Questions tagged [bind]
BIND is by far the most widely used DNS software on the Internet. It provides a robust and stable platform on top of which organizations can build distributed computing systems with the knowledge that those systems are fully compliant with published DNS standards.
323
questions
0
votes
0
answers
7
views
BIND9 CatalogZone , nsupdate fail
I try to setup a BIND9 server that use catalog zone.
I follow steps as here
Here is named.conf.options
root@risetdns02:/etc/bind# cat ./named.conf.options
key rndc_key { secret "1234abcd8765"...
1
vote
1
answer
20
views
Speed up bind queries by forcing cache
I have a BIND server on Debian and would like to know what are the options that could allow me to cache domain requests so that served queries are stored in RAM for a while without having to ...
0
votes
1
answer
29
views
Reverse-DNS not correct (BIND9 DNS + ISC DHCP)
In my home network under Ubuntu I use a BIND9 DNS server and an ISC DHCP server with Webmin.
Here are my settings:
DNS Master Zone:
Foward: home.local
Reverse: 192.168.5
/etc/bind/named.conf.local:
//...
0
votes
0
answers
82
views
bind9 equivalent to dnsmasq's resolv-file option
I am currently using dnsmasq as a DNS forwarder for 1.1.1.1, but I need to switch to bind9.
/etc/resolv.conf points to localhost.
In my /etc/dnsmasq.conf I have the following:
resolv-file=/run/resolv....
0
votes
1
answer
225
views
Bind9 Configuration for domain name by duckdns
I am trying to test out some server stuffs on my debian virtualbox on a windows host. I have configured it to bridged network. And also was able to get duckdns free domain for testing and I can get ...
0
votes
1
answer
2k
views
What permissions are needed to bind a tunneled ssh port on the "remote end" post connection? Error is "bind [127.0.0.1]:<port> Permission denied"
As many others have encountered, I've got a system behind a "remote" DHCP router that needs to connect reliably with a "local" system using reverse port mapping for various reasons ...
0
votes
0
answers
57
views
other subnet CANNOT resolve internal host name but can resovle internet host name
Pls help. I just setup a Bind9 in Ubuntu 20.4 server(192.168.1.100). I have 3 subnet in the network. 192.168.0.0/23, 192.168.33.0/24 and 192.168.88.0/24.
In 192.168.0.0/23 network, I can resolve ...
0
votes
1
answer
403
views
BIND9 DNS Server failing to resolve two names in one domain
I am running BIND 9.18.11-3 on my ASUS router (armv7l, ASUSWRT-Merlin).
It is an authoritative server for my own domains and resolves DNS queries for hosts on my network.
My problem
These bom.gov.au ...
-1
votes
2
answers
190
views
In csv file search concern number for particular text in second column
I have main two csv files as follows:
file1.csv
731,dev-servers.com.,A,192.168.0.10
598,test-servers.com.,A,192.168.0.12
599,test1-servers.com.,A,192.168.0.11
file2.csv
dev-servers.com.,A,192.168.0....
0
votes
2
answers
722
views
Bind 9 DNSSEC not returning SERVFAIL when it should
So I just installed bind 9.11.36 on Almalinux 9.1 and it is not validating DNSSEC as expected. Looking up www.dnssec-failed.org should fail validation. The results are missing the ad flag as ...
0
votes
1
answer
279
views
K8S Cert-manager wont add DNS01 RFC2136 Challenge for a primary zone in a less privilege sub zone (DNS REFUSED)
Apologies ahead, this is likely to be a misunderstanding on my part, but for the life of me I can not see the reasons why cert-manager is trying to write to the primary zone and not the subzone per ...
0
votes
1
answer
537
views
My primary BIND server does not answer authoritatively, the secondary works as expected. What is wrong?
I seem to have an issue with my BIND9 setup.
My first server answers (ns1.m2osw.com) response is not authoritative (no "aa" flag). Here is the output I currently get:
$ dig @ns1.m2osw.com ...
2
votes
0
answers
175
views
ISC DHCP Server working but Bind9 is not working
So I have been trying to set up my own DCHP and DNS servers on my old 2012 Mac Mini running Ubuntu Server 22.04. The Bind9 is running on a docker container with this compose file:
version: "3&...
0
votes
0
answers
101
views
Bind9 container can't resolve domain name
I have set up a Bind9 container in order to allow my host machine to resolve "www.beesafe.co" as my apache server (which is running in another container with 172.19.0.4 IP address).
However, ...
3
votes
1
answer
985
views
Authoritative BIND DNS server for homelab -- how to resolve other zones?
I'm currently setting up a DNS server for my homelab. I've made a zone file corresponding to the lab's domain, let's say home.lab, and the server now knows it's the authoritative server for that zone, ...
0
votes
1
answer
399
views
High latency for bind9 over wireguard
I have a DNS home server running with bind9. To keep using my server outside my local network, I configured a VPN with wireguard.With this command : time wget -O/dev/null https://debian.org, here are ...
0
votes
1
answer
2k
views
Is it possible to use AdGuard Home with DNSSEC to DNS over TLS but with a Bind9 internal DNS Server downstream of AdGuard?
In the diagram I threw together the left hand side shows my current LAN's DNS query path, I would like to have it as shown on the right hand side with AdGuard and DNSSEC or DNS over TLS if possible I ...
0
votes
1
answer
616
views
BIND on OPNsense, slave zone not loaded if master is unavailable
I run BIND on OPNsense as the slave server for an internal DNS zone.
I notice that, if the master for that zone goes down, the slave will stop answering request for that zone (responding with SRVFAIL) ...
0
votes
1
answer
5k
views
bind9 query failed (REFUSED)
I installed and configured bind9 on Ubuntu 20.04 with the following files:
root@server:/etc/bind# cat named.conf.options
options {
directory "/var/cache/bind";
// If there ...
0
votes
1
answer
73
views
named-checkzone: chroot option "-t" as non-root user
We have bind nameservers running in chroot environment. We edit zone files on a different host where we want to verify them using named-checkzone before uploading. We used parameter -w to adjust the ...
1
vote
1
answer
3k
views
bind9 insecurity proof failed resolving
i have 2 ubuntu servers and bind9 installed on both of them.
this are the configurations of the first one:
options {
directory "/var/cache/bind";
forwarders {
1.1.1.1;
};
...
1
vote
1
answer
562
views
nsupdate not working with an input file
On my debian testing server when i run the nsupdate command and enter the details manually, everything works as it should. For example:
nsupdate -k /etc/bind/update.key
> update add PC1.direct.labo ...
0
votes
1
answer
1k
views
Client can't do nslookup to my bind9 server
I'm trying to make a DNS server using bind9, however when i try to use nslookup or i try to resolve the name, it gives me a servfail error.
Here is the configuration files:
// This is the primary ...
0
votes
0
answers
633
views
Allow bind answer multiple same ip addresses
My issue is exactly like this
But still no solution. But info I got is, bind9 doesn't allow answer multiple same ip addresses. So it remove the duplicate and left one.
If do it in bind9 is impossible, ...
0
votes
1
answer
390
views
DNSSEC Signature ok but no chain to a trusted key or ds record
OS is FreeBSD-13.0p1
DNS is bind-named 9.16.24
We have been using DNSSEC for quite some time. In fact it is so long ago that I have forgotten most of what I did to set it up. Nonetheless, it has ...
0
votes
1
answer
1k
views
How to fix periodic DNS errors when using Pihole and local Bind9 DNS
Summary of the problem:
Clients on my network cannot resolve login.live.com.
When running "host login.live.com" they get:
$ host login.live.com
;; communications error to 10.0.0.52#53: end ...
0
votes
0
answers
996
views
Windows cannot resolve a CNAME records in bind
In linux I use bind - version: 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.5 -
configured in such a way that 2 host names share the same IP address.
The 2 host names are server2 and server3 and they must ...
0
votes
1
answer
185
views
bind symbolic link turning red post named restart
Need some help with bind-chroot
We are running below version of bind and bind-chroot
bind-9.11.2-lp151.10.1.x86_64
bind-chrootenv-9.11.2-lp151.10.1.x86_64
Our Automation code is running to add Zone ...
0
votes
1
answer
227
views
Constant (or macro) definition for a BIND9 zone database
I am using BIND9 on a Linux system. In my zone db files I have multiple occurrences for the same IP in multiple IN A entries. For example, my www, mail, ns, etc., IN A entries refer to the same IP ...
0
votes
0
answers
4k
views
How to change root hint in bind9?
I have a root server and I want my recursive server's use it as root hint. So I change some config files on them. Following are the files I have changed on root server and recursive server.
db.root ...
0
votes
1
answer
315
views
How to change the cache in bind9?
Now I have a RR in cache but I want to change it. Like this, I have xx.yy IN A 1.1.1.1 in cache and now I want to change it to xx.yy IN A 2.2.2.2. Is there any built-in tools of bind9?(no-restart is ...
0
votes
2
answers
1k
views
DNS Error : extra input text
I am configuring my private DNS server. When I reached the Check BIND Configuration Syntax step, I got some errors.
Here is the my Forward Zone File :
$ORIGIN esprit1.com.
$TTL 86400
@ IN ...
1
vote
1
answer
290
views
BIND9 Version 9.11.33 dns delegation for Iodine tunnel
I'm trying to set up a DNS delegation using the production version of Bind9 (BIND9.11.33). The current zone is "example.localnet". The sub domain that I'm trying to set up for the Iodine DNS ...
0
votes
1
answer
3k
views
Using BIND to provide private and public DNS resolution?
Take the following setup:
I run a private network behind a NAT router
Systems on the private network can connect to any resource on the Internet and hence need DNS name resolution for any Internet ...
0
votes
0
answers
672
views
How to set up apparmor for Bind DNS?
I have figured that on my server apparmor was preventing me from running Bind in chrooted environment. I have created folder /chroot/named with all of the directories and files that Bind requires in ...
0
votes
1
answer
2k
views
BIND9 sends notify to slave only with also-notify
I have a problem that has been driving me crazy for three days!
I'm replacing my Authoritative DNS servers with new ones and then I'm resetting all BIND9 configurations again to do a bit more "...
0
votes
1
answer
756
views
Create Fail2ban Rule for Named
As I am trying to create a rule for Fail2ban which seems to me missing for a long while as I being really nerved by in the past I'm also willing to submit it to the world :-)
What's been done?
...
2
votes
0
answers
1k
views
How do I set DNS round-robin traffic percentage with bind9?
bind9 allows you to configure DNS round-robin to multiple different IPs like:
server A 10.10.10.1
server A 10.10.10.2
And it'll return 50%/50% approximate.
However, I need it to return, for example, ...
0
votes
1
answer
308
views
How can i correctly setup a local DNS server with BIND?
i setup a DNS server via Docker on my OMV NAS.
NAS has static IP: 192.168.0.10 (DNS is reachable via Webmin)
NAS runs BIND-Dns with Webmin in Docker listening on IP: 192.168.0.10:53
In my router i ...
0
votes
0
answers
1k
views
MX record (out of zone) has no addresses records (A or AAAA)
I have a problem with my zone config file, I hope someone can help me.
I am trying to add MX record for a subdomain that we use for Microsoft 365 ecosystem
I entered an MX record that was given to me ...
1
vote
0
answers
48
views
split a zone file in multiple locations (for statis entries and ddns updates)
Im'm trying to have dhcp update my bind9 zone file with leases of clients, but, as I understand it /etc/bind/ is not writable by bind - should be just for reading static zone files. But /var/lib/bind ...
1
vote
1
answer
674
views
Bind9 as non-recursive public DNS forwarder for AD
We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
0
votes
1
answer
954
views
Dns using BIND9 and DHCP: no address records
I am using bind9 to configure a simple server, but when I try to execute
named-checkzone mired.org /etc/bind/db.mired.org
I got via console, NS 'asterix.mired.org' has no address records A or AAAA
...
0
votes
0
answers
960
views
BIND reverse lookup not working
I've configured my bind server successfully for DNS lookup. However, the reverse lookup (IP Address to hostname) is not working.
Here's my zone file:
$TTL 38400
@ ...
0
votes
1
answer
703
views
Can't connect to port 53 UDP on DigitalOcean/Linode
I'm trying to set up my own DNS nameserver for a CTF challenge. I have an Ubuntu 20.04 droplet running on DigitalOcean with Bind9 installed. It works fine when testing on that machine (e.g. nslookup ...
3
votes
0
answers
776
views
What is an alternative solution to NAT hairpin?
I recently came across an annoying problem.
I have Ubuntu server running in my home network that runs web server, DHCP and DNS. I successfully exposed it using DMZ, so I could access it from the ...
2
votes
1
answer
3k
views
BIND does not answer authoritatively
I want to use BIND as a public nameserver for the companies domains. I'm using a fresh installation of ubuntu server 20.04.1 and BIND 9.16.1. The issue is that BIND never answers authoritatively. I ...
0
votes
1
answer
1k
views
Bind DNS(Nameserver is unreachable.)
Good day!
I would like to on how to bind dns to a NAT? Our old server was using a pulbic IP but due to change in service providers, we were given only an option to do port forwarding.
So I have set up ...
0
votes
2
answers
779
views
Configuring ASUS Router to use custom Bind9 and DHCPd on LAN
Let’s say I have a Raspberry Pi set up to be a client on the network and I want it to use 192.168.2.2 while the router uses 192.168.2.1, what’s the necessary router configuration to use the Pi’s dhcpd ...
0
votes
1
answer
585
views
Using BIND With Different Nameservers for Different Devices
I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...