Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
0
votes
0 answers

Sending but not receiving mails(centOs, postfix) - Probably dns issue

The error message: Delivery to the following recipient has been delayed: contato@domain.com Message will be retried for 1 more day(s) Technical details of temporary failure: DNS Error: 353969976 DNS type 'mx' lookup of domain.com responded with…
0
votes
1 answer

BIND - Slow Query Responses Isolated To Single Interface

Currently experiencing slow query responses on a specific interface on my nameserver. I'm running BIND on a physical server with one network card. This network card is leveraged by the interface eth0, and also by the virtual interface eth0:1. They…
Hugh
  • 161
  • 9
0
votes
0 answers

Postfix - Slow sending, duplicate sending

We recently moved offices, and thus changed our public IPs for our Postfix mail server, and I'm now experiencing some very strange behaviour. The server will work fine for 24 hours or so, but then it will stop accepting outbound email via IMAP, or…
Jeremy Wilson
  • 311
  • 1
  • 3
  • 12
0
votes
1 answer

Problems with reverse DNS to unknown hostname

I test it in pingdom on dns health. Pingdom gives me this error message; Reverse for 192.0.2.4 points to an unknown host name (192-0-2-4.rev.example.invalid). The PTR record for the address points to an unknown host name. My named.conf.local file; …
berk
  • 5
  • 3
0
votes
2 answers

Systemd unit script that should print a message to the terminal is not working

I have a CentOS7 server running named-chroot. The problem is named and named-chroot are separate systemd services in CentOS7, and I have both a stable system and a short memory. Months go by between any need for BIND maintenance. When I have BIND…
0
votes
1 answer

solution to force slave catch only dns update zone info from master dns / CentOS 7 / Bind 9

Bind 9 , CentoOS 7 Looking for a solution to force bind on slave dns server (cache only) to update zone records or flush some how the dns cache to get new Tried to restart bind on both servers tried to increase serial on master nothing seems to be…
user387694
0
votes
1 answer

Any way to filter IP's when logging queries? (BIND 9.3)

I would like to record queries to my DNS from a particular ip. Is this possible? Right now I have this: channel query_log { file "/var/named/data/queries.log" versions 2 size 1G; severity debug 3; …
JFA
0
votes
1 answer

Is there some type of DNS server amplification attack possible by querying servers for non-existent domain names?

In working with Bind DNS servers, which are not open resolvers and do not perform recursive queries, I see a great mumber of incoming DNS query requests, that are denied or refused, that focus on domain names that list the DNS servers as being…
MRodriguez
  • 99
  • 3
0
votes
1 answer

dig gets answer from bind9, but host, nslookup and postfix don't

I have just upgraded my working email server from Ubuntu 14.04 to 16.04, which caused many issues. One of the issues I couldn't resolve is this: I run a caching bind9 DNS with a pretty standard configuration: named.conf.options: acl goodclients { …
mattti
  • 51
  • 1
  • 5
0
votes
0 answers

Debian with only bind9 crash unexpected, where to look for the issue?

I´m running an Debian (jessie) OS with bind9 as DNS service. Since I started with that system I have some unexpected system issues. From time to time DNS isn´t any longer working (e.g. the users got a timeout) and I need to restart the whole…
Sonnenbiene
  • 130
  • 1
  • 1
  • 10
0
votes
0 answers

PowerDNS : Respond differently based on Client IP address

Currently I'm using Bind9 for my DNS server. It was set-up in such a way that the server respond differently depending on which IP the request came from. I'm using Bind's View to achieve this. The conf file is something similar to this : acl…
xar
  • 131
  • 5
0
votes
1 answer

kubernetes to resolve custom internal nameserver

When the pods on GKE k8s are deployed they have the ability to connect to other GCE (google compute engine) instances by ip or google metadata DNS server name. I use internal bind installed on 2 (master/slave) GCE instances for resolving. Let say…
nelasx
  • 161
  • 1
  • 9
0
votes
1 answer

Can't get reverse dns working

I've set up bind9 before but now I apparently made a misconfiguration somewhere & I don't see it. DNS is working fine, reverse DNS not. I know I have to reverse the IP range to get it working. Underneath my config. Can some kind soul show me where I…
0
votes
1 answer

graceful DNSSEC for private TLD

To use a third party service, I can use their DNS name to resolve their domain names. Unfortunately they use some bad practices like using their own made up TLD, which we'll call tld hereafter. In order to be able to resolve their domain names I've…
hbogert
  • 411
  • 1
  • 5
  • 18
0
votes
0 answers

Bind authorative dns provides non authorative answers

I have setup a DNS which handles 2 domains: The first domain has an external and internal view with internal and external ip addresses and the second domain has also internal and external views but host files are with CNAMEs pointing to the records…
subfire91
  • 57
  • 4