DNS isn't publishing TXT records

Discussion in 'ISPConfig 3 Priority Support' started by bitworx, Jul 28, 2021.

Tags:
  1. bitworx

    bitworx New Member

    Hi!

    For some reasons, my DNS servers (ns1 and ns2.bitworx.cloud) are not publishing TXT records for domain seifenatelier.net
    Only the spf-record is displayed with dig.
    Code:
    root@ns1:~# dig any seifenatelier.net | grep "TXT"
    seifenatelier.net.      3600    IN      TXT     "v=spf1 mx a ~all"
    I set up a new test TXT record:
    test.seifenatelier.net. - dsafaqerfaawbghtkkzuukhvbnvbn== - 3600

    I restarted bind on ns1 and ns2 and waited over the night (other records are there as well for a much longer time than 24h and also not displayed with dig)

    What can be the problem?
    In /etc/log/syslog i can't find any errors related to "named" or "bind"

    What bothers me:
    Code:
    Jul 28 09:53:01 ns1 named[1123575]: none:100: 'max-cache-size 90%' - setting to 1745MB (out of 1939MB)
    and I have a VERY LOT of RRSIG querys from a domain pizzaseo.com - can I block these somehow? I don't have an option in my hosters firewall...

    Thanks!
    Dennis
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Use this command to test your server:

    dig @localhost TXT seifenatelier.net

    and run it on both servers locally and check the result.
     
  3. bitworx

    bitworx New Member

    I already did - it also shows only the SPF-TXT record and 2 RRSIG
    Code:
    root@ns1:~# dig @localhost ANY seifenatelier.net | grep "TXT"
    seifenatelier.net.      3600    IN      TXT     "v=spf1 mx a ~all"
    seifenatelier.net.      3600    IN      RRSIG   TXT 7 2 3600 20210813065002 20210728065002 30402 seifenatelier.net. C98uFUuwmtHMU9P/cQN1SCHJsD4Ua6cVBtqKHFGsinuAXd27hZGBXtj5 pQ7IlCdeLhenbUuKdZqyhetqo8H53n+UELkmS+WTg6Y7j/MZS7JMC5Yt rf0YANRzfS95qkvqrgVHqt0P+e//Zvx5Kca/2/ANhxN4EP1HAUUpi0jK 0h0ZLxTbOfScuAWouXl282OFubaRK4nM0G4A4Co6H6DQPqPhtS3sWP00 Xkz9iSn7ckd/UFzw/HmhUmPL55PGMv9UdL3ByF2d+UfUhCwMlUm1F8qN DRdcPdrsX04ZtCv706BSNgKdFnFiF1e93htM8tBwzG1UVW7KbwbAGeyq 4BaziA==
    seifenatelier.net.      3600    IN      RRSIG   TXT 13 2 3600 20210813065002 20210728065002 37273 seifenatelier.net. 1mLhyUwUq5NGGlCJotPz+kUsnr7bil/R7vGxsm5ADhI62UrIsPhLkwE4 dzUtkCRu4AcJPww0M5da/Q6I64Zm7A==
    
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, then check the zone file directory of your DNS server to see if the zone file contains the TXT record and if not, check if there is a zone file with .err file ending for this zone.

    And Btw., the command you ran is not the one I asked you to run.
     
  5. bitworx

    bitworx New Member

    Sorry - copied the wrong window :( - btw - it's looking the same on ns2, so i didnt copy it in here.
    Code:
    root@ns1:~# dig @localhost TXT seifenatelier.net
    
    ; <<>> DiG 9.16.1-Ubuntu <<>> @localhost TXT seifenatelier.net
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36726
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: bf9f7d4e07767a6d01000000610114824ef6b99eeea8eb93 (good)
    ;; QUESTION SECTION:
    ;seifenatelier.net.             IN      TXT
    
    ;; ANSWER SECTION:
    seifenatelier.net.      3600    IN      TXT     "v=spf1 mx a ~all"
    
    ;; Query time: 0 msec
    ;; SERVER: 127.0.0.1#53(127.0.0.1)
    ;; WHEN: Wed Jul 28 10:25:38 CEST 2021
    ;; MSG SIZE  rcvd: 103
    and yes, the zone file includes the mentioned record(s) and there is no .err file in /etc/bind
    Code:
    root@ns1:/etc/bind# cat pri.seifenatelier.net
    $TTL        3600
    @       IN      SOA     ns1.bitworx.cloud. office.bitworx.digital. (
                            2021072802       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    mail 3600      A          52.29.179.158
    seifenatelier.net. 3600      A          52.29.179.158
    www 3600      A          52.29.179.158
    seifenatelier.net. 3600      AAAA       2a05:d014:78f:7600:5f96:c7dc:3721:89fb
    2o2l5vd4maqb74dr6begfpfucda7k5rt._domainkey 3600      CNAME      2o2l5vd4maqb74dr6begfpfucda7k5rt.dkim.amazonses.com
    5dxh6k4kk76ku7pnstnwcvzjlbuvlwjb._domainkey 3600      CNAME      5dxh6k4kk76ku7pnstnwcvzjlbuvlwjb.dkim.amazonses.com
    5zyety25tgukzk6pyhjrg5xully4jzi2._domainkey 3600      CNAME      5zyety25tgukzk6pyhjrg5xully4jzi2.dkim.amazonses.com
    seifenatelier.net. 3600      MX     10  mail.bitworx.cloud.
    seifenatelier.net. 3600      NS         ns1.bitworx.cloud.
    seifenatelier.net. 3600      NS         ns2.bitworx.cloud.
    dkim._domainkey.seifenatelier.net. 3600      TXT        "v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ouj1Wr3c4FNVKIPVCHBQ3VaWZ9UULfTwSOHJkoo4racqux3P98b1hhLVtW3LcH1XbQeOTh7yWEC4sOsvoYs1U9vJlkRD4WtcSBqJW5Zbk9Kig3oBDIBGqenbYq+syjMBIk60d0oLw/FNrd6TJLZIDR13WYpIOJOs2Ak6Nj+aEI13yHNS0d5yZuw5Dt5JA3j5R" "2qyoL9Rwox2jGU4XERNdlCNCvfiFUnrFoHD5K0kUml2bJvON75CcNhvhnxQskAyDxYPDhbsuRi9YIbZVyOlz3hwb1Uj4Vl+C9LmMQTkDZZC+fHDd8E0/NxM/G31rjAOqug3pQH8IHPVlP6kANGQIDAQAB"
    seifenatelier.net. 3600      TXT        "v=spf1 mx a ~all"
    test 3600      TXT        "dsafaqerfaawbghtkkzuukhvbnvbn=="
    _amazonses.seifenatelier.net. 3600      TXT        "bZycy+tVYadhSIhB1ubmfJgM/d+Of7SrtNHrEUkXPlw="
    
    $INCLUDE Kseifenatelier.net.+013+17426.key
    
    $INCLUDE Kseifenatelier.net.+013+37273.key
    
    $INCLUDE Kseifenatelier.net.+007+28285.key
    
    $INCLUDE Kseifenatelier.net.+007+30402.key
    
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Try to stop named, check with ps command that really no instances are running anymore, if there are still instances, kill them, and then start it again and test if it's there now. maybe named hangs in a way that it does not load zones files anymore.
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    and btw. did you try:

    dig @localhost TXT _amazonses.seifenatelier.net

    As you probably miss this record, which is a subdomain and not a TXT record of the zone name.
     
    bitworx likes this.
  8. bitworx

    bitworx New Member

    i did it the following way:
    (root is su)

    Code:
    service named stop
    ps -e | grep "named"
    ps -e (double checked with manual reading through processes)
    service named start
    but sadly:
    Code:
    root@ns1:~# dig @localhost TXT seifenatelier.net
    
    ; <<>> DiG 9.16.1-Ubuntu <<>> @localhost TXT seifenatelier.net
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65053
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: a1830fa287d579d701000000610119174ed6041b5399f8f9 (good)
    ;; QUESTION SECTION:
    ;seifenatelier.net.             IN      TXT
    
    ;; ANSWER SECTION:
    seifenatelier.net.      3600    IN      TXT     "v=spf1 mx a ~all"
    
    ;; Query time: 0 msec
    ;; SERVER: 127.0.0.1#53(127.0.0.1)
    ;; WHEN: Wed Jul 28 10:45:11 CEST 2021
    ;; MSG SIZE  rcvd: 103
     
  9. bitworx

    bitworx New Member

    well, thanks for the explaining - that's indeed what i am looking for. but how is this a subdomain? I'm not a newbie, but that's out of my context of knowing :)
    :edit
    forget it, i got it.... took me a time :D

    and it works - so sorry for bothering :oops:
     

Share This Page