Problems with bind9

Discussion in 'ISPConfig 3 Priority Support' started by Enrique García, Feb 9, 2018.

  1. Enrique García

    Enrique García Member HowtoForge Supporter

    I had 3 web sites configured with ispconfig lasted version.
    Was working ok, but time ago 2 webs display "ERR_NAME_RESOLUTION_FAILED" at the browser.
    I check for log files and found this:
    nano /etc/bind/pri.fyde.com.mx.err (the extension .err it wasn't there when was workging) NOT WORKING
    $TTL 3600
    @ IN SOA ns.fyde.com.mx. eagarciaj.gmail.com. (
    2018011403 ; serial, todays date + todays serial #
    7200 ; refresh, seconds
    540 ; retry, seconds
    604800 ; expire, seconds
    3600 ) ; minimum, seconds
    ;

    fyde.com.mx. 3600 A 144.217.95.153
    www 3600 A 144.217.95.153
    mail 3600 A 144.217.95.153
    fyde.com.mx. 3600 NS ns.fyde.com.mx.
    fyde.com.mx. 3600 NS sdns1.ovh.ca.
    fyde.com.mx. 3600 MX 10 mail.fyde.com.mx.
    fyde.com.mx. 3600 TXT "v=spf1 mx a ~all"
    default._domainkey.fyde.com.mx. 3600 TXT "v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZaCYaYCCTFhOpjNEY+wKNl8CqoqCln9$
    _dmarc.fyde.com.mx. 3600 TXT "v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]"

    The second domain that doesn't works:

    nano /etc/bind/pri.quieroplayeras.com (NOT WORKING)
    $TTL 3600
    @ IN SOA ns.fyde.com.mx. eagarciaj.gmail.com. (
    2018011403 ; serial, todays date + todays serial #
    7200 ; refresh, seconds
    540 ; retry, seconds
    604800 ; expire, seconds
    3600 ) ; minimum, seconds
    ;

    mail 3600 A 144.217.95.153
    quieroplayeras.com. 3600 A 144.217.95.153
    www 3600 A 144.217.95.153
    quieroplayeras.com. 3600 MX 10 mail.quieroplayeras.com.
    quieroplayeras.com. 3600 NS ns.fyde.com.mx.
    quieroplayeras.com. 3600 NS sdns1.ovh.ca.
    default._domainkey.quieroplayeras.com. 3600 TXT "v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDVFOXh5yKmuGjmoaHNEBkWFsO$
    quieroplayeras.com. 3600 TXT "v=spf1 mx a ~all"
    _dmarc.quieroplayeras.com. 3600 TXT "v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]$

    $TTL 3600
    @ IN SOA ns.fyde.com.mx. eagarciaj.gmail.com. (
    2018011403 ; serial, todays date + todays serial #
    7200 ; refresh, seconds
    540 ; retry, seconds
    604800 ; expire, seconds
    3600 ) ; minimum, seconds
    ;

    docente.com.mx. 3600 A 144.217.95.153
    mail 3600 A 144.217.95.153
    www 3600 A 144.217.95.153
    docente.com.mx. 3600 MX 10 mail.docente.com.mx.
    docente.com.mx. 3600 NS ns.fyde.com.mx.
    docente.com.mx. 3600 NS sdns1.ovh.ca.
    default._domainkey.docente.com.mx. 3600 TXT "v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7ny84eWsyTRlWEtcTAb0qbyFGgWt$
    docente.com.mx. 3600 TXT "v=spf1 mx a ~all"
    _dmarc.docente.com.mx. 3600 TXT "v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]"

    nano /etc/bind/pri.docente.com.mx (WORING VERY GOOD :))
    $TTL 3600
    @ IN SOA ns.fyde.com.mx. eagarciaj.gmail.com. (
    2018011403 ; serial, todays date + todays serial #
    7200 ; refresh, seconds
    540 ; retry, seconds
    604800 ; expire, seconds
    3600 ) ; minimum, seconds
    ;

    docente.com.mx. 3600 A 144.217.95.153
    mail 3600 A 144.217.95.153
    www 3600 A 144.217.95.153
    docente.com.mx. 3600 MX 10 mail.docente.com.mx.
    docente.com.mx. 3600 NS ns.fyde.com.mx.
    docente.com.mx. 3600 NS sdns1.ovh.ca.
    default._domainkey.docente.com.mx. 3600 TXT "v=DKIM1; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7ny84eWsyTRlWEtcTAb0qbyFGgWt$
    docente.com.mx. 3600 TXT "v=spf1 mx a ~all"
    _dmarc.docente.com.mx. 3600 TXT "v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]"

    Please help me.

    Regards,
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The .err extensin means that BIND rejected the zone. You can find the errir message in the syslog file of the Linux system or you use the named-checkzone command to get the detailed error.

    example:

    named-checkzone yourdomain.tld /etc/bind/pri.yourdomain.tld.err
     
  3. Enrique García

    Enrique García Member HowtoForge Supporter

    [email protected]:/etc/bind# named-checkzone fyde.com.mx /etc/bind/pri.fyde.com.mx.err
    zone fyde.com.mx/IN: NS 'ns.fyde.com.mx' has no address records (A or AAAA)
    zone fyde.com.mx/IN: not loaded due to errors.

    I add an A record an works, is strange when set up for first time was working, why until now ask me for the A record?
    I had two sites with the same problem, but adding an A record to only one of them fixed the problem in both, why?

    Thanks for your help,
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Bind does not load zones where a records for ns records are missing, so if you got a dns response for that domain before then it was not from this dns server.
     

Share This Page