Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Bind package for pfsense 2.1

    Scheduled Pinned Locked Moved pfSense Packages
    153 Posts 44 Posters 66.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jcyr
      last edited by

      This is nice and I might just switch to this from unbound!

      But….

      If I select listen on all interfaces, you generate:

      options {
              directory "/etc/namedb";
              pid-file "/var/run/named/pid";
              statistics-file "/var/log/named.stats";
              max-cache-size 256M;
                              listen-on-v6 { Any; };
                      listen-on { Any; };
                      version "N/A";

      };

      That's good. However I don't want it to listen on the WAN interface, so if I select individual interfaces other than the WAN interfaces, you generate:

      options {
              directory "/etc/namedb";
              pid-file "/var/run/named/pid";
              statistics-file "/var/log/named.stats";
              max-cache-size 256M;
                              listen-on-v6 { none; };          <------------- This is bad!!!
                      listen-on { 192.168.4.1; 192.168.0.1; 24.98.144.135; 127.0.0.1;  };
                      version "N/A";

      };

      What? No IPV6 support???

      IPV6 Test: http://ipv6-test.com

      1 Reply Last reply Reply Quote 0
      • J
        jcyr
        last edited by

        Oh! And another thing. If I disable bind, then reboot… it is restarted anyway!

        IPV6 Test: http://ipv6-test.com

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          @jcyr:

          What? No IPV6 support???

          Do you have ipv6 address assigned to any interface?

          bind found these (192.168.4.1; 192.168.0.1; 24.98.144.135; 127.0.0.1;  )

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • marcellocM
            marcelloc
            last edited by

            @jcyr:

            Oh! And another thing. If I disable bind, then reboot… it is restarted anyway!

            Disable on gui or just stop the service?

            Treinamentos de Elite: http://sys-squad.com

            Help a community developer! ;D

            1 Reply Last reply Reply Quote 0
            • J
              jcyr
              last edited by

              Of course. All interfaces have IPV6 addresses, but it seems the config generating script didn't find them. And yes to answer your other question, disabled (or rather, not enabled) in the GUI. Great package though. I've switched to it and rely on the firewall to block IPV6 DNS queries from the WAN interface.

              I think it may be a timing thing (as in the time when the config file is generated) since it missed one of the IPV4 addresses and IPV6 address allocation is a little slower than IPV4 address allocation since IPV6 must receive IPV6 router advertisements before it can configure its IPV6 subnets.

              IPV6 Test: http://ipv6-test.com

              1 Reply Last reply Reply Quote 0
              • marcellocM
                marcelloc
                last edited by

                I'll check service startup.

                After a while can you check if ipv6 addresses are listed on bind conf?

                Treinamentos de Elite: http://sys-squad.com

                Help a community developer! ;D

                1 Reply Last reply Reply Quote 0
                • J
                  jcyr
                  last edited by

                  Here's your bug (attached fix). You weren't checking for IPV6 correctly in listen-on processing logic in bind.inc.

                  bind.inc.txt

                  IPV6 Test: http://ipv6-test.com

                  1 Reply Last reply Reply Quote 0
                  • marcellocM
                    marcelloc
                    last edited by

                    @jcyr:

                    Here's your bug (attached fix). You weren't checking for IPV6 correctly in listen-on processing logic in bind.inc.

                    Thanks! fixed.

                    I'll check now bind startup while disabled.

                    EDIT

                    Startup check fixed too

                    Treinamentos de Elite: http://sys-squad.com

                    Help a community developer! ;D

                    1 Reply Last reply Reply Quote 0
                    • B
                      brtlvrs
                      last edited by

                      I think I found a tiny  bug.
                      when I use one ore more fowarders the named service won't (re)start.
                      It gives an error about missing a ; on line 22.
                      I traced it back to the line where the ip forwarders are defined.
                      When I enter one or more IP's as forwaders and close them with a ;
                      then I service restarts without a problem.

                      The forwarders is configured on the setting page of the bind service.

                      I've tested this on an greenfield installation with 2.1-RELEASE (amd64)
                      built on Wed Sep 11 18:17:48 EDT 2013
                      FreeBSD 8.3-RELEASE-p11

                      1 Reply Last reply Reply Quote 0
                      • marcellocM
                        marcelloc
                        last edited by

                        I'll check it.
                        Are you on latest package version?

                        Treinamentos de Elite: http://sys-squad.com

                        Help a community developer! ;D

                        1 Reply Last reply Reply Quote 0
                        • A
                          asracomp
                          last edited by

                          thanks all…

                          I just learned about bind
                          and try...
                          please guide...

                          i am on pfsense 2.1 amd64

                          wan=pppoe
                          lan= 192.168.1.1/24 dhcp on
                          opt1=17.0.0.1/8 dhcp on

                          1. disable dns forwarder
                          2. enable named on LAN&OPT1
                          result = dhcpd stop

                          1. enable dns forwarder just on lan
                          2. enable named just on opt1
                          result = no problem...

                          if something wrong please guide...

                          thanks...

                          1 Reply Last reply Reply Quote 0
                          • J
                            jcyr
                            last edited by

                            You probably need to specify the DNS server address in the DHCP server tab for LAN (192.168.1.1) and OPT1 (17.0.0.1). It isn't automatically handled like it is when using the DNS forwarder.

                            IPV6 Test: http://ipv6-test.com

                            1 Reply Last reply Reply Quote 0
                            • A
                              asracomp
                              last edited by

                              @jcyr:

                              You probably need to specify the DNS server address in the DHCP server tab for LAN (192.168.1.1) and OPT1 (17.0.0.1). It isn't automatically handled like it is when using the DNS forwarder.

                              thanks a lot for fast response

                              solved…

                              thank u very much...

                              1 Reply Last reply Reply Quote 0
                              • C
                                cuteredstorm
                                last edited by

                                Hi,

                                First of all thank you for your work. I intend to show my gratitude once I have the system set-up.

                                I wanted to inform you of an issue I believe exists with this package.

                                The package supports reverse zones, but assumes that all reverse zones are IPV4.

                                In bind.inc, lines 333 and 405 the string ".in-addr.arpa." is added to zonename. For IPV4 this is correct. For IPV6 string ".ip6.arpa" should be added instead.

                                Since there is currently no distinction between IPV4/IPV6, I believe another option should be added, but only if "Reverse Zone" is selected.

                                I will fix the bind_zones.xml and bind.inc so it works for myself, but don't consider it to be "clean". If you want, I can send the changed files.

                                redstorm.

                                EDIT: I have additionally found an error in line 435. A dot is added to the destination for all destinations that have letters in them. IPV6 uses letters but a dot should not be added. I have modified bind.inc to exclude AAAA type from this modifications. Both files attached, hope they help.

                                bind.inc.txt
                                bind_zones.xml.txt

                                1 Reply Last reply Reply Quote 0
                                • marcellocM
                                  marcelloc
                                  last edited by

                                  Thanks for the feedback.

                                  If you want, you can send your fixes directly to official repository on github.com/pfsense/pfsense-packages

                                  Treinamentos de Elite: http://sys-squad.com

                                  Help a community developer! ;D

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cuteredstorm
                                    last edited by

                                    https://github.com/cuteredstorm/pfsense-packages/pull/1

                                    Also made smoe changes on sync for bind package. Everything i needed works now.

                                    redstorm

                                    1 Reply Last reply Reply Quote 0
                                    • marcellocM
                                      marcelloc
                                      last edited by

                                      Create a pull request so I can merge it to official repo.

                                      Do you miss any other function on bind. I'm planning to change it's version to Release as you can confirm ipv6 is working fine too.

                                      Treinamentos de Elite: http://sys-squad.com

                                      Help a community developer! ;D

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        cuteredstorm
                                        last edited by

                                        I used custom options for transfer-source and notifiy-source. That is not something that needs special attention. I think it's ready for release. Good job!

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          cl
                                          last edited by

                                          Hi,

                                          This is a great piece of work, just about everything that is really needed for using BIND!

                                          Maybe there are some remaining bugs:

                                          1. No matter what I set the serial to, it defaults to a timestamp.
                                          2. AAAA-records get a trailing dot at the end, which makes the zone-file not loading.
                                          3. It is a little annoying that after adding a record when editing a zone, the web page scrolls all the way up to top (Firefox 25.0.1). After creating a zone, records are the most edited part so perhaps they should be placed at the top.
                                          4. There are some minor misspellings (Loggin serverity).

                                          Looking forward to the release, this will be used straightaway, when working for IPv6!

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            cuteredstorm
                                            last edited by

                                            1. True. Since it is supposed to increment with every change, this is really the only viable solution. Have a better solution?
                                            2. Don't have this issue. Can you post the record on UI+resulting zone file?
                                            3. True.
                                            4. True.
                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.