Skip to main content
Share Your Experience: Take the 2024 Developer Survey
15 votes

What is the purpose 0.in-addr.arpa and 255.in-addr.arpa in bind's default configuration?

This from here (an MS page, but still relevant): Reverse lookup zones enable the DNS server to be authoritative, that is, to know the answer in advance and to respond immediately to the most ...
Darren's user avatar
  • 2,742
14 votes
Accepted

understanding bind9 query log

This is documented in the BIND Administrator Reference Manual and source tarball. From the ICS webpage; The query log entry first reports a client object identifier in @0x format. Next, it ...
user3788685's user avatar
12 votes

What is RDDS service and how to query the RDDS service

The short answer is, right now there is no centralized place to go and run an RDDS query. The GDPR became a thing and ICANN changed some rules around in a hurry. They were already planning on ...
I M's user avatar
  • 131
9 votes
Accepted

How to force TCP packets for testing DNS?

With dig you can use +tcp. man dig says: +[no]tcp Use [do not use] TCP when querying name servers. The default behavior is to use UDP unless a type any or ixfr=N query is requested, in which case the ...
Bendilock's user avatar
  • 106
8 votes

What is RDDS service and how to query the RDDS service

It suggests querying registrar's WHOIS service directly to possibly get more detailed information (see the "Registrar" fields earlier in the result). In this case, as of now: Registrar WHOIS Server: ...
user1077792's user avatar
8 votes

How to force TCP packets for testing DNS?

The old tools call this "virtual circuit" (vc) mode: dig google.com @8.8.8.8 +vc nslookup -vc google.com 8.8.8.8 Windows nslookup (interactive mode): nslookup> set vc
grawity_u1686's user avatar
6 votes

Site displays with Curl but not within the browser

For someone reading this in the future: For me it wasn't a DNS issue but one with https: curl my-domain.com worked because it used http protocol. However, modern browsers seem to always attempt to use ...
C. Doe's user avatar
  • 161
6 votes
Accepted

Error in named-checkzone: DNS zone error: has no address records (A or AAAA)

In a bind9 zone file, any fully qualified domain name (FQDN) needs to have the ending . character added to it. Your references around line 11-12ish ; name servers - NS records IN NS dns1.xyz1....
ivanivan's user avatar
  • 2,952
5 votes

How to mount two separate folder locations to one?

It is possible. Note: my experience in the subject is very limited; the following answer is based mainly on web research, I haven't verified this in practice myself. In general, whatever you mount to ...
Kamil Maciorowski's user avatar
5 votes
Accepted

named the working directory is not writable

The "working directory is not writable" message is a warning, not really related to the fatal errors that follow. You can silence that message by fixing the permissions on the base directory (which ...
Bill Cole's user avatar
  • 192
5 votes
Accepted

Trying to Add Registrar DNSSEC Records, - Need Some Guidance, Please

Depending on registry, the information you need to provide will exactly correspond to either a DNSKEY record (for .eu) or to a DS record (most other registries). Since you're being asked for a "digest"...
grawity_u1686's user avatar
5 votes

What is RDDS service and how to query the RDDS service

whois should be clever enough to do this for you. E.g., on macOS 10.15, if I try whois order.online, I see output from three separate requests: $ whois order.online % IANA WHOIS server % for more ...
David Moles's user avatar
4 votes
Accepted

rndc reload says zone was found in multiple views

I finally found the answer in the manual. Class is just IN as in internet zone. BIND supports other things like hesoid and this field specifies that it is an internet zone. sudo rndc reload 15.168....
Jay R. Wren's user avatar
4 votes
Accepted

Is it possible to round robin DNS requests?

This is not possible with dnsmasq or bind. There might be other DNS services that perform some load balancing. If I had to do this, I would look at a load balancer, or 'traffic manager' service to ...
madacoda's user avatar
  • 475
3 votes

BIND: Redundant Master Nameservers

In case of dual master, each one behaves independently, do you want zones to be kept in sync. There is no master that takes precedence. The parent DNS servers typically (and are expected to) ...
davidgo's user avatar
  • 71k
3 votes
Accepted

configure error "OpenSSL has unsupported dynamic loading" when building bind9

It turns out that bind does not yet support OpenSSL 1.1 (see OPenssl 1.1 and Bind on bind-users mailing list). Installing OpenSSL 1.0.2k and compiling against it solved my issue.
Étienne Miret's user avatar
3 votes
Accepted

Turn off or disable inbound requests on TCP on DNS Server

You can use your firewall to prevent tcp packet from reaching your dns server. According to this post DNS implementation has to support both protocol to be rfc compliant. Nonetheless as I said you ...
jehutyy's user avatar
  • 294
3 votes

tmux: trying to bind utf8 key

Since tmux 2.3 dynamic rebinding as explained by Chris Johnsen is no longer necassary and does not even work. To bind any UTF-8 character just use it's unicode value in 0x notation. Example Let's ...
Lefo's user avatar
  • 31
3 votes
Accepted

a dns server acts as a caching server and authoritative server at the same time

A server with recursion enabled, will check its own zones before either Recursively querying or Forwarding to another server (forwarding is another way to pass queries on to another server). If the ...
Frank Thomas's user avatar
  • 36.3k
3 votes
Accepted

Error in named-checkzone: DNS zone error:( out of zone) has no addresses records (A or AAAA)

If you pass -i local or -i local-sibling, named-checkzone will succeed fully. Look in the man page for the explanation of -i. Basically -i does post-load zone integrity checks, and defaults to -i ...
Patrick Mevzek's user avatar
3 votes
Accepted

Authoritative BIND DNS server for homelab -- how to resolve other zones?

The first option seems bad because then the authoritative server also has a double duty as a recursive resolver for the rest of the domains. For small LAN/homelab usage, that's not really a problem. (...
grawity_u1686's user avatar
2 votes
Accepted

Reverse DNS zone not working publicly

Zones only become "public" once there's a delegation in the parent zone, and it seems that 168.IN-ADDR.ARPA. doesn't have anything like that right now. For reverse DNS the delegation needs to be done ...
grawity_u1686's user avatar
2 votes

DNS: Delegate resolution of a subdomain to another name server

The problem is that you configured Bind to be authoritative for the whole of example.com. So you must either configure your local Bind to hold not only your internal DNS records, but also a copy of ...
HBruijn's user avatar
  • 1,306
2 votes

named the working directory is not writable

The correct directory on standard debian bind9 builds is: /var/cache/bind chown -R bind:root /var/cache/bind rndc reload or service bind9 reload tail -f /var/log/syslog No more errors. If running ...
Biztux's user avatar
  • 21
2 votes
Accepted

Bind9 does not respond (only) over TCP

This server was upgraded from 12.04 and i don't know it was the problem or it is ubuntu 16.04 default behavior . The problem was caused by dnsmasq . Actually the dnsmasq was listening on the port 53 ....
Omid Kosari's user avatar
2 votes
Accepted

Is /etc/resolv.conf useful during DNS Referrals or Zone Transfers

resolv.conf has nothing to do with either of those. It is used by the operating system's built-in stub resolver to find the initial server to talk with. (It is similar in purpose to "root hints".) ...
grawity_u1686's user avatar
2 votes

Bind - local zone with overriding the remote one

You would probably want to use RPZ zones. The response policy feature allows you to override single resource records with bind. This way you can keep the external zone as-is, and only override single ...
mtak's user avatar
  • 16.9k
2 votes
Accepted

How do I Open my DNS to the world?

Forgive me - but as an old timer - if you are asking these questions you are not ready to put your nameservers on the Internet. Maybe you should acquire a copy of "DNS and BIND in a Nutshell", go ...
davidgo's user avatar
  • 71k
2 votes

What's wrong with this BIND zone definition?

@ IN SOA @ ns.mycompany.com. ... @ IN NS ns.mycompany.com. @ IN CNAME web # <-- this isn't legal It is illegal to have a CNAME at the for the same ...
Zoredache's user avatar
  • 20.1k
2 votes
Accepted

How does the ISP resolve or determine the root servers for a particular Zone?

All authoritative servers for the same zone have the same contents. So you don't need to determine anything; you can just pick one NS record and go with it. (Don't think of the root or TLD zones as ...
grawity_u1686's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible