ISPConfig on one server , easy ? so DNS issue (second one!)

Discussion in 'ISPConfig 3 Priority Support' started by ledufakademy, Mar 13, 2022.

  1. ledufakademy

    ledufakademy Member

    [ as an alternative i've got ..the solution to use slave dns server of my registrar ..., it seems that icpconfig panel accept those king of value :
    Allow zone transfers to these IPs (comma separated list) : 213.36.252.0/24,88.191.249.0/24]
     
  2. ledufakademy

    ledufakademy Member

    RAHHHHHHHHHHHHHHHHHHHHHHHHHH
    when testing from ispconfig ns1.auvergnux.org server .... dig -t AXFR dufour.cloud @1.2.3.4
    got ... ;; Connection to 80.67.179.181#53(80.67.179.181) for dufour.cloud failed: timed out.

    So decided to take al ook to firewall area ... BINGO !
    zUSER Mar 17 18:19:46 10.10.10.10:41733 80.67.179.181:53 udp Default deny rule ==> Blocked !

    AXFR seems working so my scenario is ok. and till dig command very useful.

    but got this in log :
    And fore sure ...
    Code:
    root@ns1:~# ll /etc/bind/slave/sec./
    total 0
    root@ns1:
    seems to be solved HERE : https://www.howtoforge.com/communit...-permission-problem-on-ns2.86471/#post-418877
     
    Last edited: Mar 17, 2022
  3. ledufakademy

    ledufakademy Member

    ok , DNS is important , so i success, with all your advice and help, in making this stuff working :
    Code:
    Zone dufour.Cloud.
        ns1.dufour.cloud    (80.67.179.181)
        ns-slave.free.org
        ns1.auvergnux.org
    thank you ... i will reinstall my single setup server in order to change the hostname and having good LE cert for mailing services.
    and now DNS config is clear and fully replicated (3 DNS ;-))

    But take note : that there is a bug in Debian 11 autoinstall with Secondary Zone, with /etc/bind/slave not being updated. (need to apply Taleman fix)

    And i also need to had primary and mirror ns server to my single setup server, not only the ns1.auvergnux.org (here "Allow zone transfers to these IPs (comma separated list)" : 213.36.252.0/24,88.191.249.0/24,89.234.140.100,89.234.140.101 ==> ns2.auvergnux.org (mirrored NS)
     

Share This Page