Need Help With Setting up a Recursive Nameserver

Matus UHLAR - fantomas uhlar at fantomas.sk
Fri Apr 30 14:57:50 UTC 2021


On 30.04.21 17:50, Sainik Biswas via bind-users wrote:
>   I need some help setting up a recursive nameserver for my internal
>network using BIND 9. The recursive name server is not resolving any
>domains.

>Error Log [resolver.log]
>
>2021-04-30T11:58:17.784Z notice: DNS format error from 198.41.0.4#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.788Z notice: DNS format error from 193.0.14.129#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.792Z notice: DNS format error from 192.36.148.17#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.796Z notice: DNS format error from 192.33.4.12#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.800Z notice: DNS format error from 192.58.128.30#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.804Z notice: DNS format error from 202.12.27.33#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.808Z notice: DNS format error from 198.97.190.53#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.808Z notice: DNS format error from 199.7.91.13#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.816Z notice: DNS format error from 199.9.14.201#53
>resolving ./NS for <unknown>: non-improving referral
>2021-04-30T11:58:17.816Z info: resolver priming query complete
>
>My ISP most probably uses some kind of transparent DNS proxy. I have come
>to that conclusion based on running the test at dnsleaktest.com. It does
>not matter which DNS I set in my laptop or desktop, the DNS IP always shows
>up as the ISP's DNS [203.171.240.10, 203.171.240.11]. The only way I could
>bypass this was by using DNSCrypt Proxy. Is it possible that my ISP is
>preventing the root nameservers from resolving correctly which is
>preventing my caching nameserver from working correctly?

It's most probably the reason. Ask your ISP.

> Or maybe I have
>incorrectly configured something?
>
>Can anyone help me figure out what exactly is the problem?

your ISP probably

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
M$ Win's are shit, do not use it !


More information about the bind-users mailing list