Forums NFrance

Bonjour,
      Suite les problèmes miniserv.conf, fichier zone etc, j'ai fait pleins de modifications sur mon serveur, mais le serveur toujours fonctionne pas bien, en fin, mon vds70317.nfrance.com ne répond plus à DNS.

      Pourriez-vous m'aider à résoudre ce problème? Merci.

Voici les infos:


Avec dig:

; <<>> DiG 9.2.4 <<>> finasec.fr
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 23016
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;finasec.fr.                    IN      A

;; Query time: 18 msec
;; SERVER: 80.247.228.1#53(80.247.228.1)
;; WHEN: Wed Apr  2 11:37:41 2008
;; MSG SIZE  rcvd: 28

root@vds70317:~# dig finasec.fr @80.247.232.187

; <<>> DiG 9.2.4 <<>> finasec.fr @80.247.232.187
;; global options:  printcmd
;; connection timed out; no servers could be reached
root@vds70317:~#

Avec command /etc/init.d/bind9 restart sous SSH

root@vds70317:~# /etc/init.d/bind9 restart
Stopping domain name service: named/etc/resolvconf/update.d/libc: Error: /etc/resolv.conf is not a symbolic link to /etc/resolvconf/run/resolv.conf
rndc: connect failed: connection refused
.
Starting domain name service: named/etc/resolvconf/update.d/libc: Error: /etc/resolv.conf is not a symbolic link to /etc/resolvconf/run/resolv.conf
.
root@vds70317:~#

fichier named.conf

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local


acl internal {
    127.0.0.1;
       80.247.227.1;
    80.247.232.187;
    80.247.228.1;
    80.247.228.205/32;
    192.134.4.0/24;
};


include "/etc/bind/named.conf.options";

// prime the server with knowledge of the root servers
zone "." {
    type hint;
    file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
    type master;
    file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
    type master;
    file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
    type master;
    file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
    type master;
    file "/etc/bind/db.255";
};
zone "finasec.fr" {
        type master ;
        file "/etc/bind/finasec.fr.hosts";
        allow-query {any;};
        allow-update {none;};
        allow-transfer {80.247.228.205/32 ; 192.134.4.0/24 ;};
};
// zone "com" { type delegation-only; };
// zone "net" { type delegation-only; };

// From the release notes:
//  Because many of our users are uncomfortable receiving undelegated answers
//  from root or top level domains, other than a few for whom that behaviour
//  has been trusted and expected for quite some length of time, we have now
//  introduced the "root-delegations-only" feature which applies delegation-only
//  logic to all top level domains, and to the root domain.  An exception list
//  should be specified, including "MUSEUM" and "DE", and any other top level
//  domains from whom undelegated responses are expected and trusted.
// root-delegation-only exclude { "DE"; "MUSEUM"; };

include "/etc/bind/named.conf.local";

fichier finasec.fr.hosts

$TTL 1D
;
; BIND data file for domain finasec.fr
;
@       IN SOA vds70317.nfrance.com. root.vds70317.nfrance.com. (
        2008040307    ; serial
                21600           ; refresh (6h)
                3600            ; retry (1h)
                604800          ; expiry (7d)
                86400 ) ; RR TTL (24h)

                IN      NS      vds70317.nfrance.com.
                IN      NS      ns2.slconseil.com.
                IN      MX 5    vds70317.nfrance.com.
@     IN    A       80.247.232.187
mail     IN    A    80.247.232.187
www     IN    A     80.247.232.187

fichier named.conf.local

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

zone "187.232.247.80.in-addr.arpa" {
    type master;
    file "/etc/bind/80.247.232.187.rev";};

fichier named.conf.option

options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you might need to uncomment the query-source
    // directive below.  Previous versions of BIND always asked
    // questions using port 53, but BIND 8.1 and later use an unprivileged
    // port by default.

    // query-source address * port 53;

    // If your ISP provided one or more IP addresses for stable
    // nameservers, you probably want to use them as forwarders. 
    // Uncomment the following block, and insert the addresses replacing
    // the all-0's placeholder
    // forwarders {
    //     0.0.0.0;
    // };

    auth-nxdomain no;    # conform to RFC1035

   
};

Dernière modification par jacques (03-04-2008 02:44:07)