Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
0
votes
2 answers

Apache LDAPS connection to AD not working

I am trying to set up LDAPS with apache, so that users logging in to my site will be authenticated against my AD, and that this auth traffic is itself encrypted. Apache is version 2.2.15 running on Red Hat 6.2 AD is on Windows 2008 R2 This all works…
gtmcclinton
  • 151
  • 1
  • 7
0
votes
1 answer

UTF8 in named.conf bind

I have a zone file that looks like this: فلسطين. 172800 IN NS idn.pnina.ps. فلسطين. 172800 IN NS ns1.pnina.ps. فلسطين. 172800 IN NS dns1.gov.ps. فلسطين. 172800 IN NS …
Nick
  • 826
  • 2
  • 15
  • 42
0
votes
1 answer

after install ssl certificate fatal bind xxx.xxx.xxx.xx port 587 already in use

I have an Ubuntu 12.04 server setup with Virtualmin/Webmin latest version using a self-signed certificate generated during installation working fine for more than a year without any problem. This week I installed a GoDaddy certificate (Not wildcard)…
Carlive1
  • 3
  • 1
  • 1
  • 4
0
votes
1 answer

Issues with delegating subdomain to AD server

I have a working authorative BIND 9.8.4-P2 server on freebsd on domain domain.com with IP 192.168.0.3 and name ns.domain.com that I did not set up on my own. It is a hidden server from which a subset is published to the providers server. I have…
martin
  • 161
  • 1
  • 7
0
votes
2 answers

Configure Bind to log all queried domains from specific client IPs

I would like to know how I can configure a bind dns server to log all queried domains from specific client IPs.
user1861174
  • 253
  • 1
  • 3
0
votes
2 answers

Recursion not available, but still gives answer

I tried to dig a domain on a non-recursive DNS server. From what I know (so far), a non recursive DNS is not supposed to answer what they are not authoritative for. For example : [root@dhcppc14 vwxyz]# dig muse.mu @202.159.36.218 ; <<>> DiG…
vwxyzx
  • 11
  • 1
  • 3
0
votes
1 answer

BIND DNS Forwarder Performance

Does anyone know how to measure the performance of forwarders that are configured on a BIND DNS (may be in terms of RTT, SRTT)? This will help to know which forwarders are working optimally, I tend to script this so as to get a trend over a…
0
votes
1 answer

Logging wildcard query in bind

I had setup a wildcard in my zone, and now I regret. I want to found out which name is actually in use. Any ways to log all queries that matches the wildcard in bind?
J-16 SDiZ
  • 238
  • 2
  • 9
0
votes
1 answer

using monit to stop or start a service

I would like to use monit to monitor my DNS server. if BIND failed it should stop OSPFD. i tried this but I get an error; > check process named with pidfile /var/run/named/named.pid start > program "/etc/init.d/named start" stop program …
0
votes
1 answer

How to alias name for IP Address

I have a website which is hosted in local Server (CentOS 5.x) (Hostname: xxx.yyy.local, IP : 192.168.5.25). I can browse the site typing server ip in the browser from my Local Network. How can I get an alias for “http://192.168.5.25/support” Eg:…
SM_IND
  • 11
  • 1
  • 2
0
votes
0 answers

Gmail mail is handled by 10 your-dns-needs-immediate-attention.gmail

I am running my own DNS server using bind, and I have only just noticed the output of host -t mx gmail on any system using my DNS server: gmail mail is handled by 10 your-dns-needs-immediate-attention.gmail. Looking at this article from ICANN, it…
user1301428
  • 164
  • 2
  • 12
0
votes
1 answer

Host command returns two different IP addresses when run sequentially

Here's an interesting problem: ~ $ host gitlab.myorg.com gitlab.myorg.com is an alias for aln7git01.myorg.com. aln7git01.myorg.com has address 172.30.9.197 ~ $ host gitlab.myorg.com gitlab.myorg.com has address 172.30.8.24 gitlab.myorg.com is an…
Sam Hammamy
  • 189
  • 5
  • 17
0
votes
1 answer

DNSsec error in Bind9.10 following update of freebsd10.1

My DNSsec began to fail following a ports update. I have reinstalled Bind on both master and slave but the error still persist. 35 ;; WE HAVE MATERIAL, WE NOW DO VALIDATION 36 ;; VERIFYING A RRset for www.ex-mailer.com. with DNSKEY:9381:…
nix
  • 145
  • 4
0
votes
1 answer

Intentionally stop a process from responding

Is there any way to intentionally prevent a process from responding - ie. not close or kill it, but stop it dead in it's track, so it immediately stops processing anything? I've often found myself wanting to force a process into a non-responsive…
Mikk3lRo
  • 183
  • 1
  • 7
0
votes
1 answer

What does the Bind 9 query error log debug 2 qrysent, retry, restart numbers mean?

I am trying to trouble shoot some DNS problems with BIND 9 when I have a cache miss on my recursive resolver. I've enabled debug 2 logging for query errors and am getting the following: 01-Jun-2015 03:04:41.539 debug 1: client 71.41.189.242#53761…
Bryan Waters
  • 103
  • 4
1 2 3
99
100