Solved

need help with bind

Posted on 2010-11-07
4
700 Views
Last Modified: 2012-05-10
I need help configuring bind (CentOS 5.5).  This is the first time I'm trying to use this.  I want to use as a slave to pull from my Windows server.

I tried just installing bind and bind-libs but the service failed to start.  I was reading that I needed to install caching-nameserver to make it work out of the box, but I'm not configuring this as a caching server.  Am I correct that it would work if I just created /etc/named.conf?

I was looking at the documentation on the zytrax site and it gave a sample configuration.  I copied and pasted it, changed the server and domain to use for mine, and when I tried to start named I'm getting this:

Error in named configuration:
/etc/named.conf:14: missing ';' before '}'
/etc/named.conf:16: missing ';' before '}'

Is there a better way to do this?  Do I need other packages? (I've seen other things related to bind-chroot)

Here is what I'm using for /etc/named.conf:
// SLAVE & CACHING NAME SERVER for EXAMPLE, INC.
// maintained by: me myself alone
// CHANGELOG:
// 1. 9 july 2003 - did something
// 2. 16 july 2003 - did something else
// 3. 23 july 2003 - did something more
//
options {
  directory "/var/named";
  // version statement - inhibited for security
  // (avoids hacking any known weaknesses)
  version "not currently available";
  // allows notifies only from master
  allow-notify {192.168.1.161};
  // disables all zone transfer requests
  allow-transfer{"none"};
  // Closed DNS - permits only local IPs to issue recursive queries
  // remove if an Open DNS required to support all users
  // or add additional ranges
  allow-recursion {192.168.3.0/24;};
};
//
// log to /var/log//named/example.log all events
// from info UP in severity (no debug)
// defaults to use 3 files in rotation
// BIND 8.x logging MUST COME FIRST in this file
// BIND 9.x parses the whole file before using the log
// failure messages up to this point are in (syslog)
// typically /var/log/messages
//
  logging{
  channel example_log{
  file "/var/log/named/named.log" versions 3 size 2m;
  severity info;
  print-severity yes;
  print-time yes;
  print-category yes;
 };
 category default{
  example_log;
 };
};
// required zone for recursive queries
zone "." {
  type hint;
  file "root.servers";
};
// see notes below
zone "myhouse.local" in{
  type slave;
  file "slave/slave.myhouse.local";
  masters {192.168.1.161;};
};
// required local host domain
zone "localhost" in{
  type master;
  file "pri.localhost";
  allow-update{none;};
};
// localhost reverse map
zone "0.0.127.in-addr.arpa" in{
  type master;
  file "localhost.rev";
  allow-update{none;};
};
// reverse map for class C 192.168.1.0 (see notes)
zone "1.168.192.IN-ADDR.ARPA" IN {
  type slave;
  file "sec.192.168.1.rev";
  masters {192.168.1.161;};
};

Open in new window

0
Comment
Question by:Seth Simmons
  • 2
  • 2
4 Comments
 
LVL 2

Accepted Solution

by:
nimda7 earned 500 total points
Comment Utility
Firstly, You must  change error lines like this
14: allow-notify {192.168.1.161;};
16: allow-transfer{"none";};
But! About line #16 - may be You actually need get zone from primary DNS? Then line #16 must looks like this allow-transfer{192.168.1.161;}; That's IP - your primary DNS, I wonder.

Secondly -
line 20: allow-recursion {192.168.3.0/24;};
 Are you really use this network? May be correct value is 192.168.1.0/24 ?
0
 
LVL 2

Expert Comment

by:nimda7
Comment Utility
0
 
LVL 34

Author Comment

by:Seth Simmons
Comment Utility
ok...14 and 16 were obvious syntax errors.  20 was not touched from the sample; changed to correct network.

when starting the service i got file not found for the zones.  touched both files in /var/named and got passed that.

now the problem is pulling data.  on my windows server, i see an entry in the even log stating that it successfully transferred the zone to the server i just built.  problem is, the files under /var/named are all 0 bytes.  would i expect to see data in there?

0
 
LVL 34

Author Comment

by:Seth Simmons
Comment Utility
i figured out why it wasn't writing.  seems the server has 2 ports and only was configured to receive from one.  even though windows said it transferred the zone, /var/log/named was showing REFUSED.  added that other ip address and it worked.  did an nslookup to that server and it's resolving.  also tweaked the conf file a bit more and it seems to be doing what i wanted.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now