Bind 9 configuration

Spain, Dr. Jeffry A. spainj at
Sun May 20 18:35:43 UTC 2012

> (I hope that it's fine to ask about issues connected with the previous version of bind.)
Bind9 has its own listserv at bind-users at There are many DNS experts available there.

> Could you confirm that my settings are correct?
> I'm using this guide (my configuration scenario is primary master server):
See also the definitive bind9 documentation at This is for the current version 9.9 of bind. See for earlier versions.

> Questions:
> 1. My /etc/hosts doesn't contain anything related to Is this OK?
Probably ok. Your /etc/resolv.conf should contain the addresses of recursive resolvers that can resolve and any other domain name.

> 2. How to configure bind to support IPv6?
You should have a file /etc/named.conf.options. It should contain by default:
options {
        listen-on-v6 { any;     };
Beyond this if your network where your hosts are located supports IPv6 and you have IPv6 Internet connectivity, then add AAAA records to your zone files so that your domain names can be resolved to IPv6 addresses.

> 3. I have in Will it be my email address (e.g. joe at
The domain name doesn't correlate to the mailbox joe at You have specified your mail exchanger as That host needs to know how to deliver messages to the mailbox joe at

> 4. Is it possible (and necessary) to have several ns (and mx) records on the same machine?
Possible and recommended but not necessary. With multiple NS records and thus multiple authoritative DNS servers, you have redundancy in the case of a DNS server failure. Typically you would configure one as a master with one or more slaves, or have a stealth master with two or more slaves. With multiple MX records, each of which should have a different priority, you can specify preferred and backup mail exchangers to mitigate against mail host failures.

> 5. What should I write in /etc/bind/db.<the first octet> file? Could you provide an example?
This is a reverse DNS zone file for purposes of resolving IP addresses to domain names. It must contain an SOA and NS records like your forward zone file and PTR records. For this to work properly, your ISP will need to delegate reverse DNS resolution for your address space to you.

> 6. Is there a need for additional tweaking?
Seems like there is always a need for tweaking. Start by seeing how things are working. Check your log file "cat /var/log/syslog | grep named". Use the "dig" utility to look up domain names on your server, e.g. "dig". See the above-cited Bv9ARM.pdf for more info on dig and other bind utilities. Here's a good book for you to read:

Jeffry A. Spain
Network Administrator
Cincinnati Country Day School

More information about the bind-users mailing list