Bind package for pfsense 2.1
-
Hello everybody,
having some problems with the bind package on pfSense 2.1. It listen on WAN Interface. Bind should resolve my domain and several subdomains for privat use only. Can´t define multible view on external zone, this is my first problem. The next problem is, that my secound dns server (slave) cant transfer the internal zone lan, dmz and quarantine. Only the zone transfer of mydomain.de doing well. Think my ACL are right. Anyone who could help?
Greetings Markus
-
Can you check if resulting bind conf file are fine?
-
Hello,
I am running a 2.1-RELEASE (i386) on a KVM host. Using the VirtIO drivers.
Installed the Bind package and am trying to configure a master DNS.After finishing the configurations and restarting the server I see the following errors in the log:
Apr 2 08:12:09 named[56696]: network: info: additionally listening on IPv4 interface vtnet1, 172.16.2.1#53
Apr 2 08:12:09 named[56696]: network: error: could not listen on UDP socket: permission denied
Apr 2 08:12:09 named[56696]: network: error: creating IPv4 interface vtnet1 failed; interface ignored
Apr 2 08:12:09 named[56696]: network: info: additionally listening on IPv4 interface lo0, 127.0.0.1#53
Apr 2 08:12:09 named[56696]: network: error: could not listen on UDP socket: permission denied
Apr 2 08:12:09 named[56696]: network: error: creating IPv4 interface lo0 failed; interface ignored
Apr 2 08:12:09 named[56696]: general: info: managed-keys-zone/Local: loaded serial 0
Apr 2 08:12:09 named[56696]: general: info: zone domain.com/IN/Local: loaded serial 2396415189
Apr 2 08:12:09 named[56696]: general: notice: all zones loaded
Apr 2 08:12:09 named[56696]: general: notice: runningWhen running netstat -na | grep 53
tcp6 0 0 ::1.53 . LISTEN
tcp4 0 0 172.16.2.1.53 . LISTEN
tcp4 0 0 127.0.0.1.53 . LISTEN
udp6 0 0 ::1.53 .
udp4 0 0 172.16.2.1.53 .
udp4 0 0 127.0.0.1.53 .I am not able to resolve any host on this server, in fact, my hosts are not able to connect to it:
nslookup ns1.domain.com 172.16.2.1
;; connection timed out; trying next originOn the other hand :
nmap -p 53 172.16.2.1
Starting Nmap 5.51 ( http://nmap.org ) at 2014-04-02 08:33 IDT
Nmap scan report for 172.16.2.1
Host is up (0.00032s latency).
PORT STATE SERVICE
53/tcp open domainAny idea what is going on here?
Thanks
EDIT: After restarting the instance all seems to work. I guess this issue is resolved.
-
Did you disabled DNS forwarder before starting bind?
-
Hi Marcelloc,
I need to import over 1000 domain overwrite record into bind package.
Can I use custom options for this? if yes, can you give me a sample?
eg: example.com 100.100.100.100
OR address=example/100.100.100.100Thanks in advance.
Zlyzwy -
Custom options are bind options.do the same way you do while editing files.
You may need to edit pkg_edit.php to allow 1000 domains.
-
Hi Marcelloc,
I need to import over 1000 domain overwrite record into bind package.
Can I use custom options for this? if yes, can you give me a sample?
eg: example.com 100.100.100.100
OR address=example/100.100.100.100Thanks in advance.
ZlyzwyThe custom options are exactly the same format as a zone file. So it would look like this:
xbox1 IN A 10.9.8.34 xbox360 IN A 10.9.8.35 wii IN A 10.9.8.36 3ds IN A 10.9.8.37 vita IN A 10.9.8.38 -
Hello,
we want to work with bind in pfsense. but i cant find any good manual for the pfsense version. i hope someone can help me!
i make this settings
Enable bind: checked
listen-on: LAN
rest defaultsZone One (Foward):
Zone name: test.intern
Type: Master
Name Server: pfsense.test.intern (PFSense Hostname)
Base Domain IP: 192.168.1.1 (PFSense IP)
Records-
- NS - pfsense.test.intern
pfsense - A - 192.168.1.1
testserver - A - 192.168.1.30
- NS - pfsense.test.intern
Zone Two (Reverse):
Zone Name: 1.1.168.192
Type: Master
Reverse Zone: checked
Name Server: pfsense.test.intern (PFSense Hostname)
Base Domain IP: 192.168.1.1 (PFSense IP)
Records-
- NS - 192.168.1.1
1 - PTR - pfsense.test.intern
30 - PTR - testserver.test.intern
- NS - 192.168.1.1
Test with Notebook:
IP: 192.168.1.5
GW: 192.168.1.1 (PFSense IP)
DNS: 192.168.1.1 (PFSense IP)nslookup 192.168.1.1
Server: UnKnown
Adress: 192.168.1.1
not existnslookup testserver
Server: UnKnown
Adress: 192.168.1.1
not existWhat is wrong? :o
-
-
Did you disabled DNS forwarder before starting bind?
Thanks for your reply, I did disable the DNS forward service before installing Bind.
A restart solved the issue I had. -
Hi Marcelloc,
I need to import over 1000 domain overwrite record into bind package.
Can I use custom options for this? if yes, can you give me a sample?
eg: example.com 100.100.100.100
OR address=example/100.100.100.100Thanks in advance.
ZlyzwyThe custom options are exactly the same format as a zone file. So it would look like this:
xbox1 IN A 10.9.8.34 xbox360 IN A 10.9.8.35 wii IN A 10.9.8.36 3ds IN A 10.9.8.37 vita IN A 10.9.8.38Thanks for the reply.
I tired you code but it doesn't work for me. After I saved the change, the services was broken.
If I removed the custom options, it will be just fine. -
What ever you put in the custom box is simply added to the zone file for the domain name. You do not need to put the START OF AUTHORITY (SOA) in the custom section, this is generated for you. You do need to take care that you have formatted everything correctly. Here is a description of what could go in the custom section: taken from https://en.wikipedia.org/wiki/Zone_file
example.com. NS ns ; ns.example.com is a nameserver for example.com example.com. NS ns.somewhere.example. ; ns.somewhere.example is a backup nameserver for example.com example.com. MX 10 mail.example.com. ; mail.example.com is the mailserver for example.com @ MX 20 mail2.example.com. ; equivalent to above line, "@" represents zone origin @ MX 50 mail3 ; equivalent to above line, but using a relative host name example.com. A 192.0.2.1 ; IPv4 address for example.com AAAA 2001:db8:10::1 ; IPv6 address for example.com ns A 192.0.2.2 ; IPv4 address for ns.example.com AAAA 2001:db8:10::2 ; IPv6 address for ns.example.com www CNAME example.com. ; www.example.com is an alias for example.com wwwtest CNAME www ; wwwtest.example.com is another alias for www.example.com mail A 192.0.2.3 ; IPv4 address for mail.example.com, ; any MX record host must be an address record ; as explained in RFC 2181 (section 10.3) mail2 A 192.0.2.4 ; IPv4 address for mail2.example.com mail3 A 192.0.2.5 ; IPv4 address for mail3.example.comMy guess is that you're most likely going to use A records, which associate a name to an ip address.
If you use a CNAME, you must have a period at the end of the name you type. IP addresses do NOT get followed by a period.
A semicolon ; is a comment - anything following it is ignored.Hi Marcelloc,
I need to import over 1000 domain overwrite record into bind package.
Can I use custom options for this? if yes, can you give me a sample?
eg: example.com 100.100.100.100
OR address=example/100.100.100.100Thanks in advance.
ZlyzwyThe custom options are exactly the same format as a zone file. So it would look like this:
xbox1 IN A 10.9.8.34 xbox360 IN A 10.9.8.35 wii IN A 10.9.8.36 3ds IN A 10.9.8.37 vita IN A 10.9.8.38Thanks for the reply.
I tired you code but it doesn't work for me. After I saved the change, the services was broken.
If I removed the custom options, it will be just fine. -
does it work on multiple network range ?
192.168.16.0/24
192.168.17.0/24
10.0.2.10/24
10.0.7.0/24 -
does it work on multiple network range ?
192.168.16.0/24
192.168.17.0/24
10.0.2.10/24
10.0.7.0/24I've never used this way. Check bind documentation.
-
Hello,
we want to work with bind in pfsense. but i cant find any good manual for the pfsense version. i hope someone can help me!
i make this settings
Enable bind: checked
listen-on: LAN
rest defaultsZone One (Foward):
Zone name: test.intern
Type: Master
Name Server: pfsense.test.intern (PFSense Hostname)
Base Domain IP: 192.168.1.1 (PFSense IP)
Records-
- NS - pfsense.test.intern
pfsense - A - 192.168.1.1
testserver - A - 192.168.1.30
- NS - pfsense.test.intern
Zone Two (Reverse):
Zone Name: 1.1.168.192
Type: Master
Reverse Zone: checked
Name Server: pfsense.test.intern (PFSense Hostname)
Base Domain IP: 192.168.1.1 (PFSense IP)
Records-
- NS - 192.168.1.1
1 - PTR - pfsense.test.intern
30 - PTR - testserver.test.intern
- NS - 192.168.1.1
Test with Notebook:
IP: 192.168.1.5
GW: 192.168.1.1 (PFSense IP)
DNS: 192.168.1.1 (PFSense IP)nslookup 192.168.1.1
Server: UnKnown
Adress: 192.168.1.1
not existnslookup testserver
Server: UnKnown
Adress: 192.168.1.1
not existWhat is wrong? :o
any ideas please? How can i get it work
-
-
What is the notebook computer using for a DNS server? If you use DHCP to configure IP services, make sure your DHCP server is telling the clients the proper address to use for DNS lookups. Looks like that should be 192.168.1.1 in your example.
Try nslookup 192.168.1.5 192.168.1.1 and see if you get an answer. If so, your client is probably not looking at the correct address for DNS resolution.
-
pfsense 123, do you have a zone to configure on it?
If it's just a forward dns, why don't you use built in dns forwarder package? -
we have an exist bind on an old ubuntu, i want turn this machine off when bind on pfsense works.
the zone in this "test" is test.intern. I need a forward and a reverse lookup, is there any wrong parameter in my config?
@smarc the IP Config on the Client is static, the DNS is the same like the pfsense server.
-
nslookup 192.168.1.1
Server: UnKnown
Adress: 192.168.1.1
not existnslookup testserver
Server: UnKnown
Adress: 192.168.1.1
not existI don't think your client machine knows about the bind server.
-
Did you…
-
configured a firewall rule to allow dns requests?
-
disabled dns forwarder to do not conflict with bind?
-
-
Sorry for asking(maybe it's already answered before) but how exactly do you run bind(named) on startup? Thanks
