Re: bind9 and dns forward

From	Michel Verdier <mv524@free.fr>
Newsgroups	linux.debian.user
Subject	Re: bind9 and dns forward
Date	2023-05-23 16:20 +0200
Message-ID	<GyB1L-aU57-3@gated-at.bofh.it> (permalink)
References	(5 earlier) <Gsk3D-6XLA-1@gated-at.bofh.it> <Gt74l-7s1E-15@gated-at.bofh.it> <Gt74l-7s1E-13@gated-at.bofh.it> <GyB1L-aU57-5@gated-at.bofh.it> <GyB1L-aU57-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Le 19 mai 2023 Bonno Bloksma a écrit :

> Been a few busy week, that is why I only respond now, sory.

Same for me :/

> beheerdertio@linbobo:~$ cat /etc/resolv.conf
> domain bobo.xs4all.nl
> search bobo.xs4all.nl
> search tio.nl
> search staf.tio.nl
> search student.tio.nl
> nameserver 127.0.0.1
> nameserver 8.8.8.8

resolv.conf must have only one search entry. And you don't want to
resolv with google directly. So you should have :

domain bobo.xs4all.nl
search bobo.xs4all.nl tio.nl staf.tio.nl student.tio.nl
nameserver 127.0.0.1

> When booting if the internal bind is not up and running yet some services might need a resolver so I have 8.8.8.8 in there as well as a second dns entry.

Ensure this in services ordering (systemd or initd). It's better and
safer. And I think it's better to get an error than a false result from
bind.

> linbobo:~# dig tio.nl NS
>
> ; <<>> DiG 9.16.37-Debian <<>> tio.nl NS
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34517
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

This is the point : your local dns don't find tio.nl NS and then ask
somewhere else. 8.8.8.8 is in resolv.conf so you search tio.nl directly
on it and it gives you your provider name server.

Retry
 dig tio.nl NS
with a clean resolv.conf and also
 ss -nap | grep named

Thread

Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-04-29 09:30 +0200
  Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-05-02 15:00 +0200
    Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-05-06 09:00 +0200
      Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-05-08 13:20 +0200
        Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-05-23 16:20 +0200
          Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-06-01 15:50 +0200
            RE: bind9 and dns forward Tim Woodall <debianuser@woodall.me.uk> - 2023-06-01 20:10 +0200
            Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-06-01 20:10 +0200
              Re: bind9 and dns forward Michel Verdier <mv524@free.fr> - 2023-06-02 00:30 +0200

csiph-web