|
|
|
|
||||||
| linux.debian.user debian-user@lists.debian.org. |
![]() |
|
|
LinkBack | Outils de la discussion |
|
|
#1 |
|
Messages: n/a
Hébergeur: |
Hello,
I need setting up nameservers for my own domain. The IPs and domains have been changed for privacy ;-) I have a static IP on an ADSL line (i.e public IP 1.1.1.1). I have a router that has a DMZ set up that is pointing to my deb box (local IP 10.10.10.10) I have a domain (mydomain.com) that I bought and I've set it up to point to NS1.MYDOMAIN.COM at the public IP 1.1.1.1 I want to set up my deb box as a web/ftp/nameserver server with MySQL/PHP on it. So far, I've configured LAMP on it. I'm having problems with BIND (or so I think). I've read all over that "DNS IS A SIMPLE BUT EASILY MISCONFIGURED SYSTEM" I've confirmed that NS1.MYDOMAIN.COM points to 1.1.1.1 as http://ns1.mydomain.com produces my apache page I'm using BIND9. named.conf has this line at the bottom: include "/etc/bind/named.conf.local"; my named.conf.local has this: zone "mydomain.com" { type master; file "/etc/bind/mydomain.db"; }; zone "10.10.10.in-addr.arpa" { type master; file "/etc/bind/10.10.10.rev"; }; my mydomain.db has this: ; BIND data file for mydomain.db ; /var/named/mydomain.db ; $TTL 1h @ SOA ns1.mydomain.com. root.mydomain.com. ( 2007110805; Serial (date + two digit serial) 10800 ; Refresh (3 hours) 3600 ; Retry (1 hour) 86400 ; Expire (1 day) 60 ) ; Default TTL 1 min NS ns1.mydomain.com. MX mail.mydomain.com. A 1.1.1.1 ns1 A 1.1.1.1 mail A 1.1.1.1 www A 1.1.1.1 It has been over 5 days, and www.mydomain.com still has not resolved to 1.1.1.1 What could be the problem? DIG only produces a QUESTION SECTION but no answers,etc: ; <<>> DiG 9.3.4 <<>> mydomain.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 36978 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;mydomain.com. IN A ;; Query time: 1151 msec ;; SERVER: 66.51.205.100#53(66.51.205.100) ;; WHEN: Wed Nov 14 00:49:53 2007 ;; MSG SIZE rcvd: 32 I've also done a zonecheck report, and right away it spits out "Unable to find primary nameserver (SOA)" Please ! Thank you very much! -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org |
|
|
|
#2 |
|
Messages: n/a
Hébergeur: |
On 11/14/2007 02:53 AM, lists@pgrworld.com wrote:
> I need setting up nameservers for my own domain. The IPs and > domains have been changed for privacy ;-) ...which makes it difficult to properly troubleshoot. > $TTL 1h > @ SOA ns1.mydomain.com. root.mydomain.com. ( > 2007110805; Serial (date + two digit serial) > 10800 ; Refresh (3 hours) > 3600 ; Retry (1 hour) > 86400 ; Expire (1 day) > 60 ) ; Default TTL 1 min > NS ns1.mydomain.com. > MX mail.mydomain.com. > A 1.1.1.1 > > ns1 A 1.1.1.1 > mail A 1.1.1.1 > www A 1.1.1.1 > > What could be the problem? If you are going to host authoritative DNS for mydomain.com. on a name server host under the same domain, for example ns1.mydomain.com., then you need to seed the process of finding your authoritative name server via a glue A record at your domain registrar - this A record for ns1.mydomain.com. gets pushed up to the com. TLD servers, so that recursive resolvers around the Internet can find the correct name server to ask, "where is mydomain.com.". -- Kind Regards, Michael Shuler -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org |
|
|
|
#3 |
|
Messages: n/a
Hébergeur: |
Michael Shuler wrote:
> On 11/14/2007 02:53 AM, lists@pgrworld.com wrote: > >> I need setting up nameservers for my own domain. The IPs and >> domains have been changed for privacy ;-) >> > > ..which makes it difficult to properly troubleshoot. > > >> $TTL 1h >> @ SOA ns1.mydomain.com. root.mydomain.com. ( >> 2007110805; Serial (date + two digit serial) >> 10800 ; Refresh (3 hours) >> 3600 ; Retry (1 hour) >> 86400 ; Expire (1 day) >> 60 ) ; Default TTL 1 min >> NS ns1.mydomain.com. >> MX mail.mydomain.com. >> A 1.1.1.1 >> >> ns1 A 1.1.1.1 >> mail A 1.1.1.1 >> www A 1.1.1.1 >> >> What could be the problem? >> > > If you are going to host authoritative DNS for mydomain.com. on a name > server host under the same domain, for example ns1.mydomain.com., then > you need to seed the process of finding your authoritative name server > via a glue A record at your domain registrar - this A record for > ns1.mydomain.com. gets pushed up to the com. TLD servers, so that > recursive resolvers around the Internet can find the correct name server > to ask, "where is mydomain.com.". > > Thanks for the reply! I've investigated this at my domain registrar, and ns1.mydomain.com did get pushed to the .com TLD servers (or root servers) Also, so that it'll be easier to troubleshoot, I will be using my actual info (oh no!) The domain is CD-EXPRESS.COM NS1.CD-EXPRESS.COM already resolves to my static IP of 208.127.75.221 My domain registrar said that I need a primary and secondary server assigned, so I created NS2.CD-EXPRESS.COM to point to the same IP 208.127.75.221 my bind settings is as follows (I've removed comments with a "//"): ********************** NAMED.CONF start ************************************************** ********* include "/etc/bind/named.conf.options"; zone "." { type hint; file "/etc/bind/db.root"; }; zone "localhost" { type master; file "/etc/bind/db.local"; }; zone "127.in-addr.arpa" { type master; file "/etc/bind/db.127"; }; zone "0.in-addr.arpa" { type master; file "/etc/bind/db.0"; }; zone "255.in-addr.arpa" { type master; file "/etc/bind/db.255"; }; include "/etc/bind/named.conf.local"; ********************** NAMED.CONF end ************************************************** ********* **********************NAMED.CONF.OPTIONS start********************************************* ******** options { directory "/var/cache/bind"; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; allow-recursion { localnets; }; }; **********************NAMED.CONF.OPTIONS end ************************************************** *** *****************************NAMED.CONF.LOCAL start ************************************************* // // Do any local configuration here // // Consider adding the 1918 zones here, if they are not used in your // organization //include "/etc/bind/zones.rfc1918"; zone "cd-express.com" { type master; file "/etc/bind/cd-express.db"; }; zone "15.15.15.in-addr.arpa" { type master; file "/etc/bind/15.15.15.rev"; }; *****************************NAMED.CONF.LOCAL end ************************************************* ***************************** CD-EXPRESS.DB start ************************************************* ; BIND data file for cd-express.db ; /var/named/cd-express.db ; $TTL 1h @ SOA ns1.cd-express.com. root.cd-express.com. ( 2007110805; Serial (date + two digit serial) 10800 ; Refresh (3 hours) 3600 ; Retry (1 hour) 86400 ; Expire (1 day) 60 ) ; Default TTL 1 min NS ns1.cd-express.com. MX mail.cd-express.com. A 208.127.75.221 ns1 A 208.127.75.221 mail A 208.127.75.221 www A 208.127.75.221 ***************************** CD-EXPRESS.DB end ************************************************* ***************************** 15.15.15.REV start ************************************************* : BIND reverse data file for 15.15.15.0 : /etc/bind/15.15.15.db : @ IN SOA cd-express.com. root.cd-express.com. ( 2007110801; date creatd 10800; refresh (3 hours) 3600 ; retry (1 hour) 86400; expire (1 day) 60) ; TTL (1 minute) IN NS ns1.cd-express.com. 10 IN PTR www.cd-express.com. 20 IN PTR dns.cd-express.com. 30 IN PTR mail.mycompany.com. ***************************** 15.15.15.REV end ************************************************* *QUESTION: Is the line comment for a bind configuration file, including the includes, a "//" or ";" or ":"?? I've seen the semicolons and colons in some bind configurations as well I'll be happy to get ANY . Thanks a lot! |
|
![]() |
| Outils de la discussion | |
|
|