Questions tagged [bind]
BIND is a free, open source software implementation of the Domain Name System (DNS) protocols. The name BIND stands for "Berkeley Internet Name Domain", because the software originated in the early 1980s at the University of California at Berkeley. BIND is currently maintained and developed by the Internet Systems Consortium, a non-profit public benefit corporation with a mission to support a free and open internet.
2,329 questions
5
votes
2
answers
922
views
Set up BIND to redirect captive.apple.com to an internal IP address
We are setting up a captive portal for guest users using our Cisco ISE servers, and we have a Linux box running BIND just for those users.
All OSes work fine and redirect to the ISE guest login page ...
- 359
1
vote
0
answers
139
views
How to make BIND serve RPZ overrides even when forwarders are unreachable
Context
We host a few services like gitlab on-prem which are accessible from the outside at gitlab.example.com which points to origin.example.com and is registered on an external DNS server. On our ...
- 143
1
vote
0
answers
75
views
Bind 9.18 on a new server. Failing a lookup for a specific zone and record
I've deployed a simple bind server, and I'm failing for a single resource record/zone.
We don't handle this zone in-house, so I would think that root hints would handle it the way we're configured. ...
- 11
2
votes
0
answers
103
views
Bind timing out querying for A/HTTPS record with large delay from authoritative
I have a setup where:
client = x.y.36.152
recursive resolver + DoH server = x.y.36.153
authoritative DNS = x.y.36.150
TLS server = x.y.36.148
I’m running BIND9 as the recursive resolver on .153. I ...
- 21
0
votes
1
answer
114
views
Single reverse DNS zone for several forward BIND9
I have this bind9 settings:
named.conf:
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
named.conf.options:
include "/etc/bind/rndc.key";
...
- 3
0
votes
0
answers
65
views
Bind9 round-robin of authoritative nameservers
I run a nameserver that resolves a significant amount of different 2nd level domains, especially under the com zone. This causes this nameserver to query gtld-servers.net quite regularly. I am ...
- 136
1
vote
2
answers
2k
views
managed-keys-zone: Unable to fetch DNSKEY set '.': timed out
I have a problem with the configuration of my DNS server (public resolver) at the moment.
It works fine, but I have an error in the logs, a few seconds after starting bind :
managed-keys-zone: Unable ...
- 11
0
votes
1
answer
74
views
BIND DNS in ubuntu [closed]
I am implementing two Internal BIND DNS servers on ubnutu 22.04 (forwarding and caching) to replace CISCO umbrella (paid). All internal domain traffic will be forwarded to our Domain Controller, and ...
0
votes
1
answer
109
views
How to self-sign a DNSKEY?
opensuse LEAP 15.6
linux 6.4.0
BIND 9.18.33
Executing dnssec-signzone creates an error:
$ sudo dnssec-signzone -g -z -o sma-inc.us sma-inc.us.hosts Ksma-inc.us.+008+56113.key
No self-signed DNSKEY ...
- 95
9
votes
1
answer
1k
views
DNS: What is missing from this SOA?
opensuse LEAP 15.6
linux v6.4.0-150600.23.47-default x86_64
BIND 9.18.33
I have tried various changes to the SOA record in named.conf. I do not understand what is missing or incorrect.
The only ...
- 95
0
votes
1
answer
149
views
dnssec authentication chain not renewing an RRSIG
Opensuse LEAP 15.6
linux v6.4.0-150600.23.38-default x86_64
BIND 9.18.33
About 5 years ago I added a bit of DNSSEC in our name server: DNSSEC Authentication Chain. The certificate that resides on ...
- 95
1
vote
1
answer
465
views
Bind9 on Debian 12 customizing logging causes permission denied
I want to customize logging for Bind9.
To do that I add the following line to /etc/bind/named.conf:
/etc/bind/named.conf.logging"
And I create empty logging configuration /etc/bind/named.conf....
- 141
1
vote
2
answers
166
views
BIND configuration for wildcard subdomens and DNAME domain redirection
We have a layered DNS setup:
Consul cluster with the "query.consul" domain resolving (prepared queries for service failover).
BIND managing both "user.zone" and "query.consul&...
- 21
0
votes
1
answer
1k
views
Issues with basic BIND resolver setup
Long post to explain the apparently complex issue with an extremely basic setup
I'm attempting to build a basic DNS resolver using BIND and have been having all kinds of issues ten ways till Sunday. I'...
- 11
0
votes
1
answer
174
views
bind9 | named: setgid(): Operation not permitted
i've got notification from Victoria Risk [email protected]
New BIND releases are available: 9.18.35, 9.20.7, 9.21.6
after i pulled latest image, bind9 is now unable to start due to the following new ...
- 13.7k