Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

529 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
0 votes
0 answers
14 views

Bind9 custom rules no answer across subnets

I have a few different local subnets and some apps that I'd like to access with a custom DNS server. I have bind9 setup on 10.0.0.0 subnet and all of the devices on that subnet work as expected. When ...
svey's user avatar
  • 1
0 votes
0 answers
53 views

Error with resolv.conf and nslookup

I put my DNS server in resolv.conf 10.0.2.5, but only the nameserver of 127.0.0.53 allows me to resolve lookups when I use nslookup 10.0.2.5 or nslookup 10.0.2.6. I read that there should be a DNS ...
Doujinx's user avatar
0 votes
0 answers
23 views

Bind keeps resigning one zone and sending updates

I have multiple zones on a master NS server, which transfer to public faced servers. But after enabling DNSSEC for every zone, one zone continues doing IXFR (has been doing it for 2 weeks now), every ...
HWM's user avatar
  • 1
0 votes
1 answer
38 views

bind9 conditional forwarding not working as expected

Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain xyz.com. I use the private DNS for certain secure nodes on our local network. I want ...
Yousuf's user avatar
  • 37
0 votes
0 answers
68 views

Bind9 on Docker can't resolve on host

I have a PC on my local network that will run services that I want to access with URL's instead of IP's. I have followed many guides and articles on how to use Bind9 (and dnsmasq) but always get stuck....
Jonas Birkelöf's user avatar
0 votes
0 answers
58 views

Updating Bind with nsupdate works locally, not remotely or on private IP

I am attempting to get nsupdate/RFC2136 working for a remote BIND server, but I've been scratching my head for two days trying to figure out what is going on. BIND 9.16.23 is running on an internal ...
dolomike's user avatar
0 votes
0 answers
30 views

Is is possible to set up different DNS records based on the realtime qps using bind?

I'm trying to set up a self hosted DNS server for my website using bind and I want to set it to redirect to a custom error site (set all records to CNAME of error.my.domain maybe) if the qps reaches a ...
Francie Jiang's user avatar
0 votes
0 answers
212 views

bind9, named not accessible over local network behind router ubuntu 20.04

i have a zte F6600R router from my isp provider with following configuration DHCP SERVER : ON LAN IP ADDR : 192.168.1.1 SUBNET MASK : 255.255.255.0 DHCP start IP : 192.168.1.10 DHCP end IP : 192.168.1....
Andrei Claudiu Viziru's user avatar
0 votes
0 answers
79 views

How this specific DNS configuration works?

Recently, a partner asked us to do following in one of our DNS zones: _dmarc.send.domain.com. TXT "v=DMARC1; p=none" send.domain.com. NS ns1.otherdomain.com. send.domain.com. ...
Nick's user avatar
  • 862
0 votes
0 answers
83 views

NGINX Proxy + BIND9 issue

Before finding the courage to write in here I have been reading for days to find a possible solution myself. This is the problem. I have a NGINX Proxy manager installed on a docker container that ...
Luca's user avatar
  • 1
0 votes
0 answers
165 views

bind9 behind nginx reverse proxy DoH

I'm trying to setup bind9, in a container, behind a nginx reverse proxy. Basic DNS requests work fine, but I struggle with DoH... Right now, dig +https @BASE_URL gnu.org gives me this error: ;; ...
ange's user avatar
  • 33
0 votes
0 answers
48 views

Using bind9 forwarding to openvpn does not work

i have an openvpn running on my server. It works, and when i check with traceroute, i see that the first ip address is 10.12.4.1, so i think my vpn? Heres my openvpn conf from my ubuntu server client ...
jelkaa's user avatar
  • 1
0 votes
0 answers
59 views

Bind9 with multiple RPZ files and multiple views causing overload on memory and CPU

I am running BIND 9.18.18-0ubuntu0.22.04.1-Ubuntu (Extended Support Version) <id:> on "22.04.3 LTS (Jammy Jellyfish)" My use case is as follows. I need to implement a DNS firewall of ...
apocalypse0's user avatar
0 votes
0 answers
45 views

Getting TSIG update error (PeerBadKey) when running Bind9 role

I am getting this kind of error fatal: [bobul-2]: FAILED! => {"changed": false, "msg": "TSIG update error (PeerBadKey): The peer didn't know the key we used"} when I ...
valga's user avatar
  • 1
0 votes
2 answers
328 views

Why do I have to specify the DNS server when doing a forward lookup?

I'm trying to set up a small, private DNS server. I'm using Bind9 and systemd resolved, netplan for managing the network. I've specified the DNS server in both the netplan configuration and /etc/...
sysad noob's user avatar
0 votes
0 answers
22 views

Bind9 forwarded zones statistics

Is it possible to get a statistics count for forwarded zones similar to other zone types? I have the following definitions in my named.conf.local and am able to successfully make queries for both ...
Andrei_T's user avatar
0 votes
0 answers
28 views

Move Nameserver from crashed BIND servers (DNSSEC Enabled)

The situation basically is: The BIND servers that are authoritative for a domain crashed and are utilizing DNSSEC (Ie; I can't change the DNS entries for the zone), is it enough to have the registrar ...
questionanswer1133's user avatar
0 votes
0 answers
139 views

DNS configuration using bind9

I am currently encountering DNS configuration issues with bind9. I have installed bind9 and made the following adjustments to the configuration files: In the "named.conf.options" file, I ...
Linuxmodex's user avatar
0 votes
0 answers
133 views

ISC Bind bind to non-local IP

I need to get ISC Bind to bind to a non-local IP on Linux. I have net.ipv6.ip_nonlocal_bind=1 set but unfortunately Bind's bind code seems to treat listen-on-v6 as more of a whitelist of what ...
Scoopta's user avatar
  • 101
0 votes
0 answers
92 views

Disable IPv6 dbug logging in BIND

Using BIND on Arch. I have /etc/named.conf only containing include "/var/named/named.conf" where named.conf is: include "/var/named/named.conf.options"; include "/var/named/...
Err488's user avatar
  • 1
0 votes
0 answers
228 views

BIND9 on Ubuntu 20 - Cannot configure Zone to work properly

I installed it on Ubunto 20 and configured two zones Options config file acl internal { localhost; localnets; 192.168.70.0/24; 10.200.157.0/24; }; options { ...
Wism Esmel's user avatar
0 votes
0 answers
27 views

How to Forward an authorative zone in BIND between internal and public clients

I have a dns server authorative for my public records and my internal records , I want to forward a zone in my internal dns server so internal clients can access certain records without using the ...
John Adams's user avatar
0 votes
0 answers
71 views

How to stop bind to do a separate CNAME query again?

I have a local DNS server like the following: client -> bind (only handle local names) -> dnsmasq (handle other names) This problem is when a name is a CNAME, dnsmasq return both CNAME and IPs, ...
Hoping White's user avatar
0 votes
0 answers
20 views

Postfix 2nd domain

I have two postfix servers(virtual machines) on same host 1st domain = mail.xyz.org 2nd domain = mail.xyz.edu I want to send mail from 1st domain to 2nd domain. If i try, it gives error: Recipient ...
munishhh's user avatar
0 votes
1 answer
49 views

Issue with Bind9 and wildcards

I set up both bind9 and DNSMASQ servers to forward public-ubiservices.ubi.com to my IP address, but client kept failing to connect to it, I checked bind9 logs and found out the client is trying to ...
elifes's user avatar
  • 1
0 votes
0 answers
1k views

BIND9: Host xxxxx not found: 2(SERVFAIL)

I've installed and set up the bind9 DNS server on UbuntuServer 22.04.3. Then I've checked my hosts. And I have got an error: host host1 Host host1 not found: 2(SERVFAIL) But the reverse operation ...
Ilya Shmadchenko's user avatar
0 votes
0 answers
31 views

Sometimes, the Bind9 will return the recursive record after I configure the response policy zone

I configure a response policy zone in my DNS server and I use that to block two domains. This is my zone file. $TTL 1 $ORIGIN rpztest. @ IN SOA ns1.fati. ns2.fati. ( ...
北山硝子's user avatar
0 votes
0 answers
122 views

Glue records/delegations on bind9

We have an internal root hint server and several nameservers for different domains. Let's say we have 3 domains with different nameservers example.com, solo.example.com, dmz.example.com. So each of ...
Jaanus maddison's user avatar
0 votes
0 answers
23 views

Why Socket bind not work as expected while tun network running?

environment :windows work cases. socket bind nic1 => get external ip => work => confirm ! I got the external ip for nic1. socket bind nic2 => get external ip => work => confirm ! I ...
Jason's user avatar
  • 1
0 votes
0 answers
233 views

Bind9 how to use RPZ zone for specific subnets

I already have 1 master(192.168.130.32) 4 slaves(192.168.130.35) and 2 authoritative(192.168.130.33) servers with bind9. My point is to get RPZ(192.168.130.37) from external DNS servers, but I want to ...
robotiaga's user avatar
  • 101
0 votes
0 answers
118 views

Bind Recursion DNS Server Returning Wildcard Address for Host Despite Exact Entry Existing in Zonefile on Hosts DNS Server

I setup a bind server (version BIND 9.18.16-1+ubuntu20.04.1+isc+1-Ubuntu on Ubuntu 20.04), and this particular instance is setup as a recursion resolver with no forwarders. When I dig one of my ...
OwN's user avatar
  • 187
0 votes
0 answers
25 views

How to mitigate named UDP spoofing?

How can named be configured to require TCP for updates and log that TCP was used? eg: Jul 6 11:01:28 server named[865]: client @0x7f89200aa3d0 1.2.3.4#58841: update 'domain.tld/IN' denied should end ...
user1133275's user avatar
0 votes
0 answers
106 views

Does slave bind9 DNS server answer with dhcpd DDNS updates included?

When I set up ISC dhcpd with a primary and secondary as failover and I have bind9 set up as master/slave and I configure the dhcpd so that it sends the ddns updates also to the slave dns that is set ...
luzze's user avatar
  • 13
0 votes
1 answer
80 views

BIND "notify" packages over NATted networks possible?

I got a very specific issue: We got two DNS servers with networks being NATted to each other. Example: DNS master has 192.168.1.1 and it's NATted to another subnet 192.168.2.x using the gateway 192....
tabbit's user avatar
  • 1
0 votes
1 answer
196 views

Is it possible to add ip address to dnsmasq.conf instead of url

I'm very novice on this so please answer if you can. Is it possible to add ip address instead of url/domain to dnsmasq.conf file Here is an example of what I tried. bind-dynamic bogus-priv domain-...
Simon's user avatar
  • 101
0 votes
0 answers
69 views

DNS server bind9 + apache2 on Ubuntu Server VM + localhost problems connectivity

Hello guys :) i'm trying to resolve some problems with my DNS server + apache2 and local machine. I've got Ubuntu server on VirtualBox with NAT network adapter. I tried to create DNS server for my ...
Fenh Rir's user avatar
0 votes
1 answer
433 views

Configure Bind9 to forward for a zone and reject all other requests

I have an interesting use case where my hosting providers (Heroku) DNS has intermittent issues resolving a certain subdomain. They have an option that allows you to insert a custom resolver as the ...
James's user avatar
  • 151
0 votes
0 answers
234 views

Error Configuring DKIM on Bind BIND 9.9.4-RedHat-9.9.4-61.el7_5.1 (Extended Support Version)

I'm trying to configure a DKIM record on my DNS Server running BIND 9.9.4-RedHat-9.9.4-61.el7_5.1 (Extended Support Version), but I'm getting the following error: 10:36:40 ns1 named[14663]: db.domain....
jfcarvalho's user avatar
0 votes
0 answers
203 views

BIND 9 XML Statistics-channels build modification after server is already up and running

Migrating away from BIND9 to Route53 and would prefer not to use the named.stats file for monitoring activity during the migration period. As such, I checked the current named.conf and verified no ...
humbleStrength's user avatar
0 votes
0 answers
28 views

postfix send for one lan onlyif have 2 eth

I have server ubuntu whit 2 network card and i want output 1 lan for postfix and dns, other lan for http ,dns, ftp etc. My configuracion is : uname -a Linux mail.domain.com 5.15.0-72-generic #79-...
cianyika's user avatar
0 votes
0 answers
50 views

Ubuntu Server Configure Bind9 DNS Server for HTTP request

I have configured a Bind9 DNS Server Forward Zone according to the code below. The way is configured, I only can do SSH using the server name <geoportal.geoint.lan>. I tried adding to the code ...
HelpOverFlow's user avatar
0 votes
0 answers
84 views

Bind forwarding doesn't goes right if using views

I have two server with Bind installed. One is a public dns for resolving domains I own. The other one is another dns that I'd like to use for my customers. On the first one i set the forwarding to the ...
Daniele Continenza's user avatar
0 votes
0 answers
50 views

How to avoid duplicate entries in DNS Bind cache db file?

While running command "rndc dumpdb -cache" it has huge amount of data some duplicate entries like one domain has multiple entries with same target but different TTL, how to reduce like ...
Sha's user avatar
  • 1
0 votes
1 answer
373 views

BIND DNS - DNSSEC on Internal Private Domain

Question regarding DNSSEC. I have a internal private TLD eg. corp. Underneath that are multiple subdomains eg. region-a.corp, region-b.corp etc. And possibly underneath the regions, there are further ...
LFC1892's user avatar
0 votes
1 answer
127 views

Bind service doesnt reply with local domain

My setup is the following ServerA (vpn-server with 10.200.0.1) has a Bind9 service running on VPN ip range. options { directory "/var/cache/bind"; forwarders { 8.8.8.8; }; ...
TRW's user avatar
  • 518
0 votes
0 answers
243 views

How to resolve NXDOMAIN in centos using bind/named package

I am trying to configure DNS server on centos 7. I am following this link. when I run dig -x 192.168.40.107 I don't receive any answers record. here is output ; <<>> DiG 9.11.4-P2-RedHat-9....
9me's user avatar
  • 101
0 votes
0 answers
619 views

are comments in Bind zone file visible to anyone who can access the view

I just implemented zone transfer restrictions (IP plus tsig key) on my bind server. I assume this should mean that the entire zone contents are not accessible by anyone anymore, correct? If I place ...
Brian's user avatar
  • 181
0 votes
0 answers
49 views

Name server does not have direct parent zone information?

I'm curious about this error that comes up in an online DNS report, and unable to find information about how I might fix it: Direct Parent Check: The Parent DNS Server [ns1.xxxxxxx.org.uk] does not ...
TommyPeanuts's user avatar
0 votes
0 answers
621 views

Bind9 works properly but I can’t ping names from the DNS server machine

I have the machine dnsserver with the bind9 service in domain ent.com. I also boot other machines: firewall and webserver. All machines are operated by Ubuntu-server-22.04. I’ve configured these files:...
Ilya Shmadchenko's user avatar
0 votes
0 answers
442 views

docker bind mounts sometimes empty

I am using a docker container with this definition: webserver: image: ghcr.io/paperless-ngx/paperless-ngx:latest volumes: - /srv/dev-disk-by-id-ata-...
henfri's user avatar
  • 1

1
3 4
5
6 7
11