Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2274 questions
0
votes
2 answers

Block access to ns1.example.com, mail.example.com

I have a VPS (CentOS 7) with 2 IP addresses. I am hosting my own DNS server using Bind. Running Apache. Amongst others I have "A" records for ns1.example.com -> X.X.X.X ns2.example.com -> Y.Y.Y.Y mail.example.com -> X.X.X.X server.example.com ->…
0
votes
1 answer

bind9.10 dnssec inline signing failing

I am pretty sure the ultimate error is this: [\u@r2d2:/home/ex-mailer-domains/domain.com] # dig domain.com +dnssec @8.8.8.8 ; <<>> DiG 9.10.3 <<>> domain.com +dnssec @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY,…
NIX
  • 11
  • 3
0
votes
1 answer

BIND DNS (with IPA) unable to Forward DNS Requests

I have been trying to install IPA on my CentOS system for several days, but I keep experiencing a problem with DNS forwarding, in that I am unable to get it working. I have tried this with two DNS namespaces: ost.local ost.example.com (where…
topherg
  • 171
  • 1
  • 2
  • 10
0
votes
1 answer

With bind, is it possible to define one particular A record for any domain?

I want to publish the auto-discovery wpad record for any domain the client is in, without having to declare those domains in my DNS server. Is it possible to define a record for any domain. Such that these requests will all return the same…
Christophe Drevet
  • 2,012
  • 2
  • 18
  • 26
0
votes
2 answers

Split DNS Bind9 views match-client request IP

I'm pulling my hair out over this one. I am trying to control/redirect specific traffic to use googles dns entries or to use a blackhole zone using BIND9 views on my ubuntu server. Psuedo: If request IP address is in LIST A, use googles DNS... else…
0
votes
1 answer

Resolve DNS Misconfiguration abuse complaint

Today i received a abuse complaint about my dns server. Translation courtesy of Froggiz Hi, The CERT-FR has been informed by one of his partner that one or more domain name server (DNS) below aren't validating the IP source of the transfert…
user1086010
  • 115
  • 1
  • 6
0
votes
2 answers

DNS resolution speed

I'm trying to speed up my webpage load time in distant locations. My server is located in Germany and I installed the second one in LA, CA. Then I configured BIND to return LA IP for clients from Americas and German IP for clients from Europe and…
rush
  • 1,981
  • 2
  • 15
  • 23
0
votes
3 answers

Correct way to configure similar prefixes for 2 A records / servers in BIND file?

My domain provider's config tool doesn't seem to support what I'm trying to do and I'm unsure of the proper BIND syntax for the below - any pointers appreciated! I've got separate physical production servers and staging servers and I'd like…
Bantamug
  • 101
0
votes
2 answers

BIND9 logging gets too verbose (too chatty) for my taste

I've configured logging in my BIND9 server and I have 2 log files: 1) debug.log; 2) query.log. The second one is Okay. No complaints so far. But the first one is too verbose (too chatty) for me. Like 90% of what it says there I don't even…
Gregory
  • 121
  • 1
  • 3
  • 9
0
votes
2 answers

How to deal with growing BIND9 log files

My DNS server's logs are the text files that growing too fast and one of them is already over 30 MB in size. I didn't set up the max. file sizes. I would prefer just to manually delete the lines inside the files. Let's say, my log contains entries…
Gregory
  • 121
  • 1
  • 3
  • 9
0
votes
1 answer

Bind DNS server not responding to any requests

I'm running bind on a CentOS 6.7 VPS, but I can't manage to make it respond to requests. I'm not sure, but I'm kinda suspecting some conflicts between m and loopback interfaces. Here is my ifconfig: lo Link encap:Local Loopback inet…
Syffys
  • 103
  • 1
  • 4
0
votes
1 answer

nsupdate for Windows with GSSAPI

I'm looking for solution how to use nsupdate from BIND utils with Kerberos in Windows environment. In Linux I have same utils compiled with GSSAPI support, but in Windows I unfortunately don't know how to recompile it. Can you please help me or give…
0
votes
1 answer

How to configure Bind9 as forwarder only?

I need to configure a DNS forwarder server and so far I've stumped over this tutorial. See the config below. My issue is that I don't want to block clients(i.e. goodclients) from accessing the server because I'm planning to publish it in the domain…
Anthony Hunt
  • 115
  • 5
0
votes
3 answers

Does PTR record format affect the reputation of the mail server

I wanted to know if the format of PTR record effect the reputation of the mail server for example:- Exmaple:-1 dig -X 162.254.148.198 (this ip belongs to mail.setopati.com) ;; ANSWER SECTION: 198.148.254.162.in-addr.arpa. 21577 IN PTR…
sherpaurgen
  • 616
  • 6
  • 10
  • 26
0
votes
1 answer

/var/log/messages named network unreachable. Looks like a security issue

I'm wondering if there is a security breach on my server. I was previewing the /var/log/messages file and I've been receiving a lot logging in and out and then some messages about "network unreachable resolving". Here is a sample of my last entries…