Questions tagged [bind]

BIND is by far the most widely used DNS software on the Internet. It provides a robust and stable platform on top of which organizations can build distributed computing systems with the knowledge that those systems are fully compliant with published DNS standards.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

BIND9 CatalogZone , nsupdate fail

I try to setup a BIND9 server that use catalog zone. I follow steps as here Here is named.conf.options root@risetdns02:/etc/bind# cat ./named.conf.options key rndc_key { secret "1234abcd8765"...
Bino Oetomo's user avatar
1 vote
1 answer
20 views

Speed up bind queries by forcing cache

I have a BIND server on Debian and would like to know what are the options that could allow me to cache domain requests so that served queries are stored in RAM for a while without having to ...
user3450548's user avatar
0 votes
1 answer
29 views

Reverse-DNS not correct (BIND9 DNS + ISC DHCP)

In my home network under Ubuntu I use a BIND9 DNS server and an ISC DHCP server with Webmin. Here are my settings: DNS Master Zone: Foward: home.local Reverse: 192.168.5 /etc/bind/named.conf.local: //...
Blasto's user avatar
  • 1
0 votes
0 answers
82 views

bind9 equivalent to dnsmasq's resolv-file option

I am currently using dnsmasq as a DNS forwarder for 1.1.1.1, but I need to switch to bind9. /etc/resolv.conf points to localhost. In my /etc/dnsmasq.conf I have the following: resolv-file=/run/resolv....
godo's user avatar
  • 103
0 votes
1 answer
225 views

Bind9 Configuration for domain name by duckdns

I am trying to test out some server stuffs on my debian virtualbox on a windows host. I have configured it to bridged network. And also was able to get duckdns free domain for testing and I can get ...
zakadmin's user avatar
0 votes
1 answer
2k views

What permissions are needed to bind a tunneled ssh port on the "remote end" post connection? Error is "bind [127.0.0.1]:<port> Permission denied"

As many others have encountered, I've got a system behind a "remote" DHCP router that needs to connect reliably with a "local" system using reverse port mapping for various reasons ...
Richard T's user avatar
  • 477
0 votes
0 answers
57 views

other subnet CANNOT resolve internal host name but can resovle internet host name

Pls help. I just setup a Bind9 in Ubuntu 20.4 server(192.168.1.100). I have 3 subnet in the network. 192.168.0.0/23, 192.168.33.0/24 and 192.168.88.0/24. In 192.168.0.0/23 network, I can resolve ...
PeterLam's user avatar
0 votes
1 answer
403 views

BIND9 DNS Server failing to resolve two names in one domain

I am running BIND 9.18.11-3 on my ASUS router (armv7l, ASUSWRT-Merlin). It is an authoritative server for my own domains and resolves DNS queries for hosts on my network. My problem These bom.gov.au ...
protogen's user avatar
-1 votes
2 answers
190 views

In csv file search concern number for particular text in second column

I have main two csv files as follows: file1.csv 731,dev-servers.com.,A,192.168.0.10 598,test-servers.com.,A,192.168.0.12 599,test1-servers.com.,A,192.168.0.11 file2.csv dev-servers.com.,A,192.168.0....
user1789869's user avatar
0 votes
2 answers
722 views

Bind 9 DNSSEC not returning SERVFAIL when it should

So I just installed bind 9.11.36 on Almalinux 9.1 and it is not validating DNSSEC as expected. Looking up www.dnssec-failed.org should fail validation. The results are missing the ad flag as ...
user2293165's user avatar
0 votes
1 answer
279 views

K8S Cert-manager wont add DNS01 RFC2136 Challenge for a primary zone in a less privilege sub zone (DNS REFUSED)

Apologies ahead, this is likely to be a misunderstanding on my part, but for the life of me I can not see the reasons why cert-manager is trying to write to the primary zone and not the subzone per ...
James A R Brown's user avatar
0 votes
1 answer
537 views

My primary BIND server does not answer authoritatively, the secondary works as expected. What is wrong?

I seem to have an issue with my BIND9 setup. My first server answers (ns1.m2osw.com) response is not authoritative (no "aa" flag). Here is the output I currently get: $ dig @ns1.m2osw.com ...
Alexis Wilke's user avatar
  • 1,580
2 votes
0 answers
175 views

ISC DHCP Server working but Bind9 is not working

So I have been trying to set up my own DCHP and DNS servers on my old 2012 Mac Mini running Ubuntu Server 22.04. The Bind9 is running on a docker container with this compose file: version: "3&...
Mr. Sister's user avatar
0 votes
0 answers
101 views

Bind9 container can't resolve domain name

I have set up a Bind9 container in order to allow my host machine to resolve "www.beesafe.co" as my apache server (which is running in another container with 172.19.0.4 IP address). However, ...
Yaël Point's user avatar
3 votes
1 answer
985 views

Authoritative BIND DNS server for homelab -- how to resolve other zones?

I'm currently setting up a DNS server for my homelab. I've made a zone file corresponding to the lab's domain, let's say home.lab, and the server now knows it's the authoritative server for that zone, ...
Danya02's user avatar
  • 163
0 votes
1 answer
399 views

High latency for bind9 over wireguard

I have a DNS home server running with bind9. To keep using my server outside my local network, I configured a VPN with wireguard.With this command : time wget -O/dev/null https://debian.org, here are ...
anderson's user avatar
0 votes
1 answer
2k views

Is it possible to use AdGuard Home with DNSSEC to DNS over TLS but with a Bind9 internal DNS Server downstream of AdGuard?

In the diagram I threw together the left hand side shows my current LAN's DNS query path, I would like to have it as shown on the right hand side with AdGuard and DNSSEC or DNS over TLS if possible I ...
SecEnthusiast's user avatar
0 votes
1 answer
616 views

BIND on OPNsense, slave zone not loaded if master is unavailable

I run BIND on OPNsense as the slave server for an internal DNS zone. I notice that, if the master for that zone goes down, the slave will stop answering request for that zone (responding with SRVFAIL) ...
user149408's user avatar
  • 1,100
0 votes
1 answer
5k views

bind9 query failed (REFUSED)

I installed and configured bind9 on Ubuntu 20.04 with the following files: root@server:/etc/bind# cat named.conf.options options { directory "/var/cache/bind"; // If there ...
Saeed's user avatar
  • 403
0 votes
1 answer
73 views

named-checkzone: chroot option "-t" as non-root user

We have bind nameservers running in chroot environment. We edit zone files on a different host where we want to verify them using named-checkzone before uploading. We used parameter -w to adjust the ...
Drunix's user avatar
  • 103
1 vote
1 answer
3k views

bind9 insecurity proof failed resolving

i have 2 ubuntu servers and bind9 installed on both of them. this are the configurations of the first one: options { directory "/var/cache/bind"; forwarders { 1.1.1.1; }; ...
JothamB's user avatar
  • 123
1 vote
1 answer
562 views

nsupdate not working with an input file

On my debian testing server when i run the nsupdate command and enter the details manually, everything works as it should. For example: nsupdate -k /etc/bind/update.key > update add PC1.direct.labo ...
Alex's user avatar
  • 13
0 votes
1 answer
1k views

Client can't do nslookup to my bind9 server

I'm trying to make a DNS server using bind9, however when i try to use nslookup or i try to resolve the name, it gives me a servfail error. Here is the configuration files: // This is the primary ...
guillermo's user avatar
0 votes
0 answers
633 views

Allow bind answer multiple same ip addresses

My issue is exactly like this But still no solution. But info I got is, bind9 doesn't allow answer multiple same ip addresses. So it remove the duplicate and left one. If do it in bind9 is impossible, ...
Muhammad Ikhwan Perwira's user avatar
0 votes
1 answer
390 views

DNSSEC Signature ok but no chain to a trusted key or ds record

OS is FreeBSD-13.0p1 DNS is bind-named 9.16.24 We have been using DNSSEC for quite some time. In fact it is so long ago that I have forgotten most of what I did to set it up. Nonetheless, it has ...
James B. Byrne's user avatar
0 votes
1 answer
1k views

How to fix periodic DNS errors when using Pihole and local Bind9 DNS

Summary of the problem: Clients on my network cannot resolve login.live.com. When running "host login.live.com" they get: $ host login.live.com ;; communications error to 10.0.0.52#53: end ...
ervingsb's user avatar
  • 362
0 votes
0 answers
996 views

Windows cannot resolve a CNAME records in bind

In linux I use bind - version: 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.5 - configured in such a way that 2 host names share the same IP address. The 2 host names are server2 and server3 and they must ...
famedoro's user avatar
0 votes
1 answer
185 views

bind symbolic link turning red post named restart

Need some help with bind-chroot We are running below version of bind and bind-chroot bind-9.11.2-lp151.10.1.x86_64 bind-chrootenv-9.11.2-lp151.10.1.x86_64 Our Automation code is running to add Zone ...
Harshith Mulky's user avatar
0 votes
1 answer
227 views

Constant (or macro) definition for a BIND9 zone database

I am using BIND9 on a Linux system. In my zone db files I have multiple occurrences for the same IP in multiple IN A entries. For example, my www, mail, ns, etc., IN A entries refer to the same IP ...
FedKad's user avatar
  • 504
0 votes
0 answers
4k views

How to change root hint in bind9?

I have a root server and I want my recursive server's use it as root hint. So I change some config files on them. Following are the files I have changed on root server and recursive server. db.root ...
Wanying Gong's user avatar
0 votes
1 answer
315 views

How to change the cache in bind9?

Now I have a RR in cache but I want to change it. Like this, I have xx.yy IN A 1.1.1.1 in cache and now I want to change it to xx.yy IN A 2.2.2.2. Is there any built-in tools of bind9?(no-restart is ...
Wanying Gong's user avatar
0 votes
2 answers
1k views

DNS Error : extra input text

I am configuring my private DNS server. When I reached the Check BIND Configuration Syntax step, I got some errors. Here is the my Forward Zone File : $ORIGIN esprit1.com. $TTL 86400 @ IN ...
Heni HadjSessi's user avatar
1 vote
1 answer
290 views

BIND9 Version 9.11.33 dns delegation for Iodine tunnel

I'm trying to set up a DNS delegation using the production version of Bind9 (BIND9.11.33). The current zone is "example.localnet". The sub domain that I'm trying to set up for the Iodine DNS ...
WinSta0's user avatar
  • 11
0 votes
1 answer
3k views

Using BIND to provide private and public DNS resolution?

Take the following setup: I run a private network behind a NAT router Systems on the private network can connect to any resource on the Internet and hence need DNS name resolution for any Internet ...
user149408's user avatar
  • 1,100
0 votes
0 answers
672 views

How to set up apparmor for Bind DNS?

I have figured that on my server apparmor was preventing me from running Bind in chrooted environment. I have created folder /chroot/named with all of the directories and files that Bind requires in ...
beepbeep's user avatar
  • 101
0 votes
1 answer
2k views

BIND9 sends notify to slave only with also-notify

I have a problem that has been driving me crazy for three days! I'm replacing my Authoritative DNS servers with new ones and then I'm resetting all BIND9 configurations again to do a bit more "...
MrTaik's user avatar
  • 18
0 votes
1 answer
756 views

Create Fail2ban Rule for Named

As I am trying to create a rule for Fail2ban which seems to me missing for a long while as I being really nerved by in the past I'm also willing to submit it to the world :-) What's been done? ...
djdomi's user avatar
  • 248
2 votes
0 answers
1k views

How do I set DNS round-robin traffic percentage with bind9?

bind9 allows you to configure DNS round-robin to multiple different IPs like: server A 10.10.10.1 server A 10.10.10.2 And it'll return 50%/50% approximate. However, I need it to return, for example, ...
Joel Guzmán's user avatar
0 votes
1 answer
308 views

How can i correctly setup a local DNS server with BIND?

i setup a DNS server via Docker on my OMV NAS. NAS has static IP: 192.168.0.10 (DNS is reachable via Webmin) NAS runs BIND-Dns with Webmin in Docker listening on IP: 192.168.0.10:53 In my router i ...
reddiamond92's user avatar
0 votes
0 answers
1k views

MX record (out of zone) has no addresses records (A or AAAA)

I have a problem with my zone config file, I hope someone can help me. I am trying to add MX record for a subdomain that we use for Microsoft 365 ecosystem I entered an MX record that was given to me ...
Johnny's user avatar
  • 1
1 vote
0 answers
48 views

split a zone file in multiple locations (for statis entries and ddns updates)

Im'm trying to have dhcp update my bind9 zone file with leases of clients, but, as I understand it /etc/bind/ is not writable by bind - should be just for reading static zone files. But /var/lib/bind ...
Ninguém's user avatar
1 vote
1 answer
674 views

Bind9 as non-recursive public DNS forwarder for AD

We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
Dom's user avatar
  • 11
0 votes
1 answer
954 views

Dns using BIND9 and DHCP: no address records

I am using bind9 to configure a simple server, but when I try to execute named-checkzone mired.org /etc/bind/db.mired.org I got via console, NS 'asterix.mired.org' has no address records A or AAAA ...
Learner33's user avatar
0 votes
0 answers
960 views

BIND reverse lookup not working

I've configured my bind server successfully for DNS lookup. However, the reverse lookup (IP Address to hostname) is not working. Here's my zone file: $TTL 38400 @ ...
Fang's user avatar
  • 343
0 votes
1 answer
703 views

Can't connect to port 53 UDP on DigitalOcean/Linode

I'm trying to set up my own DNS nameserver for a CTF challenge. I have an Ubuntu 20.04 droplet running on DigitalOcean with Bind9 installed. It works fine when testing on that machine (e.g. nslookup ...
kszafran's user avatar
3 votes
0 answers
776 views

What is an alternative solution to NAT hairpin?

I recently came across an annoying problem. I have Ubuntu server running in my home network that runs web server, DHCP and DNS. I successfully exposed it using DMZ, so I could access it from the ...
kwojcikowski's user avatar
2 votes
1 answer
3k views

BIND does not answer authoritatively

I want to use BIND as a public nameserver for the companies domains. I'm using a fresh installation of ubuntu server 20.04.1 and BIND 9.16.1. The issue is that BIND never answers authoritatively. I ...
McAddress's user avatar
0 votes
1 answer
1k views

Bind DNS(Nameserver is unreachable.)

Good day! I would like to on how to bind dns to a NAT? Our old server was using a pulbic IP but due to change in service providers, we were given only an option to do port forwarding. So I have set up ...
marvin castro's user avatar
0 votes
2 answers
779 views

Configuring ASUS Router to use custom Bind9 and DHCPd on LAN

Let’s say I have a Raspberry Pi set up to be a client on the network and I want it to use 192.168.2.2 while the router uses 192.168.2.1, what’s the necessary router configuration to use the Pi’s dhcpd ...
John Ernest's user avatar
0 votes
1 answer
585 views

Using BIND With Different Nameservers for Different Devices

I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...
E.T.'s user avatar
  • 121

1
2 3 4 5
7