View Full Version : Nameservers broke !!! HELP !!
NetSender 02-13-2004, 05:11 AM http://www.dnsreport.com/tools/dnsreport.ch?domain=netsender.co.uk
The above shows the error, this is true to all domains hosted on my server, i dont know why this has happened, but it just suddenly has happened !
I've tried restarting BIND, and I've restarted the server, according to server status BIND is running fine.
But its not working !!!!! Any suggestions anyone ?
thedavid 02-13-2004, 05:18 AM Looks like it's not running at all - it's not answering to any requests.
Do you have a firewall that you just setup? That could block requests if improperly setup. If not..
Open a new SSH window and enter in 'tail -f /var/log/messages'
Open another window and restart bind.
Watch for any error messages that occur - /var/log/messages is where bind'll toss any errors it gets.
SkullOne 02-13-2004, 05:20 AM Looks like a pretty serious misconfiguration :)
I would try to diagnose this myself, but at time of writing this, your name servers arent responding to queries.
Paste your zone file here, maybe theres a mistake that we can point out.
Also, if you issue ' rndc reload ' what does it tell you?
If it says service not running, well, there you go!
NetSender 02-13-2004, 05:32 AM OK, i gotta major problem, because I'm at college currently and they have filtered out shell connections. So I'm in major problem territory, as I have to wait nearly 12 hours til I can even attempt to fix it. Can either of you 2 help if I just set you up a webhosting account with a shell on it ?
thedavid 02-13-2004, 05:36 AM Not really - it'd have to be a root login. If you're comfortable with that, pm me that and the server info and I'll take a look. No gaurantees, but if I can fix it I will.
SkullOne 02-13-2004, 05:42 AM While youre at it, might as well chroot BIND, if its not already done :)
Some people on the NANOG mailing list mentioned some recent activity about spoofed IP's trying to do zone transfers and such with bogus servers.
Can never be too carefull :rolleyes:
thedavid 02-13-2004, 05:45 AM Fixed - there was a improperly named zone file defined, so bind was failing it on startup. Yanked that and restarted, and all is well with the world.
Boy, you guys sure are impressive. Great work helping someone in dire need.
thedavid, good job with the fix. :agree:
Vito
NetSender 02-13-2004, 07:24 AM Yeh thanks loads you guys, but now I got another problem
My subdomains arent working. The records exist and so do the redirects, but you cant get them up (well at least I cant from here !), try this one out : http://helpdesk.netsender.net and see if you get anything
thedavid 02-13-2004, 07:29 AM NXDOMAIN is the reply. You need to add a period at the end of your CNAME line, otherwise the domain'll be repeated twice like it is now:
;; QUESTION SECTION:
;helpdesk.netsender.net. IN A
;; ANSWER SECTION:
helpdesk.netsender.net. 14400 IN CNAME netsender.net.netsender.net.
So make it this instead:
helpdesk 14400 IN CNAME netsender.net.
Currently you must have it setup like so:
helpdesk 14400 IN CNAME netsender.net
NetSender 02-13-2004, 07:35 AM ok I changed that, but (and this could be my college's stupid ISA/Proxy DNS Cache thing)
http://helpdesk.netsender.net << this doesnt seem to work for me
http://staff.netsender.net << this does work, but i didnt check it before as i presumed it wouldnt work too. but I did have to add a period on the end of this entry as well as the helpdesk one
thedavid 02-13-2004, 07:37 AM Original is much better:
;; QUESTION SECTION:
;helpdesk.netsender.net. IN A
;; ANSWER SECTION:
helpdesk.netsender.net. 14400 IN CNAME netsender.net.
netsender.net. 14400 IN A 216.66.21.117
It's cached for 4 hours though. Wait that long, then try again (or use different connecting nameservers)
Second one looks fine too:
;; QUESTION SECTION:
;staff.netsender.net. IN A
;; ANSWER SECTION:
staff.netsender.net. 14400 IN CNAME netsender.net.
netsender.net. 14400 IN A 216.66.21.117
-David
NetSender 02-13-2004, 07:40 AM question : How do you retrieve that info from my nameservers ?
thedavid 02-13-2004, 07:42 AM Drop to a shell and issued:
dig helpdesk.netsender.net @ns1.netsender.co.uk
If you really wanna get all the nitty gritty, I could've setup my nameserver to do a zone transfer from yours - that'll get all the records. Unless you have this explicitly disabled, of course.
-David
NetSender 02-13-2004, 07:49 AM so could you copy an entire nameservers record set to your local machine ? if so what would be this command ?
dig * @ns1.netsender.co.uk ??
Oh and according to cPanel Bind's still dead, but it all works anyway. Just wondering if anyone knows why Iam gettin a redligh from it ?
cactus 02-13-2004, 07:51 AM Well done David Excellent work!
Regards
thedavid 02-13-2004, 07:53 AM You can do a zone transfer like so:
dig netsender.co.uk AXFR @ns1.netsender.co.uk
That should drop the full zone to the console.
thedavid 02-13-2004, 07:54 AM Originally posted by cactus
Well done David Excellent work!
Regards
Thank you, thank you...
(bows)
:D
NetSender 02-13-2004, 09:35 AM Thanks loads.
Its great to see the real community spirit that Web Hosting Talk has to offer to its users.
NetSender 02-13-2004, 09:44 AM Originally posted by thedavid
You can do a zone transfer like so:
dig netsender.co.uk AXFR @ns1.netsender.co.uk
That should drop the full zone to the console.
Say you have shared nameservers. I.e. ns1.netsender.co.uk and ns1.msn.com on the same IP address.
Doing that ^ would you just retrieve the netsender ones ? or both
would it be possible to do this, and just use raw IP :
dig 216.66.21.100 AXFR @216.66.21.100
and that would return all domain names hosted on that IP ?
thedavid for president!!!
OK, how about just MOTM?
Damn. He's a liaison. He's not eligible.
Well, he's top shelf in my eyes, anyways.
:banana:
Vito
thedavid 02-13-2004, 09:49 AM Nope, that'd ask for the zone called 216.66.21.100 at the server 216.66.21.100. Since that doesn't exist, you'd get a failed transfer.
You could do this though:
dig netsender.co.uk AXFR @216.66.21.100
thedavid 02-13-2004, 09:50 AM Originally posted by vito
thedavid for president!!!
OK, how about just MOTM?
Damn. He's a liaison. He's not eligible.
Well, he's top shelf in my eyes, anyways.
:banana:
Vito
:emlaugh:
What a job, no pay, no bennies.. I'm striking.. ;)
[*...starts a campaign to get every WHT member to paypal thedavid $1... at 57M+ members , not too shabby,,, *]
:D
Vito
Rockerhard 02-13-2004, 10:24 AM Well, he's top shelf in my eyes, anyways.
Make that two of us. David is a genius :D
[*...starts a campaign to get every WHT member to paypal thedavid $1... at 57M+ members , not too shabby,,, *]
Count me in! Where's the link? :celebrate:
NetSender 02-13-2004, 01:05 PM yeah but I want to list ALL domains at that nameserver, or is that not possible ?
thedavid 02-13-2004, 01:47 PM Originally posted by NetSender
yeah but I want to list ALL domains at that nameserver, or is that not possible ?
Not really possible, unless you can nab their /etc/named.conf file somehow.
Originally posted by vito
starts a campaign to get every WHT member to paypal thedavid $1...
If everyone paypals me a dollar, I'll buy one of
these (http://www.pontiac.com/gto/) and get a custom WHT paintjob - iNet'd love it ;)
-David
kckclass 02-14-2004, 01:39 AM nice job but don't torture yourself with a Pontiac...bad idea...expensive and it will take all $57m to pay for the repairs... personal experience.
|