View Full Version : bind9 problems
x-spirit
5th March 2009, 11:59
I have several questions,
firstly how can I generate a full log on bind9 somewhere?
I've tried the logging clause but it seems I wasn't able to figure it out.
Tt this moment it looks like this:
logging {
channel default_debug {
file "/var/log/bind.log";
print-time yes;
print-category yes;
print-severity yes;
};
category queries { default_debug; };
category network { default_debug; };
};
I'm trying to access log files in order to understand why my bind9 is not working. When I try to resolve something a 'timed-out' request comes back.
I've transfered zones from an old server and configured them carefully. I don't know where the problem is.. Can someone help ?
topdog
5th March 2009, 17:59
timeout usually means the packets are either not getting to the destination or not returning.
x-spirit
5th March 2009, 19:04
So.. can you suggest where to start traceing the problem.
Becouse I don't have logs either. /var/log/syslog and /var/log/messages are silent about problems with the bind..
falko
6th March 2009, 14:35
Which distribution are you using? How exactly did you set up BIND? Is it running chrooted?
x-spirit
6th March 2009, 15:03
a fresh installation of debian lenny, yes, it is chrooted
chipsafts
6th March 2009, 19:34
firewall setup ?
falko
7th March 2009, 15:58
Yes, could be the firewall. What's the output of iptables -L?
How exactly did you install BIND?
x-spirit
8th March 2009, 02:12
apt-get install bind :)
and I haven't set a firewall yet, the ipchains are empty.
falko
8th March 2009, 17:12
What's the output of netstat -tap?
x-spirit
8th March 2009, 20:58
ns:/home/x-spirit# netstat -tap
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:imaps *:* LISTEN 8165/dovecot
tcp 0 0 *:pop3s *:* LISTEN 8165/dovecot
tcp 0 0 *:ldap *:* LISTEN 2762/slapd
tcp 0 0 localhost:10024 *:* LISTEN 2587/amavisd (maste
tcp 0 0 localhost:10025 *:* LISTEN 7997/master
tcp 0 0 localhost:mysql *:* LISTEN 2653/mysqld
tcp 0 0 *:pop3 *:* LISTEN 8165/dovecot
tcp 0 0 *:imap2 *:* LISTEN 8165/dovecot
tcp 0 0 *:sunrpc *:* LISTEN 2292/portmap
tcp 0 0 ns.refer.bg:domain *:* LISTEN 13084/named
tcp 0 0 localhost:domain *:* LISTEN 13084/named
tcp 0 0 *:ssh *:* LISTEN 967/sshd
tcp 0 0 *:50008 *:* LISTEN 2303/rpc.statd
tcp 0 0 localhost:953 *:* LISTEN 13084/named
tcp 0 0 *:smtp *:* LISTEN 7997/master
tcp 0 0 localhost:ldap localhost:48485 ESTABLISHED 2762/slapd
tcp 0 0 ns.refer.bg:ssh router2.refer.bg:33047 ESTABLISHED 18642/sshd: x-spiri
tcp 0 0 localhost:48485 localhost:ldap ESTABLISHED 2778/nscd
tcp 0 0 ns.refer.bg:ssh router2.refer.bg:36153 ESTABLISHED 9751/sshd: x-spirit
tcp 0 0 localhost:56951 localhost:ldap ESTABLISHED 8166/dovecot-auth
tcp 0 0 localhost:ldap localhost:56951 ESTABLISHED 2762/slapd
tcp6 0 0 [::]:ldap [::]:* LISTEN 2762/slapd
tcp6 0 0 [::]:www [::]:* LISTEN 19142/apache2
tcp6 0 0 [::]:ssh [::]:* LISTEN 967/sshd
tcp6 0 0 localhost:953 [::]:* LISTEN 13084/named
tcp6 0 0 [::]:https [::]:* LISTEN 19142/apache2
id10t
9th March 2009, 17:13
use nslookup.
~/web$ nslookup
> server localhost
Default server: localhost
Address: 127.0.0.1#53
> www.example.com
See if it is returning locally for your domain. If it is then check to make sure it is listening on public IP. If that is good, then check firewall.
matey
9th March 2009, 17:23
use nslookup.
~/web$ nslookup
> server localhost
Default server: localhost
Address: 127.0.0.1#53
> www.example.com
See if it is returning locally for your domain. If it is then check to make sure it is listening on public IP. If that is good, then check firewall.
LOL @ Your name, I admire/appreciate good sense of humor anytime/place. :)
I also wonder where/how I can get the networking tools package? None of these commands like nslookup, traceroute ,dig etc work for this new Ubuntu 8.04 xen server I setup?
Thanks!
chipsafts
9th March 2009, 21:59
try
locate dig | grep bin
if you get no results then something went amiss with your installation of BIND.
if you do get a result, try using the full path to run dig , ie:
/usr/bin/dig ...
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.