DNS issues

Discussion in 'Server Operation' started by oroboros, Aug 2, 2007.

  1. oroboros

    oroboros New Member

    Ok, I followed the ubuntu 6.10 perfect setup for two comps, added ISPconfig and further tried to set them up as the name servers uturn1.turnkeytrading.net and uturn2.turnkeytrading.net. At the registrar of turnkeytrading.net created uturn1 and uturn2 pointing towards my public ips. At server setup in ISPconfig set host as uturn1 and domain turnkeytrading.net and public Ip. Then set up testing domains in the dns manager with the ns of uturn1.turnkeytrading.net and uturn2.turnkeytrading.net.
    I had the rndc permission not allowing the servers to listen on 53 etc, I fixed the rndc permission denied problem, but when trying to set the boxes as the Authoritative NS for domains in godaddy acct it always says "errors have been encountered". I assume godaddy checks to see if the server is indeed alive and if not gives this error, so naturally I check to see if the name servers respond and they don't. What did I do wrong? Does it matter that uturn1.turnkeytrading.net is also the name of the host computer? Does the name server and the hostname have to different?
    Here is the output of: cat /var/log/daemon.log

    Code:
     starting BIND 9.3.2 -u bind -t /var/lib/named
    Aug  1 22:06:01 uturn1 named[4145]: found 1 CPU, using 1 worker thread
    Aug  1 22:06:01 uturn1 named[4145]: loading configuration from '/etc/bind/named.conf'
    Aug  1 22:06:01 uturn1 named[4145]: listening on IPv4 interface lo, 127.0.0.1#53
    Aug  1 22:06:01 uturn1 named[4145]: listening on IPv4 interface eth0, 10.0.1.22#53
    Aug  1 22:06:01 uturn1 named[4145]: command channel listening on 127.0.0.1#953
    Aug  1 22:06:01 uturn1 named[4145]: command channel listening on ::1#953
    Aug  1 22:06:01 uturn1 named[4145]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1
    Aug  1 22:06:01 uturn1 named[4145]: zone 10.207.64.in-addr.arpa/IN: loaded serial 2007080106
    Aug  1 22:06:01 uturn1 named[4145]: zone buddysbananahammock.com/IN: loaded serial 2007080106
    Aug  1 22:06:01 uturn1 named[4145]: zone turnkeytrading.net/IN: loaded serial 2007080102
    Aug  1 22:06:01 uturn1 named[4145]: running
    Aug  1 22:06:01 uturn1 named[4145]: zone bu
    Looks good

    Here's cat /etc/bind/named.conf

    Code:
    options {
            pid-file "/var/run/bind/run/named.pid";
            directory "/etc/bind";
            auth-nxdomain no;
            /*
             * If there is a firewall between you and nameservers you want
             * to talk to, you might need to uncomment the query-source
             * directive below.  Previous versions of BIND always asked
             * questions using port 53, but BIND 8.1 uses an unprivileged
             * port by default.
             */
            // query-source address * port 53;
    };
    
    //
    // a caching only nameserver config
    //
    zone "." {
            type hint;
            file "db.root";
    };
    
    zone "0.0.127.in-addr.arpa" {
            type master;
            file "db.local";
    };
    
    zone "10.207.64.in-addr.arpa" {
            type master;
            file "pri.10.207.64.in-addr.arpa";
    };
    
    
    zone "buddysbananahammock.com" {
            type master;
            file "pri.buddysbananahammock.com";
    };
    zone "turnkeytrading.net" {
            type master;
            file "pri.turnkeytrading.net";
    };
    Here's dig @uturn1.turnkeytrading.net buddysbananahammock.com

    Code:
    ; <<>> DiG 9.3.2 <<>> @uturn1.turnkeytrading.net buddysbananahammock.com
    ; (1 server found)
    ;; global options:  printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51321
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
    
    ;; QUESTION SECTION:
    ;buddysbananahammock.com.       IN      A
    
    ;; ANSWER SECTION:
    buddysbananahammock.com. 86400  IN      A       64.207.10.10
    
    ;; AUTHORITY SECTION:
    buddysbananahammock.com. 86400  IN      NS      uturn2.turnkeytrading.net.
    buddysbananahammock.com. 86400  IN      NS      uturn1.turnkeytrading.net.
    
    ;; ADDITIONAL SECTION:
    uturn1.turnkeytrading.net. 86400 IN     A       64.207.10.10
    
    ;; Query time: 1 msec
    ;; SERVER: 10.0.1.22#53(10.0.1.22)
    ;; WHEN: Thu Aug  2 16:45:48 2007
    ;; MSG SIZE  rcvd: 133
    Could this be the problem?
    dig uturn1.turnkeytrading.net
    Code:
    ;; Query time: 42 msec
    ;; SERVER: 64.238.96.12#53(64.238.96.12)
    ;; WHEN: Thu Aug  2 16:47:04 2007
    ;; MSG SIZE  rcvd: 42
    That ip is cbeyond's nameserver.

    And netstat -tap

    Code:
    Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
    tcp        0      0 *:mysql                 *:*                     LISTEN     3486/mysqld         
    tcp        0      0 *:81                    *:*                     LISTEN     3907/ispconfig_http 
    tcp        0      0 uturn1.turnkeytr:domain *:*                     LISTEN     4145/named          
    tcp        0      0 localhost.locald:domain *:*                     LISTEN     4145/named          
    tcp        0      0 *:smtp                  *:*                     LISTEN     5957/master         
    tcp        0      0 localhost.localdoma:953 *:*                     LISTEN     4145/named          
    tcp6       0      0 *:imaps                 *:*                     LISTEN     3586/couriertcpd    
    tcp6       0      0 *:pop3s                 *:*                     LISTEN     3636/couriertcpd    
    tcp6       0      0 *:pop3                  *:*                     LISTEN     3603/couriertcpd    
    tcp6       0      0 *:imap2                 *:*                     LISTEN     3567/couriertcpd    
    tcp6       0      0 *:www                   *:*                     LISTEN     4007/apache2        
    tcp6       0      0 *:ftp                   *:*                     LISTEN     18768/proftpd: (acc 
    tcp6       0      0 *:ssh                   *:*                     LISTEN     3757/sshd           
    tcp6       0      0 *:smtp                  *:*                     LISTEN     5957/master         
    tcp6       0      0 ip6-localhost:953       *:*                     LISTEN     4145/named          
    tcp6       0      0 *:https                 *:*                     LISTEN     4007/apache2    



    Thanks in advance for anyones help.
     
  2. oroboros

    oroboros New Member

    rndc problem

    Maybe I didn't fix the rndc.key problem

    here's: named -g -p 53
    Code:
    02-Aug-2007 16:59:49.149 starting BIND 9.3.2 -g -p 53
    02-Aug-2007 16:59:49.149 found 1 CPU, using 1 worker thread
    02-Aug-2007 16:59:49.152 loading configuration from '/etc/bind/named.conf'
    02-Aug-2007 16:59:49.153 listening on IPv4 interface lo, 127.0.0.1#53
    02-Aug-2007 16:59:49.154 binding TCP socket: address in use
    02-Aug-2007 16:59:49.154 listening on IPv4 interface eth0, 10.0.1.22#53
    02-Aug-2007 16:59:49.154 binding TCP socket: address in use
    02-Aug-2007 16:59:49.156 none:0: open: /etc/bind/rndc.key: permission denied
    02-Aug-2007 16:59:49.157 couldn't add command channel 127.0.0.1#953: permission denied
    02-Aug-2007 16:59:49.157 none:0: open: /etc/bind/rndc.key: permission denied
    02-Aug-2007 16:59:49.157 couldn't add command channel ::1#953: permission denied
    02-Aug-2007 16:59:49.157 ignoring config file logging statement due to -g option
    02-Aug-2007 16:59:49.158 zone 0.0.127.in-addr.arpa/IN: loaded serial 1
    02-Aug-2007 16:59:49.159 zone 10.207.64.in-addr.arpa/IN: loaded serial 2007080106
    02-Aug-2007 16:59:49.159 zone buddysbananahammock.com/IN: loaded serial 2007080106
    02-Aug-2007 16:59:49.160 zone turnkeytrading.net/IN: loaded serial 2007080102
    02-Aug-2007 16:59:49.160 running
    02-Aug-2007 16:59:49.161 zone buddysbananahammock.com/IN: sending notifies (serial 2007080106)
    02-Aug-2007 16:59:49.161 zone 10.207.64.in-addr.arpa/IN: sending notifies (serial 2007080106)
    02-Aug-2007 16:59:49.161 zone turnkeytrading.net/IN: sending notifies (serial 2007080102)
    
    Any thoughts?
    Come on Falko. You the man.
     
  3. falko

    falko Super Moderator Howtoforge Staff

  4. oroboros

    oroboros New Member

    Thanks for the reply Falko.

    Here you go

    Code:
    root@uturn1:/var/log# ls -l /etc/bind/rndc.key
    -rw-r----- 1 bind bind 77 2007-03-19 14:14 /etc/bind/rndc.key
     
  5. falko

    falko Super Moderator Howtoforge Staff

    Can you see from the output of
    Code:
    ps aux
    under which user named is running?

    Can you post your current /etc/bind/named.conf again?
     
  6. oroboros

    oroboros New Member

    Here you go Falko.

    Code:
    root@uturn1:~# ps aux
    USER       PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
    root         1  0.0  0.1   1632   536 ?        Ss   Aug03   0:01 /sbin/init splash
    root         2  0.0  0.0      0     0 ?        S    Aug03   0:00 [migration/0]
    root         3  0.0  0.0      0     0 ?        SN   Aug03   0:00 [ksoftirqd/0]
    root         4  0.0  0.0      0     0 ?        S    Aug03   0:00 [watchdog/0]
    root         5  0.0  0.0      0     0 ?        S<   Aug03   0:00 [events/0]
    root         6  0.0  0.0      0     0 ?        S<   Aug03   0:00 [khelper]
    root         7  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kthread]
    root         9  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kblockd/0]
    root        10  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kacpid]
    root        11  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kacpi_notify]
    root       129  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kseriod]
    root       162  0.0  0.0      0     0 ?        S    Aug03   0:00 [pdflush]
    root       163  0.0  0.0      0     0 ?        S    Aug03   0:00 [pdflush]
    root       164  0.0  0.0      0     0 ?        S    Aug03   0:00 [kswapd0]
    root       165  0.0  0.0      0     0 ?        S<   Aug03   0:00 [aio/0]
    root      1578  0.0  0.0      0     0 ?        S<   Aug03   0:00 [ata/0]
    root      1685  0.0  0.0      0     0 ?        S<   Aug03   0:00 [khubd]
    root      1696  0.0  0.0      0     0 ?        S<   Aug03   0:00 [khpsbpkt]
    root      1717  0.0  0.0      0     0 ?        S    Aug03   0:00 [knodemgrd_0]
    root      1767  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kjournald]
    root      1839  0.0  0.1   1604   552 ?        Ss   Aug03   0:00 //sbin/logd
    root      1923  0.0  0.1   2180   600 ?        S<s  Aug03   0:00 /sbin/udevd --daemon
    root      2730  0.0  0.0      0     0 ?        S<   Aug03   0:00 [shpchpd]
    root      2793  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kgameportd]
    root      2816  0.0  0.0      0     0 ?        S<   Aug03   0:00 [kpsmoused]
    root      3305  0.0  0.1   1600   504 tty1     Ss+  Aug03   0:00 /sbin/getty 38400 tty1
    root      3306  0.0  0.1   1596   504 tty2     Ss+  Aug03   0:00 /sbin/getty 38400 tty2
    root      3307  0.0  0.1   1600   504 tty3     Ss+  Aug03   0:00 /sbin/getty 38400 tty3
    root      3308  0.0  0.1   1596   504 tty4     Ss+  Aug03   0:00 /sbin/getty 38400 tty4
    root      3309  0.0  0.1   1600   508 tty5     Ss+  Aug03   0:00 /sbin/getty 38400 tty5
    root      3310  0.0  0.1   1596   500 tty6     Ss+  Aug03   0:00 /sbin/getty 38400 tty6
    root      3355  0.0  0.1   1724   508 ?        Ss   Aug03   0:00 /bin/dd bs 1 if /proc/kmsg of /var/run/klogd/kmsg
    klog      3357  0.0  0.2   2428  1312 ?        Ss   Aug03   0:00 /sbin/klogd -P /var/run/klogd/kmsg
    root      3423  0.0  0.2   2696  1348 ?        S    Aug03   0:00 /bin/sh /usr/bin/mysqld_safe
    mysql     3487  0.0  3.8 128244 18384 ?        Sl   Aug03   0:00 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mys
    root      3488  0.0  0.1   1588   528 ?        S    Aug03   0:00 logger -p daemon.err -t mysqld_safe -i -t mysqld
    root      3552  0.0  0.0   1776   416 ?        S    Aug03   0:00 /usr/sbin/courierlogger -pid=/var/run/courier/authdaemon/pid -start
    root      3553  0.0  0.1   1924   608 ?        S    Aug03   0:00 /usr/lib/courier/courier-authlib/authdaemond
    root      3567  0.0  0.0   1772   336 ?        S    Aug03   0:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd.pid -start -nam
    root      3568  0.0  0.1   1876   560 ?        S    Aug03   0:00 /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslo
    root      3586  0.0  0.0   1772   336 ?        S    Aug03   0:00 /usr/sbin/courierlogger -pid=/var/run/courier/imapd-ssl.pid -start
    root      3587  0.0  0.1   1872   556 ?        S    Aug03   0:00 /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=20 -nodnslo
    root      3599  0.0  0.1   1872   492 ?        S    Aug03   0:00 /usr/sbin/couriertcpd -pid=/var/run/courier/pop3d.pid -stderrlogger
    root      3601  0.0  0.0   1640   348 ?        S    Aug03   0:00 /usr/sbin/courierlogger courierpop3login
    root      3604  0.0  0.0   1924   268 ?        S    Aug03   0:00 /usr/lib/courier/courier-authlib/authdaemond
    root      3605  0.0  0.0   1924   268 ?        S    Aug03   0:00 /usr/lib/courier/courier-authlib/authdaemond
    root      3606  0.0  0.0   1924   268 ?        S    Aug03   0:00 /usr/lib/courier/courier-authlib/authdaemond
    root      3607  0.0  0.0   1924   268 ?        S    Aug03   0:00 /usr/lib/courier/courier-authlib/authdaemond
    root      3608  0.0  0.0   1924   268 ?        S    Aug03   0:00 /usr/lib/courier/courier-authlib/authdaemond
    root      3624  0.0  0.0   1776   336 ?        S    Aug03   0:00 /usr/sbin/courierlogger -pid=/var/run/courier/pop3d-ssl.pid -start
    root      3625  0.0  0.1   1872   556 ?        S    Aug03   0:00 /usr/sbin/couriertcpd -address=0 -maxprocs=40 -maxperip=4 -nodnsloo
    root      3746  0.0  0.2   6328   992 ?        Ss   Aug03   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -r -a p
    root      3748  0.0  0.1   6328   584 ?        S    Aug03   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -r -a p
    root      3749  0.0  0.1   6328   524 ?        S    Aug03   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -r -a p
    root      3750  0.0  0.1   6328   524 ?        S    Aug03   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -r -a p
    root      3751  0.0  0.1   6328   524 ?        S    Aug03   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -r -a p
    root      3764  0.0  0.2   4936  1068 ?        Ss   Aug03   0:00 /usr/sbin/sshd
    daemon    3852  0.0  0.0   1848   420 ?        Ss   Aug03   0:00 /usr/sbin/atd
    root      3862  0.0  0.1   2192   864 ?        Ss   Aug03   0:00 /usr/sbin/cron
    root      3937  0.0  1.8  14640  8924 ?        Ss   Aug03   0:00 /root/ispconfig/httpd/bin/ispconfig_httpd -DSSL
    root      3938  0.0  0.2   2680  1272 ?        S    Aug03   0:00 /bin/bash /root/ispconfig/sv/ispconfig_wconf
    1001      3945  0.0  1.5  14640  7548 ?        S    Aug03   0:00 /root/ispconfig/httpd/bin/ispconfig_httpd -DSSL
    root      4037  0.0  2.0  26348  9700 ?        Ss   Aug03   0:00 /usr/sbin/apache2 -k start -DSSL
    root      4039  0.0  0.0   1504   304 ?        S    Aug03   0:00 /root/ispconfig/cronolog --symlink=/var/log/httpd/ispconfig_access_
    www-data  4054  0.0  0.9  26348  4544 ?        S    Aug03   0:00 /usr/sbin/apache2 -k start -DSSL
    www-data  4055  0.0  0.9  26348  4544 ?        S    Aug03   0:00 /usr/sbin/apache2 -k start -DSSL
    www-data  4056  0.0  0.9  26348  4544 ?        S    Aug03   0:00 /usr/sbin/apache2 -k start -DSSL
    www-data  4057  0.0  1.0  26612  5160 ?        S    Aug03   0:00 /usr/sbin/apache2 -k start -DSSL
    www-data  4066  0.0  1.0  26616  5160 ?        S    Aug03   0:00 /usr/sbin/apache2 -k start -DSSL
    bind      4175  0.0  0.6  30136  2904 ?        Ssl  Aug03   0:00 /usr/sbin/named -u bind -t /var/lib/named
    proftpd   4202  0.0  0.3   9012  1524 ?        Ss   Aug03   1:03 proftpd: (accepting connections)
    1001      4208  0.0  0.2   2668  1108 ?        Ss   Aug03   0:00 /home/admispconfig/ispconfig/tools/clamav/bin/freshclam -d -c 10 --
    root      4230  0.0  0.4   7712  2320 ?        Ss   Aug03   0:00 sshd: uturn [priv]
    uturn     4232  0.0  0.3   7712  1616 ?        S    Aug03   0:00 sshd: uturn@pts/0
    uturn     4233  0.0  0.6   5368  2972 pts/0    Ss   Aug03   0:00 -bash
    root      4252  0.0  0.5   4852  2712 pts/0    S    Aug03   0:00 /bin/bash
    root      4282  0.0  0.6  29964  2968 pts/0    Tl   Aug03   0:00 named -g -p 53
    root      4697  0.0  0.4   4440  1936 pts/0    S+   Aug03   0:00 vim resolv.conf
    root      9484  0.0  0.3   4796  1640 ?        Ss   Aug03   0:00 /usr/lib/postfix/master
    postfix   9486  0.0  0.3   4840  1616 ?        S    Aug03   0:00 qmgr -l -t fifo -u
    root     21874  0.0  0.1   1652   572 ?        Ss   06:25   0:00 /sbin/syslogd -a /var/lib/named/dev/log
    postfix  24223  0.0  0.3   4804  1584 ?        S    11:39   0:00 pickup -l -t fifo -u -c
    root     24460  0.0  0.4   7716  2324 ?        Ss   11:40   0:00 sshd: uturn [priv]
    uturn    24491  0.0  0.3   7848  1640 ?        R    11:40   0:00 sshd: uturn@pts/1
    uturn    24492  0.0  0.6   5364  2964 pts/1    Ss   11:40   0:00 -bash
    root     24934  0.0  0.0   1588   404 ?        S    11:42   0:00 sleep 10
    root     24946  2.6  0.5   4852  2704 pts/1    S    11:42   0:00 /bin/bash
    proftpd  24977  0.0  0.5   9008  2460 ?        S    11:42   0:00 proftpd: ::ffff:64.251.15.89:52311: PASS (hidden)
    proftpd  24978  0.0  0.4   9012  2352 ?        S    11:42   0:00 proftpd: connected: ::ffff:64.251.15.89 (::ffff:64.251.15.89:52350)
    root     24979  0.0  0.2   2472   988 pts/1    R+   11:42   0:00 ps aux
    does that mean named is running under root?
     
  7. oroboros

    oroboros New Member

    And here's

    Code:
    root@uturn1:~# cat /etc/bind/named.conf 
    options {
            pid-file "/var/run/bind/run/named.pid";
            directory "/etc/bind";
            auth-nxdomain no;
            /*
             * If there is a firewall between you and nameservers you want
             * to talk to, you might need to uncomment the query-source
             * directive below.  Previous versions of BIND always asked
             * questions using port 53, but BIND 8.1 uses an unprivileged
             * port by default.
             */
            // query-source address * port 53;
    };
    
    //
    // a caching only nameserver config
    //
    zone "." {
            type hint;
            file "db.root";
    };
    
    zone "0.0.127.in-addr.arpa" {
            type master;
            file "db.local";
    };
    
    zone "10.207.64.in-addr.arpa" {
            type master;
            file "pri.10.207.64.in-addr.arpa";
    };
    
    
    zone "buddysbananahammock.com" {
            type master;
            file "pri.buddysbananahammock.com";
    };
    zone "turnkeytrading.net" {
            type master;
            file "pri.turnkeytrading.net";
    };
    
    
    
    //// MAKE MANUAL ENTRIES BELOW THIS LINE! ////
    
     
  8. falko

    falko Super Moderator Howtoforge Staff

    Looks ok.
    On one of my Debian systems, /etc/bind/rndc.key has the permissions 600 and is owned by nobody. You can try that, too, otherwise try a chmod 644 on that file (and make it owned by bind again).
     
  9. oroboros

    oroboros New Member

    Alright, chmod 644 /etc/bind/rndc.key
    and chown -R bind:bind /etc/bind/rndc.key did something

    Here is named -g -p 53
    Code:
    root@uturn1:/var/log# named -g -p 53
    05-Aug-2007 10:45:19.309 starting BIND 9.3.2 -g -p 53
    05-Aug-2007 10:45:19.309 found 1 CPU, using 1 worker thread
    05-Aug-2007 10:45:19.312 loading configuration from '/etc/bind/named.conf'
    05-Aug-2007 10:45:19.313 listening on IPv4 interface lo, 127.0.0.1#53
    05-Aug-2007 10:45:19.314 listening on IPv4 interface eth0, 10.0.1.22#53
    05-Aug-2007 10:45:19.317 command channel listening on 127.0.0.1#953
    05-Aug-2007 10:45:19.317 command channel listening on ::1#953
    05-Aug-2007 10:45:19.317 ignoring config file logging statement due to -g option
    05-Aug-2007 10:45:19.318 zone 0.0.127.in-addr.arpa/IN: loaded serial 1
    05-Aug-2007 10:45:19.319 zone 10.207.64.in-addr.arpa/IN: loaded serial 2007080304
    05-Aug-2007 10:45:19.319 zone buddysbananahammock.com/IN: loaded serial 2007080106
    05-Aug-2007 10:45:19.320 zone turnkeytrading.net/IN: loaded serial 2007080305
    05-Aug-2007 10:45:19.320 running
    05-Aug-2007 10:45:19.321 zone buddysbananahammock.com/IN: sending notifies (serial 2007080106)
    05-Aug-2007 10:45:19.321 zone 10.207.64.in-addr.arpa/IN: sending notifies (serial 2007080304)
    05-Aug-2007 10:45:19.321 zone turnkeytrading.net/IN: sending notifies (serial 2007080305)
    
    The permission problems are fixed however I still can't add the nameservers as Authoritative for the respective domain names. I suppose it is because the do not respond to ping. I created two new name servers at ns1.uturn1.turnkeytrading.net and ns2.uturn2.turnkeytrading.net and the appropriate glue records at the registrar for those.

    Any advice?
     
  10. oroboros

    oroboros New Member

    ran named -g -p 53 again

    Code:
    root@uturn1:/var/log# named -g -p 53
    05-Aug-2007 11:58:44.771 starting BIND 9.3.2 -g -p 53
    05-Aug-2007 11:58:44.771 found 1 CPU, using 1 worker thread
    05-Aug-2007 11:58:44.774 loading configuration from '/etc/bind/named.conf'
    05-Aug-2007 11:58:44.775 listening on IPv4 interface lo, 127.0.0.1#53
    05-Aug-2007 11:58:44.776 binding TCP socket: address in use
    05-Aug-2007 11:58:44.776 listening on IPv4 interface eth0, 10.0.1.22#53
    05-Aug-2007 11:58:44.776 binding TCP socket: address in use
    05-Aug-2007 11:58:44.778 couldn't add command channel 127.0.0.1#953: address in use
    05-Aug-2007 11:58:44.779 couldn't add command channel ::1#953: address in use
    05-Aug-2007 11:58:44.779 ignoring config file logging statement due to -g option
    05-Aug-2007 11:58:44.780 zone 0.0.127.in-addr.arpa/IN: loaded serial 1
    05-Aug-2007 11:58:44.780 zone 10.207.64.in-addr.arpa/IN: loaded serial 2007080304
    05-Aug-2007 11:58:44.781 zone buddysbananahammock.com/IN: loaded serial 2007080106
    05-Aug-2007 11:58:44.782 zone turnkeytrading.net/IN: loaded serial 2007080305
    05-Aug-2007 11:58:44.782 running
    05-Aug-2007 11:58:44.782 zone buddysbananahammock.com/IN: sending notifies (serial 2007080106)
    05-Aug-2007 11:58:44.783 zone 10.207.64.in-addr.arpa/IN: sending notifies (serial 2007080304)
    05-Aug-2007 11:58:44.783 zone turnkeytrading.net/IN: sending notifies (serial 2007080305)
     
  11. falko

    falko Super Moderator Howtoforge Staff

    Please stop all instances of named before you try this. If you don't, you'll get complaints about ports being in use...

    I'd ask your registrar if you got the glue records right.
     
  12. oroboros

    oroboros New Member

    Yes, that makes sense. What is odd is that I cannot stop bind9 with /etc/init.d/bind9 stop as root. I have to be another user to stop named. I then have to switch to root to netstat -tap and see that named is not running and then run named -g -p 53 so that I have no permission problems. If I try to run /etc/init.d/bind9 stop as root it just runs and runs and runs - no response. Stopping the command and then running netstat -tap still shows named running. What have I done wrong? I'm about to shoot this box. Thanks for your patience and continued help.

    Drew
     
  13. oroboros

    oroboros New Member

    Also if I try and turn off the bind server in ISPconfig it does not work. No errors in syslog.
     
  14. falko

    falko Super Moderator Howtoforge Staff

    Do you see any error messages when you run
    Code:
    /etc/init.d/bind9 stop
    ?
     
  15. oroboros

    oroboros New Member

    Ok Falko, It's all fixed. I was doing two things wrong.

    Number 1. After your advise to stop all instances of named before running named -g -p 53, I realized that once you run named -g -p 53, named cannot be stopped with /etc/init.d/bind9 stop and does not seem to respond to /etc/init.d/bind9 start. However after a reboot, and just using the init.d commands everything works beautifully. Why does the named -g -p 53 seem to screw things up?

    Number 2. The problem with the nameservers was that the domain turnkeytrading.net is registered with Godaddy and the Authoritative name-servers for that domain are Cbeyonds, because they are providing email etc for us. I created the appropriate host, glue records and reverse ptr with Cbeyond, however when I went to change the authoritative name-servers for the new domains, also registered with Godaddy, that would be hosted by the ISPConfig boxes, I always received a "errors were encounted" message from godaddy's config panel about the ISPconfig name-servers. Because the nameservers for turnkeytrading.net were Cbeyonds I thought all changes had to be made with them regarding the hosts etc. However to list a custom authoritative name-server with Godaddy where that domain is one of theirs you must also enter the hosts for that domain in their "host summery" of their control panel for that domain. I suppose if that domain is not registered with them this check cannot be done. Here is the link on how to do this. http://help.godaddy.com/article.php?article_id=668&topic_id=163

    Anyways, thank you once again for all of your help.
     

Share This Page