Questions tagged [named-conf]
79 questions
1
vote
1 answer
How to restrict zone transfers to specific authorized servers only
I recently failed a PCI compliance scan because of the following:
This DNS server allows unrestricted zone transfers. Attackers may be
able to use this information to gain knowledge on the structure of
your networks to aid in device discovery…
JonoB
- 273
- 1
- 3
- 9
1
vote
1 answer
Disallow recursion on named.conf
I want to disable recursive DNS queries against the nameserver
Does this line work out
recursion no;
or do I have put in these lines
allow-transfer {“none”;};
allow-recursion {“none”;};
recursion no;
Jean
- 261
- 1
- 7
- 15
1
vote
2 answers
can't start bind - 'cannot access /var/named/run-root/etc/pki/dnssec-keys: ' ... 'could not open entropy source'
I'm completely boggled by bind! Would massively appreciate any tips.
When I try to start bind I see:
root@WIG001-001 ~]# /etc/init.d/named start
ls: cannot access /var/named/run-root/etc/pki/dnssec-keys: No such file or directory
mount: mount…
Mike Atkinson
- 191
- 1
- 1
- 6
1
vote
1 answer
Visualizing DNS named query logs
Anyone out has suggestions as to what is available for visualizing logs produced by named?
romant
- 526
- 5
- 21
1
vote
1 answer
named-checkconf throwing error on previously functioning forward zone file
I wanted to add a zone to my bind9 configuration (BIND 9.16.1). I have about 20 domains serviced by this name server, most of which have worked for > 10 years.
named-checkconf is throwing errors on the new conf file, but also all the old conf files,…
David
- 71
- 2
- 4
1
vote
1 answer
BIND - list of forwarders used on several zones
I am setting up a BIND (v9.16) nameserver.
Its main purpose is to work as a regular recursor for our internal hosts. For a couple of specific zones though (the ones that we host), I need to set it up as a forwarder. The goal is to avoid creating a…
Patrick Aszody
- 13
- 2
0
votes
1 answer
BIND cannot see local client PCs and vice versa
I'm trying to configure bind9 DNS to make it usable for my tiny network of windows PCs in order to create Active Directory DC on samba.
For some reason I am getting "ignoring out-of-zone data" for these PCs.
I am pretty sure I am missing something,…
domaniqs
- 3
- 2
0
votes
1 answer
Two domains in one DNS zone file
I manage an authoritative DNS server for my organizations DNS.
We recently purchased additional domain names which end in a different domain than the one my organization has.
For example, my organizations domain is AAA.GOV.CA (www.aaa.gov.ca,…
Mike Glassman
- 1
- 3
0
votes
0 answers
Named - Log NXDOMAIN queries at the server?
I've been scouring the internet for an answer to this - being new to setting up DNS, I can't believe that there's not a clear option for this.
All I'm trying to do is have named write to a log each time it receives a request that it can't find and…
Locane
- 429
- 1
- 8
- 20
0
votes
1 answer
Is it correct BIND9 configuration for my external DNS zone?
My file with zone
My /etc/bind/db.piduna.org
;
; BIND data file for local loopback interface
;
$TTL 604800
$ORIGIN piduna.org.
@ IN SOA ns1.piduna.org. root.piduna.org. (
2018031701 ; Serial
…
Piduna
- 541
- 4
- 12
- 25
0
votes
1 answer
Configure simple named DNS server
for a test setup of a software application (with apps, specific hardware and so on) i need to route an public existing domain to an internal server instead of the public server. I would do this with a network, special configured for this test setup.…
CodeNinja
- 305
- 1
- 8
- 18
0
votes
1 answer
What is the diff between resolv.conf and named.conf forwarders?
As I have been troubleshooting the DNS creation process in Ubuntu I have noticed that the following files appear redundant:
etc/bind/named.conf.options (or a section of named.conf depending on how your files are set up)
forwarders {
1.2.3.4;
…
storm
- 89
- 2
- 3
- 12
0
votes
2 answers
Create DNS for a wilcard subdomain that is localhost
I'm trying to create DNS for wildcard subdomains that run on localhost.
It's not working. The main domain is fine but the sub domains are pointing to an external server instead.
Here's what I have:
In /etc/named.conf:
zone "typeflex" IN {
type…
Asa Carter
- 249
- 1
- 3
- 15
0
votes
3 answers
View match-clients works only with subnet, not with single IP address
I'm running Bind on OpenWrt 15.05.1 as DNS server. I wanted to set up multiple view, with different zones.
acl "trusted" {
10.0.1.0/24;
localhost;
localnets;
};
acl "blacklisted" {
10.0.1.10;
};
options {
…
user319725
0
votes
1 answer
BIND: zone transfers with views configured not working
We use bind 9.8.2 on RHEL 6 servers. I have setup 2 test DNS servers using views. One is master one is slave. I have 2 views, one for "internal" and one for "external". Everything seems to work except that on my slave server my zone in "view A" is…
user53029
- 629
- 3
- 14
- 36