Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
19
votes
1 answer

What's the importance of the email address in the DNS SOA lookup?

Is there a real importance in this, except to publish the email address of the person responsible for some DNS zone? In our BIND configuration, we put a mailling list as the responsible for our domain, but we are usure if this is good practice or…
Vinícius Ferrão
  • 5,520
  • 11
  • 55
  • 95
18
votes
5 answers

DNS - Any way to force a nameserver to update the record of a domain?

I am doing some work on some domain names. I'm updating them. By using dig I can query our nameserver and I can see that the correct name has been updated. However our office dns cache is still showing the old name. Yesterday I set the TTL down to…
Amandasaurus
  • 31,471
  • 65
  • 192
  • 253
18
votes
7 answers

Listing all zones loaded in BIND

I'm trying to migrate a dns server that has several thousand zones loaded on it. The named.conf file has about 17 different includes, and some of those files also has includes in them, and lots of commented out etc. It's a fricking mess! I'm…
DuPie
  • 418
  • 1
  • 4
  • 11
17
votes
1 answer

How to setup a simple DNS server to answer just for one name and forward all the rest?

I would like to setup a small Linux (Ubuntu) server for a school project. This school server should forward all the request to the primary DNS server of the network and reply with an IPv6 address when asked for Google.com How can I do this?
angaran
  • 355
  • 2
  • 3
  • 11
17
votes
8 answers

Dig returns "status: REFUSED" for external queries?

I can't seem to work out why my DNS isn't working properly, if I run dig from the nameserver it functions correctly: # dig ungl.org ; <<>> DiG 9.5.1-P2.1 <<>> ungl.org ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY,…
Mikey
16
votes
1 answer

What’s the difference between recursion and forwarding in bind

I’m trying to understand how bind works but have been unable to find definite information about the difference between recursive queries and “forwarding”. I’ve read that globally allowing recursive queries is bad because it allows ddos attacks. But…
Raphael Schweikert
  • 219
  • 1
  • 2
  • 9
16
votes
2 answers

How does one point a domain to a load balancer that doesn't have a stable IP?

I'm trying to point mydomain.eu to an AWS load balancer, which, by its nature, does not have a stable IP, so I think I'm supposed to point the A record to a subdomain at Amazon, but as far as I can tell the A record can only be an IP address, so I'm…
16
votes
1 answer

How does DNS nameserver fall back work?

We have two DNS servers listed in our NS record. Last night, one of our DNS servers went down. As expected, some DNS servers were not resolving our hostnames. I assumed this would be temporary and would start working once the TTL of our NS records…
Belmin Fernandez
  • 10,799
  • 27
  • 84
  • 148
15
votes
2 answers

Non-dot-wildcard (*-foo.example.com) for bind?

It seems there's no way to tell bind that *-foo.example.com should resolve to eg. 10.1.2.3, while *-bar.example.com resolves to 10.2.3.4. Is there any workaround? Can some names eg. resolve with an external program? Or should I change bind to eg.…
tuomassalo
  • 738
  • 2
  • 8
  • 22
15
votes
2 answers

bind9 - forwarders are not working

I am experiencing an issue with bind. If i want to resolve any domain name that is on the zone file. It works fine. However, when I try to resolve anything that does not belong to the zone file. I know that actual DNS servers that are being…
Sarp Kaya
  • 377
  • 2
  • 3
  • 12
15
votes
1 answer

forward all subdomains to an ip in bind

I have a bind DNS server and i'd like to catch all requests for subdomains that don't have a specific record and point them to a specific IP. This would be like *.domain.tld > 1.1.1.1 and www.domain.tld > 2.2.2.2
Arcath
  • 513
  • 4
  • 13
  • 27
14
votes
8 answers

bind: blackhole for invalid recursive queries?

I have a name server that's publicly accessible since it is the authoritative name server for a couple of domains. Currently the server is flooded with faked type ANY requests for isc.org, ripe.net and similar (that's a known distributed DoS…
Udo G
  • 443
  • 4
  • 9
  • 20
14
votes
4 answers

Configure DNS server to return same IP for all domains

I would like to configure a nameserver that will return the same IP address ("A" record) for any arbitrary host name. For example: example.com subdomain.example.com someotherdomain.com anyotherdomain.co.uk should all return the same IP address. Is…
balexand
  • 242
  • 1
  • 2
  • 7
14
votes
1 answer

What is the point of the zones.rfc1918 file for Bind9?

Using an Ubuntu 10.04 LTS server in a standalone environment and trying to use views to serve two different subnets of clients. Getting errors regarding the zones.rfc1918 file, so I'd like to know what that file is used for. What's the point of…
romandas
  • 3,302
  • 8
  • 39
  • 44
13
votes
6 answers

Should I use /etc/bind/zones/ or /var/cache/bind/?

Each tutorial seems to have a different opinion on this. For my ISC BIND zones, should I use /etc/bind/zones/ or /var/cache/bind/? In the last install, I used /var/cache/bind/ but only because I was guided to do so; however I just spotted a pid file…
Nick Bolton
  • 5,126
  • 12
  • 54
  • 62