Hi,<div><br></div><div> I had to change of server because the previous was getting old, and I had to do it very fast because of a mis-communication of my host...</div><div><br></div><div> I'm on Ubuntu 12.04 server, x86_64.</div>
<div><br></div><div><font face="courier new, monospace">root@ns0:/etc/bind# aptitude show bind9</font></div><div><font face="courier new, monospace">Package: bind9</font></div><div><font face="courier new, monospace">New: yes</font></div>
<div><font face="courier new, monospace">State: installed</font></div><div><font face="courier new, monospace">Automatically installed: no</font></div><div><font face="courier new, monospace">Version: 1:9.8.1.dfsg.P1-4ubuntu0.3</font></div>
<div><br></div><div><br></div><div> since then I've some trouble : </div><div><br></div><div>* I've a RNDC error on stopping the service : </div><div><br></div><div><div><font face="courier new, monospace">root@ns0:/etc/bind# service bind9 start</font></div>
<div><font face="courier new, monospace"> * Starting domain name service... bind9</font></div><div><font face="courier new, monospace"> ...done.</font></div><div><font face="courier new, monospace">root@ns0:/etc/bind# service bind9 status</font></div>
<div><font face="courier new, monospace"> * bind9 is running</font></div><div><font face="courier new, monospace">root@ns0:/etc/bind# service bind9 stop</font></div><div><font face="courier new, monospace"> * Stopping domain name service... bind9</font></div>
<div><font face="courier new, monospace">rndc: connect failed: 127.0.0.1#953: connection refused</font></div><div><font face="courier new, monospace">waiting for pid 28560 to die</font></div><div><font face="courier new, monospace"> ...done.</font></div>
</div><div><br></div><div>and it appears that nothing listen on port 953 : </div><div><br></div><div><div><font face="courier new, monospace">root@ns0:/etc/bind# netstat -a | grep 953</font></div><div><span style="font-family:'courier new',monospace">unix 2 [ ACC ] STREAM LISTENING 9853953 private/anvil</span></div>
<div><font face="courier new, monospace">root@ns0:/etc/bind#</font></div></div><div><br></div><div><br></div><div>When I perform a zonecheck on one of my domain, I get an error saying that the server do not listen : </div>
<div><br></div><div><br></div><div>The server do not listen or answer on the port TCP 53: (translated from french)</div><div><ul class="zc-ref"><li><span class="zc-ref">Réf: <i><a href="ftp://ftp.ietf.org/rfc/rfc1035.txt">IETF RFC1035 (p.32 4.2. Transport)</a></i></span><br>
<p>The DNS assumes that messages will be transmitted as
datagrams or in a byte stream carried by a virtual circuit.
While virtual circuits can be used for any DNS activity,
datagrams are preferred for queries due to their lower
overhead and better performance.</p></li></ul></div><div><br></div><div>while the port is open, checked from another machine : </div><div><br></div><div><div><font face="courier new, monospace">thomas@home:/home/special/www$ sudo nmap 88.190.17.222 -sS -p 53</font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">Starting Nmap 5.21 ( <a href="http://nmap.org">http://nmap.org</a> ) at 2012-10-04 14:55 CEST</font></div><div><font face="courier new, monospace">Nmap scan report for <a href="http://ns0.ordiworld.fr">ns0.ordiworld.fr</a> (88.190.17.222)</font></div>
<div><font face="courier new, monospace">Host is up (0.023s latency).</font></div><div><font face="courier new, monospace">PORT STATE SERVICE</font></div><div><font face="courier new, monospace">53/tcp open domain</font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">Nmap done: 1 IP address (1 host up) scanned in 0.18 seconds</font></div><div><font face="courier new, monospace">thomas@home:/home/special/www$</font></div>
<div><font face="courier new, monospace">thomas@home:/home/special/www$</font></div><div><font face="courier new, monospace">thomas@home:/home/special/www$</font></div><div><font face="courier new, monospace">thomas@home:/home/special/www$ telnet <a href="http://ns0.ordiworld.fr">ns0.ordiworld.fr</a> 53</font></div>
<div><font face="courier new, monospace">Trying 88.190.17.222...</font></div><div><font face="courier new, monospace">Connected to <a href="http://ns0.ordiworld.fr">ns0.ordiworld.fr</a>.</font></div><div><font face="courier new, monospace">Escape character is '^]'.</font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">coucou</font></div><div><font face="courier new, monospace">Connection closed by foreign host.</font></div>
</div><div><br></div><div><br></div><div>One time, after adding a log cagtegory, the zonecheck was performed with success, without the port 53 errors, but after a restart, the error appears again !</div><div><br></div><div>
I've 474 domain names... Bind is running with the root account.</div><div><br>I've increased the max open file (soft and hard limit) to 65535, (by editing /etc/security/limits.conf and running ulimit -n 65535 from root prompt and restart bind)</div>
<div><br></div><div>I would appreciate any help, I'm really lost here...</div><div><br></div><div><br></div><div><br></div><div>I've set some logging option but don't see errors in the produced files :</div>
<div>
<br></div><div>##########################################################""</div><div><div><font face="courier new, monospace">//include "/etc/bind/zones.rfc1918";</font></div><div><font face="courier new, monospace">logging {</font></div>
<div><font face="courier new, monospace"> channel security_file {</font></div><div><font face="courier new, monospace"> file "/var/log/named/security.log" versions 3 size 30m;</font></div><div><font face="courier new, monospace"> severity dynamic;</font></div>
<div><font face="courier new, monospace"> print-time yes;</font></div><div><font face="courier new, monospace"> };</font></div><div><font face="courier new, monospace"> category security {</font></div><div><font face="courier new, monospace"> security_file;</font></div>
<div><font face="courier new, monospace"> };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> channel query.log {</font></div>
<div><font face="courier new, monospace"> file "/var/log/named/query.log";</font></div><div><font face="courier new, monospace"> severity debug 3;</font></div><div><font face="courier new, monospace"> };</font></div>
<div><font face="courier new, monospace"> category queries { query.log; };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">channel config.log {</font></div>
<div><font face="courier new, monospace"> file "/var/log/named/config.log";</font></div><div><font face="courier new, monospace"> severity debug 3;</font></div><div><font face="courier new, monospace">};</font></div>
<div><font face="courier new, monospace">category config { config.log; };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br>
</font></div><div><font face="courier new, monospace">channel general.log {</font></div><div><font face="courier new, monospace"> file "/var/log/named/general.log";</font></div><div><font face="courier new, monospace"> severity debug 3;</font></div>
<div><font face="courier new, monospace">};</font></div><div><font face="courier new, monospace">category general { general.log; };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br>
</font></div><div><font face="courier new, monospace">channel default.log {</font></div><div><font face="courier new, monospace"> file "/var/log/named/default.log";</font></div><div><font face="courier new, monospace"> severity debug 3;</font></div>
<div><font face="courier new, monospace">};</font></div><div><font face="courier new, monospace">category default { default.log; };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">channel resolver.log {</font></div>
<div><font face="courier new, monospace"> file "/var/log/named/resolver.log";</font></div><div><font face="courier new, monospace"> severity debug 3;</font></div><div><font face="courier new, monospace">};</font></div>
<div><font face="courier new, monospace">category resolver { resolver.log; };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">channel network.log {</font></div>
<div><font face="courier new, monospace"> file "/var/log/named/network.log";</font></div><div><font face="courier new, monospace"> severity debug 3;</font></div><div><font face="courier new, monospace">};</font></div>
<div><font face="courier new, monospace">category network { network.log; };</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">};</font></div></div><div>##########################################################""</div>
<div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div>/etc/resolv.conf :</div><div><div># Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)</div><div># DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN</div>
<div>nameserver 127.0.0.1</div><div>nameserver 88.191.254.60</div><div>nameserver 88.191.254.70</div></div><div><br></div><div><br></div><div>my /etc/hosts file (for the netstat error) :</div><div><br></div><div><div><font face="courier new, monospace">root@ns0:/etc/bind# cat /etc/hosts</font></div>
<div><font face="courier new, monospace">127.0.0.1 localhost localhost.localdomain</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">88.190.17.222 <a href="http://ns0.ordiworld.fr">ns0.ordiworld.fr</a> ns0 <a href="http://sd-28447.dedibox.fr">sd-28447.dedibox.fr</a> sd-28447</font></div>
<div><font face="courier new, monospace">2a01:e0b:1000:17:be30:5bff:fed0:2bd <a href="http://ns0.ordiworld.fr">ns0.ordiworld.fr</a> ns0 <a href="http://sd-28447.dedibox.fr">sd-28447.dedibox.fr</a> sd-28447</font></div><div>
<font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"># The following lines are desirable for IPv6 capable hosts</font></div><div><font face="courier new, monospace">::1 localhost ip6-localhost ip6-loopback</font></div>
<div><font face="courier new, monospace">fe00::0 ip6-localnet</font></div><div><font face="courier new, monospace">ff00::0 ip6-mcastprefix</font></div><div><font face="courier new, monospace">ff02::1 ip6-allnodes</font></div>
<div><font face="courier new, monospace">ff02::2 ip6-allrouters</font></div><div><font face="courier new, monospace">ff02::3 ip6-allhosts</font></div></div><div><br></div>