LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-11-2014, 01:26 PM   #1
Anandhc
LQ Newbie
 
Registered: Sep 2014
Posts: 15

Rep: Reputation: Disabled
dns server error -- out of zone data error


Hi I'm Muruganandan
I am configuring my dns server with Centos 6.5 bind Version 9.8.2
I configured everthing but if start the server I m getting out of zone error,
Here my named.conf
/acl "slave" { ip-address; };//

acl "blacklist" { 210.10.10.1; 192.168.10.1; 162.168.20.0/24; 192.168.0.0/24; };
acl "spoofingnetwork" { 10.0.0.0/8; 192.168.0.0/16; };

options {
listen-on port 53 { 127.0.0.1; any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; mynet; };
allow-recursion { wls-net; };
blackhole { blacklist; spoofingnetwork; };
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
include "/etc/named.rfc1912.zones";
#include "/etc/named.root.key";


Im configuring for the ISP with multiple zone I want allow our own network to query What shoul I do

But I try named-checkconf named.conf -z it does not give any error same I checked the zone file also not give error the structures looking okay but I could not find the reason any one help out


named.rf19192.zone file

view "internal" {
match-clients { "allow"; };
recursion yes;
allow-recursion { "allow"; };

zone "." IN {
type hint;
file "named.ca";
};

zone "102.122.202.in.addr-arpa" IN {
type master;
file "102.122.202.zone";
allow-update { none; };
allow-query { allow; };
};

zone "101.121.202.in.addr-arpa" IN {
type master;
file "101.121.202.zone";

where allow is my network in both named.conf and named.rfc

so tell me what could be the reason in details


Thanaks in advance

Muruganandan.C
linux Anandhc is online now
 
Old 09-13-2014, 02:10 AM   #2
anotherlinuxuser
Member
 
Registered: Jan 2007
Location: Alberta Canada
Distribution: Fedora/Redhat/CentOS
Posts: 70

Rep: Reputation: 19
I don't think the word "allow" is valid element in your statements:

Your post shows elements like:
match-clients { "allow"; };
and
allow-recursion { "allow"; };
etc.

But, I think you mean { "any"; } instead of { "allow"; }, if by 'allow' you want to allow 'any'body.
'allow' would be valid, if there was an 'acl' statement defining 'allow' as an acl, but I don't see that in your post.

Try changing all occurances of "{ "allow"; }" to "{ "any"; }" in named.conf.
 
Old 09-24-2014, 04:53 AM   #3
Anandhc
LQ Newbie
 
Registered: Sep 2014
Posts: 15

Original Poster
Rep: Reputation: Disabled
Hi Thanks for your reply


Your post shows elements like:
match-clients { "allow"; };
and
allow-recursion { "allow"; };
etc


where "allow" is my acl's name. But some how I managed to resolve the error, but I figured this is because some mis-configuration in zone files,
Now I have I another error my named.conf is starting well. but its not resolving names, I try to ping IP its pinging, I try to ping names like
ping yahoo.com
it gives me error unknown host, what would be be the reason

DNS-Bind 9.9.* in
OS-centos 7
/*
Sample named.conf BIND DNS server 'named' configuration file
for the Red Hat BIND distribution.

See the BIND Administrator's Reference Manual (ARM) for details, in:
file:///usr/share/doc/bind-{version}/arm/Bv9ARM.html
Also see the BIND Configuration GUI : /usr/bin/system-config-bind and
its manual.
*/
acl “allow” { 127.0.0.1; 192.168.180.0/24; xx.x.x.x/21;};
options
{
// Put files that named is allowed to write in the data/ directory:
directory "/var/named"; // "Working" directory
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";


/*
Specify listenning interfaces. You can use list of addresses (';' is
delimiter) or keywords "any"/"none"
*/
//listen-on port 53 { any; };
listen-on port 53 { 127.0.0.1; allow; };

//listen-on-v6 port 53 { any; };
//listen-on-v6 port 53 { ::1; };


};
*/

allow-query { localhost; };
allow-query-cache { localhost; };

recursion yes;


//dnssec-enable yes;

//dnssec-validation yes;

//dnssec-lookaside auto;
};

logging
{
channel default_debug {
file "data/named.run";
severity dynamic;
};
};


view "localhost_resolver"

{
match-clients { localhost; allow; };
recursion yes;

# all views must contain the root hints zone:
zone "." IN {
type hint;
file "/var/named/named.ca";
};

include "/etc/named.rfc1912.zones";
};
view "internal"
{
match-clients { localnets; };
allow-recursion { localhost; allow; };
allow-query { localhost; allow; };
recursion yes;

zone "." IN {
type hint;
file "/var/named/named.ca";
};

*/
include "/etc/named.rfc1912.zones";


};

view "external"

{
match-clients { any; allow; };

zone "." IN {
type hint;
file "/var/named/named.ca";
};

recursion no;


};

};

Here is my named.conf file
Please tell me what could be reason
ther is error in lg

broken key chain

I have checked zone individually and named.conf file there is error reported but if try resolve names its gives me unknown host,

Thanks in advance

Regads
Muruganandan.C

---------- Post added 09-24-14 at 03:23 PM ----------

Hi Thanks for your reply


Your post shows elements like:
match-clients { "allow"; };
and
allow-recursion { "allow"; };
etc


where "allow" is my acl's name. But some how I managed to resolve the error, but I figured this is because some mis-configuration in zone files,
Now I have I another error my named.conf is starting well. but its not resolving names, I try to ping IP its pinging, I try to ping names like
ping yahoo.com
it gives me error unknown host, what would be be the reason

DNS-Bind 9.9.* in
OS-centos 7
/*
Sample named.conf BIND DNS server 'named' configuration file
for the Red Hat BIND distribution.

See the BIND Administrator's Reference Manual (ARM) for details, in:
file:///usr/share/doc/bind-{version}/arm/Bv9ARM.html
Also see the BIND Configuration GUI : /usr/bin/system-config-bind and
its manual.
*/
acl “allow” { 127.0.0.1; 192.168.180.0/24; xx.x.x.x/21;};
options
{
// Put files that named is allowed to write in the data/ directory:
directory "/var/named"; // "Working" directory
dump-file "data/cache_dump.db";
statistics-file "data/named_stats.txt";
memstatistics-file "data/named_mem_stats.txt";


/*
Specify listenning interfaces. You can use list of addresses (';' is
delimiter) or keywords "any"/"none"
*/
//listen-on port 53 { any; };
listen-on port 53 { 127.0.0.1; allow; };

//listen-on-v6 port 53 { any; };
//listen-on-v6 port 53 { ::1; };


};
*/

allow-query { localhost; };
allow-query-cache { localhost; };

recursion yes;


//dnssec-enable yes;

//dnssec-validation yes;

//dnssec-lookaside auto;
};

logging
{
channel default_debug {
file "data/named.run";
severity dynamic;
};
};


view "localhost_resolver"

{
match-clients { localhost; allow; };
recursion yes;

# all views must contain the root hints zone:
zone "." IN {
type hint;
file "/var/named/named.ca";
};

include "/etc/named.rfc1912.zones";
};
view "internal"
{
match-clients { localnets; };
allow-recursion { localhost; allow; };
allow-query { localhost; allow; };
recursion yes;

zone "." IN {
type hint;
file "/var/named/named.ca";
};

*/
include "/etc/named.rfc1912.zones";


};

view "external"

{
match-clients { any; allow; };

zone "." IN {
type hint;
file "/var/named/named.ca";
};

recursion no;


};

};

Here is my named.conf file
Please tell me what could be reason
ther is error in lg

broken key chain

I have checked zone individually and named.conf file there is error reported but if try resolve names its gives me unknown host,

Thanks in advance

Regads
Muruganandan.C
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
DNS server error -- 52.200.121.zone:45: ignoring out-of-zone data Anandhc Linux - Newbie 0 09-11-2014 02:45 PM
[SOLVED] Reverse zone testing error on Linux6 primary DNS kahafil Linux - Server 3 10-28-2011 10:31 AM
[SOLVED] DNS with bind9 on Debian: won't resolve (zone file error?) rrije Linux - Software 3 09-10-2011 08:59 AM
DNS Could not set forwarders for zone '.'. Error dalvis Linux - Server 2 10-02-2008 04:44 PM
Dns Problem Loading The Zone File Error(zone File Not Found) ramineni Linux - Newbie 1 09-14-2008 08:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:24 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration