Nameserver H#LL

[centuser1]

Trying to set up my first webserver. Finally installed it and got my ips.

I am going to host the nameserver on the webserver, at least one anyway.

Try as I might I cannot do a simple thing like an nslookup or dig, it just times out and 'no servers' could be reached (was trying to nslookup/dig google)

my named.conf so far

controls {}; shuts off the rndc as i have no clients

options {
allow-recursion { localhost; }; only allows recurision for my server and not outside webservers
};


zone "0.0.127.in-addr.arpa" {
type master;
file "127.0.0.zone";
allow-update { none; };
allow-transfer { none; };
};


zone "." {
type hint;
file "root.hint"; lists the root servers for recursion
};

zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
allow-transfer { none; };
};

This is driving me nuts. I can ping and traceroute, but no dig and such. So I probalby do not have the resolver right yet.

Perhaps the allow recursion should have my ip addresses too? I got a lot of errors when I tried that.

etc/hosts and resolv .conf have the right stuff....grrr

[HROAdmin26]

Where are your forwarders?

Global option:

options
{
        query-source    port 53;
        query-source-v6 port 53;
        forwarders {
                10.XXX.XXX.XXX;
                10.XXX.XXX.XXX;
        };

Forwarders

Example nslookup for a domain that the server is authoritative vs. non-authoritative:

> www.google.com
Server:         10.XXX.XXX.XXX
Address:        10.XXX.XXX.XXX#53

Non-authoritative answer:
www.google.com  canonical name = www.l.google.com.
Name:   www.l.google.com
Address: 64.233.169.99
Name:   www.l.google.com
Address: 64.233.169.103
Name:   www.l.google.com
Address: 64.233.169.104
Name:   www.l.google.com
Address: 64.233.169.147
> 
> twitch.XXX.XXX.XXX.XXX
Server:         10.XXX.XXX.XXX
Address:        10.XXX.XXX.XXX#53

Name:   twitch.XXX.XXX.XXX.XXX
Address: 10.XXX.XXX.XXX

[centuser1]

Where are your forwarders?



Example nslookup for a domain that the server is authoritative vs. non-authoritative:

The server is a standalone. It is also its own nameserver.
I do not think forward will matter here, but I could be wrong.
When doing 'dig' @127.0.0.1 I do pull up the roots.hint file (with all the root nameservers) . So that shows me it is working sort of.

There is no auth/no auth right now for my server other than the two things above. No sites on it.

[HROAdmin26]

BIND - DNS Forwarding

It can also be used to allow queries by servers that do not have direct access to the Internet, but wish to look up exterior names anyway. Forwarding occurs only on those queries for which the server is not authoritative and does not have the answer in its cache.