dns(bind)

drag0n

I have having immense trouble configuring DNS and BIND in linux can somebody please help me out, like take me through it setpbystep 🙂 I want to do it through webmin or BINDCONF, since I really dont get how to edit the .conf files, is it possible? Please someone e-mail me or contact me!!!

drag0n

help?

Mordecai

Could this be what you are looking for?

drag0n

come now.. help me out here, Im trying to use BINDCONF but it turns out it still doesnt work, I do nslookup on my nameserver, it says there no server responding. Can somebody help me configure it through BINDCONF or WebMIN?

jstarkey

sounds like you need to start your server. 🙁

Can you post your config (the named.conf).. I haven't heard of the apps you mention, so I can't help you there.

drag0n

its started, but I really dont think its configured right... 🙁

jstarkey

I edited my post, sorry, didn't think you'd answer that quickly.

BTW, nslookup is deprecated. You should use dig:

dig yourdomain.com @

What does /var/log/messages say after you start the daemon?

drag0n

It says everything started OK, and I just restart it again and there were no errors and everything seems OK. But I really dont think I set up the domain right, like all the A records and CNAMES and Nameservers. Well id named.conf the only one you need? Because when I tried to do it with of of those apps, i thin k they create the host file and everything, etc...

jstarkey

Just named.conf for starters.

Are you sure it's listening to the correct port (53)? And allowing connections from your machine? Did you set it up to only allow queries from certain IPs, or allow from all?

drag0n

Try this as your conf file, making sure all your zones are in /var/named and owned by named:

options {
directory "/var/named";
}

zone "0.0.127.in-addr.arpa" {
type master;
file "0.0.127.in-addr.arpa.zone";
};

zone "localhost" {
type master;
file "localhost.zone";
};

zone "phatlyrics.com" {
type master;
file "phatlyrics.com.hosts";
};

jstarkey

Oh boy, I'm really sorry. I editted your post rather than replying with a quote.

Can you post the zone file for phatlyrics again? I was going to reply to that seperately and I think I saw an issue with it.

I have to run but should be back in a couple hours. I'll check back here when I return.

drag0n

This is my new conf file, is it right?:

named.conf - configuration for bind

Generated automatically by redhat-config-bind,

alchemist et al.

Any changes not supported by redhat-config-bind

should be put

in /etc/named.custom

#
controls {
inet 127.0.0.1 allow { localhost; } keys {
rndckey; };
};

include "/etc/named.custom";

include "/etc/rndc.key";

options {
directory "/var/named";
}

zone "0.0.127.in-addr.arpa" {
type master;
file "0.0.127.in-addr.arpa.zone";
};

zone "localhost" {
type master;
file "localhost.zone";
};

zone "phatlyrics.com" {
type master;
file "phatlyrics.com.hosts";
};

I seriouly think the mistake is somewhere in those two.

zone file:

$TTL 86400
@ IN SOA @ root.localhost (
2 ; serial
28800 ; refresh
7200 ; retry
604800 ; expire
86400 ; ttl
)

IN	NS	ns1.phatlyrics.com.

host file:

$ttl 38400
phatlyrics.com. IN SOA localhost.localdomain. admin.phatlyrics.com. (
1053196026
10800
3600
604800
38400 )
phatlyrics.com. IN NS localhost.localdomain.
ns1.phatlyrics.com. IN A 65.222.75.44
ns1.phatlyrics.com. IN A 192.168.2.6
phatlyrics.com. IN NS ns1.phatlyrics.com

jstarkey

I don't know whether the new config will work. If you try it exactly the way I posted it, it should work. I copied it from 1 of my DNS servers. I have five running now with just that in the config (except for two slaves).

With the zone file:

$ttl 38400
phatlyrics.com. IN SOA localhost.localdomain. admin.phatlyrics.com. (
1053196026 <-- your serial
10800
3600
604800
38400 )
phatlyrics.com. IN NS localhost.localdomain.
ns1.phatlyrics.com. IN A 65.222.75.44
ns1.phatlyrics.com. IN A 192.168.2.6
phatlyrics.com. IN NS ns1.phatlyrics.com

For the serial (see above) I usually use the date with 2 digits afterwards, so for the second edit made today, I'd make the serial look like:

2003051802 (or 01 for the first edit.)

And for this part:

phatlyrics.com. IN NS localhost.localdomain.
ns1.phatlyrics.com. IN A 65.222.75.44
ns1.phatlyrics.com. IN A 192.168.2.6
phatlyrics.com. IN NS ns1.phatlyrics.com

It's pretty far out of wack. First, you have two A records for the same machine. You should change the name of the second ns1 to ns2.

Try:

phatlyrics.com. IN NS ns1.phatlyrics.com
phatlyrics.com. IN NS ns2.phatlyrics.com
ns1 IN A 65.222.75.44
ns2 IN A 192.168.2.6
www IN CNAME ns1

Give that a try.... it should work for you.

drag0n

Thanks, currently here are my files:
CONF:

options {
directory "/var/named";
}

zone "0.0.127.in-addr.arpa" {
type master;
file "0.0.127.in-addr.arpa.zone";
};

zone "localhost" {
type master;
file "localhost.zone";
};

zone "phatlyrics.com" {
type master;
file "phatlyrics.com.hosts";
};

Zone File

$ttl 38400
phatlyrics.com. IN SOA localhost.localdomain. admin.phatlyrics.com. (
1053196026 <-- your serial
10800
3600
604800
38400 )
phatlyrics.com. IN NS ns1.phatlyrics.com
phatlyrics.com. IN NS ns2.phatlyrics.com
ns1 IN A 65.222.75.44
ns2 IN A 192.168.2.6
www IN CNAME ns1

and Host File:

$ttl 38400
phatlyrics.com. IN SOA localhost.localdomain. admin.phatlyrics.com. (
1053196026
10800
3600
604800
38400 )
phatlyrics.com. IN NS localhost.localdomain.
ns1.phatlyrics.com. IN A 65.222.75.44
ns1.phatlyrics.com. IN A 192.168.2.6
phatlyrics.com. IN NS ns1.phatlyrics.com

So are you sure there is nothing wrong with the hosts file?
Thanks

jstarkey

The host file isn't needed. zone file == host file.

Make sure the zone file is in /var/named and is named the same thing you have as the "file" entry for it in named.conf.

Delete the "<-- your serial" from the zone file.

Change this line:

phatlyrics.com. IN SOA localhost.localdomain. admin.phatlyrics.com (

@ IN SOA phatlyrics.com. admin.phatlyrics.com. (

I don't use a localhost zone file on any of my machines. Try it with only the named.conf and the above zone file for now - to keep things simple.

jstarkey

Oh, and it looks like you're doing your own reverse DNS. Scrap that as well, just for now. You may find that connecting via FTP or other will be slow, but for now we just need to get the machine responding period.

So take out:

zone "0.0.127.in-addr.arpa" {
type master;
file "0.0.127.in-addr.arpa.zone";
};

zone "localhost" {
type master;
file "localhost.zone";
};

from your named.conf. (I didn't realize how mucked up stuff was when I posted the first named.conf example)

drag0n

also I see that in named.conf I have the phatlyrics.com one pointing to phatlyrics.com.hosts, should I change that to phatlyrics.com.zone?

jstarkey

named.conf.

drag0n

It sill doesnt work, I made all the changes, deleted the hosts file and edited the zone file and took off the reverse from the named.conf and restarted named. Now if you go to www.phatlyrics.com which is pointing to ns1.phatlyrics.com, it doesnt look and if you do dig it doesnt respond to the nameserver
this is my current named.conf:

named.conf - configuration for bind

Generated automatically by redhat-config-bind, alchemist et al.

Any changes not supported by redhat-config-bind should be put

in /etc/named.custom

#
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

include "/etc/named.custom";

include "/etc/rndc.key";

options {
directory "/var/named";
}

zone "phatlyrics.com" {
type master;
file "phatlyrics.com.zone";
};

current phatlyrics.com.zone

$ttl 38400
@ IN SOA phatlyrics.com. admin.phatlyrics.com. (
1053196026
10800
3600
604800
38400 )
phatlyrics.com. IN NS ns1.phatlyrics.com
phatlyrics.com. IN NS ns2.phatlyrics.com
ns1 IN A 65.222.75.44
ns2 IN A 192.168.2.6
www IN CNAME ns1

jstarkey

Take the controls and the includes out of your named.conf for now.

Also, your DNS is wacked at ns2.netstream.net... doing:

dig phatlyrics.com @209.197.224.135

I get no servers can be reached.

I have a date to meet now, but if you can't get this working by tonight (MST) I'll set it up on one of my test servers and get it working, then send you the files. I have about 50 domains and servers slaving others on mine so it's a bit more complicated and hard for me to test what I tell you.

Each time you restart named, telnet into port 53:

telnet localhost 53

and if it says connection refused, take a look at the last lines of your /var/log/messages:

tail -n 50 /var/log/messages

That's what I'd be doing right now if I was troubleshooting your machine for you or mine for me.

Good luck.