ISPConfig not resolving web pages

Discussion in 'Installation/Configuration' started by TheBirdMan, Apr 26, 2008.

  1. TheBirdMan

    TheBirdMan Member

    Hi,

    I have a new install of ispconfig but when I test my client by pointing only to the new ispconfig server as dns it does not resolve names to itself as it should. What did I miss?

    here is my netstat :
    [root@ns ~]# netstat -tap
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 localhost:2208 *:* LISTEN 2275/hpiod
    tcp 0 0 *:mysql *:* LISTEN 2747/mysqld
    tcp 0 0 localhost:783 *:* LISTEN 2350/spamd.pid
    tcp 0 0 *:sunrpc *:* LISTEN 2087/portmap
    tcp 0 0 *:hosts2-ns *:* LISTEN 2780/ispconfig_http
    tcp 0 0 localhost:domain *:* LISTEN 3111/named
    tcp 0 0 localhost:ipp *:* LISTEN 2292/cupsd
    tcp 0 0 localhost:rndc *:* LISTEN 3111/named
    tcp 0 0 *:smtp *:* LISTEN 3081/master
    tcp 0 0 *:1018 *:* LISTEN 2108/rpc.statd
    tcp 0 0 localhost:2207 *:* LISTEN 2280/python
    tcp 1 0 ns.mydomain:36801 mirrors.tummy.com:http CLOSE_WAIT 2543/python
    tcp 0 0 ns.mydomain:53947 12.37.74.43:http TIME_WAIT -
    tcp 1 0 ns.mydomain:49268 wiki.fedoraproject.org:http CLOSE_WAIT 2543/python
    tcp 0 0 ns.mydomain:58812 157.238.197.42:http TIME_WAIT -
    tcp 0 0 ns.mydomain:50369 77.67.126.25:http TIME_WAIT -
    tcp 1 0 ns.mydomain:35176 hpc-mirror.usc.edu:http CLOSE_WAIT 2543/python
    tcp 0 0 *:imaps *:* LISTEN 2331/dovecot
    tcp 0 0 *:pop3s *:* LISTEN 2331/dovecot
    tcp 0 0 *:pop3 *:* LISTEN 2331/dovecot
    tcp 0 0 *:imap *:* LISTEN 2331/dovecot
    tcp 0 0 *:http *:* LISTEN 3001/httpd
    tcp 0 0 *:ftp *:* LISTEN 3132/proftpd: (acce
    tcp 0 0 ::1:domain *:* LISTEN 3111/named
    tcp 0 0 *:ssh *:* LISTEN 2306/sshd
    tcp 0 0 ::1:rndc *:* LISTEN 3111/named
    tcp 0 0 *:https *:* LISTEN 3001/httpd

    Ps- thanks for all the help, I have never gotten Microsoft support like this.
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    You must set a DNS A-Record pointing to the IP address of your server on the dns server that is authoritive for this domain. The authoritive server is not nescessarily your own server, it might be the dns server of the company were you registered the domain.

    Also be aware that it may take up to 48 hours until changes in the dns system become active.
     
  3. TheBirdMan

    TheBirdMan Member

    Hi,

    I setup a test domain along with a name server pointing to the ISPConfig server and it is still not working. I tried "telnet localhost 53" on the server I am connected. If I telnet 192.168.1.10 53 (its eth0) it does not connect.

    Scott
     
  4. falko

    falko Super Moderator Howtoforge Staff

    What's the output of
    Code:
    netstat -tap
    and
    Code:
    iptables -L
    ?
     
  5. TheBirdMan

    TheBirdMan Member

    Hi Falko,

    Here is what I have:

    netstat -tap

    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 localhost:2208 *:* LISTEN 2277/hpiod
    tcp 0 0 *:mysql *:* LISTEN 2749/mysqld
    tcp 0 0 localhost:783 *:* LISTEN 2352/spamd.pid
    tcp 0 0 *:sunrpc *:* LISTEN 2089/portmap
    tcp 0 0 *:hosts2-ns *:* LISTEN 2799/ispconfig_http
    tcp 0 0 localhost:domain *:* LISTEN 2068/named
    tcp 0 0 localhost:ipp *:* LISTEN 2294/cupsd
    tcp 0 0 *:smtp *:* LISTEN 2412/master
    tcp 0 0 localhost:rndc *:* LISTEN 2068/named
    tcp 0 0 *:1020 *:* LISTEN 2110/rpc.statd
    tcp 0 0 localhost:2207 *:* LISTEN 2282/python
    tcp 0 0 *:imaps *:* LISTEN 2333/dovecot
    tcp 0 0 *:pop3s *:* LISTEN 2333/dovecot
    tcp 0 0 *:pop3 *:* LISTEN 2333/dovecot
    tcp 0 0 *:imap *:* LISTEN 2333/dovecot
    tcp 0 0 *:http *:* LISTEN 2449/httpd
    tcp 0 0 *:ftp *:* LISTEN 2425/proftpd: (acce
    tcp 0 0 ::1:domain *:* LISTEN 2068/named
    tcp 0 0 *:ssh *:* LISTEN 2308/sshd
    tcp 0 0 ::1:rndc *:* LISTEN 2068/named
    tcp 0 0 *:https *:* LISTEN 2449/httpd
    tcp 0 1332 ::ffff:192.168.5.51:ssh ::ffff:192.168.6.83:1321 ESTABLISHED 3049/1


    iptables -L

    Chain INPUT (policy ACCEPT)
    target prot opt source destination

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
     
  6. falko

    falko Super Moderator Howtoforge Staff

    BIND is listening on localhost only. What's in your named.conf?
     
  7. TheBirdMan

    TheBirdMan Member

    1) I have a named.conf under /var/named/chroot

    options {
    pid-file "/var/named/chroot/var/run/named/named.pid";
    directory "/home/admispconfig/ispconfig/web/multidoc/edit";
    auth-nxdomain no;
    /*
    * If there is a firewall between you and nameservers you want
    * to talk to, you might need to uncomment the query-source
    * directive below. Previous versions of BIND always asked
    * questions using port 53, but BIND 8.1 uses an unprivileged
    * port by default.
    */
    // query-source address * port 53;
    };

    //
    // a caching only nameserver config
    //
    zone "." {
    type hint;
    file "named.ca";
    };

    zone "0.0.127.in-addr.arpa" {
    type master;
    file "named.local";
    };

    zone "144.104.70.in-addr.arpa" {
    type master;
    file "pri.144.104.70.in-addr.arpa";
    };
    zone "5.168.192.in-addr.arpa" {
    type master;
    file "pri.5.168.192.in-addr.arpa";
    };


    zone "mydomain1.com" {
    type master;
    file "pri.mydomain1.com";
    };
    zone "mydomain2.com" {
    type master;
    file "pri.mydomain2.com";
    };
    zone "mydomain3.com" {
    type master;
    file "pri.mydomain3.com";
    };



    2) I also have a named.caching-nameserver.conf which is the only one under /etc

    //
    // named.caching-nameserver.conf
    //
    // Provided by Red Hat caching-nameserver package to configure the
    // ISC BIND named(8) DNS server as a caching only nameserver
    // (as a localhost DNS resolver only).
    //
    // See /usr/share/doc/bind*/sample/ for example named configuration files.
    //
    // DO NOT EDIT THIS FILE - use system-config-bind or an editor
    // to create named.conf - edits to this file will be lost on
    // caching-nameserver package upgrade.
    //
    options {
    listen-on port 53 { 127.0.0.1; };
    listen-on-v6 port 53 { ::1; };
    directory "/var/named";
    dump-file "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    query-source port 53;
    query-source-v6 port 53;
    allow-query { localhost; };
    };
    logging {
    channel default_debug {
    file "data/named.run";
    severity dynamic;
    };
    };
    view localhost_resolver {
    match-clients { localhost; };
    match-destinations { localhost; };
    recursion yes;
    include "/etc/named.rfc1912.zones";
    };
     
  8. falko

    falko Super Moderator Howtoforge Staff

    I guess this is the crucial line:
    Code:
    listen-on port 53 { 127.0.0.1; };
    But I'm not sure why it's using named.caching-nameserver.conf...
    Which distribution are you using? did you set up the system according to one of the "Perfect Setups"?
     
  9. TheBirdMan

    TheBirdMan Member

    I used the "perfect setup" for fedora 6.

    These are the ISPConfig directories in the settings page:
    /var/named/chroot/etc/named.conf
    /home/admispconfig/ispconfig/web/multidoc/edit

    I don't know if ISPConfig is even using /etc/named.caching-nameserver.conf I t was the only named file under /etc so I listed it.

    The only other referance I can find to the localhost is:
    /home/admispconfig/ispconfig/web/multidoc/edit/named.local
    ;
    ; BIND data file for local loopback interface
    ;
    $TTL 604800
    @ IN SOA localhost. root.localhost. (
    1 ; Serial
    604800 ; Refresh
    86400 ; Retry
    2419200 ; Expire
    604800 ) ; Negative Cache TTL
    ;
    @ IN NS localhost.
    @ IN A 127.0.0.1
     
  10. falko

    falko Super Moderator Howtoforge Staff

    Please restart Bind. Do you get any errors then?
    What''s the output of
    Code:
    netstat -tap
    afterwards?
     
  11. TheBirdMan

    TheBirdMan Member

    Here is the netstat -tap after restarting bind with no errors.

    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address Stat e PID/Program name
    tcp 0 0 localhost:2208 *:* LIST EN 2276/hpiod
    tcp 0 0 *:mysql *:* LIST EN 2746/mysqld
    tcp 0 0 *:sunrpc *:* LIST EN 2088/portmap
    tcp 0 0 *:hosts2-ns *:* LIST EN 9300/ispconfig_http
    tcp 0 0 localhost:domain *:* LIST EN 4046/named
    tcp 0 0 localhost:ipp *:* LIST EN 2293/cupsd
    tcp 0 0 localhost:rndc *:* LIST EN 4046/named
    tcp 0 0 *:smtp *:* LIST EN 32138/master
    tcp 0 0 *:1019 *:* LIST EN 2109/rpc.statd
    tcp 0 0 localhost:2207 *:* LIST EN 2281/python
    tcp 1 0 ns.mydomain.com:52322 slartybardfast.gtlib.g:http CLOS E_WAIT 2542/python
    tcp 1 0 ns.mydomain.com:51403 wiki.fedoraproject.org:http CLOS E_WAIT 2542/python
    tcp 1 0 ns.mydomain.com:59760 169.237.215.148:http CLOS E_WAIT 2542/python
    tcp 0 0 localhost:47769 localhost:rndc TIME _WAIT -
    tcp 1 0 ns.mydomain.com:49157 hpc-mirror.usc.edu:http CLOS E_WAIT 2542/python
    tcp 0 0 *:imaps *:* LIST EN 2332/dovecot
    tcp 0 0 *:pop3s *:* LIST EN 2332/dovecot
    tcp 0 0 *:pop3 *:* LIST EN 2332/dovecot
    tcp 0 0 *:imap *:* LIST EN 2332/dovecot
    tcp 0 0 *:http *:* LIST EN 4251/httpd
    tcp 0 0 ::1:domain *:* LIST EN 4046/named
    tcp 0 0 *:ftp *:* LIST EN 32177/proftpd: (acc
    tcp 0 0 *:ssh *:* LIST EN 2307/sshd
    tcp 0 0 ::1:rndc *:* LIST EN 4046/named
    tcp 0 0 *:https *:* LIST EN 4251/httpd
     
  12. falko

    falko Super Moderator Howtoforge Staff

    What command did you use to restart BIND?
    What's the output of
    Code:
    ls -l /etc/init.d/
    ?
     
  13. TheBirdMan

    TheBirdMan Member

    Hi,

    I ran "service named restart"

    The output of my init.d directory is:

    total 452
    -rwxr-xr-x 1 root root 1128 Oct 9 2006 acpid
    -rwxr-xr-x 1 root root 1441 Oct 29 2006 anacron
    -rwxr-xr-x 1 root root 1429 Aug 22 2006 apmd
    -rwxr-xr-x 1 root root 1176 Jan 30 2007 atd
    -rwxr-xr-x 1 root root 2461 Aug 6 2007 autofs
    -rwxr-xr-x 1 root root 1861 Apr 26 2007 avahi-daemon
    -rwxr-xr-x 1 root root 1789 Apr 26 2007 avahi-dnsconfd
    -rwx------ 1 root root 3176 Apr 2 08:58 bastille-firewall
    -rwx------ 1 root root 3176 Jan 8 14:34 bastille-firewall.backup_03_31_2008__17_11_23
    -rwx------ 1 root root 3176 Mar 31 17:11 bastille-firewall.backup_04_01_2008__08_19_47
    -rwx------ 1 root root 3176 Apr 1 08:19 bastille-firewall.backup_04_02_2008__08_26_22
    -rwx------ 1 root root 3176 Apr 2 08:26 bastille-firewall.backup_04_02_2008__08_58_03
    -rwxr-xr-x 1 root root 1477 Oct 2 2006 bluetooth
    -rwxr-xr-x 1 root root 7040 Jul 9 2007 cpuspeed
    -rwxr-xr-x 1 root root 1904 Aug 6 2007 crond
    -rwxr-xr-x 1 root root 2062 Nov 7 13:12 cups
    -rwxr-xr-x 1 root root 299 May 3 2007 cups-config-daemon
    -rwxr-xr-x 1 root root 1505 Jul 12 2006 dc_client
    -rwxr-xr-x 1 root root 1347 Jul 12 2006 dc_server
    -rwxr-xr-x 1 root root 2785 Mar 5 2007 dhcdbd
    -rwxr-xr-x 1 root root 917 Aug 7 2007 dovecot
    -rwxr-xr-x 1 root root 996 Oct 2 2006 dund
    -rwxr-xr-x 1 root root 2084 Oct 2 2006 firstboot
    -rwxr-xr-x 1 root root 13913 Oct 26 2006 functions
    -rwxr-xr-x 1 root root 1777 May 23 2007 gpm
    -rwxr-xr-x 1 root root 1388 Dec 13 2006 haldaemon
    -rwxr-xr-x 1 root root 5742 Aug 17 2006 halt
    -rwxr-xr-x 1 root root 966 Oct 2 2006 hidd
    -rwxr-xr-x 1 root root 4777 Oct 12 2007 hplip
    -rwxr-xr-x 1 root root 3200 Sep 18 2007 httpd
    -rwxr-xr-x 1 root root 7638 Sep 19 2007 ip6tables
    -rwxr-xr-x 1 root root 7557 Sep 19 2007 iptables
    -rwxr-xr-x 1 root root 1624 Aug 1 2006 irda
    -rwxr-xr-x 1 root root 2120 Dec 12 2006 irqbalance
    -rwx------ 1 root root 3769 Apr 2 08:58 ispconfig_server
    -rwxr-xr-x 1 root root 8808 May 31 2007 kdump
    -rwxr-xr-x 1 root root 652 Sep 3 2003 killall
    -rwxr-xr-x 1 root root 1406 Nov 29 2006 kudzu
    -rwxr-xr-x 1 root root 1871 Sep 13 2006 mcstrans
    -rwxr-xr-x 1 root root 1931 Apr 20 2007 messagebus
    -rwxr-xr-x 1 root root 1923 Jul 17 2006 microcode_ctl
    -rwxr-xr-x 1 root root 1193 Sep 7 2006 multipathd
    -rwxr-xr-x 1 root root 4608 Nov 22 2006 mysqld
    -rwxr-xr-- 1 root root 8761 Nov 12 09:09 named
    -rwxr-xr-x 1 root root 5675 Aug 1 2006 netfs
    -rwxr-xr-x 1 root root 1289 May 24 2007 netplugd
    -rwxr-xr-x 1 root root 7920 Sep 11 2006 network
    -rwxr-xr-x 1 root root 1598 Sep 4 2006 NetworkManager
    -rwxr-xr-x 1 root root 1480 Sep 4 2006 NetworkManagerDispatcher
    -rwxr-xr-x 1 root root 4589 Jul 12 2007 nfs
    -rwxr-xr-x 1 root root 3266 Jul 12 2007 nfslock
    -rwxr-xr-x 1 root root 2517 Jul 4 2007 nscd
    -rwxr-xr-x 1 root root 3451 Jun 21 2007 ntpd
    -rwxr-xr-x 1 root root 1203 Oct 2 2006 pand
    -rwxr-xr-x 1 root root 1525 Sep 15 2006 pcscd
    -rwxr-xr-x 1 root root 1877 Jul 12 2006 portmap
    -rwxr-xr-x 1 root root 2614 Oct 4 2007 postfix
    -rwxr-xr-x 1 root root 1618 Apr 21 2006 proftpd
    -rwxr-xr-x 1 root root 1021 Jan 23 2007 psacct
    -rwxr-xr-x 1 root root 1387 Apr 12 2007 rdisc
    -rwxr-xr-x 1 root root 931 Mar 1 2007 readahead_early
    -rwxr-xr-x 1 root root 930 Mar 1 2007 readahead_later
    -rwxr-xr-x 1 root root 1793 Apr 27 2007 restorecond
    -rwxr-xr-x 1 root root 2415 Jul 12 2007 rpcgssd
    -rwxr-xr-x 1 root root 2040 Jul 12 2007 rpcidmapd
    -rwxr-xr-x 1 root root 2420 Jul 12 2007 rpcsvcgssd
    -rwxr-xr-x 1 root root 1547 Sep 29 2006 saslauthd
    -rwxr-xr-x 1 root root 4112 Sep 17 2007 sendmail
    -rwxr-xr-x 1 root root 647 Jul 20 2006 single
    -rwxr-xr-x 1 root root 2540 Aug 20 2007 smartd
    -rwxr-xr-x 1 root root 2087 Dec 4 09:07 smb
    -rwxr-xr-x 1 root root 1575 Jun 11 2007 spamassassin
    -rwxr-xr-x 1 root root 3282 May 14 2007 squid
    -rwxr-xr-x 1 root root 3340 Oct 2 2007 sshd
    -rwxr-xr-x 1 root root 2012 Dec 11 2006 syslog
    -rwxr-xr-x 1 root root 2796 Aug 23 2006 tux
    -rwxr-xr-x 1 root root 2051 Jan 8 2007 vncserver
    -rwxr-xr-x 1 root root 1548 Dec 4 09:07 winbind
    -rwxr-xr-x 1 root root 1650 Oct 27 2006 wpa_supplicant
    -rwxr-xr-x 1 root root 3934 Dec 6 11:00 xfs
    -rwxr-xr-x 1 root root 3870 May 10 2007 ypbind
    -rwxr-xr-x 1 root root 1098 Apr 10 2007 yum-updatesd

    Do you think this requires a clean install? I was hoping to have it as a production server by wednesday.

    Let me know what you think.
     
  14. falko

    falko Super Moderator Howtoforge Staff

    What happens when you do this:
    Code:
    cp /etc/named.caching-nameserver.conf /etc/named.caching-nameserver.conf_orig
    cat /dev/null > /etc/named.caching-nameserver.conf 
    /etc/init.d/named restart
    Do you get any errors? What's the output of
    Code:
    netstat -tap
    then?

    If the behaviour doesn't change, you can try a clean reinstall.
     
  15. TheBirdMan

    TheBirdMan Member

    That seemed to fix it thanks. here is the output.

    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 localhost:2208 *:* LISTEN 2247/hpiod
    tcp 0 0 *:mysql *:* LISTEN 2717/mysqld
    tcp 0 0 *:sunrpc *:* LISTEN 2059/portmap
    tcp 0 0 *:hosts2-ns *:* LISTEN 2767/ispconfig_http
    tcp 0 0 static-70-104-144-51:domain *:* LISTEN 3408/named
    tcp 0 0 ns.mydomain.com:domain *:* LISTEN 3408/named
    tcp 0 0 localhost:domain *:* LISTEN 3408/named
    tcp 0 0 localhost:ipp *:* LISTEN 2264/cupsd
    tcp 0 0 localhost:rndc *:* LISTEN 3408/named
    tcp 0 0 *:smtp *:* LISTEN 3048/master
    tcp 0 0 *:ftps *:* LISTEN 2080/rpc.statd
    tcp 0 0 localhost:2207 *:* LISTEN 2252/python
    tcp 0 0 *:imaps *:* LISTEN 2303/dovecot
    tcp 0 0 *:pop3s *:* LISTEN 2303/dovecot
    tcp 0 0 *:pop3 *:* LISTEN 2303/dovecot
    tcp 0 0 *:imap *:* LISTEN 2303/dovecot
    tcp 0 0 *:http *:* LISTEN 2976/httpd
    tcp 0 0 *:ftp *:* LISTEN 3105/proftpd: (acce
    tcp 0 0 *:ssh *:* LISTEN 2278/sshd
    tcp 0 0 ::1:rndc *:* LISTEN 3408/named
    tcp 0 0 *:https *:* LISTEN 2976/httpd
     
  16. falko

    falko Super Moderator Howtoforge Staff

    Yes, that looks better... :)
     

Share This Page