Find the answer to your Linux question:
Results 1 to 3 of 3
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1

    BIND9 stopped working

    Hi all

    i was wondering if anyone could help me fix my bind9 cahcing /ad blocking server.

    basically this Bind instance is my local network dns server
    , everything was working fine until an unknown date.
    so bind starts and assigns tcp/udp 53 to all interfaces however i can use the service from another machine. the dns serivce does however work locally.

    i will attache some tcp dump output netstat and configs below.
    also i have removed iptables as a precautionary step but this has not helped as iptables was not blocking port 53 but hey its something proved.

    options {
            directory "/var/cache/bind";
            listen-on { any; };
            forwarders {;};
            dnssec-validation auto;
            auth-nxdomain no;    # conform to RFC1035
            allow-transfer {"none";};
            allow-query { any; }
    netstat -tupln | grep named
    tcp        0      0*               LISTEN      16223/named
    tcp        0      0*               LISTEN      16223/named
    tcp        0      0  *               LISTEN      16223/named
    tcp        0      0 *               LISTEN      16223/named
    tcp6       0      0 :::53                   :::*                    LISTEN      16223/named
    udp        0      0*                           16223/named
    udp        0      0  *                           16223/named
    udp6       0      0 :::53                   :::*                                16223/named

  2. #2
    i get timeouts when trying to connect from anything on the network so whilst running tcpdump and doing nslookup google dot com from my 'other' linux machine i can see that the request goes in but the bind server does not respond . also there is no evidence in the logs of the request inbound or outbound,...
    im totally confused as to what has failed

  3. #3
    If you are locally sourcing your dns, do you have a way to fetch the dns info you want to keep?

    I have used pihole as a dns server, points to google's dns server after blocking the list of ad sites; its great and can be controlled with ssh.

    Do you have a white/black list ?

    Sent from my SM-G935W8 using Tapatalk


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts