[CentOS] How to enable bind to listen querys from all my network

Rob Townley rob.townley at gmail.com
Thu Aug 28 21:33:39 UTC 2008


On Thu, Aug 28, 2008 at 8:10 AM, Spook ZA <spookza at gmail.com> wrote:

> Hi Guys.
> I installed BIND 9.3.3rc2 straight off the CentOS 5.1 CDs.
> By default the /var/named/chroot is empty, so all I did was copy the
> cp -R /usr/share/doc/bind-9.3.3/sample/* /var/named/chroot/
> and it inserts a working set of files.
> Editing /var/named/chroot/etc/named.conf shows a sample setup that listens
> on all interfaces
> (which is why I set up the firewall first to block all interfaces) and has
> 3 views (localhost_resolver, internal and external)
> Then it is a simple matter to set up forwarders in the options section for
> caching and off you go.
> Further tweaking should allow you to restrict the interfaces and adding
> zones (master/slave/forward) into the appropriate views
> will allow resolving of internal or domains hosted by the server.
>
> By default there is no "listen-on port" option in the sample file, so it
> listens on the default port (53) on all interfaces.
>
> HTH
> Regards,
>   Andrew.
>

Thanks for the tip ... i knew there had to be an easier way!


>
> On Thu, Aug 28, 2008 at 11:23 AM, Miguel A. Velasco <
> miguel.suscripcion at gmail.com> wrote:
>
>> Hello all,
>>
>> I´ve installed a proxy Squid in my gateway and a Cache DNS Server with
>> bind. The problem is the server is only resolving is own querys but not
>> the client queries from my company.
>> When I do:
>> $service named start
>> I see in /var/log/messages:
>>
>> starting BIND 9.3.4-P1 -u named -t /var/named/chroot
>> found 1 CPU, using 1 worker thread
>> loading configuration from '/etc/named.conf'
>> listening on IPv6 interface lo, ::1#53
>> listening on IPv4 interface lo, 127.0.0.1#53
>> command channel listening on 127.0.0.1#953
>> command channel listening on ::1#953
>> zone 0.in-addr.arpa/IN/localhost_resolver: loaded serial 42
>> zone 0.0.127.in-addr.arpa/IN/localhost_resolver: loaded serial 1997022700
>> zone 255.in-addr.arpa/IN/localhost_resolver: loaded serial 42
>> zone
>> 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN/localhost_resolver:
>>
>> loaded serial 1997022700
>> zone localdomain/IN/localhost_resolver: loaded serial 42
>> zone localhost/IN/localhost_resolver: loaded serial 42
>> running
>>
>> I don´t understand why is only "listening on IPv4 interface lo,
>> 127.0.0.1#53"
>> I have bind-chroot installed with the following options in
>> /etc/named.conf:
>>
>> options {
>>        listen-on port 53 { 127.0.0.1; 10.10.80.0; };
>>        listen-on-v6 port 53 { ::1; };
>>        directory       "/var/named";
>>        dump-file       "/var/named/data/cache_dump.db";
>>        statistics-file "/var/named/data/named_stats.txt";
>>        memstatistics-file "/var/named/data/named_mem_stats.txt";
>>
>>        // Those options should be used carefully because they disable port
>>        // randomization
>>        // query-source    port 53;
>>        // query-source-v6 port 53;
>>
>>        allow-query     { localhost; };
>> };
>> logging {
>>        channel default_debug {
>>                file "data/named.run";
>>                severity dynamic;
>>        };
>> };
>> view localhost_resolver {
>>        match-clients      { localhost; };
>>        match-destinations { localhost; };
>>        recursion yes;
>>        include "/etc/named.rfc1912.zones";
>> };
>>
>> Where 10.10.80.0 is my network range. What may I do my server really
>> listen for all my network? Nowadays it´s listenning just itself ....
>>
>> Thanks very much for your attention.
>> Miguel A. Velasco
>>
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> http://lists.centos.org/mailman/listinfo/centos
>>
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20080828/588dfc1b/attachment.html>


More information about the CentOS mailing list