It has been a long time since I setup named, and I need some help as I'm just not getting it this time around. I'm running named on CentOS under Chroot
IP Space is; 216.201.80.96/28
Gateway is 216.201.80.97
Netmask is 255.255.255.240
Useable IP Space is 216.201.80.100 - 110
named.conf
---
key "rndckey" {
algorithm hmac-md5;
// secret is xx'ed out for this posting
secret "xxxxxxxxxxxxxx";
};
zone "cheapdatamining.com" IN {
type master;
file "data/cheapdatamining.com.zone";
allow-update { none; };
};
cheapdatamining.com.zone
--------------------------
$TTL 38400
@ IN SOA ns1.cheapdatamining.com. admin.cheapdatamining.com (
2008090335 ; Serial
10800 ; Refresh after 3 hours
3600 ; Retry after 1 hour
604800 ; Expire after 1 week
86400 ) ; Minimum TTL 1 day
cheapdatamining.com.INNS ns1.cheapdatamining.com.
cheapdatamining.com.INNSns2.cheapdatamining.com.
ns1.cheapdatamining.com.IN A 216.201.80.101
ns2.cheapdatamining.com. IN A 216.201.80.102
resolv.conf on server.
--------------
search cheapdatamining.com
nameserver 216.201.80.101
nameserver 216.201.80.102
Got the domain sitting at godaddy with ns1 and ns2 pointing to 216.201.80.101/102
Everything looks good as far as I can see, local nslookup on the loopback is fine, and iptables are good.
I see some errors about lame servers in messages log,and i noticed that look like adress of isp surfer domain beacuse i noticed domain of my isp listed also as lame name server.Here is example:
Nov 24 03:46:55 available9 named[7562]: lame server resolving '247.100.51.72.in-addr.arpa' (in '100.51.72.in-addr.arpa'?): 205.214.192.202#53 Nov 24 03:46:55 available9 named[7562]: lame server resolving '247.100.51.72.in-addr.arpa' (in '100.51.72.in-addr.arpa'?): 205.214.192.201#53 Nov 24 03:46:56 available9 named[7562]: lame server resolving '247.100.51.72.in-addr.arpa' (in '100.51.72.in-addr.arpa'?): 205.214.192.202#53 Nov 24 03:46:56 available9 named[7562]: lame server resolving '247.100.51.72.in-addr.arpa' (in '100.51.72.in-addr.arpa'?): 205.214.192.201#53 Nov 24 07:19:51 available9 named[7562]: FORMERR resolving 'ducksimilar.com/NS/IN': 203.93.208.87#53 Nov 24 07:19:51 available9 named[7562]: FORMERR resolving 'ducksimilar.com/NS/IN': 91.208.228.150#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host1.experienceexcept.com/AAAA/IN': 203.93.208.87#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host2.experienceexcept.com/AAAA/IN': 203.93.208.87#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host1.experienceexcept.com/AAAA/IN': 91.208.228.150#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host2.experienceexcept.com/AAAA/IN': 91.208.228.150#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host1.experienceexcept.com/AAAA/IN': 203.93.208.87#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host2.experienceexcept.com/AAAA/IN': 203.93.208.87#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host1.experienceexcept.com/AAAA/IN': 91.208.228.150#53 Nov 24 07:19:52 available9 named[7562]: FORMERR resolving 'host2.experienceexcept.com/AAAA/IN': 91.208.228.150#53
i have adidcated server any i get anew one and my site is rock2host.com on the domain name i make the ns1 - ns2-ns3-ns4 of ips of the new server but the problem that to this time there is no any account on my server is working as i have adns error but i do not what is the problem i made that
DNS Functions Adding an A entry for your hostname Bind reloading on server using rndc zone: [rock2host.com] Error reloading bind on server: rndc: get config key list: not found
DNS Functions Cleanup Nameserver Config File Fatal! named.conf fails named-checkconf, please repair named.conf and try again
I am trying to configure chroot for my Apache 2.2.8 + PHP 5.2.8 + MySQL 5.0.51 + CentOS 5.1 using the article at: [url]
I have moved most of the files that are required by Apache to run.
I want to move PHP, MySQL also into chroot jail along with Apache.
How can I know the list of files that are needed by my Apache? It is asking for some of the files in the /usr/bin, /lib, /usr/local/lib, /usr/lib folders.
Somehow, I moved most of the files that are required by Apache to the chroot jail and finally I got httpd: bad user name daemon error.
And in CentOS, I don't have the file /etc/passwords and the command pwd_mkdb.
I'm using Plesk on my server and its a pain in the @** to create FTP users. So I found this article on adding chrooted FTP users. I successfully added a user, but would like to change the path now, how can I do this?
I have customers that want the git program to be able to pull/push their github repos. I've copied all of the files in the git rpm into the site's chroot but whenever they try to pull down their repo via ssl they get this message:
error: while accessing https://github.com/USERNAME/PROJECT.git/info/refs
fatal: HTTP request failed
We have gotten ssh to work with git but the ssl issue still isn't working.
I've a problem with the chroot directories under /var/www/vhosts/domainxy.com. The options I've configured is "Access to the server over SSH -> Forbidden", After creating a webspace there are no chroot directories. But if I change the system user username under hosting settings, the directories will be created. But I don't want this, because the option I choosed is "Forbidden" and my customers are irritated about this directories. Can I prevent this behabiour?
After update of some system commands, there is now difference between the system-wide command and the equivalent that is located in the chroot template directory (and the command that is in the domain's bin dir).
Is there a command/utility that can update the commands (and all libraries that they depend on), that we have in our chroot template directory /var/www/vhosts/chroot?
I am testing out Plesk control panel 12 - looks promising, but the moment I hit chroot-ed environment, many things go wrong.
Set up:
Virutal server, running linux (64 bit Ubuntu 14.04 Server LTS); Plesk Control Panel 12.0.18, Update #14; Currently running on a trial license; Brand new installation on a dedicated server;
I have two disks, one is for system stuff, plus plesk; second disk is supposed to be dedicated to /var and /home
(to save place, I've removed the regular stuff that is everywhere and makes not difference for this case ... I think)
The plesk installation went just fine; update ran fine; I can register customers, their websites run fine ... as long as they get no shell at all, or regular shell to the server.
BUT: we need to jail all our customers under chroot. If that is not possible, we can't use Plesk.
I created a Service plan cloned form the Default domain plan and changed only to give the users ssh access to the server with a chroot env.
When I try to register a new client with this new service plan, it fails with lots of error messages (one per directory it tries to make), like this:
chrootmng: cannot set permissions for "/var/www/vhosts/demowh1.blah.blah/lib":Too many levels of symbolic links ... Dropping the GUI and xperimenting in a shell, as root: If I run: root@testthing:/usr/local/psa/admin/sbin# ./chrootmng --create --source=/var/www/vhosts/chroot/ --target=/var/www/vhosts/demowh1.blah.blah open_basedir_with_nofollow: opeat failed: `var', Too many levels of symbolic links
As my clients' needs expand, they're asking for chroot ssh/sftp setup. I'm currently on a dedicated Linux setup but don't really have the time to set up a whole new box with full virtualization or investigate a full chroot solution (baby on the way), and to be honest it would be less hassle to move to a new provider than worry about down time with sites.
What I'm looking for:
- linux hosting - hosting for 30+ accounts, some with several domains - at least 6 IP addresses for SSL certs - each account in a full chroot environment (ssh/sftp/ftp) so they can't poke around each others' files, or each account set up in a virtual machine setup (ie: openvz) - maildir - spamassassin - php 5, mysql, perl 5.8.8 - suexec apache would be nice
Now we host about 100,000 domains and they are all using the same DNS servers (cPanel cluster system)
So now I checked our /etc/named.conf files.. and these are HUUUGE.. If you try to start/restart named service it takes 5 minutes to load all zones. It is also taking about 30% CPU and 35% of ram when running even on dual core server..
Any ideas how could we optimise named configuration ? Maybe it is something like mod_vhost_alias for Apache just for bind service?
Code: root@saturn [~]# service named start Starting named: Error in named configuration: /etc/named.conf:33: expected IP address near ';' [FAILED] And when I look for the problem:
Code: root@saturn [~]# grep named /var/log/messages | tail -10 Apr 1 17:10:16 saturn named: failed Apr 1 17:10:16 saturn named: /etc/named.conf:33: expected IP address near ';' Apr 1 17:14:27 saturn named: failed Apr 1 17:14:28 saturn named: failed Apr 1 17:14:28 saturn named: /etc/named.conf:33: expected IP address near ';' Apr 1 17:22:51 saturn named: failed Apr 1 17:22:51 saturn named: failed Apr 1 17:22:51 saturn named: /etc/named.conf:33: expected IP address near ';' Apr 1 17:28:15 saturn named: failed Apr 1 17:28:15 saturn named: /etc/named.conf:33: expected IP address near ';'
[root@server etc]# service named restart Stopping named: [FAILED] Starting named: Error in named configuration: zone localdomain/IN: loaded serial 42 zone localhost/IN: loaded serial 42 zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700 zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700 zone 255.in-addr.arpa/IN: loaded serial 42 zone 0.in-addr.arpa/IN: loaded serial 42 zone server.mojaty4host.com/IN: loaded serial 2007070601 zone agr7.org/IN: loaded serial 2007070701 zone ahha1.com/IN: loaded serial 2007070701 zone i-artt.com/IN: loaded serial 2007070701 zone egyeye.com/IN: loaded serial 2007070701 zone mojaty.net/IN: loaded serial 2007070701 zone mgirlseduepmatir.com/IN: loaded serial 2007070701 zone mojaty.com/IN: loaded serial 2007070701 zone mojaty4host.com/IN: loaded serial 2007072800 zone omrnajd.com/IN: loaded serial 2007070701 zone sakervb.net/IN: loaded serial 2007070701 zone 5thdth.com/IN: loaded serial 2007070701 zone x454x.com/IN: loaded serial 2007070701 zone z5555z.com/IN: loaded serial 2007070701 zone domains.mojaty4host.com/IN: loaded serial 2007070801 zone server.mojaty4host.com.zz/IN: loaded serial 2007070801 zone voodafone.org/IN: loaded serial 2007071001 zone njoomcam.com/IN: loaded serial 2007071201 zone cokedown4host.com/IN: loaded serial 2007071301 zone q84cam.com/IN: loaded serial 2007071501 zone golden4web.com/IN: loaded serial 2007071501 zone tsmymat.com/IN: loaded serial 2007071601 zone chat.mojaty4host.com/IN: loaded serial 2007072501 zone reemando.com/IN: loaded serial 2007071701 zone khaleejstudent.com/IN: loaded serial 2007071701 zone amwaj3.com/IN: loaded serial 2007071701 zone academy-love.com/IN: loaded serial 2007071801 zone alrsamhost.net/IN: loaded serial 2007071801 zone new-lock.com/IN: loaded serial 2007071801 zone yutmah.com/IN: loaded serial 2007071801 zone ksa-stars.com/IN: loaded serial 2007071801 zone gold4shop.com/IN: loaded serial 2007071901 zone xhamsx.com/IN: loaded serial 2007071901 zone ithadyfans.com/IN: loaded serial 2007071901 zone banat-alriffa3.com/IN: loaded serial 2007071901 zone kingawy.net/IN: loaded serial 2007072201 zone ateaf-host.com/IN: loaded serial 2007072401 zone ns1.dr-nokia4host.com/IN: loaded serial 2007072301 zone ns2.dr-nokia4host.com/IN: loaded serial 2007072301 zone dr-nokia.org/IN: loaded serial 2007072501 zone k0s0a.com/IN: loaded serial 2007072701 zone hiarab4ever.net/IN: loaded serial 2007072801 zone ayam7.com/IN: loaded serial 2007072901 zone gulf-pixel.com/IN: loaded serial 2007080900 zone sa-club.com/IN: loaded serial 2007073101 zone sharjah1.org/IN: loaded serial 2007080201 zone al-doseri.net/IN: loaded serial 2007080301 zone alnouami.com/IN: loaded serial 2007080301 zone sharjah1.com/IN: loaded serial 2007080301 zone shababz.com/IN: loaded serial 2007080301 zone ahat-naif.com/IN: loaded serial 2007080501 zone al5yaal.net/IN: loaded serial 2007080508 zone cssarabia.com/IN: loaded serial 2007080501 zone hashlangroup.com/IN: loaded serial 2007080501 zone hot-w-groub.com/IN: loaded serial 2007080501 zone sa1tan.com/IN: loaded serial 2007080502 zone takinty.com/IN: loaded serial 2007080501 zone uaeksa.com/IN: loaded serial 2007080501 zone web2.mojaty4host.com/IN: loaded serial 2007080501 zone web3.mojaty4host.com/IN: loaded serial 2007080501 zone web4.mojaty4host.com/IN: loaded serial 2007080501 zone llwowll.com/IN: loaded serial 2007080601 zone ea4net.com/IN: loaded serial 2007080901 zone backup.com/IN: loaded serial 2007080901 zone 2qq7.com/IN: loaded serial 2007080901 zone 3kalam.net/IN: loaded serial 2007080901 zone 7laksa.net/IN: loaded serial 2007080901 zone 9habab.com/IN: loaded serial 2007080901 zone al-hidyaway.com/IN: loaded serial 2007080901 zone alkharjxp.com/IN: loaded serial 2007080901 zone alraass.com/IN: loaded serial 2007080901 zone alslbokhi.com/IN: loaded serial 2007080901 zone anamluae.com/IN: loaded serial 2007080901 zone b3z3.com/IN: loaded serial 2007080901 zone r3boob.net/IN: loaded serial 2007080901 zone banatcrazy.com/IN: loaded serial 2007080901 zone d3eenn.com/IN: loaded serial 2007080901 dns_master_load: /var/named/domoo3-7a2era.com.db:7: unexpected end of line dns_master_load: /var/named/domoo3-7a2era.com.db:6: unexpected end of input dns_master_load: /var/named/domoo3-7a2era.com.db:9: unexpected end of line dns_master_load: /var/named/domoo3-7a2era.com.db:8: unexpected end of input dns_master_load: /var/named/domoo3-7a2era.com.db:10: isc_lex_gettoken() failed: unbalanced parentheses dns_master_load: /var/named/domoo3-7a2era.com.db:10: unbalanced parentheses zone domoo3-7a2era.com/IN: loading master file /var/named/domoo3-7a2era.com.db: unexpected end of input _default/domoo3-7a2era.com/IN: unexpected end of input zone emprie-romance.com/IN: loaded serial 2007080901 zone essa-alharthy.com/IN: loaded serial 2007080901 zone fnon2.com/IN: loaded serial 2007080901 zone gahrr.com/IN: loaded serial 2007080901 zone hamsat14.com/IN: loaded serial 2007080901 zone hilali-fans.net/IN: loaded serial 2007080901 zone imam-shafie.com/IN: loaded serial 2007080901 zone jameiah.com/IN: loaded serial 2007080901 zone juvepersempre.com/IN: loaded serial 2007080901 zone l1n1.net/IN: loaded serial 2007080901 zone mjnonha.com/IN: loaded serial 2007080901 zone m-al7lween.com/IN: loaded serial 2007080901 zone qalak.com/IN: loaded serial 2007080901 zone qloob30.com/IN: loaded serial 2007080901 zone quraishat.com/IN: loaded serial 2007080901 zone raayse.com/IN: loaded serial 2007080901 zone romance-empire.com/IN: loaded serial 2007080901 zone roo7oman.com/IN: loaded serial 2007080901 zone rooo3h.net/IN: loaded serial 2007080901 zone roz-nada.com/IN: loaded serial 2007080901 zone seafx.com/IN: loaded serial 2007080901 zone shaagran.net/IN: loaded serial 2007080901 zone shwg.net/IN: loaded serial 2007080901 zone sqalb.com/IN: loaded serial 2007080901 zone stars6.com/IN: loaded serial 2007080901 zone v1111v.com/IN: loaded serial 2007080901 zone w998w.com/IN: loaded serial 2007080901 zone zkirt.com/IN: loaded serial 2007080901 zone a88888a.mojaty4host.com/IN: loaded serial 2007081001 zone acefhost.com/IN: loaded serial 2007081001 zone trtshly.com/IN: loaded serial 2007081001 zone n1n9.com/IN: loaded serial 2007062602 zone ya-gro7i.com/IN: loaded serial 2007081003 zone q-almjroh.com/IN: loaded serial 2007081001 zone u88p.com/IN: loaded serial 2007081001 zone dnadesh.net/IN: loaded serial 2007081001 zone 3atr.net/IN: loaded serial 2007081101 zone acefalmhrh.biz/IN: loaded serial 2007081101 zone al-trf.net/IN: loaded serial 2007081101 zone fn-fn.com/IN: loaded serial 2007081101 zone dl8l.com/IN: loaded serial 2007081101 zone sport-fifa.com/IN: loaded serial 2007081101 zone laamst.com/IN: loaded serial 2007081101 zone 3malka.com/IN: loaded serial 2007081101 zone acefalmhrh.net/IN: loaded serial 2007081101 zone aryweb.com/IN: loaded serial 2007081101 zone b77w.com/IN: loaded serial 2007081101 zone 500100100.net/IN: loaded serial 2007081101 zone soly-vb.com/IN: loaded serial 2007081101 zone rap-boyz.net/IN: loaded serial 2007081101 zone 3rb-islam.com/IN: loaded serial 2007081101 zone roz-vip.com/IN: loaded serial 2007081101 zone tknlujia-serv.com/IN: loaded serial 2007081101 zone gr7gr7.com/IN: loaded serial 2007081101 zone h-bnat.com/IN: loaded serial 2007081101 zone 2wgat.com/IN: loaded serial 2007081101 zone al5aleej.net/IN: loaded serial 2007081101 zone ala7asees.com/IN: loaded serial 2007081101 zone k7chat.com/IN: loaded serial 2007081101 zone 3albaal.com/IN: loaded serial 2007081101 zone alyakota.com/IN: loaded serial 2007081101 zone lootss.net/IN: loaded serial 2007081101 zone acef-des.com/IN: loaded serial 2007081101 zone almosabqat.com/IN: loaded serial 2007081101 zone hacker4ever.net/IN: loaded serial 2007081101 zone muza1.com/IN: loaded serial 2007081101 [FAILED] [root@server etc]#
What is the solution to this problem
Tried where many do not benefit you to contact technical support cpanel
Well the last week my server has experimenting a big load on some hours of the day and every deay ....
all looks goods , few TIME_WAIT packages , few conections per ip , few process of httpd ....
when I check with a: tail -f /var/log/messages appears a lot of this lines
Aug 29 17:28:49 server kernel: Firewall: *UDP_IN Blocked* IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:11:2f:87:27:83:08:00 SRC=190.8.82.204 DST=255.255.255.255 LEN=75 TOS=0x00 PREC=0x00 TTL=128 ID=27592 PROTO=UDP SPT=8782 DPT=9777 LEN=55 Aug 29 17:28:54 server kernel: printk: 33 messages suppressed. Aug 29 17:28:55 server kernel: Neighbour table overflow. Aug 29 17:28:58 server last message repeated 3 times Aug 29 17:29:23 server named[1949]: client 209.244.7.40#5302: error sending response: not enough free resources Aug 29 17:29:27 server last message repeated 2 times Aug 29 17:29:24 server kernel: Neighbour table overflow. Aug 29 17:29:29 server named[1949]: client 209.244.7.40#5302: error sending response: not enough free resources Aug 29 17:29:31 server named[1949]: client 209.244.7.40#5302: error sending response: not enough free resources Aug 29 17:29:34 server kernel: Neighbour table overflow. Aug 29 17:29:35 server last message repeated 3 times Aug 29 17:29:35 server named[1949]: client 200.225.157.203#32841: error sending response: not enough free resources Aug 29 17:29:35 server kernel: Neighbour table overflow. Aug 29 17:29:35 server named[1949]: client 200.225.157.203#32841: error sending response: not enough free resources Aug 29 17:29:36 server kernel: Neighbour table overflow. Aug 29 17:29:36 server named[1949]: client 200.225.157.203#32841: error sending response: not enough free resources Aug 29 17:29:36 server kernel: Neighbour table overflow. Aug 29 17:29:36 server named[1949]: client 200.225.157.203#32841: error sending response: not enough free resources
this could be an atack? because appears a lot of differents ip and they try to access in differnts ports..
Has anyone noticed recently on a fresh cPanel install that named doesn't start by itself on a reboot? I have had to chkconfig named on on every cPanel install I've done on a CentOS box in the last 2 months.
