Portál AbcLinuxu, 10. května 2025 06:10
Aug 16 11:44:43 mm-net named[4003]: Zone "mm-net.cz" (file /etc/bind/named.mm-net.cz): no NS RRs found at zone top Aug 16 11:44:43 mm-net named[4003]: zone: mm-net.cz/IN: non-glue record at bottom of zone: IN.mm-net.cz/MX Aug 16 11:44:43 mm-net named[4003]: master zone "mm-net.cz" (IN) rejected due to errors (serial 2008081600) Aug 16 11:44:43 mm-net named[4003]: ctl_server: bind: /var/run/ndc: Address already in usekonfiguracni soubory jsou nastavene named.conf.options
options {
directory "/var/cache/bind";
// from bind 9:
// [fetch-glue] is obsolete. In BIND 8, fetch-glue yes caused the
// server to attempt to fetch glue resource records it didn't have
// when constructing the additional data section of a response.
// This is now considered a bad idea and BIND 9 never does it.
auth-nxdomain no;
fetch-glue no;
// If there is a firewall between you and nameservers you want
// to talk to, you might need to uncomment the query-source
// directive below. Previous versions of BIND always asked
// questions using port 53, but BIND 8.1 and later use an unprivileged
// port by default.
query-source port 53;
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
212.80.66.7;
};
};
named.mm-net.cz; BIND data file for local loopback interface ; $TTL 86400 @ IN SOA mm-net.cz. root.mm-net.cz. ( 2008081600 ; Serial 10800 ; Refresh 1800 ; Retry 1209600 ; Expire 604800 ) ; Negative Cache TTL IN NS ns.mm-net.cz. IN MX 10 mail.mm-net.cz. ns IN A 82.100.10.215 ; mail IN A 82.100.10.215 ; hobitton IN A 82.100.10.215 ; www IN CNAME hobitton smtp IN CNAME hobittonpomuze nekdo a poradi co je kde spatne?
@ IN NS ns.mm-net.cz.
@ IN MX 10 mail.mm-net.cz.
ns IN A 82.100.10.215 ;
query-source port 53; vzhledem ke zranitelnosti DNS, která se probírá v poslední době, asi nebude úplně dobrý nápad.
ifconfig eth1:2 82.100.10.215 netmask 255.255.255.192 up
ifconfig to může být zmatečné s těmi virtuálními interfacy, lepší je použít ip, který nahrazuje funkčnost ifconfig a route. Asi by to chtělo o tomhle nastudovat něco víc.
Když je v /etc/resolv.conf nastaven nameserver na 127.0.0.0 - funguje ping na doménu obsluhovanou tím bindem? funguje ping na nějaký server v internetu?
mm-net:/etc/bind# cat named.mm-net.cz ; ; BIND data file for local loopback interface ; $TTL 86400 @ IN SOA ns1.mm-net.cz. root.mm-net.cz. ( 2008081600 ; Serial 10800 ; Refresh 1800 ; Retry 1209600 ; Expire 604800 ) ; Negative Cache TTL @ IN NS ns1.mm-net.cz. @ IN NS ns2.mm-net.cz. @ IN MX 10 mail.mm-net.cz. ns1 IN A 82.100.10.215 ns2 IN A 82.100.10.216 mail IN A 192.168.10.1 mm-net.cz. IN A 82.100.10.215 www IN CNAME mm-net.cz. smtp IN CNAME mm-net.cz.v named.conf
mm-net:/etc/bind# cat named.conf
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind/README.Debian for information on the
// structure of BIND configuration files in Debian for BIND versions 8.2.1
// and later, *BEFORE* you customize this configuration file.
//
include "/etc/bind/named.conf.options";
// reduce log verbosity on issues outside our control
logging {
category lame-servers { null; };
category cname { null; };
};
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "/etc/bind/db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};
zone "mm-net.cz" {
type master;
file "/etc/bind/named.mm-net.cz";
};
// add local zone definitions here
include "/etc/bind/named.conf.local";
a v named.conf.optionsmm-net:/etc/bind# cat named.conf.options
options {
directory "/var/cache/bind";
// from bind 9:
// [fetch-glue] is obsolete. In BIND 8, fetch-glue yes caused the
// server to attempt to fetch glue resource records it didn't have
// when constructing the additional data section of a response.
// This is now considered a bad idea and BIND 9 never does it.
auth-nxdomain no;
fetch-glue no;
// If there is a firewall between you and nameservers you want
// to talk to, you might need to uncomment the query-source
// directive below. Previous versions of BIND always asked
// questions using port 53, but BIND 8.1 and later use an unprivileged
// port by default.
query-source port 53;
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
212.80.66.7;
};
};
dale dve sitove karty v serveru jedna do internetu s verejnou adresou a druha pro lokalni sit stim ze poskytuje jak verejny tak neverejny rozsah
echo 1 > /proc/sys/net/ipv4/ip_forward ifconfig eth1 192.168.10.1 netmask 255.255.255.0 up ifconfig eth1:1 82.100.10.193 netmask 255.255.255.192 up ifconfig eth1:2 82.100.10.215 netmask 255.255.255.192 up // prim dns ifconfig eth1:3 82.100.10.216 netmask 255.255.255.192 up // sec dns
mail.mm-net.cz ? Ale to je asi jen překlep.
Pokud ten DNS na vašem serveru bude jen pro vnitřní síť, tak je nejlepší do zónového souboru dát vnitřní adresy - tj. tu 192.168.10.1 místo veřejné.
named.mm-net.cz by měl vypadat nějak takto:
$TTL 86400
@ IN SOA ns1.mm-net.cz. root.mm-net.cz. (
2008081600 ; Serial
10800 ; Refresh
1800 ; Retry
1209600 ; Expire
604800 ) ; Negative Cache TTL
@ IN NS ns1.mm-net.cz.
@ IN NS ns2.mm-net.cz.
@ IN MX 10 mail.mm-net.cz.
ns1 IN A 82.100.10.215
ns2 IN A IPadresaSekundárníhoDNSserveru
mm-net.cz. IN A 82.100.10.215
mail IN CNAME mm-net.cz.
smtp IN CNAME mm-net.cz.
Středníky do zóny nepatří. Určitě budete potřebovat sekundární DNS server (jak je patrné z konfigurace).
Tiskni
Sdílej:
ISSN 1214-1267, (c) 1999-2007 Stickfish s.r.o.