The aim is to make it authoritive as well as hosting my web sites. Sent from Yahoo Mail on Android
From:"bind-users-requ...@lists.isc.org" <bind-users-requ...@lists.isc.org> Date:Sun, 5 Apr, 2015 at 13:00 Subject:bind-users Digest, Vol 2083, Issue 1 Send bind-users mailing list submissions to bind-users@lists.isc.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.isc.org/mailman/listinfo/bind-users or, via email, send a message with subject or body 'help' to bind-users-requ...@lists.isc.org You can reach the person managing the list at bind-users-ow...@lists.isc.org When replying, please edit your Subject line so it is more specific than "Re: Contents of bind-users digest..." Today's Topics: 1. Dig, open servers and A records (Stephen Eyre) 2. Re: Dig, open servers and A records (Steven Carr) ---------------------------------------------------------------------- Message: 1 Date: Sun, 05 Apr 2015 09:32:36 +0100 From: Stephen Eyre <sce...@btinternet.com> To: bind-users@lists.isc.org Subject: Dig, open servers and A records Message-ID: <5520f324.7050...@btinternet.com> Content-Type: text/plain; charset=utf-8; format=flowed Dear All The good news is that I have my server running. The not so good news is that there are a few problems which could be interconnected. My server is called server1.sportshost.co.uk and its ip address is 84.92.56.54. Going on to whatsmydns.net I find that sportshost.co.uk returns suitable entries under the NS and SOA section. There are nothing but red crosses under A records section - I was expecting my ip address. Then when I dig a domain name like google.co.uk I get suitable replies but when I dig an ip address like 8.8.8.8 the request gets the reply REFUSED. Further enquiries show that I dont have an open recursive site when the errors above still apply. When I change my /etc/bind/named.conf.local file from 'recursion no;' to 'recursion yes;' I get an inverse of the above. I get full replies from all my dig enquiries but I get an open recursive warning - which I obviously dont want. whatsmydns.net replies remain the same. So todays question is - what do I need to do to keep my server closed, get proper dig replies and get my A records showing up on whatsmydns.net? Or is everything working well and its not necessary to have dig providing proper replies? Thanks Stephen Eyre ------------------------------ Message: 2 Date: Sun, 5 Apr 2015 09:57:08 +0100 From: Steven Carr <sjc...@gmail.com> Cc: bind-users <bind-users@lists.isc.org> Subject: Re: Dig, open servers and A records Message-ID: <calmep05dmfy0a_ybbtunk3cqigybjvsy_43w212sug0wgkp...@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 On 5 April 2015 at 09:32, Stephen Eyre <sce...@btinternet.com> wrote: > My server is called server1.sportshost.co.uk and its ip address is > 84.92.56.54. > > Going on to whatsmydns.net I find that sportshost.co.uk returns suitable > entries under the NS and SOA section. There are nothing but red crosses > under A records section - I was expecting my ip address. Try again, you haven't given things enough time to propagate around the internet, 24-72 hours is still the usual wait time. > So todays question is - what do I need to do to keep my server closed, get > proper dig replies and get my A records showing up on whatsmydns.net? What is the purpose of the server? are you going to be hosting zones that need to be accessible from other clients on the Internet (authoritative) or is it just a DNS server that you can utilize to handle your queries (recursive)? or are you doing both? If you need recursion then you'll need an ACL to say which clients are allowed to perform recursion to prevent it from being an open recursor. Steve ------------------------------ _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users End of bind-users Digest, Vol 2083, Issue 1 *******************************************
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users