I have my bind9 DNS server running on Ubuntu with logging on. What's bothering me is that I have log full of localhost queries instead of from IP of the computer which actually asked.DNS queries log:/var/log/named.queries.log
Code:
24-Feb-2011 16:01:19.413 client 127.0.0.1#38022: query: clients4.google.com IN A + (127.0.0.1)
[code]....
I would like configure a DNS server on Debian, only to forward through my ISP DNS servers.
View 4 Replies View RelatedI am currently running the latest version of Bind, and for some completely unknown reason I can NOT get queries to work for PTR records. All queries to the servers for reverse name lookup get query denied:
Using domain server:
Name: 66.150.173.1
Address: 66.150.173.1#53
Aliases:
Host 27.173.150.66.in-addr.arpa not found: 5(REFUSED)
And it shows in my logs:
I am at my wits ends with the piece of crap. Can anyone shine some light on why this damn Bind install won't respond to these queries?
For reference here is my named.conf:
Code:
My DNS server used to work flawlessly but for some reason it no longer responds to queries. It seems that named always queries internet root serves!!
View 3 Replies View RelatedI have internal-only email server that has internal BIND9 running. Thought it only has its IP address defined in /etc/resolv.conf, it is still resolving outside addresses.
View 2 Replies View RelatedHow often are dns queries sent? Assume I want to connect to a ssh server, will I send one dns-query in order to do that or do I send multiple during my connection? What if I request web-pages, do I send a query only when I enter a site or will I send queries every time I visit a new page on that site?
I'm asking since I'm considering getting an account at dyn.com (the standard account for $30/yr) and it comes with 600 000 queries per month (which is way more than I expect to get but knowing exactly what it means is always good).
Is there a way to run queries against a Microsoft sql server from linux? Here is what I would like to do. When I create apps that us db back end I would like to quickly check results of my queries. so if I could do something like "select * form Orders" from the terminal or another app that would be great.
View 6 Replies View RelatedI have this ISP grade Nameserver running on BIND 9.5 on Fedora Core 9 64 Bit.
Its been pretty working well for sometime until a last week when we noticed it stopped resolving for our clients using on our service.
It gives correct authouritative answers for our own ISP domain with the A, PTR and MX intact but does not return resolving queries back to clients.
Below are my files
This is the message from /var/log/messages
The 41.223.x.x and 41.215.x.x ip address are from our ISP subnet and so are our own clients being denied.
The box is also hosting our traffic graph server which is on a LAMP but listens on another IP/ethernet card.
So far the load on the server is minimal as is a Dell R200 rack server.
I chose -Server-, if this is more appropriate in -Networking-, just let me know. Basically, I need to be able to merge responses stored in a zone file with responses from an "upstream" authoritative server. I'm in the sad position of needing to "intercept" requests to *part* of a domain (but not restricted to a sub-domain!) and return results for *some* hosts that use an internally routed address, and results for the rest using the public internet addresses. Unfortunately, it's not my domain, so I can't just use views (although I suspect they could end up having some part to play in this, at least potentially)... but instead I have to actually send requests recursing to the other site's external DNS for any hosts my server doesn't have records for in the zone file.
Some background on the situation:
I work at a local government, which has a private link / VPN connection to a state government entity, and needs to use internal addresses for some of the state servers, which then get routed over an "internal" network link. But the state uses the same domain name internally and externally, just presenting views to internal clients vs. external clients. -- However, we are only being allowed access to certain of their servers through the internal link, which means that for any other servers that we don't have internal/private access for, we have to visit the public addresses just like anyone else on the internet... So, I can't just send all requests to their internal DNS and get responses, because we'd get IPs for some servers (e.g. their main web site) that we wouldn't then be able to reach using the internal network link.
For Example: Say I have a client machine, "client1", on my network ("my.net"), which uses "mydns1.my.net" for name resolution ... and which needs to access 2 servers on the state network, "private.st.us" and "public.st.us" -- so named based on how "my.net" needs to access them.
The external state DNS server/view ("ext-dns.st.us") responds to requests with something like:
private.st.us -- 1.2.3.456
public.st.us -- 1.2.3.457
(Those are just crap addresses, obviously.
The internal state DNS server/view ("int-dns.st.us") responds to requests with something like:
private.st.us -- 10.0.0.8
public.st.us -- 10.0.0.10
This works on their network because their own clients have access to all such IPs.
But for us, they only allow traffic flowing between "my.net" and their internal network to reach the 10.0.0.8 address, blocking all other address destinations. So, when "client1.my.net" asks "mydns1.my.net" for the address of "public.st.us", I need "mydns1" to recurse out to "ext-dns.st.us" to get an answer (1.2.3.457) and then return that IP to "client1" -- because "my.net" is blocked from accessing the server's 10.0.0.10 address. But, when client1 asks mydns1 for "private.st.us" I need to pull the IP (10.0.0.8) from a local zone file instead of asking either of the state DNS servers -- or optionally forward the request to "int-dns.st.us" I suppose -- because the state blocks access to certain services (which we need and are the whole cause of this problem!) via the public (1.2.3.456) address.
I can configure a caching-only name server fine, but how do I make it forward DNS queries too?
I'm thinking I could add the below to the options stanza in the /etc/named.conf file:
especially to ubuntu server 8.04 because it doesnt use a GUI. Now my question is on how to insert IP address in configuring DNS server using bind9. Actually i'm using this guideBut i m not sure on how to insert IP addresses on the primary master and secondary master. Should I insert the Ip address that i found when i type ifconfig ? or Should I assign a new IP address.I have set up a webserver, DNS server, File server and mail server on a virtual box. For now, at first, im working with the DNS server or should I work with the web server first?what should I do?
View 1 Replies View RelatedI've tried reading several tutorials on setting up a domain name with bind9, but I've never managed to get one working.
View 7 Replies View Relatedtrying to configure a Centos 5.5 server (simple file server with DHCP and DNS relay). I configured and tested the config (by 'service dnsmasq configtest') of dnsmasq and I got the message 'dnsdomain:host unknown (translation of the real message : hte inconnu) and I didn't find where I could define this host ! The hostname of the server is well defined and I can see it from all Windows PC's on the LAN. dnsmasq starts (with hte same message as in configtest) but when querying DNS from PC's te.g. trying to surf the Internet), I don't get replies (3 DNS servers are also well defined and operational).
View 2 Replies View RelatedI am bit new to Linux and have setup caching-only name server with Centos 5.5. when i do dig server, it provide resolutions. but when i use the server IP as DNS on my windows client, it says, "connection refused" on the NSlookup output. (IP table didn't enable) My server Ip is 192.168.1.253 and bellow is the configuration of "/var/named/chroot/etc/named.conf"
options {
listen-on port 53 { 127.0.0.1; 192.168.1.253; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt"; .....
I have worked with servers before now, but not DNS nameservers and I would like help setting up Bind9 on my Ubuntu 11.04 Server.
View 7 Replies View RelatedI have registered 2 nameservers running bind for a certain domain. The log file of my domain name provider (SWITCH) shows the following warning:
Warning Der Name-Server ns.xxxxx.ch (nn.nn.nn.nn) beantwortet rekursive Anfragen.
In English that would be:
Warning: Name-Server ns.xxxxx.ch (nn.nn.nn.nn) answers recursive queries.
The NS triggering the warning is running openSUSE 10.2 and the other one 11.1. Both configuration files /etc/named.conf are equivalent (well, forwarders are different). There is no such warning for the NS with 11.1. When I add "recursion no;" to the options in /etc/named.conf the warning goes away, but FF or SeaMonkey running on the server no longer get their DNS requests resolved.
I recently turned on query logging on our name server and immediately saw repeated queries for . (dot). I've not seen this before. It looks like a really sloppy DOS. What would this return if my NS was misconfigured?
May 13 18:11:41.710 queries: info: client 91.202.63.129#56089: query: . IN NS
May 13 18:11:42.083 queries: info: client 91.202.63.129#62826: query: . IN NS
May 13 18:11:42.788 queries: info: client 91.202.63.129#13620: query: . IN NS
[code]....
I have a web server on my local network with a couple domains facing the internet. When I visit these domains from within the network I'm directed to my routers configuration page due to hairpin NAT.
So I installed BIND9 on the server and set up my forwarders to Google DNS to act as a Caching Nameserver. Then I set my routers DNS primary and secondary nameservers to the IP of the local BIND server. Everything is working great.
Now I need help configuring BIND so that the domains hosted on the web server within the network are routed to the web server and not the routers configuration page.
The thing is, I've created a new local zone here (called "local.lan"), and, aparently, it is working fine, and DHCP3-SERVER is updating DNS info through the controls.But sometimes I get some strange answers from the server, like when I do the "arp" command in one of the clients, and get the server's hostname "mixed" with it's own reverse, like this: "dns.local.lan.2.168. | ether | 00:02:1e:f5:61:74 | C | eth0". Other thing is that sometimes my DNS don't update when a computer "enters" the lan. In the /var/log/syslog the DHCPOFFER appears, but the information about the DNS update isn't there.So, I would like to show you my named.conf file and my local zone db file, and get some feedback from you (what would you change... what is wrong...).
# ------------------- #
* named.conf:
# ------------------- #
[code]....
I'm running bind9 on Debian 6. I have a primary domain, 44kg.net, fully configured and working dynamically (the server also runs DHCPd and updates the DNS records properly).
[Code]....
To access my externally-facing website, which has a blog and a forum which are keyed to the external domain, I set up the domains in bind so they would resolve to the server's internal IP. This worked great for a few months, then inexplicably ceased working. I didn't touch anything, but it coincided with our router dropping its VLANs. I've moved the server to a different location and it's still not working properly. Whenever I try to lookup the external domains, I get SERVFAILs. This is annoying because the internal domain is fully working and I copied the basic settings.
[Code]....
I followed blindly this how to : [URl].. out of laziness and then for some reason bind9 didn't want to start. So I tried to apt-get remove it, but when I re-install it, it failed because
Code:
chgrp: cannot access `/etc/bind/named.conf*': No such file or directory
so I assume the chrooting stuff I did is in the way, but I know very little about chrooting and permissions ... how can I undo the following things I did :
Code:
/etc/init.d/bind9 stop
[Code]...
Location and syntax of named.conf in Ubuntu's version of BIND 9. I already have an HTTP server (in the form of Apache) along with forum software set up on my Acer netbook. However, the only way I can access the forum software is if I type in my IP address. How do I set up my named.conf to get the IP address to redirect to a domain? I already have my resolv.conf configured to allocate a domain to the IP address, but testing the ping of the site returns a "No such domain" error.
View 1 Replies View RelatedI'm trying to set up a bind9 server for my home network, I have all my IPs set to 10.0.0.X. I would like the forward and reverse to be simply "machinename", not "machinename.domain.com", as I don't want to type a domain everytime.
In my named.conf
zone "net.local" in {
type master;
file "/etc/bind/net.local.ns";
allow-update { none; };
[Code]...
Im using bind9 as DNS server on my LAN, but it does not seem to translate its own hostname correctly for some reason. Other hosts is translated correctly, the problem only seems to apply to the DNS host itself. if i "ping <server_hostname>" from the server, it translates correctly. But if i "ping <server_hostname>" from the client it only says "unknown host" The client has the correct DNS-server assigned. How can i start troubleshooting this?
[Code]...
Is leading whitespace significant in bind9 config files? This reverse lookup file (/var/chroot/bind9/etc/bind/zones/rev.168.168.192.in-addr.arpa) did not work; /var/log/messages had "zone 168.168.192.in-addr.arpa/IN: has no NS records".Inserting 3 spaces before IN in the NS line fixed it:
Code:
; IP Address-to-Host DNS Pointers for the 192.168.168.0 subnet
@ IN SOA CW8vDS.localdomain. hostmaster.localdomain. (
2011041901 ; serial
8H ; refresh
[code]...
Reading the man pages and netsearching, I did not find anything about indentation requirements except for "This is usually indented for readability, but the indents are required syntactically" here.Although the above file works, named-checkconf reports an error in it:
Code:
root@CW8vDS:/var/chroot/bind9/etc/bind/zones# named-checkconf rev.168.168.192.in-addr.arpa
rev.168.168.192.in-addr.arpa:1: syntax error near ';'
but named initialisation does not log any errors or warnings in /var/log/messages when processing this file except "/etc/bind/zones/rev.168.168.192.in-addr.arpa:2: no TTL specified; using SOA MINTTL instead".
I have a Ubuntu server running in my house.Server name UshaMain PC name HomeLaptop 1 Named BooLaptop 2 Names Bobevery one is running Ubuntu 9.10The server is running Bind9 and Samba and is working from any other PC i can type ping usha and it will give me teh ip address of the server.This has been working for 4 months now.I just installed PostFix and nowthe only PC that is working with i ping the name USHA "server name " Is the server.The other three pc come back with the IP address of the domain for USHA.I have removed the Postfix from the server but the DNS is still not working for the other pc on the network.Ho do I get Bind working again form the rest of the PC.
View 10 Replies View RelatedI have a white slate centos 5.5 installation on a virtual box at Media Temple (one of their new VE servers). I am trying to create a development environment where I can have Bind9 serve up one set of zone files to me and other developers on the internal network and another set of zone files to external requests (ie... using the views feature). I would like to be able to develop for sites for which the dns is not yet pointed at my server. The network is created by having the VE server be an OpenVPN server, and connecting my client box to the server (my mac - 10.8.0.6 / my ve server 10.8.0.1).
I have the connections working fine, I have also been able to route all network traffic from my mac through the vpn to the server. For some reason, I cannot get the DNS server on the ve server to serve me an internal view zone file. When my vpn is on, I cannot ping or navigate to any web pages from my mac. I think this is because my ve server is not setup as a dhcp server and the ip tables are not setup to allow all internal requests to use the server to go get web pages.
I cannot view-ping anything else from my mac/client when on the vpn, I can successfully ping any website my ve is authoritative for. This tells me that my ping is obviously going over the vpn, and thus an internal request, but the external zone file is still served up. The following is my named config.
acl "lan_hosts" {
10.8.0.0/24;
127.0.0.1;
};
[code]....
I have a need to set up the program TNG - The Next Generation of Genealogy Sitebuilding and run it on a local server (not on the Internet) for the purpose of learning the system prior to developing it on an actual website. I was told to use http://localhost on my browser (Mozilla Firefox). I get a message saying "That Works!", but it goes on to say that the contents of the web server have not yet been entered. The instructions for the downloaded files (which I unzipped) said to copy to the web root folder (the folder where the web server is located ?, I guess). But I don't know where it is or how to go about it. Can someone help? I already have MySQL and PHP, which are required to run this program, and I also have Apache installed on my Kubuntu 9.10 system.
View 1 Replies View RelatedI want to know if the file "named.stats" exists in bind9 under solaris 5.8?
View 1 Replies View RelatedI cannot seem to figure out where my system is pulling its localhost.localdomain setting from. OS is;
Quote:
[root@system root]# cat /etc/issue.net
Red Hat Enterprise Linux ES release 3 (Taroon Update 3)
Kernel on an m Network file is;
Quote:
[root@system root]# cat /etc/sysconfig/network
NETWORKING=yes
HOSTNAME=localhost.localdomain
Quote:
[root@system root]# hostname
system
[root@system root]# hostname -d
[root@system root]# hostname -f
system
[root@system root]#
how to set the localhost and localdomain?
For the time being, the localhost is somehow being set correctly, but the localdomain is incorrect.