Форум системных администраторов

Форум сообщества системных администраторов и просто людей, которым не безразличен их компьютер.
https://sysadmins.ws/

bind99-9.9.3.1 trables

https://sysadmins.ws/viewtopic.php?f=2&t=1742

Страница 1 из 2

bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 14:57
kotig
named.conf
[spoiler]options {
// All file and path names are relative to the chroot directory,
// if any, and should be fully qualified.
directory "/etc/namedb/working";
pid-file "/var/run/named/pid";
dump-file "/var/dump/named_dump.db";
statistics-file "/var/stats/named.stats";
allow-query {any;};
listen-on-v6 { none; };


controls {
inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
};

key "rndc-key" {
algorithm hmac-md5;
secret "HIDDEN";


};


zone "." {
type hint;
file "/named.root";
};


zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};

zone "kotig.kg" {
type master;
file "kotig.kg";
};[/spoiler]
less kotig.kg
[spoiler]$TTL 86400

kotig.kg. IN SOA ns.kotig.kg. admin.kotig.kg.(
2013100601 ; Serial (YYYYDDMM plus 2 digit serial)
86400 ; refresh (1 day)
7200 ; retry (2 hours)
8640000 ; expire (100 days)
86400) ; minimum (1 day)

IN NS ns.kotig.kg.
IN MX 10 mx.kotig.kg.

Localhost IN A 127.0.0.1
ns IN A 91.205.51.XXX
mx IN A 91.205.51.XXX[/spoiler]

nslookup kotig.kg

Server: 91.205.48.4
Address: 91.205.48.4#53

** server can't find kotig.kg.kotig.kg: SERVFAIL
вот такие вот загадки (

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:03
Raven
а где основная А-запись в зоне?!

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:38
kotig
Raven писал(а):а где основная А-запись в зоне?!
Знать бы еще куда писать его )

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:50
kotig
rndc status
rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not synchronized, or
* the key is invalid.
не в этом ли понт????

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:51
Raven
rndc подключиться не может. хочешь подключить? кури сюда

Код: Выделить всё

controls {
 inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
};

key "rndc-key" {
 algorithm hmac-md5;
 secret "HIDDEN";


};
и смотри слушается-ли порт 953. Но это просто утилитка управления. на резолв она никак не повлияет.

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:52
kotig
кого пнуть надо ?

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:54
kotig
date
Mon Jun 10 15:57:02 KGT 2013

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 15:56
kotig
кусочек лога
[spoiler]Jun 10 15:39:23 unknowns named[3373]: lame server resolving 'kotig.kg' (in 'kotig'?): 195.38.160.36#53
Jun 10 15:39:23 unknowns named[3373]: error (host unreachable) resolving 'NS.kg/AAAA/IN': 2001:67c:e0::84#53
Jun 10 15:39:23 unknowns named[3373]: lame server resolving 'kotig.kg.kotig.kg' (in 'kotig.kg'?): 195.38.160.36#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving './NS/IN': 2001:503:ba3e::2:30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ripe.net/ANY/IN': 2001:503:ba3e::2:30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ns3.nic.fr/A/IN': 2001:500:2f::f#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ns3.nic.fr/AAAA/IN': 2001:500:2f::f#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ripe.net/ANY/IN': 2001:dc0:2001:a:4608::59#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ripe.net/ANY/IN': 2001:dc0:1:0:4777::140#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ns3.nic.fr/A/IN': 2001:503:c27::2:30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ns3.nic.fr/AAAA/IN': 2001:503:c27::2:30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/A/IN': 2001:503:c27::2:30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ripe.net/ANY/IN': 2001:67c:e0::5#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ripe.net/ANY/IN': 2001:500:13::c7d4:35#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/AAAA/IN': 2001:500:71::30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/A/IN': 2001:500:71::30#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:19::1#53
Jun 10 15:41:05 unknowns named[3373]: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 2001:500:1a::1#53
Jun 10 15:41:06 unknowns named[3373]: error (host unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:6::79#53
Jun 10 15:41:06 unknowns named[3373]: error (host unreachable) resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2a01:8840:8::1#53
Jun 10 15:41:07 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/AAAA/IN': 2001:500:60::30#53
Jun 10 15:41:07 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/A/IN': 2001:500:60::30#53
Jun 10 15:41:07 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/AAAA/IN': 2001:4f8:0:2::19#53
Jun 10 15:41:07 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/A/IN': 2001:4f8:0:2::19#53
Jun 10 15:41:07 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/AAAA/IN': 2001:500:2c::254#53
Jun 10 15:41:07 unknowns named[3373]: error (host unreachable) resolving 'sns-pb.isc.org/A/IN': 2001:500:2c::254#53
Jun 10 15:41:08 unknowns named[3373]: success resolving 'ns3.nic.fr/AAAA' (in 'nic.fr'?) after reducing the advertised EDNS UDP packet size to 512 octets
Jun 10 15:41:08 unknowns named[3373]: success resolving 'ns3.nic.fr/A' (in 'nic.fr'?) after reducing the advertised EDNS UDP packet size to 512 octets
Jun 10 15:41:08 unknowns named[3373]: success resolving 'ripe.net/ANY' (in 'ripe.net'?) after reducing the advertised EDNS UDP packet size to 512 octets
Jun 10 15:41:08 unknowns named[3373]: success resolving 'sns-pb.isc.org/A' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets
Jun 10 15:41:08 unknowns named[3373]: success resolving 'sns-pb.isc.org/AAAA' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets
Jun 10 15:52:47 unknowns named[3373]: received control channel command 'reload'
Jun 10 15:52:47 unknowns named[3373]: loading configuration from '/etc/namedb/named.conf'
Jun 10 15:52:47 unknowns named[3373]: using default UDP/IPv4 port range: [49152, 65535]
Jun 10 15:52:47 unknowns named[3373]: using default UDP/IPv6 port range: [49152, 65535]
Jun 10 15:52:47 unknowns named[3373]: sizing zone task pool based on 97 zones
Jun 10 15:52:47 unknowns named[3373]: none:0: open: /etc/namedb/rndc.key: permission denied
Jun 10 15:52:47 unknowns named[3373]: none:0: open: /etc/namedb/rndc.key: permission denied
Jun 10 15:52:47 unknowns named[3373]: reloading configuration succeeded
Jun 10 15:52:47 unknowns named[3373]: reloading zones succeeded
Jun 10 15:52:54 unknowns named[3373]: invalid command from 127.0.0.1#29252: bad auth
Jun 10 15:53:47 unknowns named[3373]: invalid command from 127.0.0.1#58428: bad auth[/spoiler]

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 16:03
kotig
Raven писал(а):rndc подключиться не может. хочешь подключить? кури сюда

Код: Выделить всё

controls {
 inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
};

key "rndc-key" {
 algorithm hmac-md5;
 secret "HIDDEN";


};
и смотри слушается-ли порт 953. Но это просто утилитка управления. на резолв она никак не повлияет.
убрал контролс с рндс ключами и netstat -nl | grep 953 ничего не говорит

Re: bind99-9.9.3.1 trables

Добавлено: 10 июн 2013, 16:03
Raven
да забей пока. не в ней трабла.
Часовой пояс: UTC+06:00
Страница 1 из 2

Создано на основе phpBB® Forum Software © phpBB Limited

Русская поддержка phpBB