Use externaldns server as slave

mlkoekenberg's picture
Submitted by mlkoekenberg on Fri, 01/22/2010 - 08:13

hello,

I use my virtalmin server as NS0 and an other server with webmin as NS1. This isworking correct. For the registration of.nl domains, one of the dns servers must be located on an othe subnet.

I can user the dns ofmy provider for this. How do I configure this is virtual min. I;cve a list of IP adresse where I can forward a zone.

Right nowI get the error that the external dns server isn't aware of the zone.

Martin

Status: 
Active

Comments

Submitted by andreychek on Fri, 01/22/2010 - 09:47

Howdy -- are you sure your provider's DNS server is setup to act as a slave for your servers?

I'd be a little surprised if so; with most providers I've run into, you have the option of using your own DNS servers, or using your providers DNS servers (and configuring them using their own control panel) -- but not both.

With that in mind -- the error you're getting above is what I'd expect in your case, unfortunately. It means that the slave isn't configured to receive zone information from your server -- and that's something only your provider can change (unless, by chance, they provide a method of doing that via a control panel of some sort).

mlkoekenberg's picture
Submitted by mlkoekenberg on Fri, 01/22/2010 - 10:21

This is possible,mij provide will support this. Here an entry from their FAQ (translated with Google).

What IP addresses do I need to access when I zone transfers TransIP all secondary name servers to use?

If you have your own DNS server as primary and TransIP used as secondary name servers, make sure that our name servers the zone can download your server. Some name server software blocks standard zone transfers (AXFR). If your name server to block it by default, set the following IP addresses access to zone transfers (AXFR) in your name server: 80.69.67.44 (dns-import) 80.69.67.67 (ns0) 80.69.69.69 (ns1) 217.115.204.6 (ns2) These are the three TransIP production name servers. The latter name server is placed in Telecity and operates independently of the TransIP network.

I use ns2 (217.115.204.6) as my third name server.

Submitted by andreychek on Fri, 01/22/2010 - 14:11

In order to allow the zone file transfers they're talking about, you'd need to tell your master DNS server that the other IP's are allowed to transfer the zone files... I believe you can set that up by going into Webmin -> Servers -> BIND DNS Server -> Other DNS Servers, and entering the IP's into there.

Submitted by JamieCameron on Mon, 01/25/2010 - 17:12

I see the issue, and fixed it .. in your /etc/named.conf file, there was a block like :

allow-query { };

this tells BIND to allow querying from nowhere! I removed it and started BIND, and can now do DNS lookups against the primary nameserver for the domain..

mlkoekenberg's picture
Submitted by mlkoekenberg on Mon, 01/25/2010 - 17:21

I keep on learning........

DNS server is now responsive again. Are the changes to bind on da-vrt001 also sent to the slave da-vrt002 (ns1) andns2.transip.nl?

Martin

Submitted by JamieCameron on Mon, 01/25/2010 - 23:22

Do you mean record changes, or the creation of new zones?

For just records, the slave server will regularly transfer the zone from the master to get new records. Also, the master will notify the slave when records change, to trigger a transfer..

mlkoekenberg's picture
Submitted by mlkoekenberg on Tue, 01/26/2010 - 02:43

This is working with my other webmin install. ns2.transip.nl is an external dns. I think that this external dns isn't notified.

Submitted by JamieCameron on Tue, 01/26/2010 - 11:30

Perhaps the master isn't setup to notify that slave..

Can I login to the master system again and take a look?

mlkoekenberg's picture
Submitted by mlkoekenberg on Tue, 01/26/2010 - 15:29

Jamie,

Sure you can login.

See comment #2 for detail of the configuration.

Submitted by JamieCameron on Tue, 01/26/2010 - 16:26

Does the login and password you emailed me a few days back still work? It didn't last time I tried ..

mlkoekenberg's picture
Submitted by mlkoekenberg on Fri, 01/29/2010 - 07:07

Yes that shouldwork. I'ts my personal account.

Martin