Questions tagged [bind]
BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.
2,331 questions
0
votes
1
answer
108
views
How to properly configure a "mirror" DNS server for failover in KVM (Rocky Linux 10)?
I'm currently working as a collaborator in my university's network services department. Our infrastructure aims to follow Uptime Institute Tier II standards, so we are focusing heavily on redundancy ...
- 1
0
votes
3
answers
285
views
opendkim-testkey fails on newly generated key
I generated my key using opendkim-genkey -s 2026 -b 1024 and fixed the ownership and permissions on the two files generated in /etc/dkimkeys/. I updated my local DNS and flushed the caches.
; <<...
- 5,285
5
votes
2
answers
936
views
Set up BIND to redirect captive.apple.com to an internal IP address
We are setting up a captive portal for guest users using our Cisco ISE servers, and we have a Linux box running BIND just for those users.
All OSes work fine and redirect to the ISE guest login page ...
- 359
1
vote
0
answers
151
views
How to make BIND serve RPZ overrides even when forwarders are unreachable
Context
We host a few services like gitlab on-prem which are accessible from the outside at gitlab.example.com which points to origin.example.com and is registered on an external DNS server. On our ...
- 143
1
vote
0
answers
79
views
Bind 9.18 on a new server. Failing a lookup for a specific zone and record
I've deployed a simple bind server, and I'm failing for a single resource record/zone.
We don't handle this zone in-house, so I would think that root hints would handle it the way we're configured. ...
- 11
2
votes
0
answers
106
views
Bind timing out querying for A/HTTPS record with large delay from authoritative
I have a setup where:
client = x.y.36.152
recursive resolver + DoH server = x.y.36.153
authoritative DNS = x.y.36.150
TLS server = x.y.36.148
I’m running BIND9 as the recursive resolver on .153. I ...
- 21
0
votes
1
answer
121
views
Single reverse DNS zone for several forward BIND9
I have this bind9 settings:
named.conf:
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
named.conf.options:
include "/etc/bind/rndc.key";
...
- 3
0
votes
0
answers
66
views
Bind9 round-robin of authoritative nameservers
I run a nameserver that resolves a significant amount of different 2nd level domains, especially under the com zone. This causes this nameserver to query gtld-servers.net quite regularly. I am ...
- 136
1
vote
2
answers
2k
views
managed-keys-zone: Unable to fetch DNSKEY set '.': timed out
I have a problem with the configuration of my DNS server (public resolver) at the moment.
It works fine, but I have an error in the logs, a few seconds after starting bind :
managed-keys-zone: Unable ...
- 11
0
votes
1
answer
74
views
BIND DNS in ubuntu [closed]
I am implementing two Internal BIND DNS servers on ubnutu 22.04 (forwarding and caching) to replace CISCO umbrella (paid). All internal domain traffic will be forwarded to our Domain Controller, and ...
0
votes
1
answer
114
views
How to self-sign a DNSKEY?
opensuse LEAP 15.6
linux 6.4.0
BIND 9.18.33
Executing dnssec-signzone creates an error:
$ sudo dnssec-signzone -g -z -o sma-inc.us sma-inc.us.hosts Ksma-inc.us.+008+56113.key
No self-signed DNSKEY ...
- 95
9
votes
1
answer
1k
views
DNS: What is missing from this SOA?
opensuse LEAP 15.6
linux v6.4.0-150600.23.47-default x86_64
BIND 9.18.33
I have tried various changes to the SOA record in named.conf. I do not understand what is missing or incorrect.
The only ...
- 95
0
votes
1
answer
157
views
dnssec authentication chain not renewing an RRSIG
Opensuse LEAP 15.6
linux v6.4.0-150600.23.38-default x86_64
BIND 9.18.33
About 5 years ago I added a bit of DNSSEC in our name server: DNSSEC Authentication Chain. The certificate that resides on ...
- 95
1
vote
1
answer
493
views
Bind9 on Debian 12 customizing logging causes permission denied
I want to customize logging for Bind9.
To do that I add the following line to /etc/bind/named.conf:
/etc/bind/named.conf.logging"
And I create empty logging configuration /etc/bind/named.conf....
- 141
1
vote
2
answers
178
views
BIND configuration for wildcard subdomens and DNAME domain redirection
We have a layered DNS setup:
Consul cluster with the "query.consul" domain resolving (prepared queries for service failover).
BIND managing both "user.zone" and "query.consul&...
- 21