Hi all,
I was trying to get Bind which I host on the VPS to act as a recursive dns server for another vps I have. I think during this process i might have messed with something and now Bind just isnt playing right.
I have ns1.foo.com and ns2.foo.com on 2 different ip's on the machine.
Either ns1 doesnt respond at all or when it does it takes as much as 11 seconds according to mxtoolbox.
I "think" I might have played with named.conf.options? I did a bunch of reading up and I think the below is the default state for webmin which it is currently at? Could the below be the cause of my problems?
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
Thanks in advance
Your BIND config file looks good. Mine additionally has the directive
dnssec-validation auto;
but I don't think that is related to your problem.You might want to make sure BIND is listening on all required IP addresses:
netstat -upln | grep 53
To do more tests, I'd need to know the actual domain/hostnames and IP addresses involved.
Thanks for getting back to me,
Is the dns-sec validation setting only for recursive nameservers? As mine isnt open to the public, only used to server the domains i host, do you recommend i still add that setting?
I am still having issues with one of the name servers not responding though. But I am beginning to think it might be mxtoolbox that is the problem.
When i check http://mxtoolbox.com on my domain adhan.org ns1 responds but ns2 does not (response time 4+seconds)
When i check http://www.intodns.com/adhan.org on my domain adhan.org it shows both as responding?
So still not sure what is going on.
Yeah your nameservers seem to be resolving your domains properly when I run a DNS test from my own system.
Outside of what mxtoolbox says, is it working okay for you?
-Eric