Multiple server config -> change one server IP

Discussion in 'Installation/Configuration' started by francoisPE, Mar 7, 2022.

  1. francoisPE

    francoisPE Active Member HowtoForge Supporter

    Any help :)
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    This depends on the /etc/hosts file. the /etc/hosts file should contain the internal IP addresses and not the external ones to ensure that connections are made trough the internal network.
     
  3. francoisPE

    francoisPE Active Member HowtoForge Supporter

    And regarding this changes.
    What should i do ?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    If the servers are behind a NAT router, then you use the internal IP there. If the servers have two networks, an internal and external network, and no NAT is used, then you use the external IP there.
     
  5. francoisPE

    francoisPE Active Member HowtoForge Supporter

    Ok, that's clear.
    Thank you very much
    :):):)
     
  6. francoisPE

    francoisPE Active Member HowtoForge Supporter

    I start that topic because I wanted to change the IP of one of my multiserver conf.
    During that change, first thing I did was to change all my DNS.
    Unfortunatelly one of them refused to sign...
    I did so many things to try to solve : update many times, check and validate all DNS record, modify slightly zone, etc... Nothing appeared in syslog...
    Finally, after running `rndc reload`, I found in syslog : (I change IP number by OLD IP : it is the IP of my previous server)
    /var/log/syslog:Apr 11 21:20:36 ns1 named[2003475]: client @0x7f0arqgcd5e0 OLD_IP#59052 (mydom.fr): query (cache) 'mydom.fr/DNSKEY/IN' denied

    I don't find out how to solve that ?
    Currently, I removed signature. But I would like to come back to DNSSEC signed DNS !

    Any idea ?
     
    Last edited: Apr 11, 2022
  7. francoisPE

    francoisPE Active Member HowtoForge Supporter

    This issue makes my DNS instable...
    Code:
    Network Error (dns_server_failure)
    
    Your request could not be processed because an error occurred contacting the DNS server.
    The DNS server may be temporarily unavailable, or there could be a network problem.
    
    Transaction ID: a0f03a54a25469b1-000000008f298fb3-0000000062552aca
    
    For assistance, contact your network support team.
    Any idea to help ?
     
  8. francoisPE

    francoisPE Active Member HowtoForge Supporter

    Hello,
    It kills my access...
    So I remove DNSSEC from 2 domains concerned by that issue.

    How can I restart DNSSEC signing process after doing it once ?
    In other words, I uncheck "sign zone (DNSSEC)" in DNS > Zone > mydom
    I would like to reset DS record in below frame and fully recreate a new one
     

Share This Page