Questions tagged [bind]
BIND is by far the most widely used DNS software on the Internet. It provides a robust and stable platform on top of which organizations can build distributed computing systems with the knowledge that those systems are fully compliant with published DNS standards.
319
questions
0
votes
1
answer
42
views
What permissions are needed to bind a tunneled ssh port on the "remote end" post connection? Error is "bind [127.0.0.1]:<port> Permission denied"
As many others have encountered, I've got a system behind a "remote" DHCP router that needs to connect reliably with a "local" system using reverse port mapping for various reasons ...
- 457
0
votes
0
answers
23
views
other subnet CANNOT resolve internal host name but can resovle internet host name
Pls help. I just setup a Bind9 in Ubuntu 20.4 server(192.168.1.100). I have 3 subnet in the network. 192.168.0.0/23, 192.168.33.0/24 and 192.168.88.0/24.
In 192.168.0.0/23 network, I can resolve ...
- 1
0
votes
0
answers
39
views
BIND9 DNS Server failing to resolve two names in one domain
I am running BIND 9.18.11-3 on my ASUS router (armv7l, ASUSWRT-Merlin).
It is an authoritative server for my own domains and resolves DNS queries for hosts on my network.
My problem
These bom.gov.au ...
- 13
-1
votes
2
answers
66
views
In csv file search concern number for particular text in second column
I have main two csv files as follows:
file1.csv
731,dev-servers.com.,A,192.168.0.10
598,test-servers.com.,A,192.168.0.12
599,test1-servers.com.,A,192.168.0.11
file2.csv
dev-servers.com.,A,192.168.0....
0
votes
2
answers
70
views
Bind 9 DNSSEC not returning SERVFAIL when it should
So I just installed bind 9.11.36 on Almalinux 9.1 and it is not validating DNSSEC as expected. Looking up www.dnssec-failed.org should fail validation. The results are missing the ad flag as ...
- 13
0
votes
1
answer
61
views
K8S Cert-manager wont add DNS01 RFC2136 Challenge for a primary zone in a less privilege sub zone (DNS REFUSED)
Apologies ahead, this is likely to be a misunderstanding on my part, but for the life of me I can not see the reasons why cert-manager is trying to write to the primary zone and not the subzone per ...
0
votes
1
answer
99
views
My primary BIND server does not answer authoritatively, the secondary works as expected. What is wrong?
I seem to have an issue with my BIND9 setup.
My first server answers (ns1.m2osw.com) response is not authoritative (no "aa" flag). Here is the output I currently get:
$ dig @ns1.m2osw.com ...
- 1,488
2
votes
0
answers
59
views
ISC DHCP Server working but Bind9 is not working
So I have been trying to set up my own DCHP and DNS servers on my old 2012 Mac Mini running Ubuntu Server 22.04. The Bind9 is running on a docker container with this compose file:
version: "3&...
- 21
0
votes
0
answers
43
views
Bind9 container can't resolve domain name
I have set up a Bind9 container in order to allow my host machine to resolve "www.beesafe.co" as my apache server (which is running in another container with 172.19.0.4 IP address).
However, ...
1
vote
1
answer
295
views
Authoritative BIND DNS server for homelab -- how to resolve other zones?
I'm currently setting up a DNS server for my homelab. I've made a zone file corresponding to the lab's domain, let's say home.lab, and the server now knows it's the authoritative server for that zone, ...
- 143
0
votes
1
answer
168
views
High latency for bind9 over wireguard
I have a DNS home server running with bind9. To keep using my server outside my local network, I configured a VPN with wireguard.With this command : time wget -O/dev/null https://debian.org, here are ...
- 11
0
votes
1
answer
1k
views
Is it possible to use AdGuard Home with DNSSEC to DNS over TLS but with a Bind9 internal DNS Server downstream of AdGuard?
In the diagram I threw together the left hand side shows my current LAN's DNS query path, I would like to have it as shown on the right hand side with AdGuard and DNSSEC or DNS over TLS if possible I ...
0
votes
0
answers
132
views
Ubuntu 22 Remove Redundant Nameservers
I have an Ubuntu 22 system set up for STATIC IP and my own DNS server via netplan like:
# This is the network config written by 'subiquity'
network:
ethernets:
ens3:
addresses:
- 10....
- 1,675
0
votes
1
answer
340
views
BIND on OPNsense, slave zone not loaded if master is unavailable
I run BIND on OPNsense as the slave server for an internal DNS zone.
I notice that, if the master for that zone goes down, the slave will stop answering request for that zone (responding with SRVFAIL) ...
- 980
0
votes
1
answer
3k
views
bind9 query failed (REFUSED)
I installed and configured bind9 on Ubuntu 20.04 with the following files:
root@server:/etc/bind# cat named.conf.options
options {
directory "/var/cache/bind";
// If there ...
- 387
0
votes
1
answer
24
views
named-checkzone: chroot option "-t" as non-root user
We have bind nameservers running in chroot environment. We edit zone files on a different host where we want to verify them using named-checkzone before uploading. We used parameter -w to adjust the ...
- 103
1
vote
1
answer
1k
views
bind9 insecurity proof failed resolving
i have 2 ubuntu servers and bind9 installed on both of them.
this are the configurations of the first one:
options {
directory "/var/cache/bind";
forwarders {
1.1.1.1;
};
...
- 123
1
vote
1
answer
332
views
nsupdate not working with an input file
On my debian testing server when i run the nsupdate command and enter the details manually, everything works as it should. For example:
nsupdate -k /etc/bind/update.key
> update add PC1.direct.labo ...
- 13
0
votes
1
answer
915
views
Client can't do nslookup to my bind9 server
I'm trying to make a DNS server using bind9, however when i try to use nslookup or i try to resolve the name, it gives me a servfail error.
Here is the configuration files:
// This is the primary ...
0
votes
0
answers
416
views
Allow bind answer multiple same ip addresses
My issue is exactly like this
But still no solution. But info I got is, bind9 doesn't allow answer multiple same ip addresses. So it remove the duplicate and left one.
If do it in bind9 is impossible, ...
0
votes
1
answer
238
views
DNSSEC Signature ok but no chain to a trusted key or ds record
OS is FreeBSD-13.0p1
DNS is bind-named 9.16.24
We have been using DNSSEC for quite some time. In fact it is so long ago that I have forgotten most of what I did to set it up. Nonetheless, it has ...
- 169
0
votes
1
answer
673
views
How to fix periodic DNS errors when using Pihole and local Bind9 DNS
Summary of the problem:
Clients on my network cannot resolve login.live.com.
When running "host login.live.com" they get:
$ host login.live.com
;; communications error to 10.0.0.52#53: end ...
- 352
0
votes
0
answers
696
views
Windows cannot resolve a CNAME records in bind
In linux I use bind - version: 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.5 -
configured in such a way that 2 host names share the same IP address.
The 2 host names are server2 and server3 and they must ...
- 81
0
votes
1
answer
137
views
bind symbolic link turning red post named restart
Need some help with bind-chroot
We are running below version of bind and bind-chroot
bind-9.11.2-lp151.10.1.x86_64
bind-chrootenv-9.11.2-lp151.10.1.x86_64
Our Automation code is running to add Zone ...
0
votes
1
answer
127
views
Constant (or macro) definition for a BIND9 zone database
I am using BIND9 on a Linux system. In my zone db files I have multiple occurrences for the same IP in multiple IN A entries. For example, my www, mail, ns, etc., IN A entries refer to the same IP ...
- 434
0
votes
0
answers
2k
views
How to change root hint in bind9?
I have a root server and I want my recursive server's use it as root hint. So I change some config files on them. Following are the files I have changed on root server and recursive server.
db.root ...
- 27
0
votes
1
answer
96
views
How to change the cache in bind9?
Now I have a RR in cache but I want to change it. Like this, I have xx.yy IN A 1.1.1.1 in cache and now I want to change it to xx.yy IN A 2.2.2.2. Is there any built-in tools of bind9?(no-restart is ...
- 27
0
votes
2
answers
720
views
DNS Error : extra input text
I am configuring my private DNS server. When I reached the Check BIND Configuration Syntax step, I got some errors.
Here is the my Forward Zone File :
$ORIGIN esprit1.com.
$TTL 86400
@ IN ...
1
vote
1
answer
175
views
BIND9 Version 9.11.33 dns delegation for Iodine tunnel
I'm trying to set up a DNS delegation using the production version of Bind9 (BIND9.11.33). The current zone is "example.localnet". The sub domain that I'm trying to set up for the Iodine DNS ...
- 11
0
votes
1
answer
1k
views
Using BIND to provide private and public DNS resolution?
Take the following setup:
I run a private network behind a NAT router
Systems on the private network can connect to any resource on the Internet and hence need DNS name resolution for any Internet ...
- 980
0
votes
0
answers
501
views
How to set up apparmor for Bind DNS?
I have figured that on my server apparmor was preventing me from running Bind in chrooted environment. I have created folder /chroot/named with all of the directories and files that Bind requires in ...
- 1
0
votes
1
answer
944
views
BIND9 sends notify to slave only with also-notify
I have a problem that has been driving me crazy for three days!
I'm replacing my Authoritative DNS servers with new ones and then I'm resetting all BIND9 configurations again to do a bit more "...
- 18
0
votes
1
answer
492
views
Create Fail2ban Rule for Named
As I am trying to create a rule for Fail2ban which seems to me missing for a long while as I being really nerved by in the past I'm also willing to submit it to the world :-)
What's been done?
...
- 218
2
votes
0
answers
809
views
How do I set DNS round-robin traffic percentage with bind9?
bind9 allows you to configure DNS round-robin to multiple different IPs like:
server A 10.10.10.1
server A 10.10.10.2
And it'll return 50%/50% approximate.
However, I need it to return, for example, ...
- 33
0
votes
1
answer
155
views
How can i correctly setup a local DNS server with BIND?
i setup a DNS server via Docker on my OMV NAS.
NAS has static IP: 192.168.0.10 (DNS is reachable via Webmin)
NAS runs BIND-Dns with Webmin in Docker listening on IP: 192.168.0.10:53
In my router i ...
0
votes
0
answers
836
views
MX record (out of zone) has no addresses records (A or AAAA)
I have a problem with my zone config file, I hope someone can help me.
I am trying to add MX record for a subdomain that we use for Microsoft 365 ecosystem
I entered an MX record that was given to me ...
- 1
1
vote
0
answers
36
views
split a zone file in multiple locations (for statis entries and ddns updates)
Im'm trying to have dhcp update my bind9 zone file with leases of clients, but, as I understand it /etc/bind/ is not writable by bind - should be just for reading static zone files. But /var/lib/bind ...
- 43
1
vote
1
answer
375
views
Bind9 as non-recursive public DNS forwarder for AD
We use Active Directory. We have two local networks in domain, one in our building and one on Amazon. We are using two domain controllers on each local network. All 4 of them are synchronized over VPN....
- 11
0
votes
1
answer
740
views
Dns using BIND9 and DHCP: no address records
I am using bind9 to configure a simple server, but when I try to execute
named-checkzone mired.org /etc/bind/db.mired.org
I got via console, NS 'asterix.mired.org' has no address records A or AAAA
...
- 11
0
votes
0
answers
668
views
BIND reverse lookup not working
I've configured my bind server successfully for DNS lookup. However, the reverse lookup (IP Address to hostname) is not working.
Here's my zone file:
$TTL 38400
@ ...
- 321
0
votes
1
answer
579
views
Can't connect to port 53 UDP on DigitalOcean/Linode
I'm trying to set up my own DNS nameserver for a CTF challenge. I have an Ubuntu 20.04 droplet running on DigitalOcean with Bind9 installed. It works fine when testing on that machine (e.g. nslookup ...
- 1
3
votes
0
answers
559
views
What is an alternative solution to NAT hairpin?
I recently came across an annoying problem.
I have Ubuntu server running in my home network that runs web server, DHCP and DNS. I successfully exposed it using DMZ, so I could access it from the ...
- 31
2
votes
1
answer
1k
views
BIND does not answer authoritatively
I want to use BIND as a public nameserver for the companies domains. I'm using a fresh installation of ubuntu server 20.04.1 and BIND 9.16.1. The issue is that BIND never answers authoritatively. I ...
- 23
0
votes
1
answer
790
views
Bind DNS(Nameserver is unreachable.)
Good day!
I would like to on how to bind dns to a NAT? Our old server was using a pulbic IP but due to change in service providers, we were given only an option to do port forwarding.
So I have set up ...
0
votes
2
answers
543
views
Configuring ASUS Router to use custom Bind9 and DHCPd on LAN
Let’s say I have a Raspberry Pi set up to be a client on the network and I want it to use 192.168.2.2 while the router uses 192.168.2.1, what’s the necessary router configuration to use the Pi’s dhcpd ...
- 187
0
votes
1
answer
325
views
Using BIND With Different Nameservers for Different Devices
I am running pfSense with BIND installed. On that machine, for a subnet of devices, I want the requests to go to OpenDNS and add my own records that would take precedence over OpenDNS. For the rest of ...
- 121
1
vote
3
answers
1k
views
Have BIND9 drop non-authorative queries
My ISP allows me to run a DNS server, as long as it won't respond to non-authorative queries. This means no response whatsoever. I had it configured such as to refuse non-authorative, like this;
> ...
- 111
0
votes
0
answers
37
views
Can DNS sinkhole protection be applied to specific LAN hosts
I know how to set up a DNS sinkhole that protects all hosts on a LAN, but is there a method of applying different sink hole definitions to different LAN hosts? Or even allow some defined LAN hosts ...
- 119
1
vote
0
answers
260
views
Modifying A record in bind server with DNSSEC
System: Debian 10,
Bind: BIND 9.11.5-P4-5.1-Debian
named.conf.local:
zone "example.com" {
type master;
file "/zones/db.example.com";
inline-signing yes;
auto-dnssec maintain;
...
- 15
0
votes
1
answer
754
views
Bind9 and Debian10, can't run named
I'm using Debian 10. I installed bind9:
sudo apt-get install bind9 bind9utils dnsutils
I prepared my own conf file (in path /home/student/dns/myconf.conf):
options {
directory "/var/named";
listen-...
- 73