<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt'>
<p>Well, that certainly does not include what I told you to add, however it doesnt seem to be "open" to me, so you must have cleaned it up since posting this.</p>
<p>You only have one nameserver? that is not compliant, you require a primary and secondary, how your domain registrar passed that is beyond me. Ohh and they can not be on the same machine.</p>
<p> </p>
<p>~$ host server1.sportshost.co.uk<br />server1.sportshost.co.uk has address 84.92.56.54</p>
<p>Your DNS is working, well, OK, it's kind of working, still lots of failures, including not listening on tcp.</p>
<p> </p>
<p> </p>
<p> </p>
<p>On 07/04/2015 01:37, STEPHEN EYRE wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<table border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top">My named.conf.options is as follows
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374">Options {</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> directory "/var/cache/bind";</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> recursion no;</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> allow transfer { none; };</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> dnssec-validation auto;</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> auth-nxdomain no;</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> listen-on { any; };</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374">};</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374">By the way my A records are still not not showing up on mydns.net.</div>
<div id="yMail_cursorElementTracker_0.6112677834462374"> </div>
<div id="yMail_cursorElementTracker_0.6112677834462374">Thanks<br />
<p><a href="https://overview.mail.yahoo.com/mobile/?.src=Android">Sent from Yahoo Mail on Android</a></p>
<hr />
<table border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top">
<div style="font-family: Roboto, sans-serif; color: #7e7d80;"><strong>From</strong>:"bind-users-request@lists.isc.org" <bind-users-request@lists.isc.org><br /><strong>Date</strong>:Mon, 6 Apr, 2015 at 13:00<br /><strong>Subject</strong>:bind-users Digest, Vol 2084, Issue 1<br /><br /></div>
<div id="msgSandbox_AJcJDNkAAAKOVSJ1SwYOyIKSfXE" class="msgSandbox" style="padding: 1.5em 0.5em 0.5em 1.2em; word-wrap: break-word;">Send bind-users mailing list submissions to<br /> <a>bind-users@lists.isc.org</a><br /><br />To subscribe or unsubscribe via the World Wide Web, visit<br /> <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br />or, via email, send a message with subject or body 'help' to<br /> <a>bind-users-request@lists.isc.org</a><br /><br />You can reach the person managing the list at<br /> <a>bind-users-owner@lists.isc.org</a><br /><br />When replying, please edit your Subject line so it is more specific<br />than "Re: Contents of bind-users digest..."<br /><br /><br />Today's Topics:<br /><br /> 1. Re: bind-users Digest, Vol 2083, Issue 1 (STEPHEN EYRE)<br /> 2. Re: bind-users Digest, Vol 2083, Issue 1 (Reindl Harald)<br /> 3. Re: bind-users Digest, Vol 2083, Issue 1 (Noel Butler)<br /><br /><br />----------------------------------------------------------------------<br /><br />Message: 1<br />Date: Sun, 5 Apr 2015 16:52:07 +0100<br />From: STEPHEN EYRE <<a>sceyre@btinternet.com</a>><br />To: "<a>bind-users@lists.isc.org</a>" <<a>bind-users@lists.isc.org</a>><br />Subject: Re: bind-users Digest, Vol 2083, Issue 1<br />Message-ID:<br /> <<a>1428249127.19697.YahooMailAndroidMobile@web172401.mail.ir2.yahoo.com</a>><br />Content-Type: text/plain; charset="iso-8859-1"<br /><br />The aim is to make it authoritive as well as hosting my web sites.<br /><br />Sent from Yahoo Mail on Android<br /><br />From:"<a>bind-users-request@lists.isc.org</a>" <<a>bind-users-request@lists.isc.org</a>><br />Date:Sun, 5 Apr, 2015 at 13:00<br />Subject:bind-users Digest, Vol 2083, Issue 1<br /><br />Send bind-users mailing list submissions to<br />??? <a>bind-users@lists.isc.org</a><br /><br />To subscribe or unsubscribe via the World Wide Web, visit<br />??? <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br />or, via email, send a message with subject or body 'help' to<br />??? <a>bind-users-request@lists.isc.org</a><br /><br />You can reach the person managing the list at<br />??? <a>bind-users-owner@lists.isc.org</a><br /><br />When replying, please edit your Subject line so it is more specific<br />than "Re: Contents of bind-users digest..."<br /><br /><br />Today's Topics:<br /><br />? 1. Dig, open servers and A records (Stephen Eyre)<br />? 2. Re: Dig, open servers and A records (Steven Carr)<br /><br /><br />----------------------------------------------------------------------<br /><br />Message: 1<br />Date: Sun, 05 Apr 2015 09:32:36 +0100<br />From: Stephen Eyre <<a>sceyre@btinternet.com</a>><br />To: <a>bind-users@lists.isc.org</a><br />Subject: Dig, open servers and A records<br />Message-ID: <<a>5520F324.7050709@btinternet.com</a>><br />Content-Type: text/plain; charset=utf-8; format=flowed<br /><br />Dear All<br /><br />The good news is that I have my server running. The not so good news is <br />that there are a few problems which could be interconnected.<br /><br />My server is called server1.sportshost.co.uk and its ip address is <br />84.92.56.54.<br /><br />Going on to whatsmydns.net I find that sportshost.co.uk returns suitable <br />entries under the NS and SOA section. There are nothing but red crosses <br />under A records section - I was expecting my ip address.<br /><br />Then when I dig a domain name like google.co.uk I get suitable replies <br />but when I dig an ip address like 8.8.8.8 the request gets the reply <br />REFUSED.<br /><br />Further enquiries show that I dont have an open recursive site when the <br />errors above still apply.<br /><br />When I change my /etc/bind/named.conf.local file from 'recursion no;' to <br />'recursion yes;' I get an inverse of the above. I get full replies from <br />all my dig enquiries but I get an open recursive warning - which I <br />obviously dont want.<br /><br />whatsmydns.net replies remain the same.<br /><br />So todays question is - what do I need to do to keep my server closed, <br />get proper dig replies and get my A records showing up on whatsmydns.net?<br /><br />Or is everything working well and its not necessary to have dig <br />providing proper replies?<br /><br />Thanks<br /><br />Stephen Eyre<br /><br /><br />------------------------------<br /><br />Message: 2<br />Date: Sun, 5 Apr 2015 09:57:08 +0100<br />From: Steven Carr <<a>sjcarr@gmail.com</a>><br />Cc: bind-users <<a>bind-users@lists.isc.org</a>><br />Subject: Re: Dig, open servers and A records<br />Message-ID:<br />??? <<a>CALMep05dMFY0a_YBbTuNk3cQigYbJvSY_43W212sug0WGkPMVQ@mail.gmail.com</a>><br />Content-Type: text/plain; charset=UTF-8<br /><br />On 5 April 2015 at 09:32, Stephen Eyre <<a>sceyre@btinternet.com</a>> wrote:<br />> My server is called server1.sportshost.co.uk and its ip address is<br />> 84.92.56.54.<br />><br />> Going on to whatsmydns.net I find that sportshost.co.uk returns suitable<br />> entries under the NS and SOA section. There are nothing but red crosses<br />> under A records section - I was expecting my ip address.<br /><br />Try again, you haven't given things enough time to propagate around<br />the internet, 24-72 hours is still the usual wait time.<br /><br />> So todays question is - what do I need to do to keep my server closed, get<br />> proper dig replies and get my A records showing up on whatsmydns.net?<br /><br />What is the purpose of the server? are you going to be hosting zones<br />that need to be accessible from other clients on the Internet<br />(authoritative) or is it just a DNS server that you can utilize to<br />handle your queries (recursive)? or are you doing both?<br /><br />If you need recursion then you'll need an ACL to say which clients are<br />allowed to perform recursion to prevent it from being an open<br />recursor.<br /><br />Steve<br /><br /><br />------------------------------<br /><br />_______________________________________________<br />bind-users mailing list<br /><a>bind-users@lists.isc.org</a><br /><a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br /><br />End of bind-users Digest, Vol 2083, Issue 1<br />*******************************************<br /><br />-------------- next part --------------<br />An HTML attachment was scrubbed...<br />URL: <<a href="https://lists.isc.org/pipermail/bind-users/attachments/20150405/8beb543f/attachment-0001.html">https://lists.isc.org/pipermail/bind-users/attachments/20150405/8beb543f/attachment-0001.html</a>><br /><br />------------------------------<br /><br />Message: 2<br />Date: Sun, 05 Apr 2015 18:07:59 +0200<br />From: Reindl Harald <<a>h.reindl@thelounge.net</a>><br />To: <a>bind-users@lists.isc.org</a><br />Subject: Re: bind-users Digest, Vol 2083, Issue 1<br />Message-ID: <<a>55215DDF.9070902@thelounge.net</a>><br />Content-Type: text/plain; charset="windows-1252"; Format="flowed"<br /><br /><br /><br />Am 05.04.2015 um 17:52 schrieb STEPHEN EYRE:<br />> The aim is to make it authoritive as well as hosting my web sites<br /><br />but a authoritive nameserver don't need nor should it do recursion for <br />foreign zones, it only should respond for the zones he is authoritative <br />for and so the behavior is correctly, make sure it answers for your <br />zones and the point your domains to your nameservers (at least TWO) and <br />you are done<br /><br />> Message: 1<br />> Date: Sun, 05 Apr 2015 09:32:36 +0100<br />> From: Stephen Eyre <<a>sceyre@btinternet.com</a> <javascript:return>><br />> To: <a>bind-users@lists.isc.org</a> <javascript:return><br />> Subject: Dig, open servers and A records<br />> Message-ID: <<a>5520F324.7050709@btinternet.com</a> <javascript:return>><br />> Content-Type: text/plain; charset=utf-8; format=flowed<br />><br />> Dear All<br />><br />> The good news is that I have my server running. The not so good news is<br />> that there are a few problems which could be interconnected.<br />><br />> My server is called server1.sportshost.co.uk and its ip address is<br />> 84.92.56.54.<br />><br />> Going on to whatsmydns.net I find that sportshost.co.uk returns suitable<br />> entries under the NS and SOA section. There are nothing but red crosses<br />> under A records section - I was expecting my ip address.<br />><br />> Then when I dig a domain name like google.co.uk I get suitable replies<br />> but when I dig an ip address like 8.8.8.8 the request gets the reply<br />> REFUSED.<br />><br />> Further enquiries show that I dont have an open recursive site when the<br />> errors above still apply.<br />><br />> When I change my /etc/bind/named.conf.local file from 'recursion no;' to<br />> 'recursion yes;' I get an inverse of the above. I get full replies from<br />> all my dig enquiries but I get an open recursive warning - which I<br />> obviously dont want.<br />><br />> whatsmydns.net replies remain the same.<br />><br />> So todays question is - what do I need to do to keep my server closed,<br />> get proper dig replies and get my A records showing up on whatsmydns.net?<br />><br />> Or is everything working well and its not necessary to have dig<br />> providing proper replies?<br /><br />-------------- next part --------------<br />A non-text attachment was scrubbed...<br />Name: signature.asc<br />Type: application/pgp-signature<br />Size: 181 bytes<br />Desc: OpenPGP digital signature<br />URL: <<a href="https://lists.isc.org/pipermail/bind-users/attachments/20150405/860cd24d/attachment-0001.bin">https://lists.isc.org/pipermail/bind-users/attachments/20150405/860cd24d/attachment-0001.bin</a>><br /><br />------------------------------<br /><br />Message: 3<br />Date: Mon, 06 Apr 2015 15:19:53 +1000<br />From: Noel Butler <<a>noel.butler@ausics.net</a>><br />To: <a>bind-users@lists.isc.org</a>, <a>sceyre@btinternet.com</a><br />Subject: Re: bind-users Digest, Vol 2083, Issue 1<br />Message-ID: <<a>2f10c0bccb4561a89d384bd5e85fed40@ausics.net</a>><br />Content-Type: text/plain; charset="us-ascii"<br /><br /><br /><br />you need an allow-query and ACL, eg: <br /><br />Assuming for example your LAN ip range is 192.168.0.0/24, then you would<br />use <br /><br />for simplicity, at top of named.conf: <br /><br />acl "trust" { localhost; 192.168.0.0/24; }; <br /><br />then in... <br /><br />options { <br /><br /> .... <br /><br />allow-query { trust; };<br /> allow-query-cache { trust; }; <br /><br />.... <br /><br />}; <br /><br />That should do it, if you need further assistance you'll need to supply<br />a copy of named.conf - in particular the options , ACL's and at least<br />one of your zones, but if your named.conf isnt 5 miles long, just past<br />the whole thing. <br /><br />On 06/04/2015 01:52, STEPHEN EYRE wrote: <br /><br />> The aim is to make it authoritive as well as hosting my web sites.<br />> <br />> Sent from Yahoo Mail on Android [1] <br />> -------------------------<br />> <br />> When I change my /etc/bind/named.conf.local file from 'recursion no;' to <br />> 'recursion yes;' I get an inverse of the above. I get full replies from <br />> all my dig enquiries but I get an open recursive warning - which I <br />> obviously dont want.<br /><br /><br />Links:<br />------<br />[1] <a href="https://overview.mail.yahoo.com/mobile/?.src=Android">https://overview.mail.yahoo.com/mobile/?.src=Android</a><br />-------------- next part --------------<br />An HTML attachment was scrubbed...<br />URL: <<a href="https://lists.isc.org/pipermail/bind-users/attachments/20150406/5b77aae4/attachment-0001.html">https://lists.isc.org/pipermail/bind-users/attachments/20150406/5b77aae4/attachment-0001.html</a>><br /><br />------------------------------<br /><br />_______________________________________________<br />bind-users mailing list<br /><a>bind-users@lists.isc.org</a><br /><a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br /><br />End of bind-users Digest, Vol 2084, Issue 1<br />*******************************************</div>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
</tbody>
</table>
<br />
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">_______________________________________________<br /> Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br /><br /> bind-users mailing list<br /><a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br /><a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></div>
</blockquote>
<p> </p>
</body></html>