Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #976 > unrolled thread

BIND9 - dig server fail

Started byalike <alike@ahgsa.com>
First post2012-01-15 20:42 +0100
Last post2012-01-18 08:09 +0100
Articles 15 on this page of 35 — 6 participants

Back to article view | Back to comp.os.linux.networking

Contents

  BIND9 - dig server fail alike <alike@ahgsa.com> - 2012-01-15 20:42 +0100
    Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-15 22:16 +0100
    Re: BIND9 - dig server fail Chris Davies <chris-usenet@roaima.co.uk> - 2012-01-15 21:18 +0000
      Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-16 10:33 +0100
        Re: BIND9 - dig server fail Chris Davies <chris-usenet@roaima.co.uk> - 2012-01-16 11:34 +0000
          Re: BIND9 - dig server fail alike <alike@ahgsa.com> - 2012-01-16 16:01 +0100
          Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-16 20:18 +0100
            Re: BIND9 - dig server fail Chris Davies <chris-usenet@roaima.co.uk> - 2012-01-16 22:15 +0000
            Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-17 08:53 +0100
              Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-17 09:16 +0100
                Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-18 08:03 +0100
                  Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-18 14:10 +0000
                    Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-18 15:55 +0100
                      Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-18 20:34 +0100
                        Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-19 08:17 +0100
                          Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-19 09:08 +0100
                            Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-20 08:43 +0100
                              Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-20 09:05 +0100
                              Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-20 22:38 +0100
                                Re: BIND9 - dig server fail Allodoxaphobia <knock_yourself_out@example.net> - 2012-01-21 16:32 +0000
                                  Re: BIND9 - dig server fail alike <alike@ahgsa.com> - 2012-01-22 20:08 +0100
                                    Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-22 22:52 +0100
                                      Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-23 07:50 +0100
                                        Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-23 21:06 +0100
                                          Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-24 07:17 +0100
                                            Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-24 07:54 +0100
                                            Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-24 09:09 +0100
                                              Re: BIND9 - dig server fail alike <alike@ahgsa.com> - 2012-01-24 19:25 +0100
                                              Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-26 07:21 +0100
                                                Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-26 08:10 +0100
                                Re: BIND9 - dig server fail alike <alike@ahgsa.com> - 2012-01-22 19:49 +0100
                                  Re: BIND9 - dig server fail Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-22 22:46 +0100
                                    Re: BIND9 - dig server fail alike <alike@asfas.com> - 2012-01-27 14:34 +0100
                Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-18 08:06 +0100
                  Re: BIND9 - dig server fail alike <alike@asas.net> - 2012-01-18 08:09 +0100

Page 2 of 2 — ← Prev page 1 [2]

#1001

Fromalike <alike@ahgsa.com>
Date2012-01-22 20:08 +0100
Message-ID<jfhms0$h8d$1@l01news1.ot.hr>
In reply to#997
On 01/21/2012 05:32 PM, Allodoxaphobia wrote:
> On Fri, 20 Jan 2012 22:38:29 +0100, Pascal Hambourg wrote:
>> alike a écrit :
>>>
>>> My local network is in range for 1.90 - 1.110.
>>> The 192.168.1.110 is just local IP of my computer.
>>> This computer should act as dns server.
>>>
>>> 85.114.42.51 and 52 are static IP addresses from my ISP and this
>>> addresses are registered as dns1.aisnet.com.hr, dns2.aisnet.com.hr
>>>
>>>> Who is operating those two nameservers ?
>>> The "carnet" has put this two IP addresses into they dns server zones.
>>> The carnet is research network: http://www.carnet.hr/en
>>
>> This is just the delegation and does not answer my question : who is
>> operating the two hosts at addresses 85.114.42.51 and 52 and how are
>> they (supposed to be) related to your private DNS server ?
>
> What was revealed when you did a `whois` on either of those IPs?
****
The name of the compay was OK.
The person ( registered ) is absolute. For like.. 6 years.
The name of the ISP is correct.

My ISP has granted my 4 free IP addresses. This addresses are in range 
from 85.114.42.50 - 54. I can use this addresses for any purpose.
So I took 51 and 52 as addresses for my DNS servers.

btw. Pascal, is this the information that you need ?

[toc] | [prev] | [next] | [standalone]

#1005

FromPascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Date2012-01-22 22:52 +0100
Message-ID<jfi0f9$1iqt$1@saria.nerim.net>
In reply to#1001
alike a écrit :
> 
> My ISP has granted my 4 free IP addresses. This addresses are in range 
> from 85.114.42.50 - 54.

That is five addresses. ;-)
From the whois data it seems that you have a /29 block (8 addresses,
85.114.42.48 - 85.114.42.55). The first and last are reserved for subnet
and broadcast, one is used by the access router (probably 85.114.42.49)
and the rest (five addresses) is available for you. Is this correct ?

> I can use this addresses for any purpose.
> So I took 51 and 52 as addresses for my DNS servers.

Did you set up two hosts with these adresses and set them up as DNS
servers ?

[toc] | [prev] | [next] | [standalone]

#1006

Fromalike <alike@asas.net>
Date2012-01-23 07:50 +0100
Message-ID<jfj00q$u7d$1@l01news1.ot.hr>
In reply to#1005
On 01/22/2012 10:52 PM, Pascal Hambourg wrote:
> alike a écrit :
>>
>> My ISP has granted my 4 free IP addresses. This addresses are in range
>> from 85.114.42.50 - 54.
>
> That is five addresses. ;-)
>  From the whois data it seems that you have a /29 block (8 addresses,
> 85.114.42.48 - 85.114.42.55). The first and last are reserved for subnet
> and broadcast, one is used by the access router (probably 85.114.42.49)
> and the rest (five addresses) is available for you. Is this correct ?
**  Yes, this is correct.

> Did you set up two hosts with these adresses and set them up as DNS
> servers ?
** I have set just one computer (85.114.42.51) and the configuration is 
as you have described in post before.

Of course you can send me e-mail, but I cannot guarantee that it will
solve the problem faster than continue posting here
** no problem :-). I send you mail....

[toc] | [prev] | [next] | [standalone]

#1008

FromPascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Date2012-01-23 21:06 +0100
Message-ID<jfkel4$2f93$1@saria.nerim.net>
In reply to#1006
alike a écrit :
> 
>> Did you set up two hosts with these adresses and set them up as DNS
>> servers ?
> ** I have set just one computer (85.114.42.51) and the configuration is 
> as you have described in post before.

However this address does not appear to reply to DNS queries (nor
anything else I tried such as ICMP echo request aka ping and UDP
traceroute) from here. Maybe it has a firewall that requires to open TCP
and UDP port 53 ?

[toc] | [prev] | [next] | [standalone]

#1010

Fromalike <alike@asas.net>
Date2012-01-24 07:17 +0100
Message-ID<jflif0$qsj$1@l01news1.ot.hr>
In reply to#1008
On 01/23/2012 09:06 PM, Pascal Hambourg wrote:
> alike a écrit :
>>
>>> Did you set up two hosts with these adresses and set them up as DNS
>>> servers ?
>> ** I have set just one computer (85.114.42.51) and the configuration is
>> as you have described in post before.
>
> However this address does not appear to reply to DNS queries (nor
> anything else I tried such as ICMP echo request aka ping and UDP
> traceroute) from here. Maybe it has a firewall that requires to open TCP
> and UDP port 53 ?

sudo netstat -anltp|grep :53
---------------------
tcp   0   0 192.168.1.110:53  0.0.0.0:*  LISTEN      4885/named
tcp   0   0 127.0.0.1:53      0.0.0.0:*  LISTEN      4885/named
tcp6  0   0 :::53 ::*                    LISTEN      4885/named
-----------------------------
when i stop the bind server i get no reply.
( the command is passed in terminal but no data is displayed )

[toc] | [prev] | [next] | [standalone]

#1011

Fromalike <alike@asas.net>
Date2012-01-24 07:54 +0100
Message-ID<jflklj$rin$1@l01news1.ot.hr>
In reply to#1010
On 01/24/2012 07:17 AM, alike wrote:
> On 01/23/2012 09:06 PM, Pascal Hambourg wrote:
>> alike a écrit :
>>>
>>>> Did you set up two hosts with these adresses and set them up as DNS
>>>> servers ?
>>> ** I have set just one computer (85.114.42.51) and the configuration is
>>> as you have described in post before.
>>
>> However this address does not appear to reply to DNS queries (nor
>> anything else I tried such as ICMP echo request aka ping and UDP
>> traceroute) from here. Maybe it has a firewall that requires to open TCP
>> and UDP port 53 ?
>
> sudo netstat -anltp|grep :53
> ---------------------
> tcp 0 0 192.168.1.110:53 0.0.0.0:* LISTEN 4885/named
> tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 4885/named
> tcp6 0 0 :::53 ::* LISTEN 4885/named
> -----------------------------
> when i stop the bind server i get no reply.
> ( the command is passed in terminal but no data is displayed )
>
--------------------
when i make dig:
http://geektools.com/digtool.php
Domain: aisnet.com,hr
NS. 85.114.42.51

; <<>> DiG 8.2 <<>> @85.114.42.51 aisnet.com.hr ANY
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server 85.114.42.51: Connection timed out

Your host (85.114.42.50) has visited 3 times today.
-----------------------

[toc] | [prev] | [next] | [standalone]

#1012

FromPascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Date2012-01-24 09:09 +0100
Message-ID<jflovj$2ujc$1@saria.nerim.net>
In reply to#1010
alike a écrit :
> On 01/23/2012 09:06 PM, Pascal Hambourg wrote:
>> alike a écrit :
>>>
>>> ** I have set just one computer (85.114.42.51) and the configuration is
>>> as you have described in post before.
>>
>> However this address does not appear to reply to DNS queries (nor
>> anything else I tried such as ICMP echo request aka ping and UDP
>> traceroute) from here. Maybe it has a firewall that requires to open TCP
>> and UDP port 53 ?
> 
> sudo netstat -anltp|grep :53
> ---------------------
> tcp   0   0 192.168.1.110:53  0.0.0.0:*  LISTEN      4885/named
> tcp   0   0 127.0.0.1:53      0.0.0.0:*  LISTEN      4885/named
> tcp6  0   0 :::53 ::*                    LISTEN      4885/named

Ok but this is 192.168.1.110, not 85.114.42.51. How is 85.114.42.51
supposed to translate into 192.168.1.110 ?

[toc] | [prev] | [next] | [standalone]

#1014

Fromalike <alike@ahgsa.com>
Date2012-01-24 19:25 +0100
Message-ID<jfmt34$aae$1@l01news1.ot.hr>
In reply to#1012
On 01/24/2012 09:09 AM, Pascal Hambourg wrote:
> alike a écrit :
>> On 01/23/2012 09:06 PM, Pascal Hambourg wrote:
>>> alike a écrit :
>>>>
>>>> ** I have set just one computer (85.114.42.51) and the configuration is
>>>> as you have described in post before.
>>>
>>> However this address does not appear to reply to DNS queries (nor
>>> anything else I tried such as ICMP echo request aka ping and UDP
>>> traceroute) from here. Maybe it has a firewall that requires to open TCP
>>> and UDP port 53 ?
>>
>> sudo netstat -anltp|grep :53
>> ---------------------
>> tcp   0   0 192.168.1.110:53  0.0.0.0:*  LISTEN      4885/named
>> tcp   0   0 127.0.0.1:53      0.0.0.0:*  LISTEN      4885/named
>> tcp6  0   0 :::53 ::*                    LISTEN      4885/named
>
> Ok but this is 192.168.1.110, not 85.114.42.51. How is 85.114.42.51
> supposed to translate into 192.168.1.110 ?
------------
I understand what you are pointing to but please look at email.

[toc] | [prev] | [next] | [standalone]

#1016

Fromalike <alike@asas.net>
Date2012-01-26 07:21 +0100
Message-ID<jfqrff$jgn$1@l01news1.ot.hr>
In reply to#1012
On 01/24/2012 09:09 AM, Pascal Hambourg wrote:
> alike a écrit :
>> On 01/23/2012 09:06 PM, Pascal Hambourg wrote:
>>> alike a écrit :
>>>>
>>>> ** I have set just one computer (85.114.42.51) and the configuration is
>>>> as you have described in post before.
>>>
>>> However this address does not appear to reply to DNS queries (nor
>>> anything else I tried such as ICMP echo request aka ping and UDP
>>> traceroute) from here. Maybe it has a firewall that requires to open TCP
>>> and UDP port 53 ?
>>
>> sudo netstat -anltp|grep :53
>> ---------------------
>> tcp   0   0 192.168.1.110:53  0.0.0.0:*  LISTEN      4885/named
>> tcp   0   0 127.0.0.1:53      0.0.0.0:*  LISTEN      4885/named
>> tcp6  0   0 :::53 ::*                    LISTEN      4885/named
>
> Ok but this is 192.168.1.110, not 85.114.42.51. How is 85.114.42.51
> supposed to translate into 192.168.1.110 ?
----------------------------
I dont know. As in photo that i send you in email, the "dns server" is 
in Lan network at address 192.168.1.XX.
The 85.114.42.51-52 are addresses that i got from my isp.
This addresses are registered in Carnet DNS zone.

The computer must be in local network address....

[toc] | [prev] | [next] | [standalone]

#1017

Fromalike <alike@asas.net>
Date2012-01-26 08:10 +0100
Message-ID<jfqub9$kb3$1@l01news1.ot.hr>
In reply to#1016
On 01/26/2012 07:21 AM, alike wrote:
> On 01/24/2012 09:09 AM, Pascal Hambourg wrote:
>> alike a écrit :
>>> On 01/23/2012 09:06 PM, Pascal Hambourg wrote:
>>>> alike a écrit :
>>>>>
>>>>> ** I have set just one computer (85.114.42.51) and the
>>>>> configuration is
>>>>> as you have described in post before.
>>>>
>>>> However this address does not appear to reply to DNS queries (nor
>>>> anything else I tried such as ICMP echo request aka ping and UDP
>>>> traceroute) from here. Maybe it has a firewall that requires to open
>>>> TCP
>>>> and UDP port 53 ?
>>>
>>> sudo netstat -anltp|grep :53
>>> ---------------------
>>> tcp 0 0 192.168.1.110:53 0.0.0.0:* LISTEN 4885/named
>>> tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 4885/named
>>> tcp6 0 0 :::53 ::* LISTEN 4885/named
>>
>> Ok but this is 192.168.1.110, not 85.114.42.51. How is 85.114.42.51
>> supposed to translate into 192.168.1.110 ?
> ----------------------------
> I dont know. As in photo that i send you in email, the "dns server" is
> in Lan network at address 192.168.1.XX.
> The 85.114.42.51-52 are addresses that i got from my isp.
> This addresses are registered in Carnet DNS zone.
>
> The computer must be in local network address....
>
-----------------------------
Dig from the local computer (dns server ) shows noerror.
dig dns2.aisnet.com.hr
dig dns1.aisnet.com.hr
dig aisnet.com.hr
----------------------
If i dig from other computer ( in the same lan ) i get:
serverfail for each test.
----------------------
If the router would have port 53 blocked,the dig should pass anyway ?
It should give no error, because it in the same domain and it doesn't 
goes out.

[toc] | [prev] | [next] | [standalone]

#1000

Fromalike <alike@ahgsa.com>
Date2012-01-22 19:49 +0100
Message-ID<jfhlo6$gqi$1@l01news1.ot.hr>
In reply to#996
On 01/20/2012 10:38 PM, Pascal Hambourg wrote:
> alike a écrit :
>>
>> My local network is in range for 1.90 - 1.110.
>> The 192.168.1.110 is just local IP of my computer.
>> This computer should act as dns server.
>>
>> 85.114.42.51 and 52 are static IP addresses from my ISP and this
>> addresses are registered as dns1.aisnet.com.hr, dns2.aisnet.com.hr
>>
>>> Who is operating those two nameservers ?
>> The "carnet" has put this two IP addresses into they dns server zones.
>> The carnet is research network: http://www.carnet.hr/en
>
> This is just the delegation and does not answer my question : who is
> operating the two hosts at addresses 85.114.42.51 and 52 and how are
> they (supposed to be) related to your private DNS server ?
-------------
Firstly I want to thank you for your time and help ( and to all other ).
Can I send you email so we can faster and simpler solve this problem.
Afterwards, I will send the final solution to the forum.

[toc] | [prev] | [next] | [standalone]

#1004

FromPascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Date2012-01-22 22:46 +0100
Message-ID<jfi03l$1ijq$1@saria.nerim.net>
In reply to#1000
alike a écrit :
> Can I send you email so we can faster and simpler solve this problem.
> Afterwards, I will send the final solution to the forum.

Of course you can send me e-mail, but I cannot guarantee that it will
solve the problem faster than continue posting here.

[toc] | [prev] | [next] | [standalone]

#1018

Fromalike <alike@asfas.com>
Date2012-01-27 14:34 +0100
Message-ID<jfu96r$ots$1@l01news1.ot.hr>
In reply to#1004
On 01/22/2012 10:46 PM, Pascal Hambourg wrote:
> alike a écrit :
>> Can I send you email so we can faster and simpler solve this problem.
>> Afterwards, I will send the final solution to the forum.
>
> Of course you can send me e-mail, but I cannot guarantee that it will
> solve the problem faster than continue posting here.
------------
Hi Pascal and others.
Did someone find some solution for my situation.
Am bit confused, because i can not find solution..

[toc] | [prev] | [next] | [standalone]

#987

Fromalike <alike@asas.net>
Date2012-01-18 08:06 +0100
Message-ID<jf5r15$hun$3@l01news1.ot.hr>
In reply to#985
On 01/17/2012 09:16 AM, Pascal Hambourg wrote:
> alike a écrit :
>> On 01/16/2012 08:18 PM, Pascal Hambourg wrote:
>>> Actually an SOA record contains *both* a hostname and an e-mail addresse
>>> in dotted notation. Here the address is missing.
>>
>> $TTL    604800
>> $ORIGIN aisnet.com.hr
>> @       IN      SOA     ns1.aisnet.com.hr.  (
>>                        2006020201 ; Serial
>>                            604800 ; Refresh
>>                             86400 ; Retry
>>                           2419200 ; Expire
>>                            604800); Negative Cache TTL
>> ;
>>
>> aisnet.com.hr   14400   IN      NS      dns2.aisnet.com.hr
>> aisnet.com.hr   14400   IN      NS      dns1.aisnet.com.hr
>>
>> dns2.aisnet.com.hr      14400   IN      A       85.114.42.51
>> dns1.aisnet.com.hr      14400   IN      A       85.114.42.52
>> ------------------
>> Is this correct ?
>
> Not yet, but almost.
> The SOA record is still incomplete, see my comment above. Also you need
> to add a final dot at the end of fully qualified domain names, otherwise
> the base domain (origin) is appended.
>
> dns2.aisnet.com.hr ->  dns2.aisnet.com.hr.aisnet.com.hr.
> dns2.aisnet.com.hr. ->  ok
**************************************
-----------------------------------------
zone 0.in-addr.arpa/IN: loaded serial 1
zone 127.in-addr.arpa/IN: loaded serial 1
zone 255.in-addr.arpa/IN: loaded serial 1
/etc/bind/db.aisnet.com.hr:3: SOA record not at top of zone 
(aisnet.com.hr.aisnet.com.hr)
zone aisnet.com.hr/IN: loading from master file 
/etc/bind/db.aisnet.com.hr failed: not at top of zone

zone aisnet.com.hr/IN: not loaded due to errors.
zone localhost/IN: loaded serial 2
managed-keys-zone ./IN: loading from master file managed-keys.bind 
failed: file not found
managed-keys-zone ./IN: loaded serial 0
named[10797]: running
//---------------------------------------------
$TTL    604800
$ORIGIN aisnet.com.hr
@       IN      SOA     ns1.aisnet.com.hr. hostmaster.aisnet.com.hr.(
                      2006020201 ; Serial
                          604800 ; Refresh
                           86400 ; Retry
                         2419200 ; Expire
                          604800); Negative Cache TTL
;

aisnet.com.hr    14400    IN    NS    dns2.aisnet.com.hr.
aisnet.com.hr    14400    IN    NS    dns1.aisnet.com.hr.

dns2.aisnet.com.hr    14400    IN    A    85.114.42.51
dns1.aisnet.com.hr    14400    IN    A    85.114.42.52
//--------------------------------------------------------------------------
SOA not at top of zone - how is bind reading this part ?
The line where SOA is defined should be OK. Do i need to add some 
additional part int db.aisnet.com.hr file ?

Btw. when i run www.intodns.com/aisnet.com.hr i get errors that 
nameservers did not respond. Can this be just because SOA record ?

[toc] | [prev] | [next] | [standalone]

#988

Fromalike <alike@asas.net>
Date2012-01-18 08:09 +0100
Message-ID<jf5r6b$hvn$1@l01news1.ot.hr>
In reply to#987
On 01/18/2012 08:06 AM, alike wrote:
> On 01/17/2012 09:16 AM, Pascal Hambourg wrote:
>> alike a écrit :
>>> On 01/16/2012 08:18 PM, Pascal Hambourg wrote:
>>>> Actually an SOA record contains *both* a hostname and an e-mail
>>>> addresse
>>>> in dotted notation. Here the address is missing.
>>>
>>> $TTL 604800
>>> $ORIGIN aisnet.com.hr
>>> @ IN SOA ns1.aisnet.com.hr. (
>>> 2006020201 ; Serial
>>> 604800 ; Refresh
>>> 86400 ; Retry
>>> 2419200 ; Expire
>>> 604800); Negative Cache TTL
>>> ;
>>>
>>> aisnet.com.hr 14400 IN NS dns2.aisnet.com.hr
>>> aisnet.com.hr 14400 IN NS dns1.aisnet.com.hr
>>>
>>> dns2.aisnet.com.hr 14400 IN A 85.114.42.51
>>> dns1.aisnet.com.hr 14400 IN A 85.114.42.52
>>> ------------------
>>> Is this correct ?
>>
>> Not yet, but almost.
>> The SOA record is still incomplete, see my comment above. Also you need
>> to add a final dot at the end of fully qualified domain names, otherwise
>> the base domain (origin) is appended.
>>
>> dns2.aisnet.com.hr -> dns2.aisnet.com.hr.aisnet.com.hr.
>> dns2.aisnet.com.hr. -> ok
> **************************************
> -----------------------------------------
> zone 0.in-addr.arpa/IN: loaded serial 1
> zone 127.in-addr.arpa/IN: loaded serial 1
> zone 255.in-addr.arpa/IN: loaded serial 1
> /etc/bind/db.aisnet.com.hr:3: SOA record not at top of zone
> (aisnet.com.hr.aisnet.com.hr)
> zone aisnet.com.hr/IN: loading from master file
> /etc/bind/db.aisnet.com.hr failed: not at top of zone
>
> zone aisnet.com.hr/IN: not loaded due to errors.
> zone localhost/IN: loaded serial 2
> managed-keys-zone ./IN: loading from master file managed-keys.bind
> failed: file not found
> managed-keys-zone ./IN: loaded serial 0
> named[10797]: running
> //---------------------------------------------
> $TTL 604800
> $ORIGIN aisnet.com.hr
> @ IN SOA ns1.aisnet.com.hr. hostmaster.aisnet.com.hr.(
> 2006020201 ; Serial
> 604800 ; Refresh
> 86400 ; Retry
> 2419200 ; Expire
> 604800); Negative Cache TTL
> ;
>
> aisnet.com.hr 14400 IN NS dns2.aisnet.com.hr.
> aisnet.com.hr 14400 IN NS dns1.aisnet.com.hr.
>
> dns2.aisnet.com.hr 14400 IN A 85.114.42.51
> dns1.aisnet.com.hr 14400 IN A 85.114.42.52
> //--------------------------------------------------------------------------
>
> SOA not at top of zone - how is bind reading this part ?
> The line where SOA is defined should be OK. Do i need to add some
> additional part int db.aisnet.com.hr file ?
>
> Btw. when i run www.intodns.com/aisnet.com.hr i get errors that
> nameservers did not respond. Can this be just because SOA record ?
>
---------------------
server kernel: [599187.896924] type=1400 audit(1326782359.143:613): 
apparmor="DENIED" operation="mknod" parent=10006 
profile="/usr/sbin/named" name="/etc/bind/etc/named.run" pid=10008 
comm="named" requested_mask="c" denied_mask="c" fsuid=116 ouid=116 ? Can 
this block the respond from nameservers ?

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.os.linux.networking

csiph-web