Arch Linux

nuxorg

Member

Registered: 2009-08-11

Posts: 37

Moving from dnsmasq to BIND

I'm trying to move from dnsmasq to BIND so I could host couple of domains, but I have problem with BIND. I can start BIND without problems, but seems like local cannot connect to the BIND.

Jul  9 13:55:29 localhost named[2564]: client 192.168.0.112#56814: query (cache) 'archlinux.org/A/IN' denied
Jul  9 13:55:31 localhost named[2564]: client 192.168.0.112#58072: query (cache) 'static.archlinux.org/A/IN' denied
Jul  9 13:55:32 localhost named[2564]: client 192.168.0.112#53897: query (cache) 'bugs.archlinux.org/A/IN' denied
Jul  9 13:55:32 localhost named[2564]: client 192.168.0.112#63589: query (cache) 'aur.archlinux.org/A/IN' denied
Jul  9 13:55:32 localhost named[2564]: client 192.168.0.112#63203: query (cache) 'mailman.archlinux.org/A/IN' denied

I use shorewall, but I don't think the problem is with it. I have eth0 (internet) and eth1 (local). With dnsmaq everything works ok. Dnsmasq works as a DNS cache server and DHCP server. I try to keep using dnsmasq with BIND, but just as a DHCP server. It is so easy to configure.

/etc/bind/options.conf

options {
    directory "/var/cache/bind";
    forwarders {213.145.209.100; 213.145.209.101;};
    auth-nxdomain no;
    allow-query { any; };
    recursion no;    
    version "0";        
    listen-on-v6 { any; };
};

/etc/named.conf

options {
    directory "/var/named";
    pid-file "/var/run/named/named.pid";
    auth-nxdomain yes;
    datasize default;
listen-on { any; };
allow-recursion { 127.0.0.1; };
    allow-transfer { none; };
    allow-update { none; };
    version none;
    hostname none;
    server-id none;
};

zone "localhost" IN {
    type master;
    file "localhost.zone";
    allow-transfer { any; };
};

zone "0.0.127.in-addr.arpa" IN {
    type master;
    file "127.0.0.zone";
    allow-transfer { any; };
};

zone "." IN {
    type hint;
    file "root.hint";
};

I have done something stupid? Thank you for any help, I try to google also some more information.