Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
13
votes
2 answers

How can I selectively override some A records on a Bind DNS Server?

I'm guessing there has to be a reasonable way to solve my issue but I'm trying to get some advice on a best practice to implement. I have recently moved to a Web Design company and we need to be able to spoof DNS entries for websites we're working…
Kladskull
  • 1,255
  • 5
  • 15
  • 32
13
votes
3 answers

bind would not work unless allow-query is "any"

I have this in /etc/named.conf, I commented the default values and set my own under it. My domain would not load in browser unless I set allow-query to "any", is this OK, what should I edit? If is localhost or 127.0.0.1; 10.0.1.0/24; domain would…
adrianTNT
  • 1,077
  • 6
  • 22
  • 43
13
votes
1 answer

In BIND, forward DNS query for specific domain to specific nameserver

Windows Server 2003 has this feature where you can forward queries for domain "example.com" to specific nameserver (not the default DNS server). How do i set this up in BIND? For example, i want to set up forwarding for local TLD to specific local…
Janis Veinbergs
  • 1,585
  • 4
  • 23
  • 34
13
votes
4 answers

Read only bind-mount?

I use mount -o bind to mount directories inside chroots, which works really well. The problem is that I'd like some of these bind-mounted directories to be read only in chroot. Is it possible? If not - any other way to achieve it? I was thinking…
user13185
12
votes
2 answers

Windows 2012 can't validate forwarders without a root zone?

(Disclaimer: I am not a Windows DNS admin. I do have a decent amount of DNS experience under my belt though, and this is not making any sense. I am working closely with the admins responsible for these devices and can get tests performed as…
Andrew B
  • 32,588
  • 12
  • 93
  • 131
12
votes
1 answer

bind9 proper recursion setup

If I remove recursion then I can't resolve external domains but can still resolve domains that are on the DNS server. What is the proper way to setup recursion correctly so external domains can still be resolved without leaving the DNS server…
Tsukasa
  • 303
  • 1
  • 4
  • 13
12
votes
4 answers

Why running named(bind) in chroot is so important for security? Or maybe it is not?

I'm playing with bind and started wondering why this software is, for example, in CentOS running in chroot. Don't misunderstand me, I know what bind is and what chroot (jail) is for. But my main question is that is bind running whithout chroot so…
B14D3
  • 5,188
  • 15
  • 64
  • 83
12
votes
2 answers

Binary zone file on BIND9

A DNS Master zone file has been transferred to a slave, but I cannot read the zone file: > less db.example.com "db.example.com "may be a binary file. See it anyway? This happened after I used this command: cp -r /usr/local/sbin/* /usr/sbin/. I…
user1044942
  • 139
  • 1
  • 1
  • 3
12
votes
1 answer

BIND9: Do forwarders have any priority?

I am just setting up my BIND9-Server and it works well so far. I decided to integrate a little gimmick into the abilities of my DNS. I want it to resolve IANA-compliant domains like *.com and *.net by the DNS-server of my ISP but i also want to…
grindhold
  • 121
  • 1
  • 1
  • 3
12
votes
3 answers

BIND, Master, Slaves and Notify

It might seem like a very basic question, but, how is a master DNS server aware of its slaves? I mean, does it parse the zone file and determine where to send the NOTIFY message? And if that is the case, then, is the NOTIFY mechanism broken in a…
Peter
  • 822
  • 2
  • 10
  • 23
12
votes
1 answer

dns - BIND - how to return a different IP based on request's subnet

We have an intranet DNS server (system-config-bind on RHEL) serving office A, and a VPN connecting offices A and B. Office A has a server named "dev". In office A, to access a server "dev" on the local network, the address is 192.168.1.13 In…
Chris E.
  • 269
  • 1
  • 3
  • 9
12
votes
4 answers

Changing DNS serial number to be in the past

I have some DNS servers for our organization that was setup by my predecessor. He did not use the standard format for serial numbers, instead he used an odd format starting with 2033. What I want to do is replace his DNS servers with my own but am…
Jordan Eunson
  • 1,322
  • 1
  • 9
  • 15
11
votes
2 answers

Bind, force zone update on slave

I have two test servers master and slave: Master is updating slave but very slowly. How to speed this up. Master (192.168.0.122) /etc/named.conf zone "domain.com." { type master; file "caching-example/domain.com.db"; //allow-update {…
Abc Xyz
  • 608
  • 1
  • 8
  • 17
11
votes
7 answers

Two name servers necessary?

I want to use my internet connection to host two personal websites (two different domains). I would also like to host mail for these domains. This requires hosting my own name server. In the nameservers configuration section on my registrar's…
Mike
11
votes
2 answers

bind9 does not resolve dnssec correctly

I have a problem with my dns server setup. My bind server is mainly a cache-server but does also serve some internal domains. It listens only on my private network and serves only requests from there. Today I wanted to enable the bind to validate…
user364476