Hot answers tagged

11

This looks to me like an AppArmor problem. Try setting it to permissive temporarily and see if the problem goes away. By default, the Bind/Named daemon does not have permission to write to the zone files in /etc. It can only read them. Therefore, the nsupdate process cannot write to them either. If you're dynamically updating your DNS, you should store ...


11

There is a trick you can use here. That said, Wesley is a smart dude and you should listen to him. I don't get paid to say that but I'm hoping to change that one day. Assuming that you're trying to change a record called www in a zone called example.com.... Create a temporary wildcard A record (*) in the zone. Commit the change. Test it, make sure the ...


9

The server_name is an exact match, unless you use wildcards or regular expression syntax. See this document for details. The domain B.domain.ddns.net does not match any of your existing server_name expressions, so the default server will be used instead. If there is no listen directive with a default_server modifier, the first server block (with a matching ...


7

We're moving across to Amazon EC2 and are using a load balancer, with the recommendation that we use a CNAME instead of an A record I sincerely hope that you're not CNAMEing your apex domain. If your DNS host is self respecting, it won't be allowed. If it's a shameful and slimy host, you'll be able to, but you'll lose a piece of your soul (but you're ...


7

For enable SASL when receiving email via smtpd, you need to put this parameter smtpd_sasl_auth_enable = yes For enable SASL when sending email via smtp, you need to put this parameter smtp_sasl_auth_enable = yes In your postconf output above, you only put smtp_sasl_auth_enable not smtpd_sasl_auth_enable. That's why postfix complain with error Error: ...


5

The simple answer is you cannot - SpamCop provides no way to remove your IP range from the Blacklist or add yourself to the Whitelist. You have a few options here: 1) Stop actually sending email for testing purposes, if it is really that numerous. Pipe it to a file or just rely on the logs to test if email is leaving the application. When the emails stop, ...


5

NOIP does not do what you want. Some ways you might achieve what you want: Purchase a VPN connection with a static IP at the other end Purchase a static IP from your ISP NOIP and other dynamic DNS services give you a way to dynamically sync your connection to your changing IP. They in no way actually provide you with a static IP. Dynamic DNS (DDNS or ...


4

Best Answer - Call your ISP and get a static IP. Other Options using a VPS with a static IP: create a reverse proxy in Apache2 to access their site from the same IP address each time. Also this assumes the application is able to be behind a reverse proxy (trial and error). This will disable their 'security' of whitelisting IPs by allowing anyone to access ...


4

You need to know the differences between smtpd and smtp in Postfix. In short, smtpd is the SMTP server that receive the email and smtp is the SMTP client that send the email. Based on the article linked above, you need to add the following three parameters into main.cf: smtp_sasl_auth_enable=yes smtp_sasl_password_maps=hash:/etc/postfix/sasl_passwd ...


3

This is because you are likely using a dynamic 'consumer' IP from your ISP. Most of these are blacklisted on Barracuda and similar RBL's due to various malware and spam sent over them without most users knowing (which is one of the many reasons you should use a static IP for any business needs.) You can try and get the IP removed but it will be wasted ...


2

The downside would be that dynamic DNS is still DNS, and therefore subject to DNS caching (and violations of the specified TTL are rampant on the internet - AOL was infamous for forcing all TTLs to a minimum of one hour regardless of what's specified by the authoritative name server). Quite simply DigitalOcean does not seem to be an appropriate solution ...


2

You have to use the key name you created the key with as the name in the config. From what I can see, you have to use: key "domain2.com.au" { [...] } From the BIND documentation: to verify that incoming requests have been signed with a key matching this name, algorithm, and secret.


2

AUTH is not part of basic SMTP, but of ESMTP. So in order to use AUTH, you need to start the SMTP session with EHLO instead of HELO.


1

Assuming a sufficiently new Perl ddclient perhaps use=if ipv6=yes ipv4=no Makes use of the OS interface command to find IPs, ip on Linux, others on other platforms. My reading of the source is that it only does one address family, I think. Disabled v4 just in case. Per the template config file, IPv6 requires newer than 3.8.1. Or, consider using a v6 only ...


1

Instead, get a static IPv6 allocation, so the AAAA records do not need to be frequently updated. This can be provider independent space, but does not have to be. If your ISP does not provide this on their business class service, get a better ISP.


1

This is not possible, as the syntax requires IP addresses. Some things to consider: How useful it is to have a nameserver with a dynamic IP? That's exactly why there isn't even possibility to use hostnames. Since you can't use this as a listed NS anyway, it's not very useful; you could simply replace it's role as a master with one of the public nameservers....


1

I don't use DynDNS, but I know how to do what you want to do with free DDNS provider https://freemyip.com (you don't need to create any accounts there - it takes literally 10 seconds to create your domain in there) Once you create your domain there (say, example.freemyip.com), you need to set a CNAME record in your clientname.com domain, pointing to your ...


1

http site routing from hrm.clientname.com to example.dyndns.org and then you our IP was working fine until we implemented SSL certificate. This is not the right way to redirect users, you should CNAME to the dynamic record. remove the Web redirect with a proper dns record. hrm.clientname.com in cname example.dyndns.org


1

You could delegate a subzone. So for "example": aws.example.com would be for your AWS instances while dyn would continue to serve example.com. Then new hosts in AWS would look like foo.aws.example.com and bar.aws.example.com. To make this work: Create and test the subzone on AWS with a zone file like: ; zone fragment for sub-domain aws.example.com ; ...


1

Yes, it is possible to set ServerName in Apache httpd to a DNS name, which A record will change. If the public IP is configured directly on the server's interface (ie. not on a router in front of it), just remember to bind httpd to the catch-all address (0.0.0.0), not to the domain name, or, even worse, current IP - this will require server restarts on IP ...


1

I was facing this same issue and, after finding a powershell script that did the update, I decided to create an application to automatically update the IP of the DNS records on GoDaddy, pretty much like what DynDNS does, the difference is that I don't have to pay for another service to do that for me anymore. It's a Windows application though, hopefully it ...


1

You can approach this in three ways: a) with a transparent proxy that blocks the hosts, b) with a firewall that blocks the connections to the update hosts or c) in your internal DNS and resolve the known update hosts to localhost or some other host. Using a) you can just blacklist (in squid with squidguard or or even iptables) the update hosts Using b) ...


1

Not 100% sure what's your problem but this is might going to be fix it. I was using freenom for free domain names (.tk,.cf etc.) and then, I was using Cloudflare as an proxy and an dns server to add every dns setting I had to use (A, AAAA, MX, etc.).


1

It appears that you are trying to browse to the site from the machine on which it is hosted. When you access it via localhost, the machine translates the hostname to the loopback address, 127.0.0.1; when you access it via the fqdn, mywebiste.ddns.net, your machine translates the hostname to your WAN address (assuming you don't host a local DNS server). To ...


Only top voted, non community-wiki answers of a minimum length are eligible