Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
8
votes
3 answers

List of domains on DNS server?

Is there a way to get a complete list of A and CNAME records on my BIND DNS server? I have access to the zone files. But on my server there are lots of zone files, and it'd take too long to go over all of them by hand. Is there a command that lists…
chroder
  • 664
  • 2
  • 8
  • 17
8
votes
4 answers

How to configure bind9 to accept connections from other machines

I'm sure this has been asked in some form before but I'm completely new to DNS and inexperienced with Linux, so bear with me :) I have a VPS from OVH hosting that I've managed to configure to suit my needs fairly well but I can't seem to get the DNS…
Pichan
  • 195
  • 1
  • 1
  • 5
8
votes
5 answers

Resolving host names to their domain name in an internal BIND domain

I'm setting up a domain on my home network for learning purposes, using BIND on CentOS to act as the name server. I've got the name server up and running as type master for my internal domain (plumbnicoll.family), and can do forward and reverse…
Adam Plumb
  • 183
  • 2
  • 4
8
votes
3 answers

Returning different DNS records depending on who asks

In BIND 9 (named), is there any way to return different A records depending on the asker's IP address? When receiving a query for a certain DNS name, I'd like to return external IP address for the queries received from the outside world, and…
Quassnoi
  • 233
  • 1
  • 7
8
votes
4 answers

Zone transfers on a split-view Bind DNS system

I have a 2-server BIND 9 setup. Server A (the 'master' server) is properly setup with two views, one for local DNS clients (allowing recursive lookups for non-authorotive domains) and one view for the rest of the world, allowing only queries for…
Taco Scargo
8
votes
4 answers

No A or AAAA record for NS (Reverse DNS)

Okay I've searched through this site and read the numerous questions all on the same topic but the puzzeling thing is that I do have an A record for both of my ns entries. When I run named-checkzone on my reverse DNS records then I get this…
Cromulent
  • 316
  • 1
  • 2
  • 18
8
votes
6 answers

What is the best webinterface to manage BIND?

I set up BIND DNS which hosts our domain, and I also use it for internal DNS. I set up different views for internal and external hosts and it works OK. My question is which is the best webinterface to manage the BIND server, which will allow me to…
Stoinov
  • 618
  • 2
  • 10
  • 15
7
votes
1 answer

Exposure of hidden-master stealth DNS server on public-facing authoritative slave

In a typical hidden-master DNS network layout, there are basically two components: Hidden master DNS server, may be behind a NAT or firewall, or be totally exposed Slave authoritative non-recursive DNS server(s) Zone files on slave DNS servers…
John Greene
  • 899
  • 10
  • 30
7
votes
1 answer

bind: loading from master file failed: file not found

So I'm kinda a newbie and I'm following this to connect a domain to my server. here is my codes: named.conf.options: acl "trusted" { 124.243.241.164; 124.243.241.164; 124.243.241.164; 124.243.241.164; }; options { …
adam west
  • 171
  • 1
  • 1
  • 5
7
votes
3 answers

How to update a zone with auto-dnssec: maintain

I am running an authoritative BIND 9.9.5-9+deb8u8-Debian on Debian Jessie. I have a working zone for robin.info that works properly (various tests report success, such as the one on pingdom.com's DNS check tool) I am trying to secure it with dnssec.…
Calimo
  • 410
  • 2
  • 6
  • 15
7
votes
1 answer

BIND - increase in outgoing NS queries after upgrade to CentOS 6.7?

After upgrading BIND to 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.2 in a few caching nameservers I've noticed it's doing lots of outgoing NS queries, without changes to incoming traffic volume or patterns. As a result, the servers are consuming much more…
André Fernandes
  • 969
  • 1
  • 10
  • 25
7
votes
1 answer

Why does Ubuntu 14.04.2 have the bind9-host packages upon installation?

Why does Ubuntu 14.04.2 have the bind9-host packages upon installation? Is this a bundled upon installing the Ubuntu OS? Is there a way to avoid having this packages upon installation?
Sympatiko
  • 73
  • 1
  • 5
7
votes
4 answers

bind not able to query some servers / domains

We have been experiencing problems with our company's DNS server when trying to resolve only certain domains, we are running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on a CentOS 6.5 server. We are autoritative for some zones and our internal clients…
dragonov7
  • 71
  • 1
  • 4
7
votes
6 answers

Automatic way to increase zone file serial number by one in BIND9

I've a BIND9 server with a lot of zones and I need to increase the serial number of the zone files by one. Some zones are using the YYYYMMDDXX format but other zones just increase it by one, as they are dynamic DNS zones, so updating all by one…
Vinícius Ferrão
  • 5,520
  • 11
  • 55
  • 95
7
votes
3 answers

How to prevent Bind from responding to spoofed IP addresses?

We all know about open resolvers, this question is kind of for the inverse situation. I have a DNS server that is locked down to certain CIDRs acl trusted {[..] options { [..] allow-query { // Accept queries from our "trusted" ACL. We…
Recct
  • 370
  • 1
  • 3
  • 22