DNS not working

Discussion in 'Installation/Configuration' started by mrbronz, Nov 27, 2023.

  1. mrbronz

    mrbronz Member HowtoForge Supporter

    Hi all
    I have the same issue as I had with this post https://forum.howtoforge.com/threads/new-static-ip.90241/
    I don't want to reinstall it. I want to work out what's going wrong and how I can fix it.
    I have followed the forum manta and followed the instructions to list the hft report listed below.
    I have tried clearing out the DNS chashe and several other things, such as deleting and recreating the DNS records.
    Nothing seems to work.
    Just for the record, my Domain provider has updated my glue ns records, and my ISP has inserted my rDNS records.
    I have tied the dig @81.142.113.178 gregson.me.uk
    But as in the post mentioned above, I got the old NS IP addresses.
    I have also tried dig with the local address that points to the port-redirected server, but still I get the same.

    My cry for help yet again.

    Kind regards.

    Code:
    cat htf_report.txt | more
    
    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    [INFO] OS version is Debian GNU/Linux 11 (bullseye)
    
    [INFO] uptime:  19:00:53 up 31 min,  1 user,  load average: 0.16, 0.11, 0.10
    
    [INFO] memory:
                   total        used        free      shared  buff/cache   available
    Mem:           7.5Gi       2.0Gi       4.6Gi        63Mi       957Mi       5.2Gi
    Swap:          975Mi          0B       975Mi
    
    [INFO] systemd failed services status:
      UNIT LOAD ACTIVE SUB DESCRIPTION
    0 loaded units listed.
    
    [INFO] ISPConfig is installed.
    
    ##### ISPCONFIG #####
    ISPConfig version is 3.2.9p1
    
    
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 7.4.33
    [INFO] php-cgi (used for cgi php in default vhost!) is version 7.4.33
    
    ##### PORT CHECK #####
    
    [WARN] Port 21 (FTP server) seems NOT to be listening
    [WARN] Port 22 (SSH server) seems NOT to be listening
    
    ##### MAIL SERVER CHECK #####
    
    
    ##### RUNNING SERVER PROCESSES #####
    
    [INFO] I found the following web server(s):
            Apache 2 (PID 1213)
    [INFO] I found the following mail server(s):
            Postfix (PID 1477)
    [INFO] I found the following pop3 server(s):
            Dovecot (PID 596)
    [INFO] I found the following imap server(s):
            Dovecot (PID 596)
    [WARN] I could not determine which ftp server is running.
    
    ##### LISTENING PORTS #####
    (only           ()
    Local           (Address)
    [anywhere]:110          (596/dovecot)
    [anywhere]:143          (596/dovecot)
    [anywhere]:465          (1477/master)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    ***.***.***.***:53              (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [localhost]:53          (601/named)
    [anywhere]:2293         (656/sshd:)
    [anywhere]:25           (1477/master)
    [localhost]:953         (601/named)
    [anywhere]:4190         (596/dovecot)
    [anywhere]:993          (596/dovecot)
    [anywhere]:995          (596/dovecot)
    [localhost]:11332               (614/rspamd:)
    [localhost]:11333               (614/rspamd:)
    [localhost]:11334               (614/rspamd:)
    [localhost]:10023               (1046/postgrey)
    [anywhere]:587          (1477/master)
    [localhost]:6379                (613/redis-server)
    [localhost]:11211               (600/memcached)
    [localhost]10           (596/dovecot)
    [localhost]43           (596/dovecot)
    *:*:*:*::*:8080         (1213/apache2)
    *:*:*:*::*:80           (1213/apache2)
    *:*:*:*::*:465          (1477/master)
    *:*:*:*::*:8081         (1213/apache2)
    *:*:*:*::*:2293         (656/sshd:)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*:53           (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*d63d:7eff:feff:53             (601/named)
    *:*:*:*::*:25           (1477/master)
    *:*:*:*::*:953          (601/named)
    *:*:*:*::*:443          (1213/apache2)
    *:*:*:*::*:4190         (596/dovecot)
    *:*:*:*::*:993          (596/dovecot)
    *:*:*:*::*:995          (596/dovecot)
    *:*:*:*::*:11332                (614/rspamd:)
    *:*:*:*::*:11333                (614/rspamd:)
    *:*:*:*::*:11334                (614/rspamd:)
    *:*:*:*::*:10023                (1046/postgrey)
    *:*:*:*::*:3306         (731/mariadbd)
    *:*:*:*::*:587          (1477/master)
    *:*:*:*::*:6379         (613/redis-server)
    
    
    
    
    ##### IPTABLES #####
    Chain INPUT (policy DROP)
    target     prot opt source               destination
    f2b-postfix-sasl  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 25
    ufw-before-logging-input  all  --  [anywhere]/0            [anywhere]/0
    ufw-before-input  all  --  [anywhere]/0            [anywhere]/0
    ufw-after-input  all  --  [anywhere]/0            [anywhere]/0
    ufw-after-logging-input  all  --  [anywhere]/0            [anywhere]/0
    ufw-reject-input  all  --  [anywhere]/0            [anywhere]/0
    ufw-track-input  all  --  [anywhere]/0            [anywhere]/0
    
    Chain FORWARD (policy DROP)
    target     prot opt source               destination
    ufw-before-logging-forward  all  --  [anywhere]/0            [anywhere]/0
    ufw-before-forward  all  --  [anywhere]/0            [anywhere]/0
    ufw-after-forward  all  --  [anywhere]/0            [anywhere]/0
    ufw-after-logging-forward  all  --  [anywhere]/0            [anywhere]/0
    ufw-reject-forward  all  --  [anywhere]/0            [anywhere]/0
    ufw-track-forward  all  --  [anywhere]/0            [anywhere]/0
    ACCEPT     tcp  --  [anywhere]/0            ***.***.***.***       tcp dpt:80
    ACCEPT     tcp  --  [anywhere]/0            ***.***.***.***       tcp dpt:53
    ACCEPT     tcp  --  [anywhere]/0            ***.***.***.***       tcp dpt:53
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination
    ufw-before-logging-output  all  --  [anywhere]/0            [anywhere]/0
    ufw-before-output  all  --  [anywhere]/0            [anywhere]/0
    ufw-after-output  all  --  [anywhere]/0            [anywhere]/0
    ufw-after-logging-output  all  --  [anywhere]/0            [anywhere]/0
    ufw-reject-output  all  --  [anywhere]/0            [anywhere]/0
    ufw-track-output  all  --  [anywhere]/0            [anywhere]/0
    
    Chain f2b-postfix-sasl (1 references)
    target     prot opt source               destination
    RETURN     all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-after-forward (1 references)
    target     prot opt source               destination
    
    Chain ufw-after-input (1 references)
    target     prot opt source               destination
    ufw-skip-to-policy-input  udp  --  [anywhere]/0            [anywhere]/0            udp dpt:137
    ufw-skip-to-policy-input  udp  --  [anywhere]/0            [anywhere]/0            udp dpt:138
    ufw-skip-to-policy-input  tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:139
    ufw-skip-to-policy-input  tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:445
    ufw-skip-to-policy-input  udp  --  [anywhere]/0            [anywhere]/0            udp dpt:67
    ufw-skip-to-policy-input  udp  --  [anywhere]/0            [anywhere]/0            udp dpt:68
    ufw-skip-to-policy-input  all  --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type BROADCAST
    
    Chain ufw-after-logging-forward (1 references)
    target     prot opt source               destination
    LOG        all  --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
    
    Chain ufw-after-logging-input (1 references)
    target     prot opt source               destination
    LOG        all  --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
    
    Chain ufw-after-logging-output (1 references)
    target     prot opt source               destination
    
    Chain ufw-after-output (1 references)
    target     prot opt source               destination
    
    Chain ufw-before-forward (1 references)
    target     prot opt source               destination
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 3
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 11
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 12
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 8
    ufw-user-forward  all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-before-input (1 references)
    target     prot opt source               destination
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
    ufw-logging-deny  all  --  [anywhere]/0            [anywhere]/0            ctstate INVALID
    DROP       all  --  [anywhere]/0            [anywhere]/0            ctstate INVALID
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 3
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 11
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 12
    ACCEPT     icmp --  [anywhere]/0            [anywhere]/0            icmptype 8
    ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp spt:67 dpt:68
    ufw-not-local  all  --  [anywhere]/0            [anywhere]/0
    ACCEPT     udp  --  [anywhere]/0            ***.***.***.***          udp dpt:5353
    ACCEPT     udp  --  [anywhere]/0            ***.***.***.***      udp dpt:1900
    ufw-user-input  all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-before-logging-forward (1 references)
    target     prot opt source               destination
    
    Chain ufw-before-logging-input (1 references)
    target     prot opt source               destination
    
    Chain ufw-before-logging-output (1 references)
    target     prot opt source               destination
    
    Chain ufw-before-output (1 references)
    target     prot opt source               destination
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0            ctstate RELATED,ESTABLISHED
    ufw-user-output  all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-logging-allow (0 references)
    target     prot opt source               destination
    LOG        all  --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW ALLOW] "
    
    Chain ufw-logging-deny (2 references)
    target     prot opt source               destination
    RETURN     all  --  [anywhere]/0            [anywhere]/0            ctstate INVALID limit: avg 3/min burst 10
    LOG        all  --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10 LOG flags 0 level 4 prefix "[UFW BLOCK] "
    
    Chain ufw-not-local (1 references)
    target     prot opt source               destination
    RETURN     all  --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type LOCAL
    RETURN     all  --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type MULTICAST
    RETURN     all  --  [anywhere]/0            [anywhere]/0            ADDRTYPE match dst-type BROADCAST
    ufw-logging-deny  all  --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 10
    DROP       all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-reject-forward (1 references)
    target     prot opt source               destination
    
    Chain ufw-reject-input (1 references)
    target     prot opt source               destination
    
    Chain ufw-reject-output (1 references)
    target     prot opt source               destination
    
    Chain ufw-skip-to-policy-forward (0 references)
    target     prot opt source               destination
    DROP       all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-skip-to-policy-input (7 references)
    target     prot opt source               destination
    DROP       all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-skip-to-policy-output (0 references)
    target     prot opt source               destination
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-track-forward (1 references)
    target     prot opt source               destination
    
    Chain ufw-track-input (1 references)
    target     prot opt source               destination
    
    Chain ufw-track-output (1 references)
    target     prot opt source               destination
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            ctstate NEW
    ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            ctstate NEW
    
    Chain ufw-user-forward (1 references)
    target     prot opt source               destination
    
    Chain ufw-user-input (1 references)
    target     prot opt source               destination
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:20
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:21
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:22
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:25
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:53
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:80
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:110
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:143
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:443
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:465
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:587
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:993
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:995
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:3306
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:4190
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:8080
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:8081
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 40110:40210
    ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:53
    ACCEPT     tcp  --  ***.***.***.***/24      [anywhere]/0            tcp dpt:3306
    ACCEPT     tcp  --  [anywhere]/0            [anywhere]/0            tcp dpt:2293
    ACCEPT     udp  --  [anywhere]/0            [anywhere]/0            udp dpt:2293
    ACCEPT     all  --  ***.***.***.***/24      [anywhere]/0
    
    Chain ufw-user-limit (0 references)
    target     prot opt source               destination
    LOG        all  --  [anywhere]/0            [anywhere]/0            limit: avg 3/min burst 5 LOG flags 0 level 4 prefix "[UFW LIMIT BLOCK] "
    REJECT     all  --  [anywhere]/0            [anywhere]/0            reject-with icmp-port-unreachable
    
    Chain ufw-user-limit-accept (0 references)
    target     prot opt source               destination
    ACCEPT     all  --  [anywhere]/0            [anywhere]/0
    
    Chain ufw-user-logging-forward (0 references)
    target     prot opt source               destination
    
    Chain ufw-user-logging-input (0 references)
    target     prot opt source               destination
    
    Chain ufw-user-logging-output (0 references)
    target     prot opt source               destination
    
    Chain ufw-user-output (1 references)
    target     prot opt source               destination
    
    
    
    
    ##### LET'S ENCRYPT #####
    acme.sh is installed in /root/.acme.sh/acme.sh
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    That thread is 3 pages long. Please desribe what is not working now on this thread.
    Reinstall what?
    Is gregson.me.uk the domain you are building name service for? Are the name server shown here correct:
    Code:
     whois gregson.me.uk | grep "Name servers" -A 5
        Name servers:
            ns1.gregson.me.uk         81.142.113.178
            ns2.gregson.me.uk         81.142.113.179
    
        WHOIS lookup made at 12:40:37 28-Nov-2023
    
    If you are building name service with ISPConfig, my signature has link to tutorial.
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    You can use intodns.com to check your DNS setup. Check if it reports any errors and check if the right DNS servers are used (@Taleman posted the current nameservers also above already).
     
  4. mrbronz

    mrbronz Member HowtoForge Supporter

    My Apologies Taleman,

    I thought it would be easier to point to that post, as it states the problem in the opening. so I will paraphrase for convenience.

    So, I have attempted several fixes, but still, the Nameservers are not connecting with the correct IP addresses, they are using the old block of IP addresses.
    I am getting the following from a local dig command

    Code:
     dig @81.142.113.178 gregson.me.uk
    
    ; <<>> DiG 9.11.5-P4-5.1+deb10u9-Raspbian <<>> @81.142.113.178 gregson.me.uk
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12439
    ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
    ;; WARNING: recursion requested but not available
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: 310022b3b86f0254997442eb6565e715538bd984a8463e4a (good)
    ;; QUESTION SECTION:
    ;gregson.me.uk.                 IN      A
    
    ;; ANSWER SECTION:
    gregson.me.uk.          3600    IN      A       92.27.140.48
    
    ;; AUTHORITY SECTION:
    gregson.me.uk.          3600    IN      NS      ns1.gregson.me.uk.
    gregson.me.uk.          3600    IN      NS      ns2.gregson.me.uk.
    
    ;; ADDITIONAL SECTION:
    ns1.gregson.me.uk.      1209600 IN      A       92.27.140.49
    ns2.gregson.me.uk.      1209600 IN      A       92.27.140.50
    
    ;; Query time: 4 msec
    ;; SERVER: 81.142.113.178#53(81.142.113.178)
    ;; WHEN: Tue Nov 28 13:11:49 GMT 2023
    ;; MSG SIZE  rcvd: 154
    
    As you can see the old ns1 and ns2 ip addresses are still being reported.
     
  5. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    I can not see that since I do not know what old and new addresses should be.
    If your name server 81.142.113.178 reports 92.27.140.49 for IP address, then that is what you have written for A record for name ns1.gregson.me.uk.
    You could show what you have written as settings in that zone.
     
  6. mrbronz

    mrbronz Member HowtoForge Supporter

    That's a fair assumption Taleman.

    But I have changed the entries in my DNS zone. I would have thought Changing the IP addresses in the DNS zone in ISPC3 would be enough, obviously, along with changing the rDNS and glue records. But this is not the case.

    I have cleared out the dns cache by running
    Code:
    systemctl restart systemd-resolved.service
    Still is seeing the old IP addresses. its irrelevant of what the old addresses were. The point is the new ones are not being used.

    upload_2023-11-28_14-37-4.png
     
  7. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    What IP is set at your domain registrar?
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    To test your DNS server, login to the DNS server on the shell and run:

    dig @localhost gregson.me.uk

    does it return the correct IP address?
     
    Taleman likes this.
  9. mrbronz

    mrbronz Member HowtoForge Supporter

    Domain Reg
    IP:addresses 2 81.142.113.178 = ns1.gregson.me.uk
    IP:addresses 3 81.142.113.179 = ns2.gregson.me.uk

    ISP for rDNS
    178.113.142.81.in-addr.arpa IN PTR ns1.gregson.me.uk
    179.113.142.81.in-addr.arpa IN PTR ns2.gregson.me.uk
     
  10. mrbronz

    mrbronz Member HowtoForge Supporter

    Hi Till
    dig @localhost gregson.me.uk

    ; <<>> DiG 9.16.44-Debian <<>> @localhost gregson.me.uk
    ; (2 servers found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2879
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 1232
    ; COOKIE: 8c21ea0bd37b06ed01000000656735ac04d86a5766c8e300 (good)
    ;; QUESTION SECTION:
    ;gregson.me.uk. IN A

    ;; ANSWER SECTION:
    gregson.me.uk. 3600 IN A 81.142.113.177

    ;; Query time: 0 msec
    ;; SERVER: ::1#53:):1)
    ;; WHEN: Wed Nov 29 12:59:24 GMT 2023
    ;; MSG SIZE rcvd: 86
     
    Last edited: Nov 29, 2023
  11. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    Has your new IP settings written in the bind files?
     
  12. mrbronz

    mrbronz Member HowtoForge Supporter

    Can you help me with that?
    Which specific files would they be?
     
  13. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    If it is properly written then it should be in pri.mydomain.ltd file but if not, it could be in pri.mydomain.ltd.err. A mere dot error could cause that new settings ended into an error file instead of properly updating the new ip into its proper file. That is why I asked.
     
  14. pyte

    pyte Well-Known Member HowtoForge Supporter

    The following should tell you what is wrong:
    Code:
    named-checkzone gregson.me.uk /etc/bind/pri.gregson.me.uk.err 
    assuming "/etc/bind/pri.gregson.me.uk.err" is the location of the zone and it is indeed wrong which is most likely.

    BTW @till we really should implement a warning in the interface upon saving a zone when the checks fail. Is there anything in progress already?
     
  15. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    I wrote in #2 my signature has link to name service setup tutorial. It explains how to run named-checkzone if zone has errors.
     
    ahrasis and pyte like this.
  16. mrbronz

    mrbronz Member HowtoForge Supporter

    Thanks for the input.
    results are
    Code:
     named-checkzone gregson.me.uk /etc/bind/pri.gregson.me.uk.err
    zone gregson.me.uk/IN: NS 'ns1.gregson.me.uk' has no address records (A or AAAA)
    zone gregson.me.uk/IN: NS 'ns2.gregson.me.uk' has no address records (A or AAAA)
    zone gregson.me.uk/IN: not loaded due to errors.
    However, as I have shown in post #6 above, the zone has both NS and A records for the nameservers

    The contents of pri.gregson.me.uk.err
    Code:
    $TTL        3600
    @       IN      SOA     ns1.gregson.me.uk. admin.gregson.me.uk. (
                            2023112909       ; serial, todays date + todays serial #
                            7200              ; refresh, seconds
                            540              ; retry, seconds
                            604800              ; expire, seconds
                            3600 )            ; minimum, seconds
    ;
    
    gregson.me.uk. 3600      A          81.142.113.177
    www 3600      A          81.142.113.177
    mail 3600      A          81.142.113.177
    gregson.me.uk. 3600      NS         ns1.gregson.me.uk.
    gregson.me.uk. 3600      NS         ns2.gregson.me.uk.
    gregson.me.uk. 3600      MX     10  mail.gregson.me.uk.
    gregson.me.uk. 3600      TXT        "v=spf1 mx a ~all"
    ns1.gregson.me.uk 3600      A          81.142.113.178
    ns2.gregson.me.uk 3600      A          81.142.113.179
    default._domainkey.gregson.me.uk. 3600      TXT        "v=DKIM1; t=s; p=********>
    _dmarc.gregson.me.uk. 3600      TXT        "v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=0:1:d:s"
    
     
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    No, it don't. You misdded adding dots at the end of the fully qualified domain names. Any fully qualified domain name has to end with a dot, only short domain names do not have a dot at the end.

    so you can either write ns1 (without a dot)
    or
    ns1.gregson.me.uk. (with a dot)
    but you can not use
    ns1.gregson.me.uk (without a dot)
    as this would result in a DNS record for:
    ns1.gregson.me.uk.gregson.me.uk
    which is not what you want. So your current zone has indeed no A-Records for ns1 and ns2.
     
    ahrasis likes this.
  18. mrbronz

    mrbronz Member HowtoForge Supporter

    Thanks for that Till
    I have now changed but it's still not working
    From what I understand, pri. Bind file should be the same on all server (For may case anyway)
    However, when I change the domain zone in ISPC3 the files in NS1 and NS2 do not change.
    Could this non communition between the servers be the issue, how do I get them taking to each other again?

    Code:
     dig @81.142.113.178 gregson.me.uk ALL
    
    ; <<>> DiG 9.16.44-Debian <<>> @81.142.113.178 gregson.me.uk ALL
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 13428
    ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
    ;; WARNING: recursion requested but not available
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: 93567d7ee338642b977ef79865674c72dbe2aab4a4d65a75 (good)
    ;; QUESTION SECTION:
    ;gregson.me.uk.                 IN      A
    
    ;; Query time: 0 msec
    ;; SERVER: 81.142.113.178#53(81.142.113.178)
    ;; WHEN: Wed Nov 29 14:36:34 GMT 2023
    ;; MSG SIZE  rcvd: 70
    
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 36329
    ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
    ;; WARNING: recursion requested but not available
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: 93567d7ee338642b56e2c01565674c7260e6e72ae2fde183 (good)
    ;; QUESTION SECTION:
    ;ALL.                           IN      A
    
    ;; Query time: 7 msec
    ;; SERVER: 81.142.113.178#53(81.142.113.178)
    ;; WHEN: Wed Nov 29 14:36:34 GMT 2023
    ;; MSG SIZE  rcvd: 60
    
     
  19. pyte

    pyte Well-Known Member HowtoForge Supporter

    The zone is still not correct. Please check again with the named-checkzone command and make sure the zone does not contain errors.

    Code:
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 37621
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
     
  20. mrbronz

    mrbronz Member HowtoForge Supporter

    I am getting
    The contects of /etc/bind/
    It looks like pri.gregson.me.uk.err.save has been changed to pri.gregson.me.uk.err.save, but not by me.
     

Share This Page