Всем привет, встала задача поднять DNS-server работающий мастером для нескольких доменов, плюс выступающий днс-ом для локальной сети, всё установил и настроил нормально так без матов со стороны bind. Перезагрузил bind и полез проверять логи и увидел я там такую картину :
+ открыть спойлер
01-Sep-2013 01:46:52.520 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 199.7.83.42#53
01-Sep-2013 01:46:52.520 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 128.63.2.53#53
01-Sep-2013 01:46:52.531 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 192.42.93.30#53
01-Sep-2013 01:46:52.532 info: error (host unreachable) resolving './DNSKEY/IN': 192.58.128.30#53
01-Sep-2013 01:46:52.532 info: error (host unreachable) resolving 'ns.vl.net.ua/A/IN': 204.61.216.12#53
01-Sep-2013 01:46:52.589 info: error (host unreachable) resolving 'ns.vl.net.ua/A/IN': 188.230.120.34#53
01-Sep-2013 01:46:52.612 info: error (host unreachable) resolving 'ns.vl.net.ua/AAAA/IN': 188.230.120.34#53
01-Sep-2013 01:46:52.665 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 216.218.215.27#53
01-Sep-2013 01:46:52.665 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 193.0.9.121#53
01-Sep-2013 01:46:52.666 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 194.0.1.9#53
01-Sep-2013 01:46:52.697 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 91.201.21.178#53
01-Sep-2013 01:46:52.787 info: error (host unreachable) resolving 'ho1.eunic.net.ua/A/IN': 80.92.225.122#53
01-Sep-2013 01:46:52.791 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.48.79.30#53
01-Sep-2013 01:46:52.802 info: error (host unreachable) resolving 'ns.vl.net.ua/AAAA/IN': 188.230.119.2#53
01-Sep-2013 01:46:52.854 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 193.193.193.100#53
01-Sep-2013 01:46:52.854 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 194.44.156.30#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 198.41.0.4#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 198.41.0.4#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 192.203.230.10#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 192.203.230.10#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns.vl.net.ua/AAAA/IN': 192.203.230.10#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns.vl.net.ua/AAAA/IN': 192.36.148.17#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns.vl.net.ua/AAAA/IN': 192.58.128.30#53
01-Sep-2013 02:11:26.633 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 192.36.148.17#53
01-Sep-2013 02:11:26.634 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 192.58.128.30#53
01-Sep-2013 02:11:26.634 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 199.7.83.42#53
01-Sep-2013 02:11:26.634 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 128.63.2.53#53
01-Sep-2013 02:11:26.644 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 192.33.14.30#53
01-Sep-2013 02:11:26.644 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 192.12.94.30#53
01-Sep-2013 02:11:26.653 info: error (host unreachable) resolving 'ns.kharkov.ua/A/IN': 193.0.9.121#53
01-Sep-2013 02:11:26.654 info: error (host unreachable) resolving 'ns.kharkov.ua/A/IN': 204.61.216.12#53
01-Sep-2013 02:11:26.676 info: error (host unreachable) resolving 'ns.vl.net.ua/A/IN': 192.5.4.1#53
01-Sep-2013 02:11:26.678 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 192.31.80.30#53
01-Sep-2013 02:11:26.679 info: error (host unreachable) resolving './DNSKEY/IN': 202.12.27.33#53
01-Sep-2013 02:11:26.679 info: error (host unreachable) resolving './DNSKEY/IN': 192.228.79.201#53
01-Sep-2013 02:11:26.679 info: error (host unreachable) resolving './DNSKEY/IN': 192.33.4.12#53
01-Sep-2013 02:11:26.680 info: error (host unreachable) resolving './DNSKEY/IN': 192.5.5.241#53
01-Sep-2013 02:11:26.680 info: error (host unreachable) resolving './DNSKEY/IN': 193.0.14.129#53
01-Sep-2013 02:11:26.698 info: error (host unreachable) resolving 'ns.vl.net.ua/AAAA/IN': 188.230.120.34#53
01-Sep-2013 02:11:26.727 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 194.0.1.9#53
01-Sep-2013 02:11:26.754 info: error (host unreachable) resolving 'ho1.eunic.net.ua/A/IN': 185.12.112.220#53
01-Sep-2013 02:11:26.766 info: error (host unreachable) resolving 'ho1.eunic.net.ua/A/IN': 80.92.225.122#53
01-Sep-2013 02:11:26.773 info: error (host unreachable) resolving 'ns.valor.ua/A/IN': 188.230.119.2#53
01-Sep-2013 02:11:26.773 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.26.92.30#53
01-Sep-2013 02:11:26.774 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.52.178.30#53
01-Sep-2013 02:11:26.795 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 195.24.128.164#53
01-Sep-2013 02:11:26.906 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 194.44.156.18#53
01-Sep-2013 02:11:27.025 info: error (host unreachable) resolving 'ns2.trifle.net/AAAA/IN': 91.201.21.178#53
01-Sep-2013 02:47:24.443 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.203.230.10#53
01-Sep-2013 02:47:24.444 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 202.12.27.33#53
01-Sep-2013 02:47:24.444 info: error (host unreachable) resolving './NS/IN': 192.36.148.17#53
01-Sep-2013 02:47:24.444 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.36.148.17#53
01-Sep-2013 02:47:24.444 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 128.63.2.53#53
01-Sep-2013 02:47:24.582 info: error (host unreachable) resolving './DNSKEY/IN': 192.228.79.201#53
01-Sep-2013 02:47:24.629 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.35.51.30#53
01-Sep-2013 02:47:24.629 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 192.55.83.30#53
01-Sep-2013 02:47:24.668 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 194.44.156.18#53
01-Sep-2013 02:47:24.668 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 193.193.193.100#53
01-Sep-2013 02:47:24.669 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 194.44.156.30#53
01-Sep-2013 02:48:37.286 info: error (host unreachable) resolving 'nss.kharkiv.net/A/IN': 194.44.156.18#53
01-Sep-2013 02:48:37.296 info: error (host unreachable) resolving './NS/IN': 192.5.5.241#53
01-Sep-2013 02:48:37.708 info: error (host unreachable) resolving 'nss.kharkiv.net.dlv.isc.org/DLV/IN': 149.20.64.3#53
01-Sep-2013 02:48:37.754 info: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 199.254.50.1#53
01-Sep-2013 02:48:37.754 info: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 199.254.49.1#53
01-Sep-2013 02:48:37.754 info: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 199.254.31.1#53
01-Sep-2013 02:48:37.754 info: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 199.254.48.1#53
01-Sep-2013 02:48:37.754 info: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 199.249.113.1#53
01-Sep-2013 02:48:37.799 info: error (host unreachable) resolving 'ns.isc.afilias-nst.info/A/IN': 65.22.8.1#53
01-Sep-2013 02:48:37.959 info: error (host unreachable) resolving 'ns1.isc.ultradns.net/A/IN': 192.54.112.30#53
01-Sep-2013 02:48:37.959 info: error (host unreachable) resolving 'ns1.isc.ultradns.net/A/IN': 192.41.162.30#53
01-Sep-2013 02:48:37.959 info: error (host unreachable) resolving 'ns2.isc.ultradns.net/A/IN': 192.48.79.30#53
01-Sep-2013 02:48:37.959 info: error (host unreachable) resolving 'ns2.isc.ultradns.net/A/IN': 192.33.14.30#53
01-Sep-2013 02:48:38.159 info: error (host unreachable) resolving 'pdns4.ultradns.org/A/IN': 199.19.57.1#53
01-Sep-2013 02:48:38.159 info: error (host unreachable) resolving 'pdns5.ultradns.info/A/IN': 199.249.121.1#53
01-Sep-2013 02:48:38.159 info: error (host unreachable) resolving './NS/IN': 192.58.128.30#53
01-Sep-2013 02:48:38.205 info: error (host unreachable) resolving 'pdns4.ultradns.org/A/IN': 199.7.69.1#53
01-Sep-2013 02:48:38.205 info: error (host unreachable) resolving 'pdns4.ultradns.org/A/IN': 204.74.109.1#53
01-Sep-2013 02:48:38.205 info: error (host unreachable) resolving 'pdns4.ultradns.org/A/IN': 199.7.68.1#53
01-Sep-2013 02:48:38.205 info: error (host unreachable) resolving 'pdns4.ultradns.org/A/IN': 204.74.108.1#53
01-Sep-2013 02:48:38.209 info: error (host unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 199.254.63.254#53
01-Sep-2013 02:48:38.209 info: error (host unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 149.20.64.4#53
01-Sep-2013 02:48:38.257 info: error (host unreachable) resolving 'ns1.isc.ultradns.net/A/IN': 199.7.69.1#53
01-Sep-2013 02:48:38.257 info: error (host unreachable) resolving 'ns1.isc.ultradns.net/A/IN': 204.74.109.1#53
01-Sep-2013 02:48:38.257 info: error (host unreachable) resolving 'ns1.isc.ultradns.net/A/IN': 199.7.68.1#53
01-Sep-2013 02:48:38.288 info: error (host unreachable) resolving 'pdns5.ultradns.info/A/IN': 204.74.114.1#53
01-Sep-2013 02:49:34.820 info: error (host unreachable) resolving 'ns2/trifle.net/A/IN': 192.26.92.30#53
01-Sep-2013 02:49:42.067 info: error (host unreachable) resolving 'ns2.trifle.net/A/IN': 195.24.128.164#53
01-Sep-2013 02:49:42.067 info: error (host unreachable) resolving './NS/IN': 192.33.4.12#53
01-Sep-2013 02:49:42.068 info: error (host unreachable) resolving './NS/IN': 199.7.83.42#53
01-Sep-2013 02:49:42.108 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 204.61.216.12#53
01-Sep-2013 02:49:42.108 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 193.0.9.121#53
01-Sep-2013 02:49:42.172 info: error (host unreachable) resolving 'ns.apex.dp.ua/A/IN': 91.201.21.178#53
01-Sep-2013 02:49:42.236 info: error (host unreachable) resolving 'trifle.net/DS/IN': 192.52.178.30#53
01-Sep-2013 02:49:42.283 info: error (host unreachable) resolving 'ns2.trifle.net.dlv.isc.org/DLV/IN': 156.154.100.23#53сильно удивился так как пинги к примеру на ya.ru, mail.ru и т.д. идут нормально. Проверяю nslookup-ом nss.kharkiv.net, в 1 раз получаю :
+ открыть спойлер
nslookup nss.kharkiv.net 127.0.0.1
Server: 127.0.0.1
Address: 127.0.0.1#53
** server can't find nss.kharkiv.net: NXDOMAINжду секунд 10 и повторяю nslookup nss.kharkiv.net 127.0.0.1 и получаю нормальный ответ.
проверяю ради интереса nslookup pdns5.ultradns.info 127.0.0.1 и получаю нормальный ответ.
Народ подскажите как можно избежать таких приколов ?
если что вот мой конфиг :
+ открыть спойлер
acl local-lan {
10.1.0.0/16; 127.0.0.1;
};
options {
listen-on port 53 { 10.1.5.200; 192.1.5.55; мой внешний ip; 127.0.0.1; };
listen-on-v6 port 53 { none; };
directory "/var/named";
version "DNS Server";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
// memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { 10.1.0.0/16; мой внешний ip; localhost; };
allow-query-cache { local-lan; };
allow-transfer { localhost; };
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
logging {
channel "xfer" {
file "/var/log/named/xfer.log" versions 3 size 10m;
print-time yes;
print-severity yes;
severity info;
};
channel "lame" {
file "/var/log/named/lamers.log" versions 3 size 10m;
print-time yes;
print-severity yes;
severity info;
};
channel "config" {
file "/var/log/named/conf.log" versions 3 size 10m;
print-time yes;
print-severity yes;
severity info;
};
channel "security" {
file "/var/log/named/security.log" versions 3 size 10m;
print-time yes;
print-severity yes;
severity info;
};
//Sobytija, svjazannye s polucheniem zon
category "xfer-in" {"xfer";};
//Sobytija, svjazannye s peredachej zon
category "xfer-out" {"xfer";};
//Sobytija, svjazannye s izmeneniem v zonah
category "notify" {"xfer";};
//Sobytija, svjazannye s nekorektnym delegirovaniem
category "lame-servers" {"lame";};
//Sobytija, svjazannye s obrabotkoj fajla konfiguracii
category "config" {"config";};
//Sobytija, svjazannye s zapreshheniem/razresheniem zaprosov
category "security" {"security";};
//Esli dlja sobytija kanal ne opredeljon
category "default" {"default_syslog";"default_debug";};
};
//include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/named/my_zones";З.Ы. я понимаю что походу он при старте просто не дождавшись ответа ругается мне в лог, но все же я думаю так не должно быть.
Спросить - стыд минуты, не узнать - стыд всей жизни
...
