Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Bind 9.9.2 not working
Operating Systems Linux Red Hat Bind 9.9.2 not working Post 302755213 by thmnetwork on Saturday 12th of January 2013 08:20:37 AM
Old 01-12-2013
I guess it would depend on how they're blocking it. On my home setup I have the following configuration:

Code:
options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;

        forwarders { 209.18.47.61; 209.18.47.61; };

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "trunkator.com." IN {
        type master;
        file "forwards/trunkator.com";
};

zone "1.168.192.in-addr.arpa" IN {
        type master;
        file "reverses/trunkator.com";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

The 209.* forwarders are the DNS servers for my ISP. The net effect is that a query for any zone for which it doesn't consider itself authoritative for (trunkator.com and it's reverse zone) it will forward to my ISP's DNS servers. The DNS requests to the ISP is identical to the type they would have to be supporting anyways so they don't have any criteria by which to differentiate the traffic.
 

9 More Discussions You Might Find Interesting

1. Cybersecurity

bind version

How do I find out my current version of BIND? Dhall1973:D (1 Reply)
Discussion started by: dhall1973
1 Replies

2. UNIX for Advanced & Expert Users

Bind Problem

Hi all, I've 2 Debian Etch (4) box used as ns1 and ns2 with BIND9. My domain name is something like this: subdomain.domain.com And I've 2 authorized DNS servers for the subdomain. I set this line in both of ns1 and ns2 (I.e. in ns1.subdomain.domain.com and ns2.subdomain.domain.com): cw ... (1 Reply)
Discussion started by: mjdousti
1 Replies

3. Solaris

rpc bind not working

Hi all, Was hoping someone could shed some light on my problem, rpc bind is in maintenance mode on Solaris 10 and won't fire up. contents of the error log are: rpcbind failed with 1. bash-3.00# Because rpc-bind isn't working, it's stopping nfs and autofs from working too ... (6 Replies)
Discussion started by: callmebob
6 Replies

4. Red Hat

NFS - IP bind

Hello, Our production linux server have multiple network interface. Recently we installed and started NFS. Now the client server cannot mount to the server running NFS. Later it was discovered that the port being used for NFS is only bound to one IP address, which is not the IP address I... (0 Replies)
Discussion started by: hemangjani
0 Replies

5. Red Hat

BIND configuration

I have problems with a simple BIND configuration in CentOS. I have a static public IP 1.1.1.1 and I recently bought a domain name gigi.com. I just want that gigi.com points to 1.1.1.1 (Apache Web Server). This is how my named.conf file looks: options { directory "/var/named"; }; ... (0 Replies)
Discussion started by: pasadia
0 Replies

6. Red Hat

Split DNS not working with Bind-9.7

Hi All, Distros of machines : RHEL6 Bind Vesrion : Bind-9.7-3.2 I am trying to set up a test DNS for my home network. I have two rhel 6 machines A and B. Machine A has 2 NICs and is acting as a router also, one NIC is facing intranet and the otehr is facing intranet. On machine A i have... (0 Replies)
Discussion started by: Rohit Bhanot
0 Replies

7. Programming

bind source

here is the bind source file for the client.c in bind9 logs are written in var/log/file name in the form 02-Aug-2012 15:43:12.713 client 192.168.2.4#47512: query: 209.236.125.74.in-addr.arpa IN PTR + (192.168.2.4) i am in a subnet of 10 systems through 192.168.2.1..10 i want to write logs based... (2 Replies)
Discussion started by: balvinder87
2 Replies

8. UNIX for Dummies Questions & Answers

Can't bind to IP

When you get the message can't bind to ip already in use. is there a command to search to see everything that is using that IP? I've already check the host and hostname files (2 Replies)
Discussion started by: mchelle_99
2 Replies

9. UNIX for Advanced & Expert Users

Bind

Hi All I need to do bind of exiting filesystem to new storage allocated mount --bind /prod/OpenCSS /var/lib/test echo "/prod/OpenCSS /var/lib/pgsql bind bind 0 0" >> /etc/fstab will this command just work ? (2 Replies)
Discussion started by: anil529
2 Replies

LEARN ABOUT OSX

named.conf

NAMED.CONF(5)							       BIND9							     NAMED.CONF(5)

NAME

       named.conf - configuration file for named

SYNOPSIS

       named.conf

DESCRIPTION

       named.conf is the configuration file for named. Statements are enclosed in braces and terminated with a semi-colon. Clauses in the
       statements are also semi-colon terminated. The usual comment styles are supported:

       C style: /* */

       C++ style: // to end of line

       Unix style: # to end of line

ACL

	   acl string { address_match_element; ... };

KEY

	   key domain_name {
		algorithm string;
		secret string;
	   };

MASTERS

	   masters string [ port integer ] {
		( masters | ipv4_address [port integer] |
		ipv6_address [port integer] ) [ key string ]; ...
	   };

SERVER

	   server ( ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {
		bogus boolean;
		edns boolean;
		edns-udp-size integer;
		max-udp-size integer;
		provide-ixfr boolean;
		request-ixfr boolean;
		keys server_key;
		transfers integer;
		transfer-format ( many-answers | one-answer );
		transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		support-ixfr boolean; // obsolete
	   };

TRUSTED-KEYS
	   trusted-keys {
		domain_name flags protocol algorithm key; ...
	   };

CONTROLS

	   controls {
		inet ( ipv4_address | ipv6_address | * )
		     [ port ( integer | * ) ]
		     allow { address_match_element; ... }
		     [ keys { string; ... } ];
		unix unsupported; // not implemented
	   };

LOGGING

	   logging {
		channel string {
		     file log_file;
		     syslog optional_facility;
		     null;
		     stderr;
		     severity log_severity;
		     print-time boolean;
		     print-severity boolean;
		     print-category boolean;
		};
		category string { string; ... };
	   };

LWRES

	   lwres {
		listen-on [ port integer ] {
		     ( ipv4_address | ipv6_address ) [ port integer ]; ...
		};
		view string optional_class;
		search { string; ... };
		ndots integer;
	   };

OPTIONS

	   options {
		avoid-v4-udp-ports { port; ... };
		avoid-v6-udp-ports { port; ... };
		blackhole { address_match_element; ... };
		coresize size;
		datasize size;
		directory quoted_string;
		dump-file quoted_string;
		files size;
		heartbeat-interval integer;
		host-statistics boolean; // not implemented
		host-statistics-max number; // not implemented
		hostname ( quoted_string | none );
		interface-interval integer;
		listen-on [ port integer ] { address_match_element; ... };
		listen-on-v6 [ port integer ] { address_match_element; ... };
		match-mapped-addresses boolean;
		memstatistics-file quoted_string;
		pid-file ( quoted_string | none );
		port integer;
		querylog boolean;
		recursing-file quoted_string;
		reserved-sockets integer;
		random-device quoted_string;
		recursive-clients integer;
		serial-query-rate integer;
		server-id ( quoted_string | none |;
		stacksize size;
		statistics-file quoted_string;
		statistics-interval integer; // not yet implemented
		tcp-clients integer;
		tcp-listen-queue integer;
		tkey-dhkey quoted_string integer;
		tkey-gssapi-credential quoted_string;
		tkey-domain quoted_string;
		transfers-per-ns integer;
		transfers-in integer;
		transfers-out integer;
		use-ixfr boolean;
		version ( quoted_string | none );
		allow-recursion { address_match_element; ... };
		allow-recursion-on { address_match_element; ... };
		sortlist { address_match_element; ... };
		topology { address_match_element; ... }; // not implemented
		auth-nxdomain boolean; // default changed
		minimal-responses boolean;
		recursion boolean;
		rrset-order {
		     [ class string ] [ type string ]
		     [ name quoted_string ] string string; ...
		};
		provide-ixfr boolean;
		request-ixfr boolean;
		rfc2308-type1 boolean; // not yet implemented
		additional-from-auth boolean;
		additional-from-cache boolean;
		query-source ( ( ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];
		query-source-v6 ( ( ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];
		use-queryport-pool boolean;
		queryport-pool-ports integer;
		queryport-pool-updateinterval integer;
		cleaning-interval integer;
		min-roots integer; // not implemented
		lame-ttl integer;
		max-ncache-ttl integer;
		max-cache-ttl integer;
		transfer-format ( many-answers | one-answer );
		max-cache-size size;
		max-acache-size size;
		clients-per-query number;
		max-clients-per-query number;
		check-names ( master | slave | response )
		     ( fail | warn | ignore );
		check-mx ( fail | warn | ignore );
		check-integrity boolean;
		check-mx-cname ( fail | warn | ignore );
		check-srv-cname ( fail | warn | ignore );
		cache-file quoted_string; // test option
		suppress-initial-notify boolean; // not yet implemented
		preferred-glue string;
		dual-stack-servers [ port integer ] {
		     ( quoted_string [port integer] |
		     ipv4_address [port integer] |
		     ipv6_address [port integer] ); ...
		};
		edns-udp-size integer;
		max-udp-size integer;
		root-delegation-only [ exclude { quoted_string; ... } ];
		disable-algorithms string { string; ... };
		dnssec-enable boolean;
		dnssec-validation boolean;
		dnssec-lookaside string trust-anchor string;
		dnssec-must-be-secure string boolean;
		dnssec-accept-expired boolean;
		empty-server string;
		empty-contact string;
		empty-zones-enable boolean;
		disable-empty-zone string;
		dialup dialuptype;
		ixfr-from-differences ixfrdiff;
		allow-query { address_match_element; ... };
		allow-query-on { address_match_element; ... };
		allow-query-cache { address_match_element; ... };
		allow-query-cache-on { address_match_element; ... };
		allow-transfer { address_match_element; ... };
		allow-update { address_match_element; ... };
		allow-update-forwarding { address_match_element; ... };
		update-check-ksk boolean;
		masterfile-format ( text | raw );
		notify notifytype;
		notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
		notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
		notify-delay seconds;
		notify-to-soa boolean;
		also-notify [ port integer ] { ( ipv4_address | ipv6_address )
		     [ port integer ]; ... };
		allow-notify { address_match_element; ... };
		forward ( first | only );
		forwarders [ port integer ] {
		     ( ipv4_address | ipv6_address ) [ port integer ]; ...
		};
		max-journal-size size_no_default;
		max-transfer-time-in integer;
		max-transfer-time-out integer;
		max-transfer-idle-in integer;
		max-transfer-idle-out integer;
		max-retry-time integer;
		min-retry-time integer;
		max-refresh-time integer;
		min-refresh-time integer;
		multi-master boolean;
		sig-validity-interval integer;
		sig-re-signing-interval integer;
		sig-signing-nodes integer;
		sig-signing-signatures integer;
		sig-signing-type integer;
		transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		alt-transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		alt-transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		use-alt-transfer-source boolean;
		zone-statistics boolean;
		key-directory quoted_string;
		try-tcp-refresh boolean;
		zero-no-soa-ttl boolean;
		zero-no-soa-ttl-cache boolean;
		nsec3-test-zone boolean;  // testing only
		allow-v6-synthesis { address_match_element; ... }; // obsolete
		deallocate-on-exit boolean; // obsolete
		fake-iquery boolean; // obsolete
		fetch-glue boolean; // obsolete
		has-old-clients boolean; // obsolete
		maintain-ixfr-base boolean; // obsolete
		max-ixfr-log-size size; // obsolete
		multiple-cnames boolean; // obsolete
		named-xfer quoted_string; // obsolete
		serial-queries integer; // obsolete
		treat-cr-as-space boolean; // obsolete
		use-id-pool boolean; // obsolete
	   };

VIEW

	   view string optional_class {
		match-clients { address_match_element; ... };
		match-destinations { address_match_element; ... };
		match-recursive-only boolean;
		key string {
		     algorithm string;
		     secret string;
		};
		zone string optional_class {
		     ...
		};
		server ( ipv4_address[/prefixlen] | ipv6_address[/prefixlen] ) {
		     ...
		};
		trusted-keys {
		     string integer integer integer quoted_string; ...
		};
		allow-recursion { address_match_element; ... };
		allow-recursion-on { address_match_element; ... };
		sortlist { address_match_element; ... };
		topology { address_match_element; ... }; // not implemented
		auth-nxdomain boolean; // default changed
		minimal-responses boolean;
		recursion boolean;
		rrset-order {
		     [ class string ] [ type string ]
		     [ name quoted_string ] string string; ...
		};
		provide-ixfr boolean;
		request-ixfr boolean;
		rfc2308-type1 boolean; // not yet implemented
		additional-from-auth boolean;
		additional-from-cache boolean;
		query-source ( ( ipv4_address | * ) | [ address ( ipv4_address | * ) ] ) [ port ( integer | * ) ];
		query-source-v6 ( ( ipv6_address | * ) | [ address ( ipv6_address | * ) ] ) [ port ( integer | * ) ];
		use-queryport-pool boolean;
		queryport-pool-ports integer;
		queryport-pool-updateinterval integer;
		cleaning-interval integer;
		min-roots integer; // not implemented
		lame-ttl integer;
		max-ncache-ttl integer;
		max-cache-ttl integer;
		transfer-format ( many-answers | one-answer );
		max-cache-size size;
		max-acache-size size;
		clients-per-query number;
		max-clients-per-query number;
		check-names ( master | slave | response )
		     ( fail | warn | ignore );
		check-mx ( fail | warn | ignore );
		check-integrity boolean;
		check-mx-cname ( fail | warn | ignore );
		check-srv-cname ( fail | warn | ignore );
		cache-file quoted_string; // test option
		suppress-initial-notify boolean; // not yet implemented
		preferred-glue string;
		dual-stack-servers [ port integer ] {
		     ( quoted_string [port integer] |
		     ipv4_address [port integer] |
		     ipv6_address [port integer] ); ...
		};
		edns-udp-size integer;
		max-udp-size integer;
		root-delegation-only [ exclude { quoted_string; ... } ];
		disable-algorithms string { string; ... };
		dnssec-enable boolean;
		dnssec-validation boolean;
		dnssec-lookaside string trust-anchor string;
		dnssec-must-be-secure string boolean;
		dnssec-accept-expired boolean;
		empty-server string;
		empty-contact string;
		empty-zones-enable boolean;
		disable-empty-zone string;
		dialup dialuptype;
		ixfr-from-differences ixfrdiff;
		allow-query { address_match_element; ... };
		allow-query-on { address_match_element; ... };
		allow-query-cache { address_match_element; ... };
		allow-query-cache-on { address_match_element; ... };
		allow-transfer { address_match_element; ... };
		allow-update { address_match_element; ... };
		allow-update-forwarding { address_match_element; ... };
		update-check-ksk boolean;
		masterfile-format ( text | raw );
		notify notifytype;
		notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
		notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
		notify-delay seconds;
		notify-to-soa boolean;
		also-notify [ port integer ] { ( ipv4_address | ipv6_address )
		     [ port integer ]; ... };
		allow-notify { address_match_element; ... };
		forward ( first | only );
		forwarders [ port integer ] {
		     ( ipv4_address | ipv6_address ) [ port integer ]; ...
		};
		max-journal-size size_no_default;
		max-transfer-time-in integer;
		max-transfer-time-out integer;
		max-transfer-idle-in integer;
		max-transfer-idle-out integer;
		max-retry-time integer;
		min-retry-time integer;
		max-refresh-time integer;
		min-refresh-time integer;
		multi-master boolean;
		sig-validity-interval integer;
		transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		alt-transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		alt-transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		use-alt-transfer-source boolean;
		zone-statistics boolean;
		try-tcp-refresh boolean;
		key-directory quoted_string;
		zero-no-soa-ttl boolean;
		zero-no-soa-ttl-cache boolean;
		allow-v6-synthesis { address_match_element; ... }; // obsolete
		fetch-glue boolean; // obsolete
		maintain-ixfr-base boolean; // obsolete
		max-ixfr-log-size size; // obsolete
	   };

ZONE

	   zone string optional_class {
		type ( master | slave | stub | hint |
		     forward | delegation-only );
		file quoted_string;
		masters [ port integer ] {
		     ( masters |
		     ipv4_address [port integer] |
		     ipv6_address [ port integer ] ) [ key string ]; ...
		};
		database string;
		delegation-only boolean;
		check-names ( fail | warn | ignore );
		check-mx ( fail | warn | ignore );
		check-integrity boolean;
		check-mx-cname ( fail | warn | ignore );
		check-srv-cname ( fail | warn | ignore );
		dialup dialuptype;
		ixfr-from-differences boolean;
		journal quoted_string;
		zero-no-soa-ttl boolean;
		allow-query { address_match_element; ... };
		allow-query-on { address_match_element; ... };
		allow-transfer { address_match_element; ... };
		allow-update { address_match_element; ... };
		allow-update-forwarding { address_match_element; ... };
		update-policy {
		     ( grant | deny ) string
		     ( name | subdomain | wildcard | self | selfsub | selfwild |
			     krb5-self | ms-self | krb5-subdomain | ms-subdomain |
		       tcp-self | 6to4-self ) string
		     rrtypelist; ...
		};
		update-check-ksk boolean;
		masterfile-format ( text | raw );
		notify notifytype;
		notify-source ( ipv4_address | * ) [ port ( integer | * ) ];
		notify-source-v6 ( ipv6_address | * ) [ port ( integer | * ) ];
		notify-delay seconds;
		notify-to-soa boolean;
		also-notify [ port integer ] { ( ipv4_address | ipv6_address )
		     [ port integer ]; ... };
		allow-notify { address_match_element; ... };
		forward ( first | only );
		forwarders [ port integer ] {
		     ( ipv4_address | ipv6_address ) [ port integer ]; ...
		};
		max-journal-size size_no_default;
		max-transfer-time-in integer;
		max-transfer-time-out integer;
		max-transfer-idle-in integer;
		max-transfer-idle-out integer;
		max-retry-time integer;
		min-retry-time integer;
		max-refresh-time integer;
		min-refresh-time integer;
		multi-master boolean;
		sig-validity-interval integer;
		transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		alt-transfer-source ( ipv4_address | * )
		     [ port ( integer | * ) ];
		alt-transfer-source-v6 ( ipv6_address | * )
		     [ port ( integer | * ) ];
		use-alt-transfer-source boolean;
		zone-statistics boolean;
		try-tcp-refresh boolean;
		key-directory quoted_string;
		nsec3-test-zone boolean;  // testing only
		ixfr-base quoted_string; // obsolete
		ixfr-tmp-file quoted_string; // obsolete
		maintain-ixfr-base boolean; // obsolete
		max-ixfr-log-size size; // obsolete
		pubkey integer integer integer quoted_string; // obsolete
	   };

FILES

       /etc/named.conf

SEE ALSO

       named(8), named-checkconf(8), rndc(8), BIND 9 Administrator Reference Manual.

COPYRIGHT

       Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")

BIND9								   Aug 13, 2004 						     NAMED.CONF(5)
All times are GMT -4. The time now is 09:33 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy