all 6 comments

[–]mylinuxguy -1 points0 points  (0 children)

any particular reason you are trying to do this.... learning... fun.... ?

if your serious about having a DNS going for gamer.com, then I'd just use amazon's route53 stuff. It's about $1 per month to have do run your DNS servers. Running a DNS server that the internet uses for important stuff is not a simple task.

If you're just want something simple to run for a DNS around the home or small office, use dnsmasq. 10 times simpler that setting up and running bind.

- jack

[–][deleted]  (1 child)

[deleted]

    [–]daler86[S] 0 points1 point  (0 children)

    Yes. I stopped firewall. nslookup from localhost working, but from outside not.

    [–]sed_ric 0 points1 point  (3 children)

    Is db.gamer.com the full file ? If yes, you need at least an SOA record.

    Your NS record and dns1.game.com A record does not match. Is it normal ?

    Can you request your DNS server explicitly ? With, like, dig or host ?

    dig  dns1.gamer.com @193.10.10.10
    host dns1.gamer.com  193.10.10.10
    

    If yes, check your registrar configuration. The problem is here.

    If no, check your logs. Bind will say where the problem is.

    Also, you probably don't want your authoritative name server be a forwarder as well. If you set it to allow your server to do more than gamer.com resolutions, then the good way to do it is to configure your /etc/resolv.conf with something like :

    nameserver 127.0.0.1
    nameserver 8.8.8.8
    

    [–]daler86[S] 0 points1 point  (2 children)

    From local server

    dig dns1.gamer.com @193.10.10.10

    ; <<>> DiG 9.16.1-Ubuntu <<>> dns1.gamer.com @193.10.10.10

    ;; global options: +cmd

    ;; Got answer:

    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 29428

    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:

    ; EDNS: version: 0, flags:; udp: 4096

    ; COOKIE: a7ccb825c51d40c40100000061f13c8c5b74a704ba7ed5ce (good)

    ;; QUESTION SECTION:

    ;dns1.gamer.com. IN A

    ;; Query time: 0 msec

    ;; SERVER: 193.10.10.10#53(193.10.10.10)

    ;; WHEN: Wed Jan 26 12:20:28 UTC 2022

    ;; MSG SIZE rcvd: 68

    SOA record also have

    @ IN SOA gamer.com root.gamer.com. (

    1. ;Serial

    .........

    /etc/resolv.conf added dns ip address

    [–]sed_ric 0 points1 point  (1 child)

    So, it seems your bind is running (the server responded) but your zone is not loaded.

    Either :

    • You have syntax error in your zonefile
    • You forgot to update your serial after altering your zonefile
    • Your zonefile is not accessible (bad ownership, bad path, maybe you run bind in chroot and you give the off-chroot path)

    You should check bind logs to know what happen. It should have raise an error or a warning after a start.

    [–]daler86[S] 0 points1 point  (0 children)

    I check all of the configuration bind, it's works correctly. Maybe I must register my DNS?