LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-21-2016, 09:19 AM   #1
Jwoolington
LQ Newbie
 
Registered: Mar 2013
Posts: 9

Rep: Reputation: Disabled
Bind set up problems: HELP!


Here is what I'm trying to accomplish.

I am trying to host my own website with a domain name registered with namecheap.com.

I have a Raspberry Pi with Debian installed on it and bind9 for DNS. I have probably installed deleted and installed it and configured it 5 times now. I feel like I am missing something or am not doing something right.

I am also behind a SOPHOS UTM firewall and have configured the firewall correctly to talk to the Internet. After installing and configuring bind, I was able to dig and get the proper results. I was also able to ping ns1.mydomain.net and get a reply from my public IP which I configured in my zone files.

Here is the thing. If I ping from outside of my network, I get nothing. If I try an NSLOOKUP outside my domain, I get a server failed response. I have registered the ns1 with namecheap.

My public IP is from comcast so it's a dynamic IP, which I intend to update frequently as it changes.

Am I missing something??
 
Old 09-22-2016, 07:53 AM   #2
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Check to ensure that on the outside your domain is known.
I'm pretty sure comcast block all the known ports 1024 and below to resident addresses.
 
Old 09-22-2016, 08:30 AM   #3
Jwoolington
LQ Newbie
 
Registered: Mar 2013
Posts: 9

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by lazydog View Post
Check to ensure that on the outside your domain is known.
I'm pretty sure comcast block all the known ports 1024 and below to resident addresses.
It just times out when I do an NSLOOKUP on it. Then if I try and ping anything that I have in my A records (which is pointed to external IP) it says it can't find the host. Only thing I can't figure out is is why.

I've done the research. https://customer.xfinity.com/help-an...blocked-ports/ lists all the ports that are blocked by default, and none in the list should affect what I'm trying to do.

Idk
 
Old 09-22-2016, 11:15 AM   #4
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Do you have a firewall running on your system?
 
Old 09-22-2016, 01:24 PM   #5
Jwoolington
LQ Newbie
 
Registered: Mar 2013
Posts: 9

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by lazydog View Post
Do you have a firewall running on your system?
Yes, as I mentioned, I am running SOPHOS UTM as my firewall.
I believe everything is properly configured in my firewall.
Attached Thumbnails
Click image for larger version

Name:	fw.jpg
Views:	7
Size:	18.3 KB
ID:	23081  
 
Old 09-22-2016, 01:38 PM   #6
smallpond
Senior Member
 
Registered: Feb 2011
Location: Massachusetts, USA
Distribution: Fedora
Posts: 4,140

Rep: Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263Reputation: 1263
For you to run a nameserver for *.yourdomain.com., the next level up needs to have an NS record that points to your nameserver. What do you get from:
Code:
dig -t NS yourdomain.com
 
Old 09-22-2016, 01:53 PM   #7
Jwoolington
LQ Newbie
 
Registered: Mar 2013
Posts: 9

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by smallpond View Post
For you to run a nameserver for *.yourdomain.com., the next level up needs to have an NS record that points to your nameserver. What do you get from:
Code:
dig -t NS yourdomain.com
I believe that's all set up correctly.

Results of dig -t NS mydomain.net:

; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> -t ns mydomain.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1052
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;mydomain.net. IN NS

;; ANSWER SECTION:
mydomain.net. 300 IN NS mydomain.net.

;; ADDITIONAL SECTION:
mydomain.net. 300 IN A 73.102.xxx.xxx

;; Query time: 11 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Sep 22 14:48:18 2016
;; MSG SIZE rcvd: 66

Note: This is from inside the PI. Can't dig anything outside. Connection times out.

Last edited by Jwoolington; 09-22-2016 at 01:55 PM.
 
Old 09-23-2016, 09:28 AM   #8
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Go to your DNS register and ensure that your NS records are setup to point to your server.
 
Old 09-23-2016, 10:27 AM   #9
Jwoolington
LQ Newbie
 
Registered: Mar 2013
Posts: 9

Original Poster
Rep: Reputation: Disabled
Red face

Quote:
Originally Posted by lazydog View Post
Go to your DNS register and ensure that your NS records are setup to point to your server.
Everything is set right.

Everything is working correctly now. I'm able to nslookup and get proper results inside and out of the Pi and home network. I'm also able to dig outside and get proper results.

I think it was a TTL or Latency issue.
 
Old 09-23-2016, 01:21 PM   #10
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Glad it is resolved for you. Kindly mark the thread as resolved.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Bind set up problems: HELP! Jwoolington Linux - Server 2 09-20-2016 04:25 PM
creating domain name in bind problems exposing bind to internal network abhijit_mohanta Linux - Networking 1 09-03-2009 01:09 AM
creating domain name in bind problems exposing bind to internal network abhijit_mohanta Linux - Security 1 09-03-2009 01:01 AM
Is this set up possible without using BIND? blk96gt Linux - Networking 2 07-20-2004 03:00 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:17 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration