Nameserver responding REFUSED on Centos 7DNS Server on Fedora 11DNS zones and named filesSetting up a DNS name server for a mass virtual host with Bind9Nameserver does not have A recordCentOS BIND DNS Troubleshooting?Two nameserver questionsDNS BIND on CENTOS 6.3 and domain nameserversQuestions about DNS, BIND and setupCannot find solution to “One or more of your nameservers did not return any of your NS records.” on intoDNS siteNeed help for configuring a dns server
Does gravity affect the time evolution of a QM wave function?
51% attack - apparently very easy? refering to CZ's "rollback btc chain" - How to make sure such corruptible scenario can never happen so easily?
CPLD based Pierce oscillator
correct spelling of "carruffel" (fuzz, hustle, all that jazz)
Wireless headphones interfere with Wi-Fi signal on laptop
Would an 8% reduction in drag outweigh the weight addition from this custom CFD-tested winglet?
What's tha name for when you write multiple voices on same staff? And are there any cons?
Ito`s Lemma problem
Is taking modulus on both sides of an equation valid?
Do I need to say 'o`clock'?
If current results hold, Man City would win PL title
Why is it harder to turn a motor/generator with shorted terminals?
Area under the curve - Integrals (Antiderivatives)
What information do scammers need to withdraw money from an account?
On studying Computer Science vs. Software Engineering to become a proficient coder
How can I answer high-school writing prompts without sounding weird and fake?
Is there ever any indication in the MCU as to how Spider-Man got his powers?
Do Life Drain attacks from wights stack?
What's the difference between "за ... от" and "в ... от"?
What is the limit on how high you can fly up?
Why are solar panels kept tilted?
What is the best way for a skeleton to impersonate human without using magic?
What kind of SATA connector is this?
Does Lawful Interception of 4G / the proposed 5G provide a back door for hackers as well?
Nameserver responding REFUSED on Centos 7
DNS Server on Fedora 11DNS zones and named filesSetting up a DNS name server for a mass virtual host with Bind9Nameserver does not have A recordCentOS BIND DNS Troubleshooting?Two nameserver questionsDNS BIND on CENTOS 6.3 and domain nameserversQuestions about DNS, BIND and setupCannot find solution to “One or more of your nameservers did not return any of your NS records.” on intoDNS siteNeed help for configuring a dns server
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have domain registered with godaddy. I had set up custom hostname on godaddy and used same nameservers for the domain.
ns1.domain.com and ns2.domain.com (both hostnames are pointing to same ip)
Now I had configured my server with Centos 7 and centos web panel. Below are data of few files which is necessary for setting up DNS. The problem is with DNS that nameserver is not working. Please help me solve this issue. IP: 142.54.176.130 and Domain: getfreereallikes.com
/etc/named.conf:
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a any DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-version/Bv9ARM.html
options
listen-on port 53 any; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query any; ;
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion no;
dnssec-enable yes;
dnssec-validation no;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
;
logging
channel default_debug
file "data/named.run";
severity dynamic;
;
;
zone "." IN
type hint;
file "named.ca";
;
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
zone "ns1.getfreereallikes.com" type master;file "/var/named/ns1.getfreereallikes.com.db";;
zone "ns2.getfreereallikes.com" type master;file "/var/named/ns2.getfreereallikes.com.db";;
/var/named/ns1.getfreereallikes.com.db:
; Panel %version%
; Zone file for ns1.getfreereallikes.com
$TTL 14400
ns1.getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. info.centos-webpanel.com. (
2013071600 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400 ;minimum, seconds
)
ns1.getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
ns1.getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
ns1.getfreereallikes.com. 14400 IN A 142.54.176.130
/var/named/getfreereallikes.com.db:
; Generated by CWP
; Zone file for krushimitra.co.in
$TTL 14400
getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. email.gmail.com. (
2019050200 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400
)
getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
getfreereallikes.com. 0 IN A 142.54.176.130
localhost.getfreereallikes.com. 0 IN A 127.0.0.1
getfreereallikes.com. 0 IN MX 5 getfreereallikes.com.
mail 0 IN CNAME getfreereallikes.com.
www 0 IN CNAME getfreereallikes.com.
ftp 0 IN CNAME getfreereallikes.com.
; Add additional below this line
_dmarc 14400 IN TXT "v=DMARC1; p=none"
ns1 14400 IN A 142.54.176.130
ns2 14400 IN A 142.54.176.130
/etc/resolv.conf:
# Generated by NetworkManager
search getfreereallikes.com
nameserver 127.0.0.1
dig @ 142.54.176.130 www.getfreereallikes.com:
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 2624
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.getfreereallikes.com. IN A
;; Query time: 0 msec
;; SERVER: 142.54.176.130#53(142.54.176.130)
;; WHEN: Thu May 02 05:56:26 CDT 2019
;; MSG SIZE rcvd: 53
domain-name-system centos7 nameserver dns-zone
add a comment |
I have domain registered with godaddy. I had set up custom hostname on godaddy and used same nameservers for the domain.
ns1.domain.com and ns2.domain.com (both hostnames are pointing to same ip)
Now I had configured my server with Centos 7 and centos web panel. Below are data of few files which is necessary for setting up DNS. The problem is with DNS that nameserver is not working. Please help me solve this issue. IP: 142.54.176.130 and Domain: getfreereallikes.com
/etc/named.conf:
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a any DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-version/Bv9ARM.html
options
listen-on port 53 any; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query any; ;
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion no;
dnssec-enable yes;
dnssec-validation no;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
;
logging
channel default_debug
file "data/named.run";
severity dynamic;
;
;
zone "." IN
type hint;
file "named.ca";
;
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
zone "ns1.getfreereallikes.com" type master;file "/var/named/ns1.getfreereallikes.com.db";;
zone "ns2.getfreereallikes.com" type master;file "/var/named/ns2.getfreereallikes.com.db";;
/var/named/ns1.getfreereallikes.com.db:
; Panel %version%
; Zone file for ns1.getfreereallikes.com
$TTL 14400
ns1.getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. info.centos-webpanel.com. (
2013071600 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400 ;minimum, seconds
)
ns1.getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
ns1.getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
ns1.getfreereallikes.com. 14400 IN A 142.54.176.130
/var/named/getfreereallikes.com.db:
; Generated by CWP
; Zone file for krushimitra.co.in
$TTL 14400
getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. email.gmail.com. (
2019050200 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400
)
getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
getfreereallikes.com. 0 IN A 142.54.176.130
localhost.getfreereallikes.com. 0 IN A 127.0.0.1
getfreereallikes.com. 0 IN MX 5 getfreereallikes.com.
mail 0 IN CNAME getfreereallikes.com.
www 0 IN CNAME getfreereallikes.com.
ftp 0 IN CNAME getfreereallikes.com.
; Add additional below this line
_dmarc 14400 IN TXT "v=DMARC1; p=none"
ns1 14400 IN A 142.54.176.130
ns2 14400 IN A 142.54.176.130
/etc/resolv.conf:
# Generated by NetworkManager
search getfreereallikes.com
nameserver 127.0.0.1
dig @ 142.54.176.130 www.getfreereallikes.com:
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 2624
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.getfreereallikes.com. IN A
;; Query time: 0 msec
;; SERVER: 142.54.176.130#53(142.54.176.130)
;; WHEN: Thu May 02 05:56:26 CDT 2019
;; MSG SIZE rcvd: 53
domain-name-system centos7 nameserver dns-zone
Your/etc/resolv.conf
is mostly irrelevant here. You should indeed as you show always usedig
with the@
flag to query a specific nameserver.
– Patrick Mevzek
May 2 at 19:08
Two tools that can be useful also:named-checkconf
to check your whole configuration, andnamed-checkzone
to test a specific zone, and make sure its content is ok.
– Patrick Mevzek
May 2 at 19:09
add a comment |
I have domain registered with godaddy. I had set up custom hostname on godaddy and used same nameservers for the domain.
ns1.domain.com and ns2.domain.com (both hostnames are pointing to same ip)
Now I had configured my server with Centos 7 and centos web panel. Below are data of few files which is necessary for setting up DNS. The problem is with DNS that nameserver is not working. Please help me solve this issue. IP: 142.54.176.130 and Domain: getfreereallikes.com
/etc/named.conf:
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a any DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-version/Bv9ARM.html
options
listen-on port 53 any; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query any; ;
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion no;
dnssec-enable yes;
dnssec-validation no;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
;
logging
channel default_debug
file "data/named.run";
severity dynamic;
;
;
zone "." IN
type hint;
file "named.ca";
;
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
zone "ns1.getfreereallikes.com" type master;file "/var/named/ns1.getfreereallikes.com.db";;
zone "ns2.getfreereallikes.com" type master;file "/var/named/ns2.getfreereallikes.com.db";;
/var/named/ns1.getfreereallikes.com.db:
; Panel %version%
; Zone file for ns1.getfreereallikes.com
$TTL 14400
ns1.getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. info.centos-webpanel.com. (
2013071600 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400 ;minimum, seconds
)
ns1.getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
ns1.getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
ns1.getfreereallikes.com. 14400 IN A 142.54.176.130
/var/named/getfreereallikes.com.db:
; Generated by CWP
; Zone file for krushimitra.co.in
$TTL 14400
getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. email.gmail.com. (
2019050200 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400
)
getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
getfreereallikes.com. 0 IN A 142.54.176.130
localhost.getfreereallikes.com. 0 IN A 127.0.0.1
getfreereallikes.com. 0 IN MX 5 getfreereallikes.com.
mail 0 IN CNAME getfreereallikes.com.
www 0 IN CNAME getfreereallikes.com.
ftp 0 IN CNAME getfreereallikes.com.
; Add additional below this line
_dmarc 14400 IN TXT "v=DMARC1; p=none"
ns1 14400 IN A 142.54.176.130
ns2 14400 IN A 142.54.176.130
/etc/resolv.conf:
# Generated by NetworkManager
search getfreereallikes.com
nameserver 127.0.0.1
dig @ 142.54.176.130 www.getfreereallikes.com:
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 2624
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.getfreereallikes.com. IN A
;; Query time: 0 msec
;; SERVER: 142.54.176.130#53(142.54.176.130)
;; WHEN: Thu May 02 05:56:26 CDT 2019
;; MSG SIZE rcvd: 53
domain-name-system centos7 nameserver dns-zone
I have domain registered with godaddy. I had set up custom hostname on godaddy and used same nameservers for the domain.
ns1.domain.com and ns2.domain.com (both hostnames are pointing to same ip)
Now I had configured my server with Centos 7 and centos web panel. Below are data of few files which is necessary for setting up DNS. The problem is with DNS that nameserver is not working. Please help me solve this issue. IP: 142.54.176.130 and Domain: getfreereallikes.com
/etc/named.conf:
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a any DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-version/Bv9ARM.html
options
listen-on port 53 any; ;
listen-on-v6 port 53 ::1; ;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query any; ;
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
- If you are building a RECURSIVE (caching) DNS server, you need to enable
recursion.
- If your recursive DNS server has a public IP address, you MUST enable access
control to limit queries to your legitimate users. Failing to do so will
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion no;
dnssec-enable yes;
dnssec-validation no;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
;
logging
channel default_debug
file "data/named.run";
severity dynamic;
;
;
zone "." IN
type hint;
file "named.ca";
;
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
zone "ns1.getfreereallikes.com" type master;file "/var/named/ns1.getfreereallikes.com.db";;
zone "ns2.getfreereallikes.com" type master;file "/var/named/ns2.getfreereallikes.com.db";;
/var/named/ns1.getfreereallikes.com.db:
; Panel %version%
; Zone file for ns1.getfreereallikes.com
$TTL 14400
ns1.getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. info.centos-webpanel.com. (
2013071600 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400 ;minimum, seconds
)
ns1.getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
ns1.getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
ns1.getfreereallikes.com. 14400 IN A 142.54.176.130
/var/named/getfreereallikes.com.db:
; Generated by CWP
; Zone file for krushimitra.co.in
$TTL 14400
getfreereallikes.com. 86400 IN SOA ns1.getfreereallikes.com. email.gmail.com. (
2019050200 ;serial, todays date+todays
86400 ;refresh, seconds
7200 ;retry, seconds
3600000 ;expire, seconds
86400
)
getfreereallikes.com. 86400 IN NS ns1.getfreereallikes.com.
getfreereallikes.com. 86400 IN NS ns2.getfreereallikes.com.
getfreereallikes.com. 0 IN A 142.54.176.130
localhost.getfreereallikes.com. 0 IN A 127.0.0.1
getfreereallikes.com. 0 IN MX 5 getfreereallikes.com.
mail 0 IN CNAME getfreereallikes.com.
www 0 IN CNAME getfreereallikes.com.
ftp 0 IN CNAME getfreereallikes.com.
; Add additional below this line
_dmarc 14400 IN TXT "v=DMARC1; p=none"
ns1 14400 IN A 142.54.176.130
ns2 14400 IN A 142.54.176.130
/etc/resolv.conf:
# Generated by NetworkManager
search getfreereallikes.com
nameserver 127.0.0.1
dig @ 142.54.176.130 www.getfreereallikes.com:
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 2624
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.getfreereallikes.com. IN A
;; Query time: 0 msec
;; SERVER: 142.54.176.130#53(142.54.176.130)
;; WHEN: Thu May 02 05:56:26 CDT 2019
;; MSG SIZE rcvd: 53
domain-name-system centos7 nameserver dns-zone
domain-name-system centos7 nameserver dns-zone
edited May 2 at 19:07
Patrick Mevzek
3,05731226
3,05731226
asked May 2 at 11:01
user521817user521817
1
1
Your/etc/resolv.conf
is mostly irrelevant here. You should indeed as you show always usedig
with the@
flag to query a specific nameserver.
– Patrick Mevzek
May 2 at 19:08
Two tools that can be useful also:named-checkconf
to check your whole configuration, andnamed-checkzone
to test a specific zone, and make sure its content is ok.
– Patrick Mevzek
May 2 at 19:09
add a comment |
Your/etc/resolv.conf
is mostly irrelevant here. You should indeed as you show always usedig
with the@
flag to query a specific nameserver.
– Patrick Mevzek
May 2 at 19:08
Two tools that can be useful also:named-checkconf
to check your whole configuration, andnamed-checkzone
to test a specific zone, and make sure its content is ok.
– Patrick Mevzek
May 2 at 19:09
Your
/etc/resolv.conf
is mostly irrelevant here. You should indeed as you show always use dig
with the @
flag to query a specific nameserver.– Patrick Mevzek
May 2 at 19:08
Your
/etc/resolv.conf
is mostly irrelevant here. You should indeed as you show always use dig
with the @
flag to query a specific nameserver.– Patrick Mevzek
May 2 at 19:08
Two tools that can be useful also:
named-checkconf
to check your whole configuration, and named-checkzone
to test a specific zone, and make sure its content is ok.– Patrick Mevzek
May 2 at 19:09
Two tools that can be useful also:
named-checkconf
to check your whole configuration, and named-checkzone
to test a specific zone, and make sure its content is ok.– Patrick Mevzek
May 2 at 19:09
add a comment |
1 Answer
1
active
oldest
votes
You set up an authoritative only name server by disabling recursion with recursion no;
That means that your name server will only respond to queries for the domain names it considers itself authoritative.
That is a good thing!
The only domain names, "zones" in bind jargon, that you declare are:
zone "ns1.getfreereallikes.com" ...
zone "ns2.getfreereallikes.com" ...
Therefor a query for www.getfreereallikes.com
will be refused as that is not a domain hosted by your name server.
You probably don't need separate zone files for ns[1-2].getfreereallikes.com
and your intended config should probably be:
zone "getfreereallikes.com" type master;file "/var/named/getfreereallikes.com.db";;
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f965547%2fnameserver-responding-refused-on-centos-7%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You set up an authoritative only name server by disabling recursion with recursion no;
That means that your name server will only respond to queries for the domain names it considers itself authoritative.
That is a good thing!
The only domain names, "zones" in bind jargon, that you declare are:
zone "ns1.getfreereallikes.com" ...
zone "ns2.getfreereallikes.com" ...
Therefor a query for www.getfreereallikes.com
will be refused as that is not a domain hosted by your name server.
You probably don't need separate zone files for ns[1-2].getfreereallikes.com
and your intended config should probably be:
zone "getfreereallikes.com" type master;file "/var/named/getfreereallikes.com.db";;
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
add a comment |
You set up an authoritative only name server by disabling recursion with recursion no;
That means that your name server will only respond to queries for the domain names it considers itself authoritative.
That is a good thing!
The only domain names, "zones" in bind jargon, that you declare are:
zone "ns1.getfreereallikes.com" ...
zone "ns2.getfreereallikes.com" ...
Therefor a query for www.getfreereallikes.com
will be refused as that is not a domain hosted by your name server.
You probably don't need separate zone files for ns[1-2].getfreereallikes.com
and your intended config should probably be:
zone "getfreereallikes.com" type master;file "/var/named/getfreereallikes.com.db";;
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
add a comment |
You set up an authoritative only name server by disabling recursion with recursion no;
That means that your name server will only respond to queries for the domain names it considers itself authoritative.
That is a good thing!
The only domain names, "zones" in bind jargon, that you declare are:
zone "ns1.getfreereallikes.com" ...
zone "ns2.getfreereallikes.com" ...
Therefor a query for www.getfreereallikes.com
will be refused as that is not a domain hosted by your name server.
You probably don't need separate zone files for ns[1-2].getfreereallikes.com
and your intended config should probably be:
zone "getfreereallikes.com" type master;file "/var/named/getfreereallikes.com.db";;
You set up an authoritative only name server by disabling recursion with recursion no;
That means that your name server will only respond to queries for the domain names it considers itself authoritative.
That is a good thing!
The only domain names, "zones" in bind jargon, that you declare are:
zone "ns1.getfreereallikes.com" ...
zone "ns2.getfreereallikes.com" ...
Therefor a query for www.getfreereallikes.com
will be refused as that is not a domain hosted by your name server.
You probably don't need separate zone files for ns[1-2].getfreereallikes.com
and your intended config should probably be:
zone "getfreereallikes.com" type master;file "/var/named/getfreereallikes.com.db";;
answered May 2 at 11:51
HBruijnHBruijn
57.6k1190153
57.6k1190153
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
add a comment |
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
ok lte me try and thanks for your reply
– user521817
May 2 at 12:04
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
it's still not working while executing dig @ 142.54.176.130 www.getfreereallikes.com
– user521817
May 2 at 12:11
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> @142.54.176.130 www.getfreereallikes.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 7686 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.getfreereallikes.com. IN A ;; Query time: 0 msec ;; SERVER: 142.54.176.130#53(142.54.176.130) ;; WHEN: Thu May 02 07:13:57 CDT 2019 ;; MSG SIZE rcvd: 53
– user521817
May 2 at 12:14
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Please post your updates inside your first post not as comments, with full details (did you change the zonefile path? Did you restart bind? etc.). Also "both hostnames are pointing to same ip" is not a good idea. Are you absolutely sure you need to handle the DNS service for your domain? Why not use a specialized provider for that (either your registrar or a third pary) as it seems you are starting on that and hence playing with production zones is not a good idea, you should try to start learning on local toy zones to understand how the DNS and bind work.
– Patrick Mevzek
May 2 at 19:06
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
@user521817 Also did you look at your logfile? REFUSED from the nameserver clearly means it will not process the request, based on its current configuration. This should be marked in the logfile with some extra data that could help you. Note that your title is wrong, the nameserver DO reply, just with return code REFUSED. It is different from a server not replying at all (timeout) or a nameserver not reachable (refused connection at the IP level). I edited it.
– Patrick Mevzek
May 2 at 19:07
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f965547%2fnameserver-responding-refused-on-centos-7%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Your
/etc/resolv.conf
is mostly irrelevant here. You should indeed as you show always usedig
with the@
flag to query a specific nameserver.– Patrick Mevzek
May 2 at 19:08
Two tools that can be useful also:
named-checkconf
to check your whole configuration, andnamed-checkzone
to test a specific zone, and make sure its content is ok.– Patrick Mevzek
May 2 at 19:09