LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 03-03-2008, 05:38 PM   #1
ihod2008
LQ Newbie
 
Registered: Feb 2008
Posts: 10

Rep: Reputation: 0
Question BIND With CentOS - Cant "DIG" From Remote Machine


Hello, i am having a strange problem. I own the domain bellancomputer.com which is managed through GoDaddy. I have CentOS installed on a Dell Precision 530. The machine has two nic's, one for internet and one to serve my network (DHCP). I installed bind at the time of installation as well as caching-nameserver after the fact. I set up named.conf and my zone file and it seems to work when i dig the machine from within the network, it returns answers but when i dig it from a remote machine there is no response. I tried forwarding through my isp's dns servers and i purchased a static ip which opens all ports. If i use the tool at pingabiity.com i get a semi-response. It sees my mx records but none else (such as A records or WWW). Files are below:

zone file:
$ttl 38400
bellancomputer.com. IN SOA ns1.bellancomter.com. admin.bellancomputer.com. (
2007020400 ; Serial
10800 ; Refresh after 3 hours
3600 ; Retry after 1 hour
604800 ; Expire after 1 week
86400 ) ; Minimum TTL of 1 day
bellancomputer.com. IN NS ns1.bellancomputer.com.
bellancomputer.com. IN MX 1 mx.bellancomputer.com.
bellancomputer.com. IN A xxx.xxx.xxx.xxx
ns1.bellancomputer.com. IN A xxx.xxx.xxx.xxx
mx.bellancomputer.com. IN A xxx.xxx.xxx.xxx
mail.bellancomputer.com. IN CNAME mx.bellancomputer.com.
www.bellancomputer.com. IN CNAME bellancomputer.com.

--------------------------------------------------------------------

named.conf:
#/var/named/chroot/etc/named.conf
// we include the rndckey (copy-paste from rndc.key created earlier)
key "rndckey" {
algorithm hmac-md5;
secret "SGsvd1dF+mv+yU4ywCCkkg==";
};

// we assume our server has the IP serving the 255.255.255.0/24 subnet
controls {
inet 127.0.0.1 allow { 127.0.0.1; } keys { "rndckey"; };
inet 216.15.121.28 allow { 255.255.255.0/24; } keys { "rndckey"; };
};

options {
directory "/var/named";
pid-file "/var/run/named/named.pid";

recursion yes;

allow-recursion {
127.0.0.1;
xxx.xxx.xxx.0/24;
};

// these are the opendns servers (optional)
forwarders {
207.172.3.8;
207.172.3.9;
};

listen-on {
127.0.0.1;
xxx.xxx.xxx.xxx;
};

/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
query-source address * port 53;

// so people can't try to guess what version you're running
version "REFUSED";

allow-query {
127.0.0.1;
xxx.xxx.xxx.0/24;
};
};

server 216.15.121.28 {
keys { rndckey; };
};

zone "." IN {
type hint;
file "named.ca";
};

// we assume we have a slave dns server with the IP 192.168.254.101
zone "bellancomputer.com" IN {
type master;
file "data/test.be.zone";
allow-update { none; };
};
 
Old 03-05-2008, 03:57 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Remove or comment out the following from named.conf
Quote:
allow-query {
127.0.0.1;
xxx.xxx.xxx.0/24;
};
You can also add the host from where you're trying to dig your domain, but it's not a good idea since your dns should answer for all the domain it's authoritative for.

Note that your SOA record:
Quote:
bellancomputer.com. IN SOA ns1.bellancomter.com. admin.bellancomputer.com. (
has a typo: it should be ns1.bellancomputer.com.

Regards
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How do i "copy" one bios and "paste" it onto another identical machine Yerp Linux - Hardware 2 01-10-2007 08:31 PM
"dig mx" and "ping google" do not work when bind9 runs.. why? alexxxis Linux - Software 4 01-07-2007 03:16 AM
"dig mx" or "ping" not working because of bind9? alexxxis Debian 4 01-06-2007 11:26 PM
How to run "Closed" DNS on CentOS using BIND PhilipTodd Linux - Newbie 5 04-10-2006 01:26 AM
"dig command" result in depth blackzone Linux - Networking 1 07-05-2004 06:04 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 04:24 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration