Questions tagged [bind]

BIND is by far the most widely used DNS software on the Internet. It provides a robust and stable platform on top of which organizations can build distributed computing systems with the knowledge that those systems are fully compliant with published DNS standards.

Filter by
Sorted by
Tagged with
1 vote
1 answer
27 views

bind9 insecurity proof failed resolving

i have 2 ubuntu servers and bind9 installed on both of them. this are the configurations of the first one: options { directory "/var/cache/bind"; forwarders { 1.1.1.1; }; ...
user avatar
  • 113
1 vote
1 answer
64 views

nsupdate not working with an input file

On my debian testing server when i run the nsupdate command and enter the details manually, everything works as it should. For example: nsupdate -k /etc/bind/update.key > update add PC1.direct.labo ...
user avatar
  • 13
0 votes
0 answers
28 views

Achieving high DNS QPS throughput

I'm trying to find the maximum QPS (Query Per Second) of the DNS Resolver VM. We have our infrastructure hosted on Azure, having a VM (bind based) acting as a resolver querying Azure native DNS (168....
user avatar
  • 121
0 votes
0 answers
21 views

Having trouble making a custom local root hint in bind9

I have a recursive server that points to my Primary DNS server to resolve names but I am having major issues resolving any names can someone help? Primary DNS zone file TTL 3D @ IN SOA host....
user avatar
  • 1
0 votes
1 answer
79 views

Client can't do nslookup to my bind9 server

I'm trying to make a DNS server using bind9, however when i try to use nslookup or i try to resolve the name, it gives me a servfail error. Here is the configuration files: // This is the primary ...
user avatar
0 votes
0 answers
39 views

Allow bind answer multiple same ip addresses

My issue is exactly like this But still no solution. But info I got is, bind9 doesn't allow answer multiple same ip addresses. So it remove the duplicate and left one. If do it in bind9 is impossible, ...
user avatar
0 votes
1 answer
37 views

DNSSEC Signature ok but no chain to a trusted key or ds record

OS is FreeBSD-13.0p1 DNS is bind-named 9.16.24 We have been using DNSSEC for quite some time. In fact it is so long ago that I have forgotten most of what I did to set it up. Nonetheless, it has ...
user avatar
0 votes
1 answer
63 views

How to fix periodic DNS errors when using Pihole and local Bind9 DNS

Summary of the problem: Clients on my network cannot resolve login.live.com. When running "host login.live.com" they get: $ host login.live.com ;; communications error to 10.0.0.52#53: end ...
user avatar
  • 342
0 votes
0 answers
174 views

Windows cannot resolve a CNAME records in bind

In linux I use bind - version: 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.5 - configured in such a way that 2 host names share the same IP address. The 2 host names are server2 and server3 and they must ...
user avatar
0 votes
1 answer
30 views

bind symbolic link turning red post named restart

Need some help with bind-chroot We are running below version of bind and bind-chroot bind-9.11.2-lp151.10.1.x86_64 bind-chrootenv-9.11.2-lp151.10.1.x86_64 Our Automation code is running to add Zone ...
user avatar
0 votes
1 answer
42 views

Constant (or macro) definition for a BIND9 zone database

I am using BIND9 on a Linux system. In my zone db files I have multiple occurrences for the same IP in multiple IN A entries. For example, my www, mail, ns, etc., IN A entries refer to the same IP ...
user avatar
  • 334
0 votes
0 answers
421 views

How to change root hint in bind9?

I have a root server and I want my recursive server's use it as root hint. So I change some config files on them. Following are the files I have changed on root server and recursive server. db.root ...
user avatar
0 votes
1 answer
32 views

How to change the cache in bind9?

Now I have a RR in cache but I want to change it. Like this, I have xx.yy IN A 1.1.1.1 in cache and now I want to change it to xx.yy IN A 2.2.2.2. Is there any built-in tools of bind9?(no-restart is ...
user avatar
0 votes
0 answers
129 views

Bind9 - failed while receiving responses : end of file

Master and Slave system with views and using TSIG for authentication TSIG authenticates correctly Using raspbian buster with the latest version of bind9 Nov 04 16:21:30 raspberrypi named[11339]: ...
user avatar
0 votes
2 answers
222 views

DNS Error : extra input text

I am configuring my private DNS server. When I reached the Check BIND Configuration Syntax step, I got some errors. Here is the my Forward Zone File : $ORIGIN esprit1.com. $TTL 86400 @ IN ...
user avatar
1 vote
1 answer
107 views

BIND9 Version 9.11.33 dns delegation for Iodine tunnel

I'm trying to set up a DNS delegation using the production version of Bind9 (BIND9.11.33). The current zone is "example.localnet". The sub domain that I'm trying to set up for the Iodine DNS ...
user avatar
  • 11
0 votes
1 answer
460 views

Using BIND to provide private and public DNS resolution?

Take the following setup: I run a private network behind a NAT router Systems on the private network can connect to any resource on the Internet and hence need DNS name resolution for any Internet ...
user avatar
0 votes
0 answers
243 views

How to set up apparmor for Bind DNS?

I have figured that on my server apparmor was preventing me from running Bind in chrooted environment. I have created folder /chroot/named with all of the directories and files that Bind requires in ...
user avatar
0 votes
1 answer
357 views

BIND9 sends notify to slave only with also-notify

I have a problem that has been driving me crazy for three days! I'm replacing my Authoritative DNS servers with new ones and then I'm resetting all BIND9 configurations again to do a bit more "...
user avatar
  • 18
0 votes
1 answer
233 views

Create Fail2ban Rule for Named

As I am trying to create a rule for Fail2ban which seems to me missing for a long while as I being really nerved by in the past I'm also willing to submit it to the world :-) What's been done? ...
user avatar
  • 198
2 votes
0 answers
390 views

How do I set DNS round-robin traffic percentage with bind9?

bind9 allows you to configure DNS round-robin to multiple different IPs like: server A 10.10.10.1 server A 10.10.10.2 And it'll return 50%/50% approximate. However, I need it to return, for example, ...
user avatar
0 votes
1 answer
79 views

How can i correctly setup a local DNS server with BIND?

i setup a DNS server via Docker on my OMV NAS. NAS has static IP: 192.168.0.10 (DNS is reachable via Webmin) NAS runs BIND-Dns with Webmin in Docker listening on IP: 192.168.0.10:53 In my router i ...
user avatar
0 votes
0 answers
412 views

MX record (out of zone) has no addresses records (A or AAAA)

I have a problem with my zone config file, I hope someone can help me. I am trying to add MX record for a subdomain that we use for Microsoft 365 ecosystem I entered an MX record that was given to me ...
user avatar
  • 1
1 vote
0 answers
31 views

split a zone file in multiple locations (for statis entries and ddns updates)

Im'm trying to have dhcp update my bind9 zone file with leases of clients, but, as I understand it /etc/bind/ is not writable by bind - should be just for reading static zone files. But /var/lib/bind ...
user avatar
1 vote
1 answer
85 views

Bind9 as non-recursive public DNS forwarder for AD

We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
user avatar
  • 11
0 votes
1 answer
410 views

Dns using BIND9 and DHCP: no address records

I am using bind9 to configure a simple server, but when I try to execute named-checkzone mired.org /etc/bind/db.mired.org I got via console, NS 'asterix.mired.org' has no address records A or AAAA ...
user avatar
0 votes
0 answers
113 views

BIND reverse lookup not working

I've configured my bind server successfully for DNS lookup. However, the reverse lookup (IP Address to hostname) is not working. Here's my zone file: $TTL 38400 @ ...
user avatar
  • 311
0 votes
1 answer
346 views

Can't connect to port 53 UDP on DigitalOcean/Linode

I'm trying to set up my own DNS nameserver for a CTF challenge. I have an Ubuntu 20.04 droplet running on DigitalOcean with Bind9 installed. It works fine when testing on that machine (e.g. nslookup ...
user avatar
3 votes
0 answers
354 views

What is an alternative solution to NAT hairpin?

I recently came across an annoying problem. I have Ubuntu server running in my home network that runs web server, DHCP and DNS. I successfully exposed it using DMZ, so I could access it from the ...
user avatar
1 vote
1 answer
219 views

BIND does not answer authoritatively

I want to use BIND as a public nameserver for the companies domains. I'm using a fresh installation of ubuntu server 20.04.1 and BIND 9.16.1. The issue is that BIND never answers authoritatively. I ...
user avatar
0 votes
1 answer
460 views

Bind DNS(Nameserver is unreachable.)

Good day! I would like to on how to bind dns to a NAT? Our old server was using a pulbic IP but due to change in service providers, we were given only an option to do port forwarding. So I have set up ...
user avatar
0 votes
2 answers
251 views

Configuring ASUS Router to use custom Bind9 and DHCPd on LAN

Let’s say I have a Raspberry Pi set up to be a client on the network and I want it to use 192.168.2.2 while the router uses 192.168.2.1, what’s the necessary router configuration to use the Pi’s dhcpd ...
user avatar
0 votes
1 answer
172 views

Using BIND With Different Nameservers for Different Devices

I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...
user avatar
1 vote
3 answers
740 views

Have BIND9 drop non-authorative queries

My ISP allows me to run a DNS server, as long as it won't respond to non-authorative queries. This means no response whatsoever. I had it configured such as to refuse non-authorative, like this; > ...
user avatar
  • 111
0 votes
0 answers
29 views

Can DNS sinkhole protection be applied to specific LAN hosts

I know how to set up a DNS sinkhole that protects all hosts on a LAN, but is there a method of applying different sink hole definitions to different LAN hosts? Or even allow some defined LAN hosts ...
user avatar
  • 119
1 vote
0 answers
163 views

Modifying A record in bind server with DNSSEC

System: Debian 10, Bind: BIND 9.11.5-P4-5.1-Debian named.conf.local: zone "example.com" { type master; file "/zones/db.example.com"; inline-signing yes; auto-dnssec maintain; ...
user avatar
0 votes
1 answer
331 views

Bind9 and Debian10, can't run named

I'm using Debian 10. I installed bind9: sudo apt-get install bind9 bind9utils dnsutils I prepared my own conf file (in path /home/student/dns/myconf.conf): options { directory "/var/named"; listen-...
user avatar
  • 73
1 vote
2 answers
6k views

How to force TCP packets for testing DNS?

DNS uses UDP packets normally. However when the response is larger than a certain size, it switches to TCP. It would be very useful if we can specify TCP/UDP when running DNS query commands with DIG ...
user avatar
  • 387
0 votes
1 answer
847 views

debian bind load zone permission denied

I have bind9 installed on Debian 10. It can't load created zone xxx.yy with error: loading from master file /etc/bind/zones/db.xxx.yy failed: permission denied /etc/bind/zones is mounted to fresh ...
user avatar
0 votes
1 answer
970 views

dig: couldn't get address for 'ns2.bluedental.pl': not found. Linux DNS server

I have my own DNS server. Web browsers shows DNS_PROBE_FINISHED_NXDOMAIN for my sites. My external IP is 37.190.144.15 For example I have cloud.bluedental.pl domain. When I type dig cloud....
user avatar
  • 135
0 votes
1 answer
405 views

Setting up named in arch linux

I am trying to set up a domain on an Arch Linux VM. Following is my named.conf options { directory "/var/named"; pid-file "/run/named/named.pid"; // Uncomment these to enable IPv6 ...
user avatar
  • 183
0 votes
1 answer
31 views

BIND based DNS server for local server

I'm currently trying to set up a dns server for home server system, such that I can visit external websites as normal, but when I visit 'http://example.local' on any device in the network it redirects ...
user avatar
  • 101
0 votes
1 answer
444 views

DNSoverTLS for upstream recursion requests in Bind9/Stunnel

There is a lot of information out there about DNSoverTLS and different combinations of setups, and I've slowly been going through different combinations to get the right setup for us, but it's led to ...
user avatar
  • 267
0 votes
1 answer
111 views

Bind can't resolve the domain (only forward)

I followed this tutorial as well as I could on my Fedora 31 box. I have a setup with a router running on 192.168.1.1 and two machines with fixed IP addresses: mando (192.168.1.2) and carbon (192.168.1....
user avatar
9 votes
0 answers
3k views

What are the real world differences between bind, systemd-resolved, dnsmasq, etc.? [closed]

I'm trying to achieve three simple goals (on our CentOS8 server)... local DNS resolution/caching DNSSEC DNSoverTLS At first I went straight for dnsmasq because that was what it seemed most people ...
user avatar
  • 267
0 votes
1 answer
2k views

Is it possible to round robin DNS requests?

I'm not sure I've phrased this appropriately, but what I'm trying to accomplish is an ever so slight annonymization of the machines online footprint by issuing DNS queries to a list of DNS servers in ...
user avatar
  • 267
1 vote
1 answer
2k views

Error in named-checkzone: DNS zone error:( out of zone) has no addresses records (A or AAAA)

I have the same issue as in Error in named-checkzone. I have cross-checked my zone file and they are properly formatted FQDN. I checked the zone file using : :/etc/bind$ sudo named-checkzone ...
user avatar
0 votes
1 answer
164 views

BIND9 configuration, which allows DDNS updates and configuration-mgmt updates in the same time?

Not sure if it is possible at all, but I am trying to find solution for such setup: BIND9 server, managed by Puppet(https://github.com/ajjahn/puppet-dns), Puppet populates zone files for all static ...
user avatar
1 vote
0 answers
513 views

BIND DNS: Exclude specific sudonmain to wildcard Record

I don't know if i am in the good category or even the good forum. But like i saw many tutorials on Ubuntu and other linux version and their fixs didn't solve my problem, i imagined that there is some ...
user avatar
0 votes
0 answers
19 views

DDNS records read from secondary DNS

I use BIND9 with DHCPD(Centos 7) and configured DDNS. It works well on this server. Question is how I can read DDNS records on secondary DNS(Bind9) from this primary DNS ? I configured slave zone on ...
user avatar
  • 1

1
2 3 4 5
7