Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
6
votes
3 answers

Where BIND9 saves its cache?

On Ubuntu 12.04 I installed BIND9 via apt-get install. I configure the server in a very simple way and it works in name resolution. Now I'm curious to read (if it's possible) its cache. Reading the rndc manpage I tried to use the rndc flush view…
JustTrying
  • 239
  • 2
  • 5
  • 11
6
votes
4 answers

Centos 6.3 Bind hangs on "Generating /etc/rndc.key"

I'm installing bind on a clean Centos 6.3 system. In previous versions that would work like a charm, but now I get Generating /etc/rndc.key when trying to start bind after the installation. Why is this and does anyone know how to solve…
solsol
  • 1,121
  • 8
  • 21
  • 31
6
votes
1 answer

DNS synonyms: multiple zones, one zone file

I have a site with a bunch of synonym domains. The site itself accepts all the different domains, and redirects to the correct domain name. Is there any reason not to configure zones.conf like so: zone "correctdomain.com" { type master; file…
Marcus Downing
  • 788
  • 10
  • 18
6
votes
1 answer

Basic DNSSEC configuration under BIND 9.7?

Could anybody provide a step-by-step procedure to set up DNSSEC under BIND 9.7? I think the version is relevant because it is supposed to make life easier. In fact, there is a document published by ISC called DNSSEC for Humans, which I used as a…
sadpluto
  • 183
  • 1
  • 4
6
votes
2 answers

Hidden DNS master only sending notify to one slave

My hidden DNS master is only sending notifies to one of the name servers for a zone I have 3 named servers ns0,ns1 & ns2 all running bind 9.7.3.dfsg-1ubuntu4.1. When an update is processed the master (ns0) seems to behave normally. ns0…
Rob
  • 247
  • 1
  • 3
  • 13
6
votes
3 answers

How to configure bind9 to be a local DNS only with no internet access?

I want to configure bind9 to be a local DNS only with no internet access at all. So I have 5 PCs in my virtual domain xy.com. Within this domain there is no access to the internet. The DNS server has entries like: pc1.xy.com IN A…
6
votes
1 answer

nsupdate, getting BADKEY error

I'm trying to update a name using nsupdate executed from within the name server itself but I receive the error message ; TSIG error with server: tsig indicates error. I created a key with dnssec-keygen -a hmac-md5 -b 512 -n HOST -r /dev/urandom…
stracktracer
  • 125
  • 1
  • 1
  • 8
6
votes
2 answers

How do you open up debug logging for BIND on Ubuntu?

I have a BIND server running on Ubuntu that is failing to lookup www.microsoft.com or any records at Microsoft. All other domains like google.com and yahoo.com seem to be working just fine. I am looking for some suggestions on how to improve…
KodeTitan
  • 881
  • 2
  • 10
  • 15
6
votes
3 answers

A tool to change the default bind interface for a given command?

This is somehow related to Change interface for doing a whois The differece is that I'd like to know if it's possible to specify the default interface only for a specific program - not system-wide. For example: let's say my server has several IPs. I…
wanson
  • 457
  • 1
  • 4
  • 11
6
votes
6 answers

How do you use VIM to edit tabular data (tables)? Specifically, BIND (named) DNS db files

I'm usually a purist when it comes to vimming. I don't like remapping keys, or learning to rely on a bunch of plugins. I like to feel just as powerful on foreign boxen as I do on my own dev box. I do, however, believe in syntax files. Even though…
Bruno Bronosky
  • 4,529
  • 3
  • 26
  • 34
6
votes
4 answers

ISC DHCP+BIND with failover and dynamic updates, can the secondary bind update DDNS?

I'm setting up a failover system for DHCP and DDNS. The software being used are ISC BIND and ISC DHCP, running on Ubuntu 10.04 LTS. serverA runs DNS01 and DHCP01, serverB runs DNS02 and DHCP02. DHCP failover is set to a 128-bit split (half the zone…
pauska
  • 19,620
  • 5
  • 57
  • 75
6
votes
6 answers

Is there a way to batch create DNS slave zones on a new slave DNS server?

I currently have a DNS server which is serving as a master DNS server for a number of our domains. I want to set up a brand new secondary DNS server. Is there any way I can automatically have BIND on the new server act as a secondary for all the…
Josh
  • 9,190
  • 28
  • 80
  • 128
6
votes
4 answers

Is setting an empty/blank DNS A record allowed?

I'm trying to wrap my head around the wonderful world on DNS. I have created a zone file for example.com which contains: @ A 1.2.3.4 * A 1.2.3.4 However I am also setting up my local DNS, local.example.com which I have created a…
John
  • 113
  • 1
  • 2
  • 4
6
votes
1 answer

How to migrate BIND configuration to dnssec-policy from auto-dnssec maintain without disruption?

BIND 9.16 introduced a new dnssec-policy feature as a further more automated DNSSEC key management and signing facility over the long established auto-dnssec maintain functionality. The documentation does not appear to cover migrating from the old…
Håkan Lindqvist
  • 35,011
  • 5
  • 69
  • 94
5
votes
3 answers

Conditional DNS forwarding with named on Linux

I have a Centos 5.2 server which runs named for DNS resolution - it doesn't hold any information of its own, and just forwards all requests. From the named.conf: options { [...] forwarders { 1.1.1.1; 1.1.1.2; }; }; All other lines in…
DrStalker
  • 6,946
  • 24
  • 79
  • 107