Comments on: Bind: Quick install guide to install and setup Bind (DNS server) in secure (chroot) environment in Linux (CentOS, Redhat Enterprise (RHEL), Fedora). http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/ Enterprise level solutions, LAMP, Linux, Apache, MySQL, PHP, Perl, Windows, Cache, Optimization Tue, 24 Jan 2012 09:44:29 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Mail Sent but not delivered to inbox - Page 2 - Zimbra :: Forums http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-1039 Mail Sent but not delivered to inbox - Page 2 - Zimbra :: Forums Tue, 23 Aug 2011 04:14:47 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-1039 [...] RedHat Bind Error Log when i run /etc/init.d/named start on RHEL 5.3 it fails generating the following log. Aug 23 08:51:57 mail named[3757]: starting BIND 9.4.1 -u named -t /chroot/named -c /etc/named.conf Aug 23 08:51:57 mail named[3757]: loading configuration from '/etc/named.conf' Aug 23 08:51:57 mail named[3757]: /etc/named.conf:14: unknown key 'rndc-key' Aug 23 08:51:57 mail named[3757]: loading configuration: failure Aug 23 08:51:57 mail named[3757]: exiting (due to fatal error) i had configured the system using the following link Bind: Quick install guide to install and setup Bind (DNS server) in secure (chroot) environment in L... [...] [...] RedHat Bind Error Log when i run /etc/init.d/named start on RHEL 5.3 it fails generating the following log. Aug 23 08:51:57 mail named[3757]: starting BIND 9.4.1 -u named -t /chroot/named -c /etc/named.conf Aug 23 08:51:57 mail named[3757]: loading configuration from '/etc/named.conf' Aug 23 08:51:57 mail named[3757]: /etc/named.conf:14: unknown key 'rndc-key' Aug 23 08:51:57 mail named[3757]: loading configuration: failure Aug 23 08:51:57 mail named[3757]: exiting (due to fatal error) i had configured the system using the following link Bind: Quick install guide to install and setup Bind (DNS server) in secure (chroot) environment in L… [...]

]]> By: Sunny Walia http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-1027 Sunny Walia Sat, 21 May 2011 21:45:28 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-1027 Thanks for the kind words George. Glad i could help you out. Thanks for the kind words George. Glad i could help you out.

]]> By: Cage http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-1025 Cage Sat, 21 May 2011 12:03:56 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-1025 CrazyToon, I hope you are still around and get this. I just wanted to say thank you! After digging and researching for over 60 hrs on multiple setups to rebuild every aspect of a server for the first time alone, DNS being my most challenging daemon... You Rock! You wright the best clear cut clean directions without all the extra stuff we don't need when pressed. I hope you do more in the future. I just take my hat off to ya. You should put a book out, heck, I would help! Latter George L. Minnesota, USA CrazyToon,

I hope you are still around and get this.
I just wanted to say thank you!

After digging and researching for over 60 hrs on multiple setups to rebuild every aspect of a server for the first time alone, DNS being my most challenging daemon…

You Rock!

You wright the best clear cut clean directions without all the extra stuff we don’t need when pressed.

I hope you do more in the future. I just take my hat off to ya. You should put a book out, heck, I would help!

Latter
George L.
Minnesota, USA

]]> By: islamay http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-1009 islamay Mon, 04 Apr 2011 20:19:15 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-1009 salut tout le monde je suis entraint de faire une simulation virtuelle a travers VMware d'un serveur DNS (primaire,secondaire et cache) j'ai configuré le serveur primaire et je le tester (ça marche bien) jai configuré le serveur secondaire mais il n'est pas capable de charger les informations de zone depuis le serveur primaire voici mon configuration au niveau du serveur primaire vi /etc/named.conf zone "." IN { type hint; file "named.ca"; }; zone "rnu.tn" IN { type master; file "rnu.tn.zone"; allow-update { none; }; allow-transfer { 192.168.127.133; }; }; vi /var/named/rnu.tn.zone TTL 1D @ IN SOA ns1.rnu.tn. admin.rnu.tn. ( 0 ; seria 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum IN NS ns1.rnu.tn. IN NS ns2.rnu.tn. IN MX 10 mail.rnu IN A 192.168.127.134 ns1 IN A 192.168.127.134 ns2 IN A 192.168.127.133 www IN A 192.168.127.134 mail IN A 192.168.127.134 IN A 127.0.0.1 confifuration au niveau du serveur secondaire vi /etc/named.conf zone "." IN { type hint; file "named.ca"; }; zone "rnu.tn" IN { type slave; file "rnu.tn.zone"; masters { 192.168.127.134; }; }; information fodora 14 bind 9.7.2 l'adresse IP de machine serveur primaire 192.168.127.134 l'adresse IP de machine serveuR secondaire 192.168.127.133 svp expliquer moi le problem et guidez moi a realiser un serveur cache jattent vos reponse merci d'avance salut tout le monde

je suis entraint de faire une simulation virtuelle a travers VMware d’un serveur DNS (primaire,secondaire et cache)
j’ai configuré le serveur primaire et je le tester (ça marche bien)
jai configuré le serveur secondaire mais il n’est pas capable de charger les informations de zone depuis le serveur primaire

voici mon configuration au niveau du serveur primaire
vi /etc/named.conf

zone “.” IN {
type hint;
file “named.ca”;
};

zone “rnu.tn” IN {
type master;
file “rnu.tn.zone”;
allow-update { none; };
allow-transfer { 192.168.127.133; };
};

vi /var/named/rnu.tn.zone

TTL 1D
@ IN SOA ns1.rnu.tn. admin.rnu.tn. (

0 ; seria
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum

IN NS ns1.rnu.tn.

IN NS ns2.rnu.tn.

IN MX 10 mail.rnu
IN A 192.168.127.134
ns1 IN A 192.168.127.134
ns2 IN A 192.168.127.133
www IN A 192.168.127.134
mail IN A 192.168.127.134
IN A 127.0.0.1

confifuration au niveau du serveur secondaire

vi /etc/named.conf
zone “.” IN {

type hint;

file “named.ca”;

};

zone “rnu.tn” IN {

type slave;

file “rnu.tn.zone”;

masters { 192.168.127.134; };

};

information
fodora 14
bind 9.7.2
l’adresse IP de machine serveur primaire 192.168.127.134
l’adresse IP de machine serveuR secondaire 192.168.127.133

svp expliquer moi le problem et guidez moi a realiser un serveur cache
jattent vos reponse
merci d’avance

]]> By: david http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-990 david Fri, 11 Feb 2011 03:41:51 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-990 ok this didnt work for me? give me auth errors on just about everything when I try to start named and key errors but the ke is in the rndc.conf /////////////////////////////////////////////////////////////// messages:Feb 10 19:01:17 server1 rsyslogd: Warning: backward compatibility layer added to following directive to rsyslog.conf: addunixlistensocket /chroot/named/dev/log messages:Feb 10 19:01:24 server1 kernel: warning: `named' uses 32-bit capabilities (legacy support in use) messages:Feb 10 19:01:24 server1 named[4379]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf messages:Feb 10 19:01:24 server1 named[4379]: built with '--without-openssl' messages:Feb 10 19:01:24 server1 named[4379]: using up to 4096 sockets messages:Feb 10 19:01:24 server1 named[4379]: loading configuration from '/etc/named.conf' messages:Feb 10 19:01:24 server1 named[4379]: /etc/named.conf:15: unknown key 'rndc-key' messages:Feb 10 19:01:24 server1 named[4379]: loading configuration: failure messages:Feb 10 19:01:24 server1 named[4379]: exiting (due to fatal error) messages:Feb 10 19:03:26 server1 named[5442]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf messages:Feb 10 19:03:26 server1 named[5442]: built with '--without-openssl' messages:Feb 10 19:03:26 server1 named[5442]: using up to 4096 sockets messages:Feb 10 19:03:26 server1 named[5442]: loading configuration from '/etc/named.conf' messages:Feb 10 19:03:26 server1 named[5442]: /etc/named.conf:15: unknown key 'rndc-key' messages:Feb 10 19:03:26 server1 named[5442]: loading configuration: failure messages:Feb 10 19:03:26 server1 named[5442]: exiting (due to fatal error) messages:Feb 10 19:10:30 server1 named[5918]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf messages:Feb 10 19:10:30 server1 named[5918]: built with '--without-openssl' messages:Feb 10 19:10:30 server1 named[5918]: using up to 4096 sockets messages:Feb 10 19:10:30 server1 named[5918]: loading configuration from '/etc/named.conf' messages:Feb 10 19:10:30 server1 named[5918]: /etc/named.conf:15: unknown key 'rndc-key' messages:Feb 10 19:10:30 server1 named[5918]: loading configuration: failure messages:Feb 10 19:10:30 server1 named[5918]: exiting (due to fatal error) messages:Feb 10 19:32:50 server1 named[7405]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf messages:Feb 10 19:32:50 server1 named[7405]: built with '--without-openssl' messages:Feb 10 19:32:50 server1 named[7405]: using up to 4096 sockets messages:Feb 10 19:32:50 server1 named[7405]: loading configuration from '/etc/named.conf' messages:Feb 10 19:32:50 server1 named[7405]: /etc/named.conf:22: unknown key 'rndc-key' messages:Feb 10 19:32:50 server1 named[7405]: loading configuration: failure messages:Feb 10 19:32:50 server1 named[7405]: exiting (due to fatal error) ////////////////////////////////////////////////////////////////// Love BSD Not so shure about this expensive RHEL with sad excuse for support.... Thanks for any help in advance! ~D ok this didnt work for me? give me auth errors on just about everything when I try to start named

and key errors but the ke is in the rndc.conf

///////////////////////////////////////////////////////////////

messages:Feb 10 19:01:17 server1 rsyslogd: Warning: backward compatibility layer added to following directive to rsyslog.conf: addunixlistensocket /chroot/named/dev/log
messages:Feb 10 19:01:24 server1 kernel: warning: `named’ uses 32-bit capabilities (legacy support in use)
messages:Feb 10 19:01:24 server1 named[4379]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf
messages:Feb 10 19:01:24 server1 named[4379]: built with ‘–without-openssl’
messages:Feb 10 19:01:24 server1 named[4379]: using up to 4096 sockets
messages:Feb 10 19:01:24 server1 named[4379]: loading configuration from ‘/etc/named.conf’
messages:Feb 10 19:01:24 server1 named[4379]: /etc/named.conf:15: unknown key ‘rndc-key’
messages:Feb 10 19:01:24 server1 named[4379]: loading configuration: failure
messages:Feb 10 19:01:24 server1 named[4379]: exiting (due to fatal error)
messages:Feb 10 19:03:26 server1 named[5442]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf
messages:Feb 10 19:03:26 server1 named[5442]: built with ‘–without-openssl’
messages:Feb 10 19:03:26 server1 named[5442]: using up to 4096 sockets
messages:Feb 10 19:03:26 server1 named[5442]: loading configuration from ‘/etc/named.conf’
messages:Feb 10 19:03:26 server1 named[5442]: /etc/named.conf:15: unknown key ‘rndc-key’
messages:Feb 10 19:03:26 server1 named[5442]: loading configuration: failure
messages:Feb 10 19:03:26 server1 named[5442]: exiting (due to fatal error)
messages:Feb 10 19:10:30 server1 named[5918]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf
messages:Feb 10 19:10:30 server1 named[5918]: built with ‘–without-openssl’
messages:Feb 10 19:10:30 server1 named[5918]: using up to 4096 sockets
messages:Feb 10 19:10:30 server1 named[5918]: loading configuration from ‘/etc/named.conf’
messages:Feb 10 19:10:30 server1 named[5918]: /etc/named.conf:15: unknown key ‘rndc-key’
messages:Feb 10 19:10:30 server1 named[5918]: loading configuration: failure
messages:Feb 10 19:10:30 server1 named[5918]: exiting (due to fatal error)
messages:Feb 10 19:32:50 server1 named[7405]: starting BIND 9.7.2-P3 -u named -t /chroot/named -c /etc/named.conf
messages:Feb 10 19:32:50 server1 named[7405]: built with ‘–without-openssl’
messages:Feb 10 19:32:50 server1 named[7405]: using up to 4096 sockets
messages:Feb 10 19:32:50 server1 named[7405]: loading configuration from ‘/etc/named.conf’
messages:Feb 10 19:32:50 server1 named[7405]: /etc/named.conf:22: unknown key ‘rndc-key’
messages:Feb 10 19:32:50 server1 named[7405]: loading configuration: failure
messages:Feb 10 19:32:50 server1 named[7405]: exiting (due to fatal error)
//////////////////////////////////////////////////////////////////

Love BSD Not so shure about this expensive RHEL with sad excuse for support….
Thanks for any help in advance!
~D

]]> By: maz http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-957 maz Mon, 20 Sep 2010 06:59:52 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-957 Hi, this link is very good, i have the same bind9.3.6 on centos 5.4, i am getting this kind of messages in the server Sep 19 18:49:07 centos1 named[23130]: client xxx.xxx.xxx.xxx#60923: update 'backup.com/IN' denied Sep 19 18:49:07 centos1 named[23130]: client 9x.xxx.xx.xxx#55432: update 'bacups.com./IN' denied Sep 19 18:51:17 centos1 named[23130]: network unreachable resolving 'ns1.inmel.r u/AAAA/IN': 2001:xxx:1xx:0x:xxx:xxx:xx2:17#53 BR, MAZ Hi, this link is very good, i have the same bind9.3.6 on centos 5.4, i am getting this kind of messages in the server
Sep 19 18:49:07 centos1 named[23130]: client xxx.xxx.xxx.xxx#60923: update ‘backup.com/IN’ denied
Sep 19 18:49:07 centos1 named[23130]: client 9x.xxx.xx.xxx#55432: update ‘bacups.com./IN’ denied
Sep 19 18:51:17 centos1 named[23130]: network unreachable resolving ‘ns1.inmel.r
u/AAAA/IN’: 2001:xxx:1xx:0x:xxx:xxx:xx2:17#53

BR,
MAZ

]]> By: Bill Hudson http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-773 Bill Hudson Thu, 02 Oct 2008 23:52:25 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-773 Can your above instructions regarding Bind work without chroot? Also, do you have any info on setting up zone files? Thanks for putting the above info together, it's appreciated. Bill Can your above instructions regarding Bind work without chroot? Also, do you have any info on setting up zone files? Thanks for putting the above info together, it’s appreciated.

Bill

]]> By: Peter http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-769 Peter Wed, 24 Sep 2008 14:48:33 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-769 I have the same error. "named dead but subsys locked" when executing "./named status" and the application will not start. Did you find a solution to this issue? I have the same error. “named dead but subsys locked” when executing “./named status” and the application will not start. Did you find a solution to this issue?

]]> By: francisco http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-310 francisco Mon, 15 Oct 2007 02:14:49 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-310 Hey! can you help? I have followed your guide but still one minor problem: error: named dead but subsys locked it wont start. Hey! can you help? I have followed your guide but still one minor problem: error: named dead but subsys locked

it wont start.

]]> By: CrazyToon http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-277 CrazyToon Sun, 05 Aug 2007 19:50:37 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-277 If you would like to make it more secure then you should. I have a lot of clients who prefer to not have +i set up on etc. If you would like to make it more secure then you should. I have a lot of clients who prefer to not have +i set up on etc.

]]> By: George http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-274 George Fri, 03 Aug 2007 00:10:40 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-274 Yes, it worked. Now should I set chattr +i etc again? Thanks. Yes, it worked.

Now should I set chattr +i etc again?

Thanks.

]]> By: CrazyToon http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-272 CrazyToon Wed, 01 Aug 2007 20:05:20 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-272 if that is happening, do: cd /chroot/named chattr -i etc let me know if that works for you. if that is happening, do:
cd /chroot/named
chattr -i etc

let me know if that works for you.

]]> By: Bill Holt http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-270 Bill Holt Tue, 31 Jul 2007 17:47:35 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-270 I also, can not add /chroot/named/etc/named.conf due to permission restrictions. I am looking for help. Any ideas? I also, can not add /chroot/named/etc/named.conf due to permission restrictions. I am looking for help. Any ideas?

]]> By: George http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/comment-page-1/#comment-267 George Mon, 30 Jul 2007 14:12:05 +0000 http://crazytoon.com/2007/06/21/bind-quick-install-guide-to-install-and-setup-bind-dns-server-in-secure-chroot-environment-in-linux-centos-redhat-enterprise-rhel-fedora/#comment-267 It seems that I can not add /chroot/named/etc/named.conf due to permission restrictions. I am still looking for help. Any ideas? It seems that I can not add /chroot/named/etc/named.conf due to permission restrictions. I am still looking for help. Any ideas?

]]>