bind-users Digest, Vol 2083, Issue 1

[STEPHEN EYRE]

The aim is to make it authoritive as well as hosting my web sites.

Sent from Yahoo Mail on Android

From:"bind-users-request at lists.isc.org" <bind-users-request at lists.isc.org>
Date:Sun, 5 Apr, 2015 at 13:00
Subject:bind-users Digest, Vol 2083, Issue 1

Send bind-users mailing list submissions to
    bind-users at lists.isc.org

To subscribe or unsubscribe via the World Wide Web, visit
    https://lists.isc.org/mailman/listinfo/bind-users
or, via email, send a message with subject or body 'help' to
    bind-users-request at lists.isc.org

You can reach the person managing the list at
    bind-users-owner at lists.isc.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of bind-users digest..."


Today's Topics:

  1. Dig, open servers and A records (Stephen Eyre)
  2. Re: Dig, open servers and A records (Steven Carr)


----------------------------------------------------------------------

Message: 1
Date: Sun, 05 Apr 2015 09:32:36 +0100
From: Stephen Eyre <sceyre at btinternet.com>
To: bind-users at lists.isc.org
Subject: Dig, open servers and A records
Message-ID: <5520F324.7050709 at btinternet.com>
Content-Type: text/plain; charset=utf-8; format=flowed

Dear All

The good news is that I have my server running. The not so good news is 
that there are a few problems which could be interconnected.

My server is called server1.sportshost.co.uk and its ip address is 
84.92.56.54.

Going on to whatsmydns.net I find that sportshost.co.uk returns suitable 
entries under the NS and SOA section. There are nothing but red crosses 
under A records section - I was expecting my ip address.

Then when I dig a domain name like google.co.uk I get suitable replies 
but when I dig an ip address like 8.8.8.8 the request gets the reply 
REFUSED.

Further enquiries show that I dont have an open recursive site when the 
errors above still apply.

When I change my /etc/bind/named.conf.local file from 'recursion no;' to 
'recursion yes;' I get an inverse of the above. I get full replies from 
all my dig enquiries but I get an open recursive warning - which I 
obviously dont want.

whatsmydns.net replies remain the same.

So todays question is - what do I need to do to keep my server closed, 
get proper dig replies and get my A records showing up on whatsmydns.net?

Or is everything working well and its not necessary to have dig 
providing proper replies?

Thanks

Stephen Eyre


------------------------------

Message: 2
Date: Sun, 5 Apr 2015 09:57:08 +0100
From: Steven Carr <sjcarr at gmail.com>
Cc: bind-users <bind-users at lists.isc.org>
Subject: Re: Dig, open servers and A records
Message-ID:
    <CALMep05dMFY0a_YBbTuNk3cQigYbJvSY_43W212sug0WGkPMVQ at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On 5 April 2015 at 09:32, Stephen Eyre <sceyre at btinternet.com> wrote:
> My server is called server1.sportshost.co.uk and its ip address is
> 84.92.56.54.
>
> Going on to whatsmydns.net I find that sportshost.co.uk returns suitable
> entries under the NS and SOA section. There are nothing but red crosses
> under A records section - I was expecting my ip address.

Try again, you haven't given things enough time to propagate around
the internet, 24-72 hours is still the usual wait time.

> So todays question is - what do I need to do to keep my server closed, get
> proper dig replies and get my A records showing up on whatsmydns.net?

What is the purpose of the server? are you going to be hosting zones
that need to be accessible from other clients on the Internet
(authoritative) or is it just a DNS server that you can utilize to
handle your queries (recursive)? or are you doing both?

If you need recursion then you'll need an ACL to say which clients are
allowed to perform recursion to prevent it from being an open
recursor.

Steve


------------------------------

_______________________________________________
bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

End of bind-users Digest, Vol 2083, Issue 1
*******************************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20150405/8beb543f/attachment.html>