Questions tagged [bind]

BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.

The DNS protocols are part of the core Internet standards. They specify the process by which one computer can find another computer on the basis of its name. What it means to say "BIND is an implementation of the DNS protocols" is that the BIND software distribution contains all of the software needed both to ask name service questions and to answer such questions.

The BIND software distribution contains several parts:

  • A Domain Name System server. This is a program called "named", which is pronounced "name-dee" and stands for "name daemon". It answers questions that are sent to it, following the rules specified in the DNS protocol standards. You can provide DNS service on the internet by installing this software on a server computer and giving it correct information about your domain names.
  • Utility programs used in the management of a nameserver, including programs to control operation of the server, to cryptographically sign domain resource records for use with DNSSEC, assist in key management and rollover, and perform other functions.
  • A Domain Name System "resolver library". A "resolver" is a program that resolves questions about names by sending those questions to appropriate servers and responding appropriately to the servers' replies. A "resolver library" is a collection of software components that a programmer can add to software being developed, which will give that software the ability to resolve names. For example, a programmer who was programming a new web browser does not need to create the part of it that looks up names in DNS; he or she can plug in the resolver library and then send questions to the library software components. This saves time (the programmer does not need to re-invent that particular wheel) and helps ensure that the new browser correctly follows the DNS standards.
  • Software tools for testing servers. These are the tools that we use for testing, and we include them in the distribution in case you would like to do your own testing, perhaps to make sure your server configuration is working properly.
2312 questions
12
votes
2 answers

Bind, force zone update on slave

I have two test servers master and slave: Master is updating slave but very slowly. How to speed this up. Master (192.168.0.122) /etc/named.conf zone "domain.com." { type master; file "caching-example/domain.com.db"; //allow-update {…
Abc Xyz
  • 618
  • 1
  • 8
  • 17
11
votes
1 answer

Can one server do DNS for a domain and a subdomain?

I have a situation where I need to replace the nameservers for both a.b.c and b.c. I'd rather not have to dedicate two machines to this. I've been reading about multi-homing but the examples all seem to be for *.b.c rather than a domain and a…
ethrbunny
  • 2,379
7
votes
1 answer

BIND - connection timed out; no servers could be reached

I've just upgraded from Debian 5 to 6 and I noticed bind stopped working. When trying to query for a domain from outside I get "connection timed out; no servers could be reached" error. Querying from localhost gives proper response. What could be…
krojew
  • 73
5
votes
1 answer

How to Make a /22 Reverse Zone in Bind? (255.255.252.0))

I'm working on a project to set up a Bind9 DNS server on a network with a 255.255.252.0 subnet. Currently, the way it is set up makes it impossible to run nslookup From 192.168.1.101/22 through ns1 @ 192.168.1.61/22 on a 192.168.0.0/22 network with…
5
votes
3 answers

BIND zone also-notify syntax

Given the following my BIND 9 is not able to start. acl ns2 { 192.168.10.50; }; zone "10.168.192.in-addr.arpa" IN { also-notify { ns2 port 53; }; type master; file "192.168.10.db"; }; It's writing the following to the…
5
votes
1 answer

BIND - zone not loaded due to errors

After upgrading from Ubuntu 8.04 to 10.04 my DNS isn't working properly anymore. I keep getting this error when I run named-checkzone example.com /var/cache/bind/example.com.zone.db zone example.com/IN: NS 'mx002a.example.com' has no address records…
5
votes
3 answers

BIND zone file output with DIG command?

How can I get the BIND zone file output using the DIG command?
LanceBaynes
  • 3,127
4
votes
3 answers

Bind 9 - allow-query-on versus listen-on

I was just wondering about differences in behavior between Bind 9's allow-query-on and listen-on statements. They appear to perform similar functions. According to Chapter 6 of the ARM ("Bind 9 Configuration"): The interfaces and ports that the…
Andrew
  • 175
4
votes
1 answer

Bind9 different answer per ip, possible?

Is it possible to configure bind9 so it would answer with different A record depending on client ip? Probably not, as dns servers do propagate and it's never direct hit, but worth to ask. Example: Let's say I got domain.com with nameserver…
4
votes
1 answer

Large named.run file

I'm having this large named.run file sitting in my server. What I find out is that it is just a log and it is safe to delete it. Some suggest to run logrotate on it, but I was wondering if it is possible to configure the max limit of the size or…
checksum
  • 1,035
  • 1
  • 11
  • 15
4
votes
2 answers

Lame DNS server

I'm trying to setup my BIND with a domain I own and I'm using dnssy.com and intodns.com to check if everything is ok, but I'm getting errors in both. The error says that my DNS server is "lame" (which I don't understand what does it mean). My…
3
votes
2 answers

How to Master-Master propagate BIND DNS across two or more servers

I have two webservers and plan on adding more. I'm using BIND as a Master Nameserver on each. The issue is that I plan on adding more Servers and need some way to propagate DNS records between each server. Each server MUST be a DNS Master BIND…
3
votes
3 answers

How do I allow user to reload zone file?

I have a pool of authoritative DNS servers that have to host zones for 5 users each of which have between 2 and 10 zones. Each user can ssh to the servers using public key authentication. The requirements I am facing say that as long as the user is…
kasperd
  • 30,696
3
votes
2 answers

dig +trace resolves while without doesn't

The issue described here is not solved. But there are some updates. When i do a "dig" with no flags i get a timeout error. When i add a "+trace" option, it resolves. Can anyone point me to the reason for that? UPD Well, i found the reason why it…
gtfx
  • 193
3
votes
2 answers

Why is my new DNS caching server already active?

I've just finished successfully configuring BIND to act as a caching server, and I'm pulling information directly from the 13 root servers (as a hint file) instead of using forwarders from someone else's DNS servers. My named.conf file includes the…
David W
  • 3,469
  • 6
  • 38
  • 63
1
2 3 4 5 6 7