Bind & CentOS for an existing primary server (Eg:142.250.192.110). Our secondary server configuration is as follows: ...
1
vote
0answers
100 views

Bind/Fail2ban how to reject requests from certain domain

Today I got my VPS stucked. Centos 7, 4 cores, Bind 9.11. From ssh I got Message from syslogd@host at Jul 18 09:46:16 ... kernel:NMI watchdog: BUG: soft lockup - CPU#0 stuck for 41s! [f2b/observer:...
0
votes
2answers
139 views

bind9 doesn't load zone with only CNAME record

I'm trying to set up a subdomain to point to Google Sites, so I made a simple zone file: $ttl 38400 subdomain.mydomain.net. IN CNAME ghs.googlehosted.com. This doesn't work: zone subdomain....
-1
votes
1answer
37 views

bind9 not resolving intranetlinks

As a follow up to a question I've asked earlier: Linux server migration to Windows workstation. A supplier got us a new network-card yesterday, but no harddrives so far. I've also bit the bullet on ...
0
votes
0answers
19 views

When forwarding a DNS zone, how can i transform/alter the forwarded address?

Lets say I have zone.public.xyz. as a publicly-accessible DNS zone, but I would like to make the private zone.private. zone accessible via a "proxy" DNS nameserver. The public nameserver has ...
1
vote
1answer
37 views

set domain to a ubuntu 20.04 vps with bind

so I have a ubuntu 20.04 vps and a website running on it, I wanted to point my domain to it. but nslookup railnet.ir gives ** server can't find railnet.ir: SERVFAIL the vps ip is 87.236.210.159 and ...
0
votes
1answer
53 views

How to find local DNS attackers on Linux machine?

On a shared hosting server (centos8), thousands of websites are hosted. They all use single DNS service running as local recursive resolver (BIND 9). We observe random overload events with no clear ...
0
votes
1answer
50 views

Configuring Reverse DNS for an emulated DNS server hierarchy using BIND

I'm emulating a network using Kathara (similar to Netkit) and I'm having trouble figuring out how to get reverse DNS to work across all three networks. This is the topology And this is the DNS ...
0
votes
1answer
29 views

Change the BIND query log file destination

I am trying to change the file that my BIND server stores query logs from the messages file in /var/log/messages to /var/log/named/named.log. When I restart the BIND service, for the changes to take ...
0
votes
0answers
121 views

Ubuntu bind9 forwarders within zone is not working

I have a requirement to setup a DNS server for internal name resolution and also forward query for certain public domains. OS: Ubuntu 18.04 Bind: BIND 9.11.3-1ubuntu1.15-Ubuntu Following is the ...
-2
votes
1answer
47 views

DNS server query by the registry of my domain name is fine. But browser cannot fetch my website by its address [closed]

When I query my DNS server by the website of the the registry of .com** top-level domains, I can see that my DNS server is found: Query Domain: example**.com** Answer: Following name-servers have been ...
0
votes
0answers
148 views

Bind - how to proxy DNS requests to another server (static-stub/forward type not working as expected)

How do I proxy DNS requests from bind9 to acme-dns? Here is my named/bind9 configuration file options { directory "/var/cache/bind"; auth-nxdomain no; # conform to RFC1035 ...
0
votes
0answers
25 views

Is it possible to enable RFC2136 DNS updates for a samba-AD domain?

I'm experimenting with a Synology NAS that's running bind9 and samba to host a local subdomain with an AD realm of the same name, e.g. domain : sub.x.notcom, realm : sub.x.notcom ... I'll substitute ...
0
votes
1answer
56 views

Where does my bind config lookup dns entries? [closed]

Hy, I am in the course of learning how bind works. My goal is to have a local dns database so lookups in my lan are not going out to WAN. I set up bind and didnt configure it as forwarding or caching ...
0
votes
1answer
38 views

How to stop BIND9 from being an authoritative DNS server for a host?

Until recently I've been using BIND9 on my on-premises server (Ubuntu 16.04 w/LAMP). But then I decided to move one of my site to remote 3rd party hosting. Obviously, I changed the DNS servers on site'...
0
votes
1answer
100 views

Why does nsupdate fail with "operation canceled"?

I'm trying to dynamically update a DNS server using nsupdate, running nsupdate -k mykey.private -d -v ./my-nsupdate-commands.txt. But I get the error: Communication with 192.0.2.0#53 failed: operation ...
2
votes
0answers
28 views

Is there a way to block a specific query type on bind

I've been trying to find a way to block the WKS query type from our bind servers. We have found that is is extensively used by tunneling software. I tried using RPZ but i'm not sure on how to block a ...
0
votes
1answer
68 views

Bind 9 DNS server is not able to resolve domains with ending .pl

I have two configured bind9 DNS server behind a load balancer. Since two weeks they are not able to resolve any .pl domain name. root@arc01:/etc/bind# dig www.google.pl ; <<>> DiG 9.9.5-9+...
0
votes
0answers
50 views

DNS bind9 server failure after forwarding

I'm setting up a dns server in a vm with Ubuntu 18.06 for school and I encounter strange behaviour when forwarding a request which my server is not authoritative for. My server asks the dns server in ...
0
votes
1answer
176 views

Bind9 refuses key from nsupdate

I have a Bind9 DNS server running (and working!). All the zones were managed manually. I now want to change a zone to be updated automatically. After setting things up i tried nsupdate but it fails ...
0
votes
1answer
52 views

How to prevent bind dynamic updates from changing original zone file?

I am using a certbot DNS plugin to issue Let's Encrypt certificates. Certbot uses dynamic DNS updates to add a TXT record for verification. Bind creates a .jnl file for the zone. This TXT record only ...
-1
votes
1answer
35 views

Different nameserver and glue record

I have a domain called domain.com (already working and in production) and that domain is already using ns1.example.com and ns2.example.com as nameservers. Now I have created new Authoritative DNS ...

1
2 3 4 5
43