Arch Linux

timm

Member

From: Wisconsin

Registered: 2004-02-25

Posts: 417

New BIND server, client trouble [solved]

I am learning BIND and have a local machine set up as a caching server and a server for the local network.

I was having problems with other machines on the local network not being able to see the server.  The "listen-on" entry in named.conf only had 127.0.0.1 in it, so I changed this to:

listen-on {127.0.0.1; 192.168.7.0/24;};

Now the other machines on the network can find the server and resolve local network names correctly.  However, the linux machines can't seem to resolve names on the Internet. If I ping www.google.com, I get an "Unknown host" error.  I also can't run pacman sucessfully, I get an error:

error: failed retrieving file 'core.db.tar.gz' from distro.ibiblio.org : No address record

for all servers.  I found another post with the suggestion of adding

XferCommand = /usr/bin/wget -4 --passive-ftp -c -O %o %u

to pacman.conf, but that just gave different errors.

There are some windows xp machines on the network, and they seem to be able to ping fine.

The server can successfully resolve Internet names, and can successfully run pacman.

I did try adding an external nameserver and reordering my resolv.conf file as suggested in this thread:

http://bbs.archlinux.org/viewtopic.php?id=89334

but then I again can't resolve the other local machines.

Now I'm just guessing......

Taking out the "search mylocal.lan" line from resolv.conf and replacing it with "domain mylocal.lan" allows me to resolve local and Internet names, but not to run pacman.

Last edited by timm (2010-03-23 15:59:06)

brebs

Member

Registered: 2007-04-03

Posts: 3,742

Re: New BIND server, client trouble [solved]

resolve local network names correctly.  However, the linux machines can't seem to resolve names on the Internet

You have not defined allow-recursion.

E.g. snippets from my BIND config:

acl trusted { 127.0.0.1; 192.168.5.16; };

options {
    listen-on-v6 { none; };
    listen-on { 127.0.0.1; 192.168.5.15; };

    // Allows only specific hosts to use the DNS server
    allow-query { trusted; };

    // Lock down recursive queries too, to be on the safe side
    allow-recursion { trusted; };
};

timm

Member

From: Wisconsin

Registered: 2004-02-25

Posts: 417

Re: New BIND server, client trouble [solved]

Yes, thanks.  I did have it defined, but incorrectly.  I only had 127.0.0.1 there.

I added the acl (Access Control List, for those reading this) line modified for my system, put trusted in allow-recursion, and bang, everything seems to work.