Bind9.16 zone SOA record issue.

2021-05-23 Thread Thomas Strike

I've been pounding my head over this issue all day with no results.

I am hosting Bind9.16 on a Ubuntu 20.04 server.

I have several zone records that report the same problem but I also have 
several zoned that are configured with this same template and run okay 
on the server. I've surfed the Internet for any clues and tried 
everything I can think of but cannot get rid of this problem.

I really would appreciate any help I can get.

ZONE FILE:
$ttl 3600
ORIGIN ancienttom.us.
@    IN SOA ancienttom.us. thomas\.strike.sleepyvalley.net. (
    1588097734
    1200
    600
    86400
    3600 )
ancienttom.us.   1H    IN 
NS  ns1.Sleepyvalley.net.
ancienttom.us.   1H    IN 
NS  ns2.Sleepyvalley.net.
ancienttom.us.           IN 
A   51.222.143.198
ns1.ancienttom.us.         IN 
A   51.222.143.198
ns2.ancienttom.us.     IN 
A   51.222.143.198
www.ancienttom.us.       IN 
A   51.222.143.198
ftp.ancienttom.us.          IN 
A   51.222.143.198
mailadmin.ancienttom.us.  IN A   
51.222.143.198
ancienttom.us.   1H    IN MX  10 
mx.mydomain.com.
mail.ancienttom.us.    IN 
A   66.96.163.96
smtp.ancienttom.us.   IN 
A   66.96.163.96


When I run named-checkzone I get 'unknown RR type 'ancienttom.us.'

My named.log shows;
22-May-2021 23:57:05.819 zoneload: error: zone ancienttom.us/IN: has 0 
SOA records
22-May-2021 23:57:05.819 zoneload: error: zone ancienttom.us/IN: has no 
NS records
22-May-2021 23:57:05.819 zoneload: error: zone ancienttom.us/IN: not 
loaded due to errors.



___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


My domain name name not propagating through the Internet.

2018-05-26 Thread Thomas Strike
I have been fighting a problem of setting up a new Bind9.9 primary 
authoritative server on the Internet for over 2 weeks now. My hosted 
secondary server cannot be set up until my primary server comes alive on 
the Internet. I have fought my domain name provider for over 2 weeks 
trying to get my new server propagated throwout the Internet and they 
say that the problem is with my server. This is very perplexing because 
there are at least 4 DNS servers out there that see my server and 
respond to all queries successfully that land on my server but no other 
server can see mine. It's hard to believe that the problem is on my end.


I am here asking for fresh sets of eyes to look at my setup file and the 
domain zone record that is at issue. My domain is sleepyvalley.net and 
my primary dns server is ns1.sleepyvalley.net. Standard A records that 
should resolve are www., ftp., and mail.sleepyvalley.net.


--

_named.conf:_

acl trusted-servers  {
    144.x.x.x.; // ns1.sleepyvalley.net
    8..x.x.x;       // sdns1.ovh.ca
};

options {
    listen-on port 53 { any; };
    listen-on-v6 port 53 { any; };

// I have IPv6 implemented on my server but could it be an IPv6 issue?

    allow-query { any; };

    recursion yes;
    allow-recursion {
        any;
    };
    allow-transfer {
        trusted-servers;
        };

    directory     "/var/named";
    dump-file     "/var/log/named/data/cache_dump.db";
    statistics-file "/var/log/named/data/named_stats.txt";
    memstatistics-file "/var/log/named/data/named_mem_stats.txt";

    notify yes;

// I am not familiar with what dnssec does. Is it necessary for a 
primary DNS server to run properly?


    dnssec-enable yes;
    dnssec-validation yes;
    dnssec-lookaside auto;

// Could this be a security key management issue?

    bindkeys-file "/etc/named.iscdlv.key";
    managed-keys-directory "/var/named/dynamic";

    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};include "/etc/named.logging";

zone "." IN {
    type hint;
    file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

zone "sleepyvalley.net" {
    type master;
    file "/var/named/sleepyvalley.net.hosts";
    allow-transfer { trusted-servers; };
    };
key rndc-key {
    algorithm hmac-md5;
    secret "";
    };
controls {
    inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { rndc-key; };
    };
--

_sleepyvalley.net.hosts:_

_/__/ I am a little confused about the Time-To-Live in this record.
_

_// Which of these 2 ttls do resolvers use to cache their answers for?_

$ttl 38400
sleepyvalley.net.    IN    SOA    ns1.sleepyvalley.net. 
administrator.sleepyvalley.net. (

            1526060969
            1H
            3600
            5M
            300 )    // short 5 min. ttl for testing.
sleepyvalley.net.    IN    A    144.x.x.x.x
mail.sleepyvalley.net.    IN    MX    10 mail.sleepyvalley.net.
mail.sleepyvalley.net.    IN    A    144.x.x.x.x
www.sleepyvalley.net. IN    A    144.x.x.x.x
ftp.sleepyvalley.net. IN    A    144.x.x.x.x
ns1.sleepyvalley.net.    IN    A    144.x.x.x.x
sleepyvalley.net.        IN    NS    ns1.sleepyvalley.net. // Primary 
DNS service
sleepyvalley.net.        IN    NS    sdns1.ovh.ca.            // 
Secondary externally hosted DNS service.



Any insights would be gratefully appreciated. Thanks in advance.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


SRV record not working

2018-08-17 Thread Thomas Strike
I have created a SRV record for a new subdomain A record. I set nslookup 
to use my DNS server directly and when I query for the A record it 
returns it. When I set type=SRV and ask for the srv record nothing is 
returned.


My SRV record: _minecraft._tcp.skyblock.mc-game.us.    IN SRV    0 5 
25567 skyblock.mc-game.us.


I need a 2nd pair of eyes on this one.

Thanks, Tom Strike

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


SRV record not working

2018-08-17 Thread Thomas Strike
Thanks all for your quick response. I didn't need a 2nd pair of eyes, I 
needed a 2nd brain. I didn't think that I had to use the fully qualified 
domain name and was just using the subdomain.domain.name for the 
queries. What can I say, I'm old and going senile. Your responses showed 
me the error of my ways. My record was working, I wasn't.


Thanks again everyone.

p.s.
I know that most of you hate nslookup but I have been using it since the 
90's and it's my go-to utility. I get the same responses whether I use 
Dig or nslookup. If nslookup doesn't return what I am looking for, I do 
use Dig also.



;I have created a SRV record for a new subdomain A record. I set 
;nslookup to use my DNS server directly and when I query for the A 
;record it returns it. When I set type=SRV and ask for the srv record 
;nothing is returned.


;My SRV record: _minecraft._tcp.skyblock.mc-game.us.    IN SRV    0 5 
;25567 skyblock.mc-game.us.


;I need a 2nd pair of eyes on this one.

;Thanks, Tom Strike

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users