Comments on: DNS server Setup using bind in Ubuntu

By: musa

musa — Mon, 23 Jan 2012 10:05:05 +0000

Hi everybody,

I am trying to set up a DNS server on my private LAN and using only two systems on LAN for testing purpose. I have configured the bind9 as directed here on ubuntu 10.10 machine. the IP of ubuntu machine is 192.xx.xx.2 and that of another machine which is centOS is .3
i get good results when i use dig mydomain.com but when i try to ping the mydomain.com from another machine (centOS) it simply says ‘unknown host mydomain.com’
i have already configured .2 as nameserver on centOS machine in /etc/resolv.conf file but still nothing doing…
by norms i should be able to ping mydomain.com from centOS machine when i am able to ping the IP .2 of the DNS server…right?
any help please?

By: Rob

Rob — Wed, 08 Jun 2011 22:32:40 +0000

Hey guys, just chanced over this, all I can say is DNS is far too precious to try and copy stuff from a tutorial like this and expect to get running, I recommend DNS & BIND by o’reilly and dedication of a good few weeks to properly understand the subject, which once you do grasp is pretty straight forward but very difficult I would say to do a generic demonstration for. Best of luck!

By: nocaic

nocaic — Tue, 26 Apr 2011 12:34:48 +0000

congrats for the absolutely awsum cp+pst post folks

By: jkio

jkio — Mon, 28 Feb 2011 15:34:05 +0000

when i restarted bind9 i have this mess:
jkio@ubuntu:~$ sudo /etc/init.d/bind9 restart
* Stopping domain name service… bind9 rndc: connect failed: 127.0.0.1#953: connection refused
[ OK ]
* Starting domain name service… bind9
and when i had tried to change resolv.conf with my own dns server like that:
search jkioinfract.com
nameserver 192.168.1.41 (this is my ip address support by dhcp)
but i cannot connect to internet, when i tried command: dig jkioinfract.com, i got this mess:”; <> DiG 9.7.1-P2 <> jkioinfract.com
;; global options: +cmd
;; connection timed out; no servers could be reached “. So what’s the problem? and what can i do now? thanks

By: alpanda

alpanda — Thu, 17 Feb 2011 06:19:31 +0000

how to build DNS and Web Mail Server?

thanks…

By: ilya

ilya — Sun, 19 Dec 2010 04:41:50 +0000

i have siemens router connect to my virtual mashine
when i installed ubuntu server its automatic create in /etc/resolv.conf nameserver and domain of my router.1 set static ip in /etc/network.interfaces
2.after installation you need change parameters in /etc/hosts an /etc/resolv + set permissions to bind directory which contained conf files of master zones

By: David

David — Fri, 17 Dec 2010 01:39:31 +0000

I’ve discovered a Forwarding DNS Server on my network that looks misconfigured but still active.

How do I go about permanently disabling it?

Linux oscar.icovfx.local 2.6.32-24-generic #42-Ubuntu SMP Fri Aug 20 14:24:04 UTC 2010 i686 GNU/Linux

By: Scott Berry

Scott Berry — Fri, 10 Dec 2010 22:36:52 +0000

I have looked this over several times and I have went through the named.conf.local and I am still confused as to what’s happening here.

This is the syslog entries:

root@pilotalk:/etc/bind# tail -f /var/log/syslog
Dec 10 16:15:33 pilotalk named[1952]: built with ‘--prefix=/usr’ ‘--mandir=/usr/share/man’ ‘--infodir=/usr/share/info’ ‘--sysconfdir=/etc/bind’ ‘--localstatedir=/var’ ‘--enable-threads’ ‘--enable-largefile’ ‘--with-libtool’ ‘--enable-shared’ ‘--enable-static’ ‘--with-openssl=/usr’ ‘--with-gssapi=/usr’ ‘--with-gnu-ld’ ‘--with-dlz-postgres=no’ ‘--with-dlz-mysql=no’ ‘--with-dlz-bdb=yes’ ‘--with-dlz-filesystem=yes’ ‘--with-dlz-ldap=yes’ ‘--with-dlz-stub=yes’ ‘--with-geoip=/usr’ ‘--enable-ipv6′ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2′ ‘LDFLAGS=-Wl,-Bsymbolic-functions’ ‘CPPFLAGS=’
Dec 10 16:15:33 pilotalk named[1952]: adjusted limit on open files from 1024 to 1048576
Dec 10 16:15:33 pilotalk named[1952]: found 1 CPU, using 1 worker thread
Dec 10 16:15:33 pilotalk named[1952]: using up to 4096 sockets
Dec 10 16:15:33 pilotalk named[1952]: loading configuration from ‘/etc/bind/named.conf’
Dec 10 16:15:33 pilotalk named[1952]: /etc/bind/named.conf.local:12: expected quoted string near ‘“’
Dec 10 16:15:33 pilotalk named[1952]: loading configuration: unexpected token
Dec 10 16:15:33 pilotalk named[1952]: exiting (due to fatal error)

By: Captainawol

Captainawol — Mon, 04 Oct 2010 14:40:20 +0000

I just wanted to throw in an FYI here for anyone who is having the same error that Gulab Pasha was having when trying to start bind9 after following this how to. If you are seeing
/etc/bind/named.conf.local:13: expected quoted string near ‘“’
in your /var/log/syslog file, and you copied and pasted from this tutorial, it is because the quotation marks in the copy and pasted text are not ascii standard, replace them in vi by typing them in yourself and it works like a charm.
Thanks for a great how to

By: Grace Rodriguez

Grace Rodriguez — Tue, 07 Sep 2010 15:35:01 +0000

Hi,

I’m trying to implement DNSSEC in my DNS server, but it doesn’t work. I’ll paste the configuration I have, please tell me if it’s wrong.

In the file: /etc/bind/named.conf.options:

options {
directory “/var/cache/bind”;

// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0′s placeholder.

// forwarders {
// 0.0.0.0;
// };

recursion yes;

auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };

dnssec-enable yes;
dnssec-validation yes;
};

managed-keys {
“.” 257 3 8 ”
AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
QxA+Uk1ihz0= “;
};

Thank you,

Grace Rodriguez

By: Kelso

Kelso — Wed, 11 Aug 2010 07:37:24 +0000

Ok thanks that makes sense

By: dan

dan — Mon, 02 Aug 2010 13:50:50 +0000

the acronym stands for domain name service. though i can understand how someone could call it domain name server accidentally since most times dns is on its own solitary hardware.

think of it this way, it’d be redundant to call it a dns server if it was domain name server.

By: Kelso

Kelso — Mon, 02 Aug 2010 10:04:00 +0000

Got into a little friendly argument.. is DNS domain name SERVERS or SERVICE?

Thanks

By: Dan

Dan — Thu, 22 Jul 2010 23:37:17 +0000

Mohamed,
Make sure your ‘forwarders’ section is contained WITHIN the options section. Example:
options {
…
…
forwarders {
1.2.3.4
2.3.4.5
};
};

By: Anderson Dias

Anderson Dias — Mon, 21 Jun 2010 15:20:43 +0000

I’m having the some problem it’s related in here.

What can I do beyond to related in here?

Thanks.

By: Mohamed

Mohamed — Fri, 11 Jun 2010 04:31:47 +0000

root@moha-laptop:/home/moha# cat /var/log/syslog | grep named

Jun 11 03:45:34 moha-laptop named[11522]: received control channel command ‘stop -p’
Jun 11 03:45:34 moha-laptop named[11522]: shutting down: flushing changes
Jun 11 03:45:34 moha-laptop named[11522]: stopping command channel on 127.0.0.1#953
Jun 11 03:45:34 moha-laptop named[11522]: stopping command channel on ::1#953
Jun 11 03:45:34 moha-laptop named[11522]: no longer listening on ::#53
Jun 11 03:45:34 moha-laptop named[11522]: no longer listening on 127.0.0.1#53
Jun 11 03:45:34 moha-laptop named[11522]: no longer listening on 41.92.5.110#53
Jun 11 03:45:34 moha-laptop named[11522]: exiting
Jun 11 03:45:34 moha-laptop named[12849]: starting BIND 9.5.1-P2.1 -u bind
Jun 11 03:45:34 moha-laptop named[12849]: found 2 CPUs, using 2 worker threads
Jun 11 03:45:34 moha-laptop named[12849]: using up to 4096 sockets
Jun 11 03:45:34 moha-laptop named[12849]: loading configuration from ‘/etc/bind/named.conf’
Jun 11 03:45:34 moha-laptop named[12849]: /etc/bind/named.conf.options:21: unknown option ‘forwarders’

By: Gulab Pasha

Gulab Pasha — Thu, 13 May 2010 06:19:33 +0000

Hi Robbie,

Now i’m getting some other error messages, Please find below.

root@sfdlabs:~# /etc/init.d/bind9 start
* Starting domain name service… bind9
…done.
root@sfdlabs:~# /etc/init.d/bind9 restart
* Stopping domain name service… bind9
rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not synchronized, or
* the key is invalid.
…done.
* Starting domain name service… bind9
…fail!

Syslog Error messages.

May 13 11:47:12 sfdlabs named[2358]: starting BIND 9.7.0-P1 -u bind
May 13 11:47:12 sfdlabs named[2358]: built with ‘--prefix=/usr’ ‘--mandir=/usr/share/man’ ‘--infodir=/usr/share/info’ ‘--sysconfdir=/etc/bind’ ‘--localstatedir=/var’ ‘--enable-threads’ ‘--enable-largefile’ ‘--with-libtool’ ‘--enable-shared’ ‘--enable-static’ ‘--with-openssl=/usr’ ‘--with-gssapi=/usr’ ‘--with-gnu-ld’ ‘--with-dlz-postgres=no’ ‘--with-dlz-mysql=no’ ‘--with-dlz-bdb=yes’ ‘--with-dlz-filesystem=yes’ ‘--with-dlz-ldap=yes’ ‘--with-dlz-stub=yes’ ‘--with-geoip=/usr’ ‘--enable-ipv6′ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2′ ‘LDFLAGS=-Wl,-Bsymbolic-functions’ ‘CPPFLAGS=’
May 13 11:47:12 sfdlabs named[2358]: adjusted limit on open files from 1024 to 1048576
May 13 11:47:12 sfdlabs named[2358]: found 4 CPUs, using 4 worker threads
May 13 11:47:12 sfdlabs named[2358]: using up to 4096 sockets
May 13 11:47:12 sfdlabs named[2358]: loading configuration from ‘/etc/bind/named.conf’
May 13 11:47:12 sfdlabs named[2358]: /etc/bind/named.conf.local:13: expected quoted string near ‘“’
May 13 11:47:12 sfdlabs named[2358]: loading configuration: unexpected token
May 13 11:47:12 sfdlabs named[2358]: exiting (due to fatal error)

Looking forward to your support.

Thanks,
Gulab Pasha

By: Robbie

Robbie — Wed, 12 May 2010 22:57:18 +0000

That’s AppArmor. Try stopping it (/etc/init.d/apparmor stop) and then try starting/stopping bind and see if it cooperates.

If it works, you have two options: disable AppArmor completely or configure it to play nice with Bind.

By: Gulab Pasha

Gulab Pasha — Tue, 11 May 2010 06:12:00 +0000

Hi Dan,

I’m not running selinux in my linux box, still i’m getting the error.

you want me to install selinux and disable the settings.

Thanks,
Gulab Pasha

By: Dan

Dan — Tue, 11 May 2010 05:10:58 +0000

Just looking at all of the permissions issues of reading a file which is set to read by root, it might be an selinux thing.
Does Ubuntu use selinux?