LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-01-2005, 09:52 PM   #1
mlu
Member
 
Registered: Nov 2004
Location: colombo
Distribution: Fedora
Posts: 74

Rep: Reputation: 15
BIND9 slave DNS problem HELP!!!


I'm using fedora core 3. i wanted to make local dns servers. in FC3 BIND9 is comming, so i went in to some FC3 ebooks and made a master dns server, here is the thing what i did,

1. i installed the bind pakeges

2. then i went to /etc/resolv.conf & did the following

nameserver 127.0.0.1
nameserver 192.168.2.140
domain tcs.org
search tcs.org

i put the second nameserver cause i wanted to have a slave DNS also.

3. i made a forward lookup zone in the name of "db.tcs.org"

$TTL 2D
@ IN SOA tcs.org. root.tcs.org. (
01 ;serial
3H ;refresh
1H ;retry
1W ;expire
2D) ;minimum

; dns server name
IN NS ns1.tcs.org.
IN NS ns2.tcs.org.

; mail server name
IN MX 10 mail.tcs.org.

; address records

localhost IN A 127.0.0.1
tcs.org. IN A 192.168.2.130
ns1 IN A 192.168.2.130
ns2 IN A 192.168.2.140
www IN A 192.168.2.130
mail IN A 192.168.2.130
ftp IN A 192.168.2.130

; private client records

srv1 IN A 192.168.2.110
srv2 IN A 192.168.2.120
srv3 IN A 192.168.2.130
srv4 IN A 192.168.2.140

;EOF

4. then copy the "db.tcs.org" to /var/named/chroot/var/named & made a link to "db.tcs.org" in /var/named

5. changed the ownersip of "db.tcs.org" from root to named

#chown named db.tcs.org
#chgrp named db.tcs.org

6. edited the /etc/named.conf file

zone "tcs.org" IN {
type master;
file "db.tcs.org";
allow-update { any; };
};

7. started the named service


once i did up to that i made a DNS client and checked the DNS resolution also with the "dig" command it was success.

NOW HERE IS MY PROBLEM

then i wanted to make a slave DNS, so i did this

1. i installed the bind pakeges

2. edited the /etc/resov.conf

nameserver 127.0.0.1
nameserver 192.168.2.130
domain tcs.org
search tcs.org

192.168.2.130 is my master DNS

3. edited the /etc/named.conf

zone "tcs.org" IN {
type slave;
file "db.tcs.org";
masters { 192.168.2.130; };
allow-query { any; };
};

4. start the named service

previously when i did the same thing with BIND8 comming in Redhat 9 it successfully copied the forward lookup zone file "db.tcs.org" from master to slave, and everything was ok, but with BIND9 the forward lookup zone file "db.tcs.org" did not get copied to slave. so when i "dig" in it fails. but in the slave in the /etc/resov.conf if i change the nameservers

nameserver 192.168.2.130
nameserver 127.0.0.1

it works, i think it's getting the resolution from the master.

so what can i do about this

1. is it to do something with SELINUX
2. am i configuring the master DNS incorrectly in BIND9 so the zone file does not get copied to slave
3. or am i configuring the slave incorrectly

PLS HELP ME

ps- i'm using
bind-9.2.4-2.i386.rpm
 
Old 05-02-2005, 05:03 AM   #2
scowles
Member
 
Registered: Sep 2004
Location: Texas, USA
Distribution: Fedora
Posts: 620

Rep: Reputation: 31
A couple of things to check:

1) Check firewall rules. Zone transfers are tcp/53.
2) Your zone definition on the master does not include "allow-transfer" statement
3) Add "notify yes" to zone on master

If all else fails:

1) Increase the logging levels on the master and see why the zone transfer is failing.
2) Run tcpdump on master and/or slave. The slave should first issue a SOA query to the master (checking the serial number) prior to issuing the zone transfer.
 
Old 05-05-2005, 06:31 AM   #3
mlu
Member
 
Registered: Nov 2004
Location: colombo
Distribution: Fedora
Posts: 74

Original Poster
Rep: Reputation: 15
no luck man
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
DNS Server (bind9) works on the private network but not in the public one! wjleon Linux - Networking 26 01-24-2009 08:14 PM
DNS SLAVE problem cccc Linux - General 0 11-29-2005 05:08 PM
DNS BIND9: Restrict certain entries from being transfered Der_tolle_Emil Linux - Networking 2 12-01-2004 07:43 AM
Suse Linux 9.1 Pro BIND9/DNS server vbat Linux - Newbie 0 10-01-2004 07:20 PM
BIND9 and W2k dhcp clients DNS suffix issue. wasp4141 Linux - Networking 1 04-06-2004 10:56 PM


All times are GMT -5. The time now is 01:14 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration