Bind slave serer setup help
 

Ok I've setup a bind dns server as a secondary DNS server (to replicate the AD DNS from my DC)

the forward zone is working but the reverse zones aren't
This is on centOS 6.4, with VMware tools installed and "yum -y update" run (so should be fully up to date)

hopefully someone can tell me whats wrong.
here is my named.conf file

-----------------------------------------
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "." IN {
type hint;
file "named.ca";
};

zone "domain-logix.local" IN {
type slave;
masters { 10.0.2.6; 2001:470:b801::2; };
file "domain-logix.local.zone";
};
zone "254.254.10.in-addr.arpa" IN {
type slave;
file "254.254.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "4.0.10.in-addr.arpa" IN {
type slave;
file "4.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "3.0.10.in-addr.arpa" IN {
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "4.0.10.in-addr.arpa" IN {
type slave;
file "4.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "3.0.10.in-addr.arpa" IN {
type slave;
file "3.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "2.0.10.in-addr.arpa" IN {
type slave;
file "2.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "1.0.10.in-addr.arpa" IN {
type slave;
file "1.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "0.0.10.in-addr.arpa" IN {
type slave;
file "0.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "0.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "0.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "0.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "0.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "1.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "1.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "1.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "1.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "2.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "2.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

Arrg looks like I didn't get a full copy of it when I copied from putty

so another question whats an easy way to copy the named.conf file to a windows box?

Any help would be nice

Active directory doesn't use the same format... and has a couple of extra entries required for AD to work. All the files can be used for is reference.

I'm not using the windows dns files directly
and the forward DNS is working its the reverse that isn't

I exported the list and just used it for the names of the zones, can you tell me how the reverse zones should be named?

You already have the names.

Bind uses the reversed IP number you already have (for example:zone "1.0.10.in-addr.arpa"). Now the FILE names can be anything you want - that is why bind has the "file" reference. It is only a convention that is mirror the zone name.

ok so why isn't it working?

I have no idea why Windows does what it does.

DNS should work when you use the Linux server for name resolution.

Now, it might NOT work for other servers UNLESS the linux server is authoritative for the names and IP numbers. Both need to be delegated. I ran a small home server that could only provide forward references as that server was authoritative for the domain name. But it was not authoritative for the IP numbers, thus reverse lookups did not work.

When I ran domain and subdomain servers, the main domain server had to delegate the IP numbers to the subdomain, and until I did that, the subdomain could not provide reverse lookup services for those hosts not using the subdomain server specifically (which was a real pain for Kerberos, which validates IP numbers by reverse lookup - and if the result doesn't match the forward lookup it tended to count them as invalid, and would request the wrong service tickets).

I added the bind server in the Name servers list on the windows box and enabled transfer, also for every zone I set it to notify all servers in the name servers tab.

Did the slave server get the updates?

BTW, I noticed that you didn't specify "type slave" for the 3.0.10 zone, and there is no file specification either.

Ah I must have missed that
BTW just checking so does that part of the config look right?

also any chance you could tell me how to copy the named.conf file off the linux server so I can edit in notepad? and paste the full config here?

Oh I just looked some more and it looks like I've got the 10.0.3 zone twice.
I'm ether not good at coping from putty/vim or messed up when I was editing before I pasted into putty/vim

scp/putty should be able to copy the files... but since the Linus server is supposed to be the slave the data files are a don't care. It should get them from the master server.

Its my understanding it needs to be told what zones its going to be a secondary DNS server for

You already have that - the existing configuration is for a secondary. I was assuming some AD controller was the master.

Ya but its not working