Web Hosting Talk







View Full Version : Nameservers broke !!! HELP !!


NetSender
02-13-2004, 05:11 AM
http://www.dnsreport.com/tools/dnsreport.ch?domain=netsender.co.uk

The above shows the error, this is true to all domains hosted on my server, i dont know why this has happened, but it just suddenly has happened !

I've tried restarting BIND, and I've restarted the server, according to server status BIND is running fine.

But its not working !!!!! Any suggestions anyone ?

thedavid
02-13-2004, 05:18 AM
Looks like it's not running at all - it's not answering to any requests.

Do you have a firewall that you just setup? That could block requests if improperly setup. If not..

Open a new SSH window and enter in 'tail -f /var/log/messages'

Open another window and restart bind.

Watch for any error messages that occur - /var/log/messages is where bind'll toss any errors it gets.

SkullOne
02-13-2004, 05:20 AM
Looks like a pretty serious misconfiguration :)
I would try to diagnose this myself, but at time of writing this, your name servers arent responding to queries.
Paste your zone file here, maybe theres a mistake that we can point out.
Also, if you issue ' rndc reload ' what does it tell you?
If it says service not running, well, there you go!

NetSender
02-13-2004, 05:32 AM
OK, i gotta major problem, because I'm at college currently and they have filtered out shell connections. So I'm in major problem territory, as I have to wait nearly 12 hours til I can even attempt to fix it. Can either of you 2 help if I just set you up a webhosting account with a shell on it ?

thedavid
02-13-2004, 05:36 AM
Not really - it'd have to be a root login. If you're comfortable with that, pm me that and the server info and I'll take a look. No gaurantees, but if I can fix it I will.

SkullOne
02-13-2004, 05:42 AM
While youre at it, might as well chroot BIND, if its not already done :)
Some people on the NANOG mailing list mentioned some recent activity about spoofed IP's trying to do zone transfers and such with bogus servers.
Can never be too carefull :rolleyes:

thedavid
02-13-2004, 05:45 AM
Fixed - there was a improperly named zone file defined, so bind was failing it on startup. Yanked that and restarted, and all is well with the world.

vito
02-13-2004, 06:30 AM
Boy, you guys sure are impressive. Great work helping someone in dire need.

thedavid, good job with the fix. :agree:

Vito

NetSender
02-13-2004, 07:24 AM
Yeh thanks loads you guys, but now I got another problem

My subdomains arent working. The records exist and so do the redirects, but you cant get them up (well at least I cant from here !), try this one out : http://helpdesk.netsender.net and see if you get anything

thedavid
02-13-2004, 07:29 AM
NXDOMAIN is the reply. You need to add a period at the end of your CNAME line, otherwise the domain'll be repeated twice like it is now:

;; QUESTION SECTION:
;helpdesk.netsender.net. IN A

;; ANSWER SECTION:
helpdesk.netsender.net. 14400 IN CNAME netsender.net.netsender.net.

So make it this instead:

helpdesk 14400 IN CNAME netsender.net.

Currently you must have it setup like so:

helpdesk 14400 IN CNAME netsender.net

NetSender
02-13-2004, 07:35 AM
ok I changed that, but (and this could be my college's stupid ISA/Proxy DNS Cache thing)

http://helpdesk.netsender.net << this doesnt seem to work for me
http://staff.netsender.net << this does work, but i didnt check it before as i presumed it wouldnt work too. but I did have to add a period on the end of this entry as well as the helpdesk one

thedavid
02-13-2004, 07:37 AM
Original is much better:

;; QUESTION SECTION:
;helpdesk.netsender.net. IN A

;; ANSWER SECTION:
helpdesk.netsender.net. 14400 IN CNAME netsender.net.
netsender.net. 14400 IN A 216.66.21.117

It's cached for 4 hours though. Wait that long, then try again (or use different connecting nameservers)

Second one looks fine too:

;; QUESTION SECTION:
;staff.netsender.net. IN A

;; ANSWER SECTION:
staff.netsender.net. 14400 IN CNAME netsender.net.
netsender.net. 14400 IN A 216.66.21.117

-David

NetSender
02-13-2004, 07:40 AM
question : How do you retrieve that info from my nameservers ?

thedavid
02-13-2004, 07:42 AM
Drop to a shell and issued:
dig helpdesk.netsender.net @ns1.netsender.co.uk

If you really wanna get all the nitty gritty, I could've setup my nameserver to do a zone transfer from yours - that'll get all the records. Unless you have this explicitly disabled, of course.

-David

NetSender
02-13-2004, 07:49 AM
so could you copy an entire nameservers record set to your local machine ? if so what would be this command ?

dig * @ns1.netsender.co.uk ??


Oh and according to cPanel Bind's still dead, but it all works anyway. Just wondering if anyone knows why Iam gettin a redligh from it ?

cactus
02-13-2004, 07:51 AM
Well done David Excellent work!

Regards

thedavid
02-13-2004, 07:53 AM
You can do a zone transfer like so:
dig netsender.co.uk AXFR @ns1.netsender.co.uk

That should drop the full zone to the console.

thedavid
02-13-2004, 07:54 AM
Originally posted by cactus
Well done David Excellent work!

Regards

Thank you, thank you...

(bows)

:D

NetSender
02-13-2004, 09:35 AM
Thanks loads.

Its great to see the real community spirit that Web Hosting Talk has to offer to its users.

NetSender
02-13-2004, 09:44 AM
Originally posted by thedavid
You can do a zone transfer like so:
dig netsender.co.uk AXFR @ns1.netsender.co.uk

That should drop the full zone to the console.


Say you have shared nameservers. I.e. ns1.netsender.co.uk and ns1.msn.com on the same IP address.

Doing that ^ would you just retrieve the netsender ones ? or both

would it be possible to do this, and just use raw IP :

dig 216.66.21.100 AXFR @216.66.21.100

and that would return all domain names hosted on that IP ?

vito
02-13-2004, 09:48 AM
thedavid for president!!!

OK, how about just MOTM?

Damn. He's a liaison. He's not eligible.

Well, he's top shelf in my eyes, anyways.

:banana:

Vito

thedavid
02-13-2004, 09:49 AM
Nope, that'd ask for the zone called 216.66.21.100 at the server 216.66.21.100. Since that doesn't exist, you'd get a failed transfer.

You could do this though:
dig netsender.co.uk AXFR @216.66.21.100

thedavid
02-13-2004, 09:50 AM
Originally posted by vito
thedavid for president!!!

OK, how about just MOTM?

Damn. He's a liaison. He's not eligible.

Well, he's top shelf in my eyes, anyways.

:banana:

Vito

:emlaugh:

What a job, no pay, no bennies.. I'm striking.. ;)

vito
02-13-2004, 09:53 AM
[*...starts a campaign to get every WHT member to paypal thedavid $1... at 57M+ members , not too shabby,,, *]

:D

Vito

Rockerhard
02-13-2004, 10:24 AM
Well, he's top shelf in my eyes, anyways.
Make that two of us. David is a genius :D
[*...starts a campaign to get every WHT member to paypal thedavid $1... at 57M+ members , not too shabby,,, *]
Count me in! Where's the link? :celebrate:

NetSender
02-13-2004, 01:05 PM
yeah but I want to list ALL domains at that nameserver, or is that not possible ?

thedavid
02-13-2004, 01:47 PM
Originally posted by NetSender
yeah but I want to list ALL domains at that nameserver, or is that not possible ?

Not really possible, unless you can nab their /etc/named.conf file somehow.

Originally posted by vito
starts a campaign to get every WHT member to paypal thedavid $1...

If everyone paypals me a dollar, I'll buy one of
these (http://www.pontiac.com/gto/) and get a custom WHT paintjob - iNet'd love it ;)

-David

kckclass
02-14-2004, 01:39 AM
nice job but don't torture yourself with a Pontiac...bad idea...expensive and it will take all $57m to pay for the repairs... personal experience.