Bind An IP To A UID

Jun 22, 2008

This has been troubling me for a long time.. I know you can do this in FreeBSD with ipfw but I'm wanting to do this in linux.

Basicly bind an IP address say eth0:1 to a UID or GID so that this user may only listen on that particular IP, etc.

View 7 Replies


ADVERTISEMENT

Upgrade Bind To Bind-9.4.1-P1

Nov 18, 2007

I upgrade bind with this :

# wget [url]
# tar xvfz bind-9.4.1-P1.tar.gz
# cd bind-9.4.1-P1
# ./configure
# make
# make install

but doesnt work I have always bind version is

PHP Code:

[root@server bind-9.4.1-P1]# named -vBIND 9.2.4 

how can I make upgrade with the correct way?

View 2 Replies View Related

DNS And BIND 9

Jul 23, 2009

i work in a new ISP company, and ive been assigned to the DNS server, and before this i have never even heard of BIND, but now im in need of learning it ....and im only fairly familiar to Linux..so here are me questions:

1. where can i find a beginners guide to DNS and BIND?

2. what distribution is best suited for the server?

3. are there any default templates for the BIND config files that one could start with and modify?

4. how many files are there? i mean every time a read a bit about BIND pops up a new file name.. so how many files are enough?

5. would any1 care to help me out step by step throught my ordeal?

6. are there any training courses that i could take? are there any onlline ones? or videos that i could grab off the net?

7. how many times does a swallow have to flap its wings to maintain airspeed velocity in order to carry a coconut?

View 5 Replies View Related

BIND Or NSD

Apr 12, 2009

which one is better for me?

VPS 512 ram and cpanel/whm centos

BIND or NSD?

and what's different between them?

View 7 Replies View Related

BIND

Mar 3, 2007

I have managed to install BIND 9.4 on my home web server so that i can have my own domain (one that i can manage). I have made a domain with it called h2o-cms.org, the domain will work when i connect to it from my home lan but if i use a cgi proxy to connect it can't be found.

I'm using Windows XP

This is my named.conf

Code:
// Config file for caching only name server
acl "friends" {
localnets;
127.0.0.1;
};
options {
directory "C:
amedetc";
version "SERVFAIL";
allow-transfer { none; };
allow-recursion { "friends";};
// Uncommenting this might help if you have to go through a
// firewall and things are not working out. But you probably
// need to talk to your firewall admin.
query-source port 53;
};
zone "." {
type hint;
file "named.root";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "locals.hosts";
};

zone "h2o-cms.org" {
type master;
file "h2o-cms.org";
};
this is my h2o-cms.org file

Code:
$TTL 600
; h2o-cms.org
@ IN SOA laxlxns01.h2o-cms.org. hostmaster.h2o-cms. (
2005062601 ; serial
12h ; refresh
1h ; retry
2w ; expire
1h ; minimum
)
IN NS laxlxns01.h2o-cms.org.
IN NS laxlxns02.h2o-cms.org.
IN MX 10 mail.h2o-cms.org.
@ IN A 80.46.117.13
; host records
localhost IN A 127.0.0.1
www IN A 80.46.117.13

I have forwarded the port 535 to the server too

View 0 Replies View Related

Bind

Sep 22, 2007

Not sure if this is the right place - sorry if it isn't. Recently, I got really pi**ed off with cPanel - and have decided to try and load my server without it.

I'm using Webmin/Usermin/Virtualmin with Apache, PHP, MySQL, proftpd, and BIND.

But I'm not entirely sure on how to create nameservers on BIND - I've looked all over the internet, but have found nothing helpful.

View 13 Replies View Related

Bind 2 DNS Name To Same IP

Jan 30, 2007

if it is possible to bind 2 NS to the same IP

For example, I previously had n1.abc.com , ns2.abc.com bind to certain IP. Now I registered another domain name, say abcdummy.com at another reseller and was given the option to choose my private dns. But instead of ns1.abcdummy.com and ns2.abcdummy.com, I thought this name doesn't sound that nice to be an NS. So I asked for ns3.abc.com and ns4.abc.com

Which has been registered and propogated successfully. But I want to move these domains on abc.com to abcdummy.com server, as i will not be using my reseller package at abc.com any more

So now, but its a lot work to do if I was to change these domain name NS one by one. So could I instead bind ns1.abc.com and ns2.abc.com to the same IP as ns3.abc.com and ns4.abc.com

View 4 Replies View Related

BIND On XP

Feb 18, 2007

I am trying to use BIND on Windows XP Professional to host a website off my computer using a domain. I have downloaded BIND but now I have no clue what to do. For the name servers of the domain I have put in my IP address.

What do I need to do to get a domain to point towards my computer?

View 7 Replies View Related

BIND Will Not Restart In WHM Or Via SSH

Aug 31, 2006

I get the following message via SSH when i try named restart

named: symbol lookup error: named: undefined symbol: dns_resolver_setudpsize

All my sites are currently down but the server is up and bind wont restart either in WHM or SSH

i am using WHM 10.6.0 cPanel 10.8.0-R8
CentOS 4.3 i686 - WHM X v3.1.0
Linux ***.server.com 2.6.9-11.EL #1 Wed Jun 8 16:59:52 CDT 2005 i686 i686 i386 GNU/Linux

I spoke to live support at nexpoint but they told me to email their dedicated server support but I havent had a reply in the last few hours.

View 5 Replies View Related

Bind Issues

Apr 6, 2009

I am having some trouble with my DNS recently. Here are the errors I am receiving:

06-Apr-2009 19:09:13.921 could not open entropy source /dev/random: file not found
06-Apr-2009 19:09:13.921 ignoring config file logging statement due to -g option
06-Apr-2009 19:09:13.921 couldn't open pid file '/var/run/named/named.pid': Permission denied

View 4 Replies View Related

Bind 9 Vulnerabilities

Jul 29, 2009

[url]

Upgrade if this affects you.

View 13 Replies View Related

BIND 9 Updates

Jul 24, 2008

has anyone successfully updated from bind9.2.x to BIND 9.5.0-P1? Were there any problems regarding settings, zone files, etc etc? Can you explain the process in detail for the update? One of my customers wishing to have this done, is running CentOS, I assume yum would be the best course of actions?

View 14 Replies View Related

Broken BIND

Jul 24, 2008

I ran "yum update" on one of my servers, and it must've updated BIND, because now named doesn't start.

I basically hit all the problems in this thread:
[url]

This is CentOS4 with Plesk.

Even though I don't have that package installed, and tried every suggestion there, it still doesn't start... I mucked with the configs and moved so many files I don't know how to get back to where I started.

Quote:

Jul 24 05:08:06 www named: /etc/named.conf:67: open: /etc/rndc.key: file not found

What's my best bet for fixing this mess? I sent in an e-mail to two "server administration" companies I found in signatures here, hopefully one of them will be available today.

I changed the nameservers on critical domains to a free DNS service to get them back online, but they're acting oddly (like DB timeouts), perhaps because of the lack of a local nameserver to talk to.

But in the meantime is there anything I can do to try to fix this quick?

View 5 Replies View Related

Bind Isn't Working

Apr 26, 2008

bind in my server isn't working and when I restart it on cPanel this is what I get:

Restarting Bind

ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored.
Attempting to restart named Waiting for named to restart.... . . . . . . . . . . finished.

ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored. ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored. named status

ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored. ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored. named has failed, please contact the sysadmin (result was "named is not running"). Apr 26 17:54:09 orion named: ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored. Apr 26 17:54:09 orion named: zone localdomain/IN: loaded serial 42 Apr 26 17:54:09 orion named: zone localhost/IN: loaded serial 42 Apr 26 17:54:09 orion named: zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700 Apr 26 17:54:09 orion named: zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700 Apr 26 17:54:09 orion named: zone 255.in-addr.arpa/IN: loaded serial 42 Apr 26 17:54:09 orion named: zone 0.in-addr.arpa/IN: loaded serial 42 Apr 26 17:54:09 orion named: zone ns1.(domain.com)/IN: loaded serial 2008012001 Apr 26 17:54:09 orion named: zone orion.(domain.com)/IN: loaded serial 2008012001 Apr 26 17:54:09 orion named: zone (domain.com)/IN: loaded serial 2008042601 Apr 26 17:54:09 orion named: zone (domain.net)/IN: loaded (...)

And so on... for a lot of domains configured on this server. I don't think it loads all of them.

Then, right after seeing this problem I tried to connect to SSH while googling the problem and I got this:

Quote:

m-c-b:~ mcb$ ssh -l root (domain.com)
root@(domain.com)'s password:
Last login: Thu Apr 24 19:20:13 2008 from 87-196-13-151.ne
ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored.
ERROR: ld.so: object '/tmp/libno_ex.so.1.0' from /etc/ld.so.preload cannot be preloaded: ignored. ....

View 5 Replies View Related

Downgrade Bind

Jul 16, 2008

Im trying to Downgrade bind to 9.2.4 and im using Centos 5.1

Cant do it for some reason. Just getting error messages all the time.

I followed this tutorial but then found out its centos 4.1 so that was no help.

[url]

View 7 Replies View Related

Named/bind

Jun 6, 2008

since this morning, I am unable to start named/bind.

_could_ it be a hardware problem or it has to be software-related?

View 2 Replies View Related

Bind Taking Up 200+ RAM

May 23, 2008

I installed Direct Admin on my 192mb RAM vps and right now my VPS is at 270mb (I'm going into burst). I found that if I stopped named, it goes down to less than 70. Why is Bind taking up so much RAM?

View 11 Replies View Related

Bind Update

Aug 1, 2008

I have tried to update bind but i have got tons of errors, so I tried to delete it and reinstall it to get the lateste version:

1) yum remove bind (success)

2) yum update (success)

3) yum install bind (fails)

Code:
[root@server /]# yum install bind
Loading "fastestmirror" plugin
Loading mirror speeds from cached hostfile
* base: ftp.free.fr
* updates: centos.crazyfrogs.org
* addons: ftp.free.fr
* extras: ftp.free.fr
Excluding Packages in global exclude list
Finished
Setting up Install Process
Parsing package install arguments
No package bind available.
Nothing to do
bind not avaible ?

another question does yum remove bind removes the zones?

I use CentOs 5
directadmin as CP

View 3 Replies View Related

Weird Bind

Oct 8, 2007

I have a weird problem since the movement of our ip range with one of our servers. Bind doesn`t seem to react on any changes we make.

For example, the server still resolves to the old ip adress while we changed all of those with ipswap.sh (directadmin)
The weird thing is that all zone files are 100% Correct. Ip`s are all changed and no sign of the old ip whatsoever.
Again, the nameserver still resolves to the old ip`s.

Also when i create a new domain, named.conf is changed and the zone file is created sucessfully. Still the nameserver doesn`t seem to add the domain name.

Restarting, reloading and even reinstalling named doesn`t help

View 2 Replies View Related

Bind Not Configured

May 25, 2007

/scripts/fixrndc
[DNSLib]: Attempting to locate /etc/named.conf
[DNSLib]: no bind configuration present
[DNSLib]: Unable to locate Bind configuration file.

yum install bind
Loading "installonlyn" plugin
Setting up Install Process
Setting up repositories
core [1/3]
updates [2/3]
extras [3/3]
Reading repository metadata in from local files
Excluding Packages in global exclude list
Finished
Parsing package install arguments
Nothing to do

Its a cpanel vps, so I don't know why that happened. What to do?

View 3 Replies View Related

Bind On CPanel

May 23, 2007

I added a CNAME record on a domain using CPanel "Edit DNS Zone". It looked like this:

mail 14400 IN CNAME pop.anotherdomain.com

But when i do

host mail.mydomain.com i get

mail.mydomain.com CNAME pop.anotherdomain.com.mydomain.com

How do i make bind CNAME to pop.anotherdomain.com instead of pop.anotherdomain.com.mydomain.com.

View 2 Replies View Related

CPanel BIND

Jun 10, 2007

Haven't delved into cPanel for a while, but had to get a VPS set up for someone but having problems with BIND.

I try to set the nameservers in WHM but when I try to add the 'A' record, I get the following:

"Bind reloading on uk using rndc zone: [domainname.com] Error reloading bind on uk: rndc: connect failed: 127.0.0.1#953: connection refused"

View 5 Replies View Related

Bind Keeps Failing

Oct 22, 2007

For some reason BIND keeps failing on my cPanel server every couple of days. There are no error logs in the /var/logs/messages file concerning the crash but when I manually restart bind then it logs messages just fine and I can see them. Does BIND keep any other error logs?

Today it seemed to coincide with a big movement in system memory, here my munin graph:

[url]

I have ran the “fixeverything” script which attempts to correct any errors in the bind config file but it still crashes. I couldn’t see anything wrong with it ayway.

View 2 Replies View Related

Have I Got BIND Domain Name Server (DNS) Right?

Jul 30, 2007

Ive been learning alot about BIND and DNS, id like someone to check over what ive learn't to make sure my knowledge is correct.

A Zone:

A zone is basically 'similar' to a sub-domain but the domain google.com would not be a sub-domain, so a zone is not a sub-domain. In the domain google.com 'google' would be a deligated zone from the TLD 'com'. In another example: ny.google.com , 'ny' would be a zone for google's 'new york' department, if they had one.

Hosts:

The host name is usually the most left word in a domain or you can look at it as the leaves on an inverted tree in the DNS System. Examples:

www.google.com = 'www' would be the host
mail.sitepoint.com = 'mail' would be the host
ny.google.com = 'ny' would NOT be a host because its a 'zone' and does not offer a 'service' like ftp, mail, www ect. would. Unless 'ny' was intended to be a service then it would be a host, but it would have to become a leaf in the inverted tree, so you wouldn't ba able to create any zones from it like 'mail.ny.google.com' ... if that makes sense.

Nameservers:

If i used BIND on my server to manage my Zones and DNS information (which is pretty much standard), that would be my Nameserver. Its job would be to convert human recognizable names into computer recognizable names/numbers/ip.

My nameserver would only have authority over zones that are not deligated. So an example, 'com' deligate 'mydomainname' to me (mydomainname.com) they have no authority over that zone. So if i set up a nameserver on mydomain.com they have no authority over mydomainname or any zone under that.

Domain Namespace

The Domain Namespace was setup to replace the method used by ARPA (later DARPA) in the 60's in an effort to create a database of hosts that were easy to administer and reduced the time and server load on the old skool HOSTS.TXT method.

A domain namespace is a way to identify the different domains. Im not to good at explaining what i mean but basically ill illustrate this example:

google.com and google.net both have the same names, so the namespace in this example would the the TLD's 'net' and 'com' to seperate them.

Go a bit deeper for example:

cd.music.com and cd.disk.com , both have the same TLD and sub-domain's so the namespace here is the first-level domain 'music' and 'disk'.

Sub-Domains
Sub-Domains are similar to zones, in a way. A domain name: 'google.com' might have the sub-domain 'video.google.com' which links to the video section of google. 'video' is not a deligated zone from 'google' neither is it a host as such, so its a sub-domain.

Im probably slightly confused on some parts, and im open for comments. I dont fully understand alot of it, but what ive learnt so far took a good day to get my head around. If anythings wrong, id like to know.

View 0 Replies View Related

Bind DNS Server (Windows)

Jul 31, 2009

I have a Bind DNS server setup and running on windows. Im trying to set up my domain at namecheap to use my name servers but it keeps telling me that the nameserver isint registered.

I have the nameserver set up as ns1.domain.com and i can see that its listening on port 53.

I did a local test on the server and the DNS is working properly.

View 6 Replies View Related

Bind Exploit Rumor

May 13, 2008

There has been some hacker group out there on the net hacking lots of servers. Some of which I knew the admins/owners and they were not stupid people and kept their server up to date as well as using grsecurity kernels, selinux, assorted firewalls, etc. In other words they done what most of us do trying to keep their server as secure as possible.

But it done them no good as the hackers were able to get root access in minutes on linux and freebsd servers. After looking into it and asking around supposedly these hackers have a 0day remote root exploit for bind.

Anyone heard of this and does it seem plausible?

The bind that comes with cpanel and directadmin is BIND 9.3.3rc2 which is pretty old even compared to default rhel packages which are 9.42 now. Does anyone know why cpanel and da have bind excluded form being updated in yum? And what would be the harm in upgrading? Has anyone here upgraded their bind?

View 14 Replies View Related

DNS Poisoning - Is Your Bind Up To Date

Jul 9, 2008

Vendors form alliance to fix DNS poisoning flaw

An alliance of software makers and network-hardware vendors announced on Tuesday that they had banded together to fix a fundamental flaw in the design of the internet's address system.

The vulnerability in the domain name system (DNS) - the distributed database that matches a host and domain name with the numerical address of a computer server - could give an attacker the ability to replace the addresses of popular websites with that of a malicious server, said Dan Kaminsky, director of penetration testing for security firm IOActive. Kaminsky found the flaw when he was doing non-security research on the domain name system (DNS) more than six months ago.

"It is a fundamental issue affecting the design," Kaminsky said. "Because the system is behaving exactly like it is supposed to behave, the same bug will show up in vendor after vendor after vendor. This one bug affected not just Microsoft ... not just Cisco, but everyone."

On Tuesday, a number of software and network-hardware vendors released patches for their products. On its regularly scheduled patch day, Microsoft released updates for Windows 2000, Windows XP and Windows Server 2003 to mitigate the issue, which the company ranked an important vulnerability, its second highest grade of severity. Internet Software Consortium, the group responsible for the development of the popular Berkeley Internet Name Domain (BIND) server, also released a patch, confirming that its software contained the vulnerability. Both Cisco and Juniper also acknowledged flawed systems.

Vendors have also provided the fix to certain large clients. Yahoo will be upgrading its name servers from BIND 8 to the latest version of BIND 9, the Internet Software Consortium stated during the conference call. Internet service provider Comcast has already patched its servers for the issue, according to internet infrastructure firm Nominum. Finally, the Computer Emergency Response Team (CERT) Coordination Center has contacted some other nation's response groups to inform them of the problem.

For the most part, however, internet service providers and companies each received the fix on Tuesday, said Sandy Wilbourn, vice president of engineering at Nominum. The goal: To have every major service provider and company apply their software patches in 30 days.

For that reason, don't expect immediate action, Wilbourn said.

"For key customers on our network, we have made a special effort to get them an early release to help solve this problem, and a number of them have finished deployment," he said. "But the nature of this patch is that we wanted to get the vendor side covered and then have deployment over the next 30 days. Anyone that is not patched by today or tomorrow is not doing anything wrong."

The domain-name system (DNS) has been a popular way to attack the internet in the past - it's an ill-kept secret that the DNS system is insecure. The way that many software applications, such as browsers, handle DNS requests has opened up users to attack. Microsoft has fixed a few vulnerabilities in the way Windows handles domain names - issues that could have lead to easier eavesdropping or simpler phishing attacks.

More here:[url]

View 6 Replies View Related

Can BIND Query Another Nameserver

Jul 2, 2008

I've got mydomain.com using my own BIND nameserver hosted on a dedicated server.

I need subdomain.mydomain.com to have a dynamic IP. I know many dynamic DNS providers, but they all require you to change the nameservers of your domain to their own nameservers. Unfortunately I cannot do this - I need mydomain.com to keep using my nameservers.

I therefore need a way to get my nameserver to query a dynamic DNS providers' nameserver for subdomain.mydomain.com. Esentially my nameserver would just copy the IP that the other nameserver returns. Can BIND do this, or if not, any other name-server software?

View 2 Replies View Related

Installing BIND On New Server

Feb 16, 2008

trying to install nameserver in cPanel and getting errors about missing dependacies.

when I try and do it manually by running: yum install bind it goes ok for a while then I get the following:

Error: Missing Dependency: e2fsprogs-libs = 1.39-10.el5 is needed by package e2f
sprogs
Error: Unable to satisfy dependencies
Error: Package e2fsprogs needs libblkid.so.1, this is not available.
Error: Package e2fsprogs needs e2fsprogs-libs = 1.39-10.el5, this is not availab
le.
Error: Package elinks needs libcom_err.so.2, this is not available.
Error: Package cadaver needs libcom_err.so.2, this is not available.
Error: Package util-linux needs libuuid.so.1, this is not available.
Error: Package pkinit-nss needs libcom_err.so.2, this is not available.
Error: Package openssl needs libcom_err.so.2, this is not available.
Error: Package nss_ldap needs libcom_err.so.2, this is not available.
Error: Package openssh-server needs libcom_err.so.2, this is not available.
Error: Package fetchmail needs libcom_err.so.2, this is not available.
Error: Package util-linux needs libblkid.so.1, this is not available.
Error: Package cryptsetup-luks needs libuuid.so.1, this is not available.
Error: Package pam_krb5 needs libcom_err.so.2, this is not available.
Error: Package krb5-libs needs libcom_err.so.2, this is not available.
Error: Package parted needs libuuid.so.1, this is not available.
Error: Package openssh needs libcom_err.so.2, this is not available.
Error: Package quota needs libcom_err.so.2, this is not available.
Error: Package readahead needs libext2fs.so.2, this is not available.
Error: Package krb5-workstation needs libcom_err.so.2, this is not available.
Error: Package cyrus-sasl needs libcom_err.so.2, this is not available.
Error: Package mutt needs libcom_err.so.2, this is not available.
Error: Package e2fsprogs needs libe2p.so.2, this is not available.
Error: Package e2fsprogs needs libext2fs.so.2, this is not available.
Error: Package neon needs libcom_err.so.2, this is not available.
Error: Package e2fsprogs needs libuuid.so.1, this is not available.
Error: Package openssh-clients needs libcom_err.so.2, this is not available.
Error: Package krb5-workstation needs libss.so.2, this is not available.
Error: Package quota needs libext2fs.so.2, this is not available.
Error: Package ipsec-tools needs libcom_err.so.2, this is not available.
Error: Package e2fsprogs needs libss.so.2, this is not available.
Error: Package gnupg needs libcom_err.so.2, this is not available.
Error: Package curl needs libcom_err.so.2, this is not available.
Error: Package readahead needs libuuid.so.1, this is not available.
Error: Package e2fsprogs needs libcom_err.so.2, this is not available.
Error: Package readahead needs libblkid.so.1, this is not available.
Error: Package nfs-utils needs libcom_err.so.2, this is not available.
Error: Package readahead needs libcom_err.so.2, this is not available.

I;m using centos 5

View 3 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved