DNS问题(NIGHTMARES!)与BIND和Virtualmin

我有一个使用Virtualmin / Webmin的networking服务器(带有LAMP的Ubuntu 12.04)。 因为我刚刚从一个Cpanel系统移动,所以我正在configurationDNS的恶梦!

使用intoDNS.com,失败的报告是:

Mismatched NS records WARNING: One or more of your nameservers did not return any of your NS records. DNS servers responded ERROR: One or more of your nameservers did not respond: The ones that did not respond are: 123.123.123.123 213.251.188.141x Multiple Nameservers ERROR: Looks like you have less than 2 nameservers. According to RFC2182 section 5 you must have at least 3 nameservers, and no more than 7. Having 2 nameservers is also ok by me. Missing nameservers reported by your nameserver You should already know that your NS records at your nameservers are missing, so here it is again: ns1.mydomain.com. sdns2.ovh.net. SOA record No valid SOA record came back! MX Records WWW A Record ERROR: I could not get any A records for www.mydomain.com! 

我的尝试的一步一步

在我的域名注册商(Namecheap)中,我将ns1.mydomain.com注册为域名服务器,指向正在运行bind9的我的web服务器的IP地址。 该域是使用DNS ns1.mydomain.comsdns2.ovh.netsdns2.ovh.net是一个辅助DNS服务器(SLAVE并指向我的web服务器的IP地址mydomain.com

networking服务器域名mydomain.com

Webserver主机名ns4000000.ip-123-123-123.net

networking服务器IP123.123.123.123

在Virtualmin下,我编辑了默认的虚拟服务器模板,

  • 新域的BIND DNSlogging: ns1.mydomain.com
  • 主DNS服务器主机名: ns1.mydomain.com

接下来我使用该服务器模板创build了一个虚拟服务器

这是我所做的,但它仍然不工作! 有任何想法吗? 我被困了好几天,谢谢你的帮助!

服务bind9状态

 * bind9 is running 

lsof -i:53

 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME named 6966 bind 20u IPv6 338583 0t0 TCP *:domain (LISTEN) named 6966 bind 21u IPv4 338588 0t0 TCP localhost.localdomain:domain (LISTEN) named 6966 bind 22u IPv4 338590 0t0 TCP ns4000000.ip-123-123-123.net:domain (LISTEN) named 6966 bind 512u IPv6 338582 0t0 UDP *:domain named 6966 bind 513u IPv4 338587 0t0 UDP localhost.localdomain:domain named 6966 bind 514u IPv4 338589 0t0 UDP ns4000000.ip-123-123-123.net:domain 

/etc/resolv.con

(不知道如何213.186.33.99到这里)

 nameserver 127.0.0.1 nameserver 213.186.33.99 search ovh.net 

主机123.123.123.123 (我的networking服务器的IP)

 13.60.245.198.in-addr.arpa domain name pointer ns4000000.ip-123-123-123.net. 

nslookup 213.186.33.99

 Server: 127.0.0.1 Address: 127.0.0.1#53 Non-authoritative answer: 99.33.186.213.in-addr.arpa name = cdns.ovh.net. Authoritative answers can be found from: 33.186.213.in-addr.arpa nameserver = ns.ovh.net. 33.186.213.in-addr.arpa nameserver = dns.ovh.net. 

nslookup ns1.mydomain.com

 ;; Got SERVFAIL reply from 127.0.0.1, trying next server ;; connection timed out; no servers could be reached 

nslookup ns2.mydomain.com

 ;; Got SERVFAIL reply from 127.0.0.1, trying next server ;; connection timed out; no servers could be reached 

nslookup www.mydomain.com

 ;; Got SERVFAIL reply from 127.0.0.1, trying next server ;; connection timed out; no servers could be reached 

挖mydomain.com

 ; <<>> DiG 9.8.1-P1 <<>> mydomain.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 43540 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;mydomain.com. IN A ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Oct 11 11:30:09 2012 ;; MSG SIZE rcvd: 30 

挖ns1.mydomain.com

 ; <<>> DiG 9.8.1-P1 <<>> ns1.mydomain.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 31254 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;ns1.mydomain.com. IN A ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Oct 11 11:30:16 2012 ;; MSG SIZE rcvd: 34 

/etc/bind/named.conf

 include "/etc/bind/named.conf.options"; include "/etc/bind/named.conf.local"; include "/etc/bind/named.conf.default-zones"; 

/etc/bind/named.conf.default-zones

 zone "." { type hint; file "/etc/bind/db.root"; }; zone "localhost" { type master; file "/etc/bind/db.local"; }; zone "127.in-addr.arpa" { type master; file "/etc/bind/db.127"; }; zone "0.in-addr.arpa" { type master; file "/etc/bind/db.0"; }; zone "255.in-addr.arpa" { type master; file "/etc/bind/db.255"; }; 

/etc/bind/named.conf.local

 zone "mydomain.com" { type master; file "/var/lib/bind/mydomain.com.hosts"; allow-transfer { 127.0.0.1; localnets; }; }; 

/etc/bind/named.conf.options

 options { directory "/var/cache/bind"; dnssec-validation auto; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; // allow-recursion { 127.0.0.1; }; // transfer-source; }; 

named-checkconf -z

 zone mydomain.com/IN: loaded serial 1349965194 zone localhost/IN: loaded serial 2 zone 127.in-addr.arpa/IN: loaded serial 1 zone 0.in-addr.arpa/IN: loaded serial 1 zone 255.in-addr.arpa/IN: loaded serial 1 

iptables -L

 Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:20000 ACCEPT tcp -- anywhere anywhere tcp dpt:webmin ACCEPT tcp -- anywhere anywhere tcp dpt:https ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:imaps ACCEPT tcp -- anywhere anywhere tcp dpt:imap2 ACCEPT tcp -- anywhere anywhere tcp dpt:pop3s ACCEPT tcp -- anywhere anywhere tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere tcp dpt:ftp-data ACCEPT tcp -- anywhere anywhere tcp dpt:ftp ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:submission ACCEPT tcp -- anywhere anywhere tcp dpt:smtp ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination 

来自named-checkconf -z输出表明在/var/lib/bind/mydomain.com.hosts中有一个语法错误,这是唯一没有实际发布的文件。 检查文件并修复其中的任何错误。

要debugging服务器问题,请务必在重新启动服务后检查日志:

>

tail -f / var / log / messages

要么

tail -f / var / log / syslog

ctrl + C中止

或者只显示系统日志的最后20条logging

tail -n 20 / var / log / syslog