Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
7
votes
6 answers

Does named/BIND log startup errors?

Does named log startup errors if so what is the default path? The Wikipedia page for BIND speak of a configuration file verification tool - does anyone know of this?
chickeninabiscuit
  • 1,104
  • 6
  • 20
  • 33
7
votes
3 answers

BIND slave doesn't sync up with master until it is restarted

I have two DNS servers running BIND9, one master and one slave. When the zone file is updated on the master, I want the slave server to immediately start serving the changed record(s), but BIND is giving me some guff. DNS zone transfer is already…
Nic
  • 13,425
  • 17
  • 61
  • 104
7
votes
1 answer

Why does the wildcard not work?

my bind config carrie IN A 192.253.253.4 *.carrie IN A 192.253.253.6 *.test.carrie IN A 192.253.253.7 execute nslookup carrie Address: 192.253.253.4 nslookup a.test.carrie Address: 192.253.253.7 but when I execute nslookup…
leo
  • 73
  • 3
7
votes
2 answers

How to solve call trace produced by security_ops_task_setrlimit() with bind

I have a machine with CentOS 5.9 and VMware installed. Currently I am using BIND 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6 (default shipped with distribution). When I restart the machine, I can see this message on screen just when the named service is…
shakaran
  • 356
  • 1
  • 7
  • 19
7
votes
1 answer

measures to take against a dns amplification attack

I recently discovered that my server was being used as part of a DNS DDOS. Basically, my BIND setup allowed recursion, and it was used to attack a certain IP address using IP spoofing. I took the necessary measures to stop this, and disabled…
Waleed Hamra
  • 751
  • 6
  • 16
7
votes
3 answers

BIND permission errors

I've been trying to use nsupdate to dynamiclly update my nameservers records. I get a serverfail when i attempt it. This is from the syslogs. Nov 12 08:00:53 ps133045 named[14314]: client 78.72.53.42#50135: signer "www.mydomain.com" approved Nov 12…
Thuy
  • 107
  • 1
  • 2
  • 6
7
votes
2 answers

DNS Server Behind NAT

I've got a Bind 9 DNS server sitting behind a NAT firewall, assume the Internet facing IP is 1.2.3.4 There are no restrictions on outgoing traffic, and port 53 (TCP/UDP) is forwarded from 1.2.3.4 to the internal DNS server (10.0.0.1). There are no…
Bryan
  • 7,628
  • 15
  • 69
  • 94
7
votes
1 answer

Is there a way for BIND 9 to automatically dump it's cache to a file before terminating and reloading it upon starting

I have BIND 9 set up and running on my local machine to answer DNS queries locally. I know it's not neccessary; my router has a built-in nameserver. But I do that for learning purposes. Now I need BIND to dump it's cache before terminating (shutting…
Marwan Tanager
  • 217
  • 2
  • 5
7
votes
2 answers

What are acceptable key lengths for DNSSEC KSK/ZSK?

I've been tasked to look into implementing DNSSEC on our name servers. While the technical side of this (generate keys, sign zones, prepare rollovers) are relatively straightforward, I've run into a logistical problem. From the documentation I've…
Shadur
  • 1,337
  • 1
  • 11
  • 20
7
votes
6 answers

lots of dns requests from China, should I worry?

I have turned on dns query logs, and when running "tail -f /var/log/syslog" I see that I get hundreds of identical requests from a single ip address: Apr 7 12:36:13 server17 named[26294]: client 121.12.173.191#10856: query: mydomain.de IN ANY + Apr…
nn4l
  • 1,336
  • 5
  • 23
  • 40
7
votes
4 answers

BIND9: Combining key and ACL for allow-update

I have set up a BIND 9 server and configured cryptographic keys in order to allow updates from a client. Now in my named.conf, I have set the following: allow-update { key dns1.example.org.; }; This works and I can perform updates (add, delete zone…
Daniel
  • 3,047
  • 5
  • 22
  • 27
7
votes
4 answers

Configure BIND with database backend and DLZ support

Decided to move my windows based DNS servers to linux. The problem is I need to be able to dynamically update zone files without having to restart bind. It seems the most popular solution is to install bind drivers for a database server (…
7
votes
2 answers

Secondary nameserver keeps trying to transfer a domain and succeeds every time

We're using BIND 9.7.3 on the stable version of Debian (updated weekly), and we see some very strange behaviour for one particular domain. We host a few hundred, but this one is ours. Basically, the secondary DNS server is trying to transfer the…
Ernie
  • 5,352
  • 6
  • 31
  • 37
7
votes
4 answers

BIND HTTP "API"

First off, I'm a bit of a bind n00b so if I say things that don't make sense just ignore them =) Is there any software that would allow "API" like commands for creating, updating, deleting etc. zones and records on BIND? I have two DNS servers…
user80776
7
votes
3 answers

How to configure DNS server to forward queries about particular domain AND all of its subdomains

I have DNS server (linux box with bind9), which is authorative for some domains, and forward all other queries to external DNS server of my ISP provider. So far no problem. Now I want that queries about some specific domains were forwarded to my…
user71061
  • 501
  • 2
  • 10
  • 22