Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
5
votes
1 answer

Bind: "unexpected end of input" due to NS

I have stumbled upon an odd error in a master-slave(s) configuration of Bind. The zone works fine on the master, but on the slaves I'm getting these kind of errors: 21-May-2014 19:06:07.573 general: info: zone example.com/IN: refresh: failure trying…
Tuinslak
  • 1,465
  • 8
  • 32
  • 56
5
votes
1 answer

server can't find XXX.in-addr.arpa: NXDOMAIN

I am facing a problem while configuring BIND DNS showing server can't find XXX.in-addr.arpa: NXDOMAIN while reverse dns check! everything works on forward DNS lookup but reverse DNS lookup fails. Here are my configuration files: named.conf options…
Ashwin Mekala
  • 157
  • 1
  • 2
  • 8
5
votes
3 answers

BIND zone also-notify syntax

Given the following my BIND 9 is not able to start. acl ns2 { 192.168.10.50; }; zone "10.168.192.in-addr.arpa" IN { also-notify { ns2 port 53; }; type master; file "192.168.10.db"; }; It's writing the following to the…
user192702
  • 931
  • 5
  • 15
  • 22
5
votes
2 answers

How can I use a Linux BIND DNS server for my Active Directory forest?

I am trying to setup an Active Directory forest that uses a Linux BIND server for DNS. The goal is that the Domain Controller (DC) to be able to make entries in the /etc/bind/db.foresta.net file from the linux server. Here is a diagram with my…
tr3quart1sta
  • 187
  • 1
  • 1
  • 3
5
votes
2 answers

Bypass DNSSEC for local Stub zones

I am using bind 9.9.2 as a DNSSEC validating recursive resolver in an Internet DMZ. I want to point to my internal DNS servers as stub zones (ideally) or anything except slave zones (to avoid very large zone transfers). We use a routable ip space…
Starsky
  • 103
  • 1
  • 8
5
votes
1 answer

Global zones visible in all views

I have a BIND 9 server running, currently serving several domains. For one of these domains I would like to differentiate the answers depending of the asking IP address. I know this can be done by views. But I only would like to split one domain…
Teddy
  • 195
  • 2
  • 8
5
votes
2 answers

BIND issue: nsupdate unable to update reverse zone

I'm testing my ddns update config (for ISC DHCP hosted on same server) with nsupdate, and while the forward zone updates correctly: # nsupdate > server 127.0.0.1 > key dhcpupdate MYSECRETKEY > update add test.example.com. 600 IN A…
sbgoodwin
  • 123
  • 1
  • 1
  • 8
5
votes
1 answer

Variables in named.conf

My server have one IP and several domains hosted. One and same IP appear in named.conf and several zone files. When the IP address of the server changes, I need manually to change all those IP's. Is there a way to do something like: in…
Nick
  • 826
  • 2
  • 15
  • 42
5
votes
2 answers

DNS answer with/without authority, additional sections

dig @ns7.embarqservices.net www.126.com A +dnssec +multiline ; <<>> DiG 9.7.3 <<>> @ns7.embarqservices.net www.126.com A +dnssec +multiline ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status:…
sdaffa23fdsf
  • 215
  • 1
  • 2
  • 8
5
votes
1 answer

Adding static DNS entries on a dynamic BIND setup

I've got a DNS (BIND9) and DHCP (ISC-DHCP-SERVER) setup in which the DHCP server dynamically updates the DNS when hosts grab an IP address. I'm currently resubnetting a portion of my network that's not currently handled by DHCP and it's critical…
Rauffle
  • 407
  • 1
  • 5
  • 13
5
votes
1 answer

BIND - zone not loaded due to errors

After upgrading from Ubuntu 8.04 to 10.04 my DNS isn't working properly anymore. I keep getting this error when I run named-checkzone example.com /var/cache/bind/example.com.zone.db zone example.com/IN: NS 'mx002a.example.com' has no address records…
Johan Barelds
  • 53
  • 1
  • 1
  • 3
5
votes
2 answers

Too many Bind query (cache) denied, DNS attack?

Once Bind crashed and I did: tail -f /var/log/messages I see a massive number of logs every second. Is this a DNS attack? or is there something wrong? Sometimes I see a domain in logs like this: dOmAin.com (upper and lower). As you see there is…
Zim3r
  • 1,454
  • 5
  • 24
  • 45
5
votes
1 answer

Resolve hostname without FQDN

I'm trying to configure Bind for internal LAN usage only (Linux server, Windows clients) and I would like to resolve workstation both by fqdn and shortname. For example, without DNS server, supposing to have a host named host001 I'm able to do: …
Eddie C.
  • 535
  • 1
  • 3
  • 12
5
votes
2 answers

Why is Denic not accepting my nameservers?

I'm currently in the process of moving all of our domains to our own nameservers. Which wasn't an issue until I hit our own .de domain. I (think I) understand the implications of having the NS inside it's own domain, hence the need for glue…
Oliver Salzburg
  • 4,635
  • 17
  • 55
  • 82
5
votes
1 answer

Bind9 Forwarders/Redirect

We are using Bind9 on our DNS servers. We have all of our zone files structured with the following format in our /var/named/slaves directory: mywebsite.com.hosts mysecondwebsite.com.hosts Each .hosts file contains the following information: $ORIGIN…
Blake
  • 132
  • 1
  • 5