LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   DNS / Bind Problem.... (https://www.linuxquestions.org/questions/linux-networking-3/dns-bind-problem-401132/)

Sapient 01-09-2006 04:59 AM

DNS / Bind Problem....
 
I just finished this example for setting up Postfix w/ MySql, etc...

http://genco.gen.tc/postfix_virtual.php#mysqlconf

It appears everything is loaded / compiled. However mail is not working and I think it is because of DNS. Any suggestions would be appreciated.


When I attempt this command I am getting this result.

mind:/usr/local/postfix-2.2.2 # host -t mx hingedmind.com 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

Host hingedmind.com not found: 2(SERVFAIL)


Logs:

Mail:

Jan 9 01:37:15 mind postfix/qmgr[25251]: E1256155BD: from=<root@mail.hingedmind.com>, size=501, nrcpt=1 (queue active)
Jan 9 01:37:15 mind postfix/pipe[525]: E1256155BD: to=<sapient@hingedmind.com>, relay=maildrop, delay=244376, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: Temporary authentication failure. )

Mail Info:

Jan 9 01:37:15 mind postfix/pipe[525]: E1256155BD: to=<sapient@hingedmind.com>, relay=maildrop, delay=244376, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: Temporary authentication failure. )

Messages:

Jan 9 02:41:57 mind nmbd[4606]: *****
Jan 9 02:43:04 mind named[29928]: client 127.0.0.1#3520: query: wmail.ccsi.com IN AAAA
Jan 9 02:43:09 mind named[29928]: client 127.0.0.1#3521: query: wmail.ccsi.com IN AAAA
Jan 9 02:44:24 mind master[584]: about to exec /usr/lib/cyrus/bin/ctl_cyrusdb
Jan 9 02:44:24 mind ctl_cyrusdb[584]: checkpointing cyrus databases
Jan 9 02:44:24 mind ctl_cyrusdb[584]: archiving database file: /var/lib/imap/annotations.db
Jan 9 02:44:24 mind ctl_cyrusdb[584]: archiving log file: /var/lib/imap/db/log.0000000001
Jan 9 02:44:24 mind ctl_cyrusdb[584]: archiving database file: /var/lib/imap/mailboxes.db
Jan 9 02:44:24 mind ctl_cyrusdb[584]: archiving log file: /var/lib/imap/db/log.0000000001
Jan 9 02:44:24 mind ctl_cyrusdb[584]: done checkpointing cyrus databases
Jan 9 02:44:24 mind master[26352]: process 584 exited, status 0
Jan 9 02:45:19 mind named[29928]: client 127.0.0.1#3522: query: wmail.ccsi.com IN AAAA
Jan 9 02:45:23 mind named[29928]: client 127.0.0.1#3523: query: wmail.ccsi.com IN AAAA
Jan 9 02:47:33 mind named[29928]: client 127.0.0.1#3524: query: wmail.ccsi.com IN AAAA
Jan 9 02:47:38 mind named[29928]: client 127.0.0.1#3525: query: wmail.ccsi.com IN AAAA
Jan 9 02:49:16 mind named[29928]: client 127.0.0.1#3526: query: wmail.ccsi.com IN AAAA
Jan 9 02:49:21 mind named[29928]: client 127.0.0.1#3527: query: wmail.ccsi.com IN AAAA



My Bind Files:

named.config.include:

include "/etc/named.d/hingedmind.com.conf";
include "/etc/named.d/10.0.0.conf";


hingedmind.com.conf

zone "hingedmind.com" in {
type master;
file "master/hingedmind.com.zone";
# allow-query {any;};
# allow-update { none; };
};

hingedmind.com.zone:

$TTL 14400
@ IN SOA mind.hingedmind.com. Postmaster.hingedmind.com. (
2005030601 ; serial
7200 ; refresh
7200 ; retry
604800 ; expire
86400 ) ; minimum

hingedmind.com. IN NS smtp.hingedmind.com.
hingedmind.com. IN A 10.0.0.10
mail.hingedmind.com. IN A 10.0.0.10
www.hingedmind.com. IN A 10.0.0.10
hingedmind.com. IN MX 5 mail.hingedmind.com.
webmail.hingedmind.com. IN A 10.0.0.10
securewebmail.hingedmind.com. IN A 10.0.0.11

www IN CNAME mind
ftp IN CNAME mind


10.0.0.conf

zone "0.0.10.in-addr.arpa" in {
type master;
file "master/0.0.10.in-addr.arpa.zone";

0.0.10.in-addr.arpa.zone:

$TTL 14400
@ IN SOA mind.hingedmind.com. Postmaster.hingedmind.com. (
1999092901 ; serial
1D ; refresh
2H ; retry
1W ; expiry
2D ) ; minimum

IN NS .hingedmind.com.
1 IN PTR .hingedmind.com.

bathory 01-09-2006 05:21 AM

Quote:

hingedmind.com. IN NS smtp.hingedmind.com.
You have an error defining your DNS since smtp.hingedmind.com is not defined

Sapient 01-09-2006 05:40 AM

Thanks for the response bathory.

I removed that line (not sure why it was there) and the result seems to be the same. I also added this one and tried, the same result.

hingedmind.com. IN NS mind.hingedmind.com.



mind:/usr/local/postfix-2.2.2 # host -t mx hingedmind.com 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

Host hingedmind.com not found: 2(SERVFAIL)
mind:/usr/local/postfix-2.2.2 #


When attempting to send, I get this message.

Sending failed:
Could not connect to host mail.hingedmind.com
The message will stay in the 'outbox' folder until you either fix the problem (e.g. a broken address) or remove the message from the 'outbox' folder.
The following transport protocol was used: sapient@hingedmind.com
Do you want me to continue sending the remaining messages?

This is the message log:

Jan 9 03:35:28 mind named[1547]: starting BIND 9.2.3 -t /var/lib/named -u named
Jan 9 03:35:28 mind named[1547]: using 1 CPU
Jan 9 03:35:28 mind named[1547]: loading configuration from '/etc/named.conf'
Jan 9 03:35:28 mind named[1547]: listening on IPv6 interfaces, port 53
Jan 9 03:35:28 mind named[1547]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 9 03:35:28 mind named[1547]: binding TCP socket: address in use
Jan 9 03:35:28 mind named[1547]: listening on IPv4 interface eth0, 10.0.0.10#53
Jan 9 03:35:28 mind named[1547]: binding TCP socket: address in use
Jan 9 03:35:28 mind named[1547]: command channel listening on 127.0.0.1#953
Jan 9 03:35:28 mind named[1547]: command channel listening on ::1#953
Jan 9 03:35:28 mind named[1547]: dns_rdata_fromtext: master/0.0.10.in-addr.arpa.zone:9: near '.hingedmind.com.': empty label
Jan 9 03:35:28 mind named[1547]: zone 0.0.10.in-addr.arpa/IN: loading master file master/0.0.10.in-addr.arpa.zone: empty label
Jan 9 03:35:28 mind named[1547]: dns_master_load: master/hingedmind.com.zone:17: www.hingedmind.com: CNAME and other data
Jan 9 03:35:28 mind named[1547]: zone hingedmind.com/IN: loading master file master/hingedmind.com.zone: CNAME and other data
Jan 9 03:35:34 mind named[1547]: client 127.0.0.1#3581: query: wmail.ccsi.com IN AAAA
Jan 9 03:37:18 mind named[1547]: client 127.0.0.1#3583: query: wmail.ccsi.com IN AAAA
Jan 9 03:37:27 mind named[1547]: client 127.0.0.1#3585: query: wmail.ccsi.com IN AAAA

Sapient 01-09-2006 06:34 AM

and....



mind:/usr/local/postfix-2.2.2 # dig @127.0.0.1 dns.localnet

; <<>> DiG 9.2.3 <<>> @127.0.0.1 dns.localnet
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44971
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;dns.localnet. IN A

;; AUTHORITY SECTION:
. 10800 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2006010801 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Jan 9 04:32:03 2006
;; MSG SIZE rcvd: 105

peter_robb 01-09-2006 06:35 AM

According to the Bind 9 Administrators Reference Manual,

it looks like your config files need a couple of touches..

Uncomment the line
allow-query { any; };
to allow it to serve addresses to clients..
and add the line
recursion no;
to prevent it from serving records it doesn't have.

Also, I gather that it's only for your local net to use, so you can change {any;} to {10.0.0.0;} for allow-query
How are users selecting this dns server?

For what you're doing, bind is way over the top.
You could use a lightweight resolver like dnsmasq or dnrd, which use local conf files and/or /etc/hosts for name records.

Sapient 01-09-2006 06:51 AM

Quote:

Originally Posted by peter_robb
According to the Bind 9 Administrators Reference Manual,

it looks like your config files need a couple of touches..

Uncomment the line
allow-query { any; };
to allow it to serve addresses to clients..
and add the line
recursion no;
to prevent it from serving records it doesn't have.

Also, I gather that it's only for your local net to use, so you can change {any;} to {10.0.0.0;} for allow-query
How are users selecting this dns server?

For what you're doing, bind is way over the top.
You could use a lightweight resolver like dnsmasq or dnrd, which use local conf files and/or /etc/hosts for name records.



Thanks Peter.

This is a SuSE host with a static IP address and a registered domain name. I used this to set it up http://genco.gen.tc/postfix_virtual.php#mysqlconf

I am wanting to be able to handout mail accounts from this server and manage them.

Am I going in the right direction for that?

Thanks

Sapient 01-09-2006 07:09 AM

This is from the message log:

Jan 9 05:05:58 mind named[2202]: zone 0.0.10.in-addr.arpa/IN: loading master file master/0.0.10.in-addr.arpa.zone: empty label
Jan 9 05:05:58 mind named[2202]: dns_master_load: master/hingedmind.com.zone:17: www.hingedmind.com: CNAME and other data
Jan 9 05:05:58 mind named[2202]: zone hingedmind.com/IN: loading master file master/hingedmind.com.zone: CNAME and other data
Jan 9 05:06:09 mind named[2202]: client 127.0.0.1#3640: query: hingedmind.com IN MX


Does the empty label mean anything?

Sapient 01-09-2006 07:31 AM

Was doing a search and run across this.

http://www.linuxquestions.org/questi...ad.php?t=67255

I have the same problem with the pid file. Could this be causing issues since my setup is:
Postfix Sasl Courier MySQL DNS PostfixManager Antivirus

peter_robb 01-09-2006 07:36 AM

Sure does..
Have a look at the Admin manual for error codes and the example zone files.

If you want to serve public addresses and also local ip numbers for your local LAN, you will need to set up acls to avoid public clients getting 10.0.0.x numbers, and your local clients getting internet numbers for domains hosted on the local box.
This will lead to 2 separate zone files, one for the public, one for the local net.
If you want to be a little lazy (crafty) you can use the virtualmin module from Webmin to do all the hard work..

Postfix will want the public numbers rather than the 10.0.0.x numbers otherwise it will reject mail it sends to itself.
Postfix will need each domain you serve in it's my_destination definition, as well as it's own hostname and "localhost.$mydomain".

I also hope this box is in a dmz of sorts..

peter_robb 01-09-2006 07:40 AM

For the pid file, look in /etc/init.d/bind (or named or bind9) and see where it is trying to place the pidfile.

Either change the location or make sure the user named runs as has the appropriate permissions.
You may need to add this user to the group that owns the directory..

Sapient 01-09-2006 11:32 AM

I have gone through several examples and documentation and it appears my dns conf files are correct.

I was able to get the PID file straight. Though I got virtualmin installed in fails when I try to start it.


http://localhost:1000 "The connection was refused" Any ideas? Could this be that my localhost is not in the hingedmind.zone file?

Mail log:

I restarted everything. Not sure what this means? Jan 9 09:23:30 mind authdaemond: libauthpam.so: cannot open shared object file: No such file or directory



Jan 9 09:22:55 mind authdaemond: stopping authdaemond children
Jan 9 09:23:30 mind authdaemond: modules="authmysql authpam", daemons=5
Jan 9 09:23:30 mind authdaemond: Installing libauthmysql
Jan 9 09:23:30 mind authdaemond: Installation complete: authmysql
Jan 9 09:23:30 mind authdaemond: Installing libauthpam
Jan 9 09:23:30 mind authdaemond: libauthpam.so: cannot open shared object file: No such file or directory
Jan 9 09:23:48 mind imapd: bind: Address already in use
Jan 9 09:24:03 mind pop3d: bind: Address already in use
Jan 9 09:24:16 mind postfix/postfix-script: stopping the Postfix mail system
Jan 9 09:24:16 mind postfix/master[6124]: terminating on signal 15
Jan 9 09:24:21 mind postfix/postfix-script: starting the Postfix mail system
Jan 9 09:24:21 mind postfix/master[6219]: daemon started -- version 2.2.2, configuration /etc/postfix
Jan 9 09:24:21 mind postfix/qmgr[6221]: E1256155BD: from=<root@mail.hingedmind.com>, size=501, nrcpt=1 (queue active)
Jan 9 09:24:21 mind postfix/pipe[6227]: E1256155BD: to=<sapient@hingedmind.com>, relay=maildrop, delay=272402, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: Temporary authentication failure. )



mind:/usr/local/postfix-2.2.2 # host -t mx hingedmind.com 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

Host hingedmind.com not found: 2(SERVFAIL)
mind:/usr/local/postfix-2.2.2 #


Thanks

Sapient 01-09-2006 12:34 PM

It appears something has changed...


Mail log:

Jan 9 10:12:06 mind postfix/smtpd[11240]: connect from localhost[127.0.0.1]
Jan 9 10:12:26 mind postfix/smtpd[11491]: connect from localhost[127.0.0.1]
Jan 9 10:12:30 mind postfix/smtpd[11491]: lost connection after CONNECT from localhost[127.0.0.1]
Jan 9 10:12:30 mind postfix/smtpd[11491]: disconnect from localhost[127.0.0.1]
Jan 9 10:17:06 mind postfix/smtpd[11240]: timeout after CONNECT from localhost[127.0.0.1]
Jan 9 10:17:06 mind postfix/smtpd[11240]: disconnect from localhost[127.0.0.1]
Jan 9 10:31:01 mind postfix/qmgr[6221]: E1256155BD: from=<root@mail.hingedmind.com>, size=501, nrcpt=1 (queue active)
Jan 9 10:31:01 mind postfix/pipe[12177]: E1256155BD: to=<sapient@hingedmind.com>, relay=maildrop, delay=276402, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: Temporary authentication failure. )

Message log:

Jan 9 10:31:26 mind named[6039]: client 127.0.0.1#3841: query: wmail.ccsi.com IN AAAA

Sapient 01-09-2006 05:20 PM

Could this be a permissions issue?


Jan 9 14:57:41 mind postfix/qmgr[6221]: E1256155BD: from=<root@mail.hingedmind.com>, size=501, nrcpt=1 (queue active)
Jan 9 14:57:41 mind postfix/pipe[12778]: E1256155BD: to=<sapient@hingedmind.com>, relay=maildrop, delay=292402, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: Temporary authentication failure. )

Sapient 01-09-2006 05:33 PM

I am not sure if this is related but I just noticed that http://localhost works fine, however, when I try say http://localhost:901 I get a connection refused.

scowles 01-09-2006 06:20 PM

Quote:

Originally Posted by Sapient
Could this be a permissions issue?


Jan 9 14:57:41 mind postfix/qmgr[6221]: E1256155BD: from=<root@mail.hingedmind.com>, size=501, nrcpt=1 (queue active)
Jan 9 14:57:41 mind postfix/pipe[12778]: E1256155BD: to=<sapient@hingedmind.com>, relay=maildrop, delay=292402, status=deferred (temporary failure. Command output: /usr/local/bin/maildrop: Temporary authentication failure. )

If I were in your shoes, I would be looking at why you have such a large delay value. (292402/3600=81.2 hours) Consider clearing out your queue and then resubmit new emails to be sure you are not chasing previously queued e-mail problems. See: man postsuper

Also, I would check your maildrop definition in master.cf. Seems like postfix is doing its part by pipeing the e-mail to maildrop, but maildrop is kicking it back.


All times are GMT -5. The time now is 06:57 PM.