Bind package for pfsense 2.1

marcelloc

What pfsense version are you using?
I have tested it on 2.1 amd64 and i386.

dividehex

@marcelloc:

What pfsense version are you using?
I have tested it on 2.1 amd64 and i386.

2.1-RELEASE (i386)
built on Wed Sep 11 18:16:44 EDT 2013
FreeBSD 8.3-RELEASE-p11

nanobsd (4g)

marcelloc

@dividehex:

Marcelloc,

Thanks for the bind package!

Firt code files as contributions from Juliano Oliveira/Adriano Brancher.
I've started some modifications from this point.

@dividehex:

A couple issues I found so far.

Ok. I'll update it to include missing conf mount rw and ro.

johnpoz

Sweet I have to try this out!! Something new to play with - the ability to do zone xfers to other bind/dns boxes on my network.. Have you included that in your gui? This would be a must have functionality in the gui I would think!

marcelloc

@johnpoz:

Sweet I have to try this out!! Something new to play with - the ability to do zone xfers to other bind/dbns boxes on my network.. Have you included that in your gui? This would be a must have functionality in the gui I would think!

You can configure master or slave zones with notify.

marcelloc

@marcelloc:

Ok. I'll update it to include missing conf mount rw and ro.

Code updated with no version change. Just reinstall the package in 15 minutes.

johnpoz

I don't think this quite ready for prime time?

Running
2.1-RELEASE (i386)
built on Wed Sep 11 18:16:50 EDT 2013
FreeBSD 8.3-RELEASE-p11

But says it loading /etc/namedb/named.conf

Oct 14 23:33:49 named[69425]: starting BIND 9.9.4 -c /etc/namedb/named.conf -u bind -t /conf/named/
Oct 14 23:33:49 named[69425]: loading configuration from '/etc/namedb/named.conf'

But I looked and there is no named.conf in that folder.. There is not even a folder called that
[2.1-RELEASE][admin@pfsense.local.lan]/etc(16): pwd
/etc
[2.1-RELEASE][admin@pfsense.local.lan]/etc(17): cd namedb
namedb: No such file or directory.

Nor is there any log file in /var/log for named?

And you see these errors
Oct 14 23:33:49 named[69425]: the working directory is not writable
Oct 14 23:33:49 named[69425]: using pre-chroot entropy source /dev/random
Oct 14 23:33:49 named[69425]: could not open entropy source /dev/random: file not found
Oct 14 23:33:49 named[69425]: couldn't add command channel ::1#953: file not found
Oct 14 23:33:49 named[69425]: open: /usr/pbi/bind-i386/etc/rndc.key: file not found
Oct 14 23:33:49 named[69425]: couldn't add command channel 127.0.0.1#953: file not found
Oct 14 23:33:49 named[69425]: open: /usr/pbi/bind-i386/etc/rndc.key: file not found
Oct 14 23:33:49 named[69425]: /etc/namedb/named.conf:9: using specific query-source port suppresses port randomization and can be insecure.

where the one is
Oct 14 23:33:49 named[69425]: the working directory is not writable

Now I can query it and finds google.com ok, but can not seem to get it to load any of my zones..

And zone name is a bit misleading.. Is that the actual zone, so say local.lan and then my A records just need be say pfsense and the IP 192.168.1.2 – when you say NAME of the zone do you mean the actual zone, or the name I want to use to know what it is?

For reverse to I need to use the IN-ADDR.ARPA or can I put in say 192.168.1 for 1.168.192.IN-ADDR.ARPA ?

marcelloc

The in-addr.arpa is automatic with reverse zone checkbox.

johnpoz

but it doesn't change the name? So the box where you put the name is a bit unclear.

What about the lack of creation of the namedb dir and named.conf file?

marcelloc

@johnpoz:

but it doesn't change the name? So the box where you put the name is a bit unclear.

What about the lack of creation of the namedb dir and named.conf file?

I'll try to create a nanobsd image on virtual box to test it. On full install it's working fine.

johnpoz

I am on a full install not a nano anything - I installed the package, and it created the menu items and such.. I created zones, but it never creates this namedb folder as you can see. So no its not working fine via a full version of pfsense.

jeffbrl

marcelloc,

Thanks for your work in creating the bind package. I'm looking forward to using it for name service over IPv6 transport. The GUI for tinydns won't instruct the software to bind to an IPv6 address. I'm hoping your GUI for bind has better IPv6 support.

I'm also seeing the same behavior as johnpoz, so I can't test bind with IPv6 yet.

stalks

Hi there, just started using this package :)

A few things to mention:

When creating a "Reverse Zone" the "in-addr.arpa" is added but the IP octets are not reversed
ie. Adding "192.168.1", creates zone: "192.168.1.in-addr.arpa", which should be "1.168.192.in-addr-arpa"
When creating a "slave" zone, the GUI still requires a record to be created at the bottom of the page.
When creating a slave, entering the "IP Master Zone" doesn't add a semi-colon ( ; ) to the config for the list of masters, ie. "masters { 192.168.1.1 };" which should be "masters { 192.168.1.1; };"

Feature Request: Ability to view the current records on a slave zone (or point me to where the records should be on the filesystem as I can't seem to find them)

johnpoz

stalks – what flavor of pfsense are you running? And your etc/namedb/named.conf got created?

Where were your zone files created? I could not find the named.conf file that it was saying it was loading to look to see what it was even calling the forwards or reverse zones.

dividehex

@marcelloc:

@marcelloc:

Ok. I'll update it to include missing conf mount rw and ro.

Code updated with no version change. Just reinstall the package in 15 minutes.

Marcelloc,
Thanks. I reinstalled the package and this fixed the issues I was having. I'll keep poking at it for other bugs.

marcelloc

@stalks:

When creating a "Reverse Zone" the "in-addr.arpa" is added but the IP octets are not reversed
ie. Adding "192.168.1", creates zone: "192.168.1.in-addr.arpa", which should be "1.168.192.in-addr-arpa"

@stalks:

When creating a "slave" zone, the GUI still requires a record to be created at the bottom of the page.

@stalks:

When creating a slave, entering the "IP Master Zone" doesn't add a semi-colon ( ; ) to the config for the list of masters, ie. "masters { 192.168.1.1 };" which should be "masters { 192.168.1.1; };"

johnpoz

Ok I have reinstalled the package, both pkg button and xml button. I go in disable dns forwarder, enable bind in its menu item that is created.

Go in and double check that zones are there, hit save, restart service, etc.

And there is still no etc/namedb folder

[2.1-RELEASE][root@pfsense.local.lan]/root(1): cd /etc/
[2.1-RELEASE][root@pfsense.local.lan]/etc(2): cd namedb
namedb: No such file or directory.
[2.1-RELEASE][root@pfsense.local.lan]/etc(3):

but the log says that is where its loading its conf file from

Oct 16 13:38:26 named[97452]: loading configuration from '/etc/namedb/named.conf'

But I also get this error
Oct 16 13:38:26 named[97452]: the working directory is not writable

I can query bind..

; <<>> DiG 9.9.2-P1 <<>> chaos txt version.bind @192.168.1.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29640
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;version.bind. CH TXT

;; ANSWER SECTION:
version.bind. 0 CH TXT "9.9.4"

;; AUTHORITY SECTION:
version.bind. 0 CH NS version.bind.

;; Query time: 3 msec
;; SERVER: 192.168.1.253#53(192.168.1.253)
;; WHEN: Wed Oct 16 13:43:05 2013
;; MSG SIZE rcvd: 73

And it looks up stuff from net - but it does not serve up zones I created

budman@ubuntu:~$ dig @192.168.1.253 www.pfsense.org +short
192.207.126.26
budman@ubuntu:~$

;; QUESTION SECTION:
;local.lan. IN SOA

;; AUTHORITY SECTION:
. 0 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2013101601 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 192.168.1.253#53(192.168.1.253)
;; WHEN: Wed Oct 16 13:44:32 2013
;; MSG SIZE rcvd: 113

Something is not right with this package.. Running on

2.1-RELEASE (i386)
built on Wed Sep 11 18:16:50 EDT 2013
FreeBSD 8.3-RELEASE-p11

stalks

@johnpoz:

stalks – what flavor of pfsense are you running? And your etc/namedb/named.conf got created?

Where were your zone files created? I could not find the named.conf file that it was saying it was loading to look to see what it was even calling the forwards or reverse zones.

HDD install i386

named.conf was created, can see zone "domain.com" { .. etc .. but the actual zone files, don't know where they are going

@johnpoz

$: find / -name 'named.conf'
/usr/local/etc/named.conf
/usr/pbi/bind-i386/etc/named.conf
/cf/conf/named/etc/namedb/named.conf

johnpoz

ok yup I can view that

cat /cf/conf/named/etc/namedb/named.conf
#Bind pfsense configuration
#Do not edit this file!!!

options {
directory "/etc/namedb";
pid-file "/var/run/named/pid";

but notice it points to /etc/namedb – which isn't there!

Those other locations get shown in the find - but they are not really there. Why does the log say its loading /etc/namedb/named.conf ??

stalks

named runs in a jail so it has its own folder structure seperate from /