bind9 error

Discussion in 'Installation/Configuration' started by algonco, Jan 13, 2008.

  1. algonco

    algonco New Member

    Hello,
    My dns is wrong but i do not know why.the pc where bind was installed resolve the nslookup good but clients fail.
    those are my config files:
    ------------------------------
    named.conf.local
    *******************************************************************
    //
    // Do any local configuration here
    //

    // Consider adding the 1918 zones here, if they are not used in your
    // organization
    //include "/etc/bind/zones.rfc1918";

    zone "mydomain.com" {
    type master;
    file "/etc/bind/mydomain.com.db";
    };

    zone "10.10.10.in-addr.arpa" {
    type master;
    file "/etc/bind/rev.10.10.10.in-addr.arpa";
    };
    *********************************************************
    ------------------------------
    named.conf.options
    *********************************************************
    options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you might need to uncomment the query-source
    // directive below. Previous versions of BIND always asked
    // questions using port 53, but BIND 8.1 and later use an unprivileged
    // port by default.

    // query-source address * port 53;

    // If your ISP provided one or more IP addresses for stable
    // nameservers, you probably want to use them as forwarders.
    // Uncomment the following block, and insert the addresses replacing
    // the all-0's placeholder.

    // forwarders {
    // 0.0.0.0;
    // };
    forwarders {
    80.58.61.250;
    };
    auth-nxdomain no; # conform to RFC1035
    listen-on-v6 { any; };
    };
    ************************************************************
    -------------------------------------
    mydomain.com.db
    **************************************************************
    ;
    ; BIND data file for mydomain.com
    ; /etc/bind/mydomain.com.db
    ;
    $TTL 604800
    @ IN SOA mydomain.com. info.mydomain.com. (
    1 ; Serial
    604800 ; Refresh
    86400 ; Retry
    2419200 ; Expire
    604800 ) ; Default TTL
    @ IN NS mail.mydomain.com.
    @ IN MX 10 mail.mydomain.com.
    mail IN A 10.10.10.200
    www IN A 10.10.10.200
    doswindows IN A 10.10.10.99
    jag IN A 10.10.10.98
    *******************************************************************
    ----------------------------------------
    rev.10.10.10.in-addr.arpa
    *******************************************************************
    ; /etc/bind/rev.10.10.10.in-addr.arpa
    ;
    $TTL 604800
    @ IN SOA mydomain.com. info.mydomain.com. (
    1 ; Serial
    604800 ; Refresh
    86400 ; Retry
    2419200 ; Expire
    604800 ) ; Default TTL
    ;
    @ IN NS mail.mydomain.com.
    200 IN PTR mail.mydomain.com.
    99 IN PTR doswindows.mydomain.com.
    98 IN PTR jag.mydomain.com.
    *******************************************************************
    ------------------------------------------
    $ dig mydomain.com
    ******************************************************************
    ; <<>> DiG 9.4.1-P1 <<>> mydomain.com
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47571
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;mydomain.com. IN A

    ;; AUTHORITY SECTION:
    mydomain.com. 604800 IN SOA mydomain.com. info.mydomain.com. 1 604800 86400 2419200 604800

    ;; Query time: 2 msec
    ;; SERVER: 10.10.10.200#53(10.10.10.200)
    ;; WHEN: Sun Jan 13 18:17:49 2008
    ;; MSG SIZE rcvd: 74
    ***********************************************************************************
    ----------------------
    nslookup from server
    *********************************************************************************
    $ nslookup doswindows
    Server: 10.10.10.200
    Address: 10.10.10.200#53

    Name: doswindows.mydomain.com
    Address: 10.10.10.99
    *********************************************************************************
    --------------------------------------
    nslookup from client
    **********************************************************************************
    $ nslookup doswindows
    Server: 10.10.10.200
    Address: 10.10.10.200#53

    ** server can't find doswindows: NXDOMAIN
    **********************************************************************************
    Finaly, the syslog after
    $ /etc/init.d/bind9 restart
    *******************************************************************
    Jan 13 18:22:36 mail named[7411]: shutting down: flushing changes
    Jan 13 18:22:36 mail named[7411]: stopping command channel on 127.0.0.1#953
    Jan 13 18:22:36 mail named[7411]: stopping command channel on ::1#953
    Jan 13 18:22:36 mail named[7411]: no longer listening on ::#53
    Jan 13 18:22:36 mail named[7411]: no longer listening on 127.0.0.1#53
    Jan 13 18:22:36 mail named[7411]: no longer listening on 10.10.10.200#53
    Jan 13 18:22:36 mail named[7411]: exiting
    Jan 13 18:22:38 mail kernel: [180559.952000] Failure registering capabilities with primary security module.
    Jan 13 18:22:38 mail named[7498]: starting BIND 9.4.1-P1 -u bind -t /var/lib/named
    Jan 13 18:22:38 mail named[7498]: found 1 CPU, using 1 worker thread
    Jan 13 18:22:38 mail named[7498]: loading configuration from '/etc/bind/named.conf'
    Jan 13 18:22:38 mail named[7498]: listening on IPv6 interfaces, port 53
    Jan 13 18:22:38 mail named[7498]: listening on IPv4 interface lo, 127.0.0.1#53
    Jan 13 18:22:38 mail named[7498]: listening on IPv4 interface eth0, 10.10.10.200#53
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 254.169.IN-ADDR.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: D.F.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 8.E.F.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: 9.E.F.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: A.E.F.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: automatic empty zone: B.E.F.IP6.ARPA
    Jan 13 18:22:38 mail named[7498]: command channel listening on 127.0.0.1#953
    Jan 13 18:22:38 mail named[7498]: command channel listening on ::1#953
    Jan 13 18:22:38 mail named[7498]: zone 0.in-addr.arpa/IN: loaded serial 1
    Jan 13 18:22:38 mail named[7498]: zone 10.10.10.in-addr.arpa/IN: loaded serial 1
    Jan 13 18:22:38 mail named[7498]: zone 127.in-addr.arpa/IN: loaded serial 1
    Jan 13 18:22:38 mail named[7498]: zone 255.in-addr.arpa/IN: loaded serial 1
    Jan 13 18:22:38 mail named[7498]: zone mydomain.com/IN: loaded serial 1
    Jan 13 18:22:38 mail named[7498]: zone localhost/IN: loaded serial 1
    Jan 13 18:22:38 mail named[7498]: running
    Jan 13 18:22:38 mail named[7498]: zone mydomain.com/IN: sending notifies (serial 1)
    ******************************************************************************************************
    I hope someone help, now i lost.
    Thanks ans sorry for long post.
     
  2. falko

    falko Super Moderator Howtoforge Staff

    What are the outputs of
    Code:
    netstat -tap
    and
    Code:
    iptables -L
    ?
     
  3. algonco

    algonco New Member

    Here they are:
    ************************************************************************
    $ sudo netstat -tap
    Conexiones activas de Internet (servidores y establecidos)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 *:netbios-ssn *:* ESCUCHAR 4970/smbd
    tcp 0 0 mail.rubenjimene:domain *:* ESCUCHAR 7571/named
    tcp 0 0 localhost:domain *:* ESCUCHAR 7571/named
    tcp 0 0 localhost:ipp *:* ESCUCHAR 4730/cupsd
    tcp 0 0 localhost:953 *:* ESCUCHAR 7571/named
    tcp 0 0 *:smtp *:* ESCUCHAR 4935/master
    tcp 0 0 *:microsoft-ds *:* ESCUCHAR 4970/smbd
    tcp6 0 0 *:imaps *:* ESCUCHAR 4811/couriertcpd
    tcp6 0 0 *:pop3s *:* ESCUCHAR 4852/couriertcpd
    tcp6 0 0 *:5900 *:* ESCUCHAR 5451/vino-server
    tcp6 0 0 *:pop3 *:* ESCUCHAR 4827/couriertcpd
    tcp6 0 0 *:imap2 *:* ESCUCHAR 4788/couriertcpd
    tcp6 0 0 *:domain *:* ESCUCHAR 7571/named
    tcp6 0 0 ip6-localhost:953 *:* ESCUCHAR 7571/named
    tcp6 0 0 *:smtp *:* ESCUCHAR 4935/master


    $ sudo iptables -L
    Chain INPUT (policy ACCEPT)
    target prot opt source destination

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    *********************************************************

    When everything works fine, just install iptables. (think its right).

    I tested this from the client:
    *************************************************
    $ nslookup doslinux
    Server: 10.10.10.200
    Address: 10.10.10.200#53

    ** server can't find doslinux: NXDOMAIN

    $ nslookup doslinux.rubenjimenez.es
    Server: 10.10.10.200
    Address: 10.10.10.200#53

    Name: doslinux.rubenjimenez.es
    Address: 10.10.10.99
    ***********************************************
    whats wrong??
     
  4. falko

    falko Super Moderator Howtoforge Staff

    doslinux is no FQDN. With FQDNs (like doslinux.rubenjimenez.es) it's working.
     

Share This Page