DNS server question...

Benso37 · 09-14-2007, 09:50 AM

I just installed and configured a DNS server on my Fedora 7 install. However, I don't think it's working...

I added my windows box as a host on this new DNS, then I went to my windows box and changed the DNS configuration to use my new DNS. When ping google.com nothing happens but when I change it back to my old DNS (windows dns server I built myself), then it pings.

Weird thing is that from my windows or any other host, I can ping the DNS server and other hosts on the DNS by using the hostname. That tells me that the issue is with either the root hint or the forwarder.

I am posting my named.conf file here...any help will be greatly appreciated.

Code:

server xxx.xx.165.100 {
};
options {
	directory "/var/named";
	dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
	/*
	 * If there is a firewall between you and nameservers you want
	 * to talk to, you might need to uncomment the query-source
	 * directive below.  Previous versions of BIND always asked
	 * questions using port 53, but BIND 8.1 uses an unprivileged
	 * port by default.
	 */
	 // query-source address * port 53;
};

zone "opendns." IN {
	type forward;
	forwarders {	208.67.220.220 port 53;
};
};
zone "165.xx.xxx.in-addr.arpa." IN {
	type master;
	file "xxx.xx.165.db";
};
zone "251.xx.xxx.in-addr.arpa." IN {
	type master;
	file "xxx.xx.251.db";
};
zone "myzone." IN {
	type master;
	file "myzone.db";
};
zone "." IN {
	type hint;
	file "named.root";
};

zone "localdomain." IN {
	type master;
	file "localdomain.zone";
	allow-update { none; };
};

zone "localhost." IN {
	type master;
	file "localhost.zone";
	allow-update { none; };
};

zone "0.0.127.in-addr.arpa." IN {
	type master;
	file "named.local";
	allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.  0.0.0.0.0.0.ip6.arpa." IN {
        type master;
	file "named.ip6.local";
	allow-update { none; };
};

zone "255.in-addr.arpa." IN {
	type master;
	file "named.broadcast";
	allow-update { none; };
};

zone "0.in-addr.arpa." IN {
	type master;
	file "named.zero";
	allow-update { none; };
};

include "/etc/rndc.key";

rex vonireful · 09-14-2007, 01:35 PM

My first thought is check if iptables is allowing DNS traffic.

# system-config-securitylevel

and choose the Customize button. Add port 53:udp if it isn't there already.

Or you could add the entry in manually in /etc/sysconfig/iptables.

Restart iptables:

# service iptables restart

That might help. If not, on to your DNS configuration...

thelvaci · 09-14-2007, 04:08 PM

Hi Benso37,

The DNS servers can be one of cached or primary. It seems your intent is to set a primary one. You have to ensure resolve.conf must point to localhost.

Try rndc restart command if rndc key is ok.

You should check if DNS server works with nslookup command.
set q=mx
hp.com
for example.

You can try host ns1.yahoo.com <your IP> command to check how your DNS server is recognized by yahoo.

Apart from all of these please read some nice articles on setting up primary DNS servers.

Hope this helps...

ktask · 09-15-2007, 08:10 AM

A forwarder is for the purpose of resolving domain name queries for which your own DNS is not the authority. The DNS servers for such purpose (resolving TLD) should not and do not need a zone defined in your own records, just an "option".

Looking at the definitions of zones it appears you might be attempting to use opendns.org for outside resolution and the features that opendns offers.

Please see: opendns dot com the Support Section and setup of DNS.

Suggest commenting out:

// zone "opendns." IN {
// type forward;
// forwarders { 208.67.220.220 port 53;

and just before the }; that ends the options section of your DNS configuration, add:

forwarders {208.67.220.220;[other IP's];};

Note the semi-colon at the end of each IP is necessary as well as the closing };.

save the file

then check your named.conf syntax with this command as root user:

/usr/sbin/named-checkconf

restart DNS: /sbin/service named restart

then go to workstation to check.