bind9 dns strange behavior

Discussion in 'Installation/Configuration' started by grigor, Jul 13, 2014.

  1. grigor

    grigor New Member

    Hi,
    I have the following problem. I am running Debian Wheezy 64 with ISP 3.0.5.3 on my VPS (>3ghz xeon E3, 1.5 RAM + swap). Everything works just fine, but recently I wanted to check my bind status in ssh and after I write
    Code:
    /etc/init.d/bind9 status
    it says that
    Code:
    [[COLOR="Red"]FAIL[COLOR="Black"]] bind9 is not running... [/COLOR][COLOR="Red"]failed![/COLOR][/COLOR]
    .
    It is strange because my ISPConfig Monitor->Show Services shows that
    Code:
    [COLOR="Lime"]DNS-Server: 	Online[/COLOR]
    .
    I have looked up in syslog and deamon log and there are no errors. After I enter
    Code:
    /etc/init.d/bind9 restart
    the servers answer is that it is stopping bind9 - OK, and starting bind9 also OK, but just after that the bind9 status is failed. Entering command nslookup to check my servers response is working, and what is more the bind is somehow working, because I host like 20 TLD domains on it, and every change I made is propagating (slow) but is proparaging in DNS-es across the globe.
    I have read that
    Code:
    netstat -tap | grep dns
    should print something, but my output is empty.
    I have also read here http://www.howtoforge.com/forums/showthread.php?t=54381 that I should
    Code:
    apt-get remove bind9
    and after that install it again but I am afraid of my configuration that it will vanish. Am I wrong and should remove/install it and my config files would remain as they are now?

    In sum, bind is working, but is not working :confused:
     
  2. srijan

    srijan New Member HowtoForge Supporter

    It may be possible that some dependency might be missing. You reinstall bind9 after taking configuration file backup.
     
  3. grigor

    grigor New Member

    OK, thanks. So I will try it, but on friday night, so that non of my customers would kill me for some reason :D
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You can reinstall bind without removing it. The command is:

    apt-get install --reinstall bind9

    To diagnose your problem, restart bind and then check /var/log/syslog afterwards, there you will find all bind startup messages and als errors.
     
  5. grigor

    grigor New Member

    I did reinstall, but still not working. Here is syslog dump while I perform RESTART BIND9.

    Code:
    Jul 17 22:50:08 aaabbbccc named[12402]: received control channel command 'stop -p'
    Jul 17 22:50:08 aaabbbccc named[12402]: shutting down: flushing changes
    Jul 17 22:50:08 aaabbbccc named[12402]: stopping command channel on 127.0.0.1#953
    Jul 17 22:50:08 aaabbbccc named[12402]: stopping command channel on ::1#953
    Jul 17 22:50:08 aaabbbccc named[12402]: no longer listening on ::#53
    Jul 17 22:50:08 aaabbbccc named[12402]: no longer listening on 127.0.0.1#53
    Jul 17 22:50:08 aaabbbccc named[12402]: no longer listening on 127.0.0.2#53
    Jul 17 22:50:08 aaabbbccc named[12402]: no longer listening on MY SERVER'S IP#53
    Jul 17 22:50:08 aaabbbccc named[12402]: exiting
    Jul 17 22:50:08 aaabbbccc named[12562]: starting BIND 9.8.4-rpz2+rl005.12-P1 -u bind -t /var/chroot/bind9
    Jul 17 22:50:08 aaabbbccc named[12562]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile'
    '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2'
    Jul 17 22:50:08 aaabbbccc named[12562]: ----------------------------------------------------
    Jul 17 22:50:08 aaabbbccc named[12562]: BIND 9 is maintained by Internet Systems Consortium,
    Jul 17 22:50:08 aaabbbccc named[12562]: Inc. (ISC), a non-profit 501(c)(3) public-benefit
    Jul 17 22:50:08 aaabbbccc named[12562]: corporation.  Support and training for BIND 9 are
    Jul 17 22:50:08 aaabbbccc named[12562]: available at https://www.isc.org/support
    Jul 17 22:50:08 aaabbbccc named[12562]: ----------------------------------------------------
    Jul 17 22:50:08 aaabbbccc named[12562]: adjusted limit on open files from 4096 to 1048576
    Jul 17 22:50:08 aaabbbccc named[12562]: found 1 CPU, using 1 worker thread
    Jul 17 22:50:08 aaabbbccc named[12562]: using up to 4096 sockets
    Jul 17 22:50:08 aaabbbccc named[12562]: loading configuration from '/etc/bind/named.conf'
    Jul 17 22:50:08 aaabbbccc named[12562]: reading built-in trusted keys from file '/etc/bind/bind.keys'
    Jul 17 22:50:08 aaabbbccc named[12562]: using default UDP/IPv4 port range: [1024, 65535]
    Jul 17 22:50:08 aaabbbccc named[12562]: using default UDP/IPv6 port range: [1024, 65535]
    Jul 17 22:50:08 aaabbbccc named[12562]: listening on IPv6 interfaces, port 53
    Jul 17 22:50:08 aaabbbccc named[12562]: listening on IPv4 interface lo, 127.0.0.1#53
    Jul 17 22:50:08 aaabbbccc named[12562]: listening on IPv4 interface venet0, 127.0.0.2#53
    Jul 17 22:50:08 aaabbbccc named[12562]: listening on IPv4 interface venet0:0, MY SERVER'S IP#53
    Jul 17 22:50:08 aaabbbccc named[12562]: generating session key for dynamic DNS
    Jul 17 22:50:08 aaabbbccc named[12562]: sizing zone task pool based on 37 zones
    Jul 17 22:50:08 aaabbbccc named[12562]: using built-in root key for view _default
    Jul 17 22:50:08 aaabbbccc named[12562]: set up managed keys zone for view _default, file 'managed-keys.bind'
    Jul 17 22:50:08 aaabbbccc named[12562]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 254.169.IN-ADDR.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: D.F.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 8.E.F.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 9.E.F.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: A.E.F.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: B.E.F.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
    Jul 17 22:50:08 aaabbbccc named[12562]: command channel listening on 127.0.0.1#953
    Jul 17 22:50:08 aaabbbccc named[12562]: command channel listening on ::1#953
    Jul 17 22:50:08 aaabbbccc named[12562]: zone 0.in-addr.arpa/IN: loaded serial 1
    Jul 17 22:50:08 aaabbbccc named[12562]: zone 127.in-addr.arpa/IN: loaded serial 1
    Of course afterwards there is a list of all my zones that are being processed. I think that my only possibility is to remove and install my bind... unfortunately?

    Or maybe I could try something else?
     
  6. grigor

    grigor New Member

    did remove and install

    I did remove/install bind9 package but it still don't want to show me status RUNNING? :(

    Also I removed bin9utils and install it again, but still don;t want to work properly...
     
    Last edited: Jul 17, 2014
  7. grigor

    grigor New Member

    Code:
    # netstat -tulpn | grep :53
    Code:
    tcp        0      0 MY SERVER'S IP:53           0.0.0.0:*               LISTEN      1565/named
    tcp        0      0 127.0.0.2:53            0.0.0.0:*               LISTEN      1565/named
    tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      1565/named
    tcp6       0      0 :::53                   :::*                    LISTEN      1565/named
    udp        0      0 MY SERVER'S IP:53           0.0.0.0:*                           1565/named
    udp        0      0 127.0.0.2:53            0.0.0.0:*                           1565/named
    udp        0      0 127.0.0.1:53            0.0.0.0:*                           1565/named
    udp6       0      0 :::53                   :::*                                1565/named
    And when I write:
    Code:
    # netstat -tap | grep name
    I get
    Code:
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
    tcp        0      0 mipsnet.com.pl:domain   *:*                     LISTEN      1565/named
    tcp        0      0 127.0.0.2:domain        *:*                     LISTEN      1565/named
    tcp        0      0 localhost.locald:domain *:*                     LISTEN      1565/named
    tcp        0      0 localhost.localdoma:953 *:*                     LISTEN      1565/named
    tcp6       0      0 [::]:domain             [::]:*                  LISTEN      1565/named
    tcp6       0      0 localhost:953           [::]:*                  LISTEN      1565/named
    Querying netstat with bind9 shows NULL
     
  8. srijan

    srijan New Member HowtoForge Supporter

  9. grigor

    grigor New Member

    Ok I made what you have suggested:
    Code:
    # /usr/local/ispconfig/server/server.sh 
    18.07.2014-09:02 - DEBUG - Set Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    18.07.2014-09:02 - DEBUG - Found 2 changes, starting update process.
    18.07.2014-09:02 - DEBUG - Calling function 'update' from plugin 'apps_vhost_plugin' raised by event 'server_update'.
    18.07.2014-09:02 - DEBUG - Calling function 'update' from plugin 'network_settings_plugin' raised by event 'server_update'.
    18.07.2014-09:02 - DEBUG - Network configuration disabled in server settings.
    18.07.2014-09:02 - DEBUG - Calling function 'update' from plugin 'postfix_server_plugin' raised by event 'server_update'.
    18.07.2014-09:02 - DEBUG - Processed datalog_id 2442
    18.07.2014-09:02 - DEBUG - Calling function 'update' from plugin 'apps_vhost_plugin' raised by event 'server_update'.
    18.07.2014-09:02 - DEBUG - Calling function 'update' from plugin 'network_settings_plugin' raised by event 'server_update'.
    18.07.2014-09:02 - DEBUG - Network configuration disabled in server settings.
    18.07.2014-09:02 - DEBUG - Calling function 'update' from plugin 'postfix_server_plugin' raised by event 'server_update'.
    18.07.2014-09:02 - DEBUG - Processed datalog_id 2443
    18.07.2014-09:02 - DEBUG - Calling function 'restartHttpd' from module 'web_module'.
    18.07.2014-09:02 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished.
    
    And fot the second run
    Code:
    # /usr/local/ispconfig/server/server.sh 
    18.07.2014-09:02 - DEBUG - Set Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    18.07.2014-09:02 - DEBUG - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
    finished.
    
    bind9 is still down (but working...) :confused:

    Maybe strace? But the output is reall big?
     
  10. grigor

    grigor New Member

    Any new ideas?? Anyone?... It is really annoying that bind is (probably) running, but system status indicates that bind9 is failed??
     
  11. grigor

    grigor New Member

    [solved]

    My problem is solved. It occurred, that after I have chrooted bind I had to change path in
    Code:
    /etc/init.d/bind9
    so that variable
    Code:
    PIDFILE
    point to my chrooted directory.

    Thank you for all suggestions, help and time you spend for solving my problem. :)
     

Share This Page