Configuring BuddyNS as secondary name server

Discussion in 'Installation/Configuration' started by dan-v, Mar 5, 2025.

  1. dan-v

    dan-v Member

    I have a single, home-based, server running Debian 12 / ISPConfig 3.2.

    I am trying to make my server the master DNS server for one of my domains, with BuddyNS as the secondary name server. BuddyNS requires a list of it's IPs to be allowed to download the master zone contents (on their AXFR setup page). I have added these IP's, comma-separated, in the relevant field of the "zone settings" page for the domain. Once this is saved, one would expect that BuddyNS will be able to pull a copy of the master (local) DNS zone.

    This is not happening.

    When checking the BIND configuration (/etc/bind/*conf*), one would expect ISPConfig to have added the corresponding information:
    Code:
    # add this inside the "options {}" block
    allow-transfer {
      # allow ALL of the following addresses! Miss some and transfer will fail.
      108.61.224.67; 116.203.6.3; 107.191.99.111; 193.109.120.66; 103.6.87.125; 192.184.93.99; 119.252.20.56; 172.96.140.41; 37.143.61.179; 195.20.17.193; 45.77.29.133; 116.203.0.64; 167.88.161.228; 199.195.249.208; 104.244.78.122; 2605:6400:30:fd6e::3; 2605:6400:10:65::3; 2605:6400:20:d5e::3; 2a01:4f8:1c0c:8122::3; 2001:19f0:7001:381::3; 2a10:1fc0:d::ae75:f39a; 2a01:a500:2766::5c3f:d10b; 2605:9880:200:1300:31:59:50:8; 2406:d500:2::de4f:f105; 2604:180:1:92a::3; 2403:2500:4000::f3e; 2a10:1fc0:1::e313:41be; 2604:180:2:4cf::3; 2a01:4f8:1c0c:8115::3; 2001:19f0:6400:8642::3;
    };
    
    But there is no such data in the /etc/bind/*conf* files. I could of course insert this data manually in the BIND conf files, but that might conflict with subsequent updates of these files by ISPConfig.

    What am I missing ?
     
  2. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    there are multiple conf files in that directory, are you sure you're checking the right file.. named.conf.local
     
  3. dan-v

    dan-v Member

    Yes. Nothing in there. named.conf.local remains empty
     
  4. nhybgtvfr

    nhybgtvfr Well-Known Member HowtoForge Supporter

    totally empty? or just no allow-transfer lines in the config?
     
  5. dan-v

    dan-v Member

    Yes. Empty like empty...
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Then you probably have a completely different problem; your issue is that the zone file was not written due to errors in the zone. Is there a zone file with .err file ending?
     
  7. dan-v

    dan-v Member

    Where do I look for it ?
     
  8. dan-v

    dan-v Member

    Coorection. Yes there is. File pri.marlotte.fr.err (domaine is marlotte.fr)
    Code:
    $TTL        3600
    @       IN      SOA     serveur.marlotte.fr. d_vassy.yahoo.com. (
                            2025030510       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    marlotte.fr. 3600      A          82.65.5.191
    marlotte.fr. 3600      NS         serveur.marlotte.fr.
    marlotte.fr. 3600      MX     10  mail.marlotte.fr.
    marlotte.fr. 3600      TXT        "v=spf1 mx a ~all"
    marlotte.fr. 3600      CAA        0 issue "letsencrypt.org"
    default._domainkey.marlotte.fr. 3600      TXT        "v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA+2DW1pwwzI/dYikoDbNrcOOh5q7C2YXgDcVReQPM4R0AXgVdC3VO/1CUDT5fU+gl4zfosOQzwbjgXvct/VaacXZqkpgbt31F/by0l95WVvqQHyBNswzS2Q+OogI6Z8ZsukD67WRWSEyn3JYBU/omhnEd9tyvZRPsdaUKMviQl/bzz+qcSbXOCFpTSuuRLqK+8" "BfHtw879MJRDaU7IFvALqEkaIkFvSjqwLZMiNZQxNSVsHEQLQtvPP5HB0G+RFwf7s1qgXS7G4lrenoZb9uwtlPffSl+sb+ptlqpCEiCiqNsht0D5yfCZZIhvKZETnUzmO1/QV0CII9YhZb7xNNQIDAQAB"
    www.marlotte.fr 3600      CNAME      marlotte.fr
    marlotte.fr 3600      PTR        serveur.marlotte.fr
    serveur.marlotte.fr 3600      A          82.65.5.191
    mail.marlotte.fr 3600      A          82.65.5.191
    _dmarc.marlotte.fr. 3600      TXT        "v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]"
    marlotte.fr 3600      NS         uz56xw8h7fw656bpfv84pctjbl9rbzbqrw4rpzdhtvzyltpjdmx0zq.free.ns.buddyns.com
    marlotte.fr 3600      NS         uz5x36jqv06q5yulzwcblfzcrk1b479xdttdm1nrgfglzs57bmctl8.free.ns.buddyns.com
    
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    There are several errors in the data you entered. Every fully qualified domain name must end with a dot.
     
  10. dan-v

    dan-v Member

    AH. OK, thx. I'll work on it. How do I detect whern I have got it right ?
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    The zone starts working and is listed in named.conf.local.
     
  12. dan-v

    dan-v Member

    OK, thx
     
  13. dan-v

    dan-v Member

    I fixed the dot issue. It still shows errors in the CAA record, as well as the default._domainkey.marlotte.fr. TXT record. I did not input these records manually, ISPConfig created them. How do I fix the issues there ?

    Code:
    TTL        3600
    @       IN      SOA     serveur.marlotte.fr. d_vassy.yahoo.com. (
                            2025030607       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    marlotte.fr. 3600      A          82.65.5.191
    marlotte.fr. 3600      NS         serveur.marlotte.fr.
    marlotte.fr. 3600      MX     10  mail.marlotte.fr.
    marlotte.fr. 3600      TXT        "v=spf1 mx a ~all"
    marlotte.fr. 3600      CAA        0 issuewild "letsencrypt.org"
    default._domainkey.marlotte.fr. 3600      TXT        "v=DKIM1; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA+2DW1pwwzI/dYikoDbNrcOOh5q7C2YXgDcVReQPM4R0AXgVdC3VO/1CUDT5fU+gl4zfosOQzwbjgXvct/VaacXZqkpgbt31F/by0l95WVvqQHyBNswzS2Q+OogI6Z8ZsukD67WRWSEyn3JYBU/omhnEd9tyvZRPsdaUKMviQl/bzz+qcSbXOCFpTSuuRLqK+8" "BfHtw879MJRDaU7IFvALqEkaIkFvSjqwLZMiNZQxNSVsHEQLQtvPP5HB0G+RFwf7s1qgXS7G4lrenoZb9uwtlPffSl+sb+ptlqpCEiCiqNsht0D5yfCZZIhvKZETnUzmO1/QV0CII9YhZb7xNNQIDAQAB"
    www.marlotte.fr 3600      CNAME      marlotte.fr.
    marlotte.fr 3600      PTR        serveur.marlotte.fr.
    serveur.marlotte.fr 3600      A          82.65.5.191
    mail.marlotte.fr 3600      A          82.65.5.191
    _dmarc.marlotte.fr. 3600      TXT        "v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]"
    marlotte.fr 3600      NS         uz56xw8h7fw656bpfv84pctjbl9rbzbqrw4rpzdhtvzyltpjdmx0zq.free.ns.buddyns.com.
    marlotte.fr 3600      NS         uz5x36jqv06q5yulzwcblfzcrk1b479xdttdm1nrgfglzs57bmctl8.free.ns.buddyns.com.
    Thx in advance
     
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    These two records look fine and are not the reason for your issue.
    Other records you entered are still not correct:

    www.marlotte.fr. 3600 CNAME marlotte.fr.
    marlotte.fr. 3600 PTR serveur.marlotte.fr.
    serveur.marlotte.fr. 3600 A 82.65.5.191
    mail.marlotte.fr. 3600 A 82.65.5.191
    marlotte.fr. 3600 NS uz56xw8h7fw656bpfv84pctjbl9rbzbqrw4rpzdhtvzyltpjdmx0zq.free.ns.buddyns.com.
    marlotte.fr. 3600 NS uz5x36jqv06q5yulzwcblfzcrk1b479xdttdm1nrgfglzs57bmctl8.free.ns.buddyns.com.

    In bold where you missed the dots (which I added in bold text).
     
  15. dan-v

    dan-v Member

    Thank you very much, Till. Tou are very helpful !
     

Share This Page