Ubuntu 11.04和绑定9不从外部主机连接

我试图在Ubuntu 11.04上用bind9(9.7.3)设置一个权威的DNS服务器,我遇到了一些问题。

外部问题

当试图检查我的DNSconfiguration使用以下工具solvens.com/biotechnics.ro和dnscheck.pingdom.com/?domain=biotechnics.ro他们失败,输出消息如“ 名称服务器ns1.biotechnics.ro(89.36.94.53)不回答查询 “或” 您的名字服务器ns1.biotechnics.ro不响应NSlogging查询!

此外,外部在线挖掘工具,例如这回馈以下输出:

; << >> DiG 9.8.4-P1 << >> @ ns1.biotechnics.ro -t NS biotechnics.ro

; (find1个服务器)

;; 全局选项:+ cmd

;; 连接超时; 没有服务器可以达成

母公司的主要TLD

家长设置如下:

; <<>> DiG 9.8.4-P1 <<>> @primary.rotld.ro -t NS biotechnics.ro ; (2 servers found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7740 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;biotechnics.ro. IN NS ;; AUTHORITY SECTION: biotechnics.ro. 10800 IN NS ns2.biotechnics.ro. biotechnics.ro. 10800 IN NS ns1.biotechnics.ro. ;; ADDITIONAL SECTION: ns1.biotechnics.ro. 10800 IN A 89.36.94.53 ns2.biotechnics.ro. 10800 IN A 141.85.169.100 ;; Query time: 279 msec ;; SERVER: 192.162.16.18#53(192.162.16.18) ;; WHEN: Tue Feb 12 05:40:50 2013 ;; MSG SIZE rcvd: 100 

在ns1上configuration

 rsavu@host:/etc/bind$ head -40 named.conf // ----------------------- Options ----------------------- options { // all relative paths use this directory as a base directory "/var/cache/bind"; // version statement changed for security (to avoid hacking known weaknesses) version "not currently available"; // This prevents bind from serving other than authoritative requests: recursion no; // disables all zone transfer requests for performance as well as security reasons allow-transfer{none;}; dnssec-enable no; // zone not signed minimal-responses yes; // optional - improved performance additional-from-auth no; // optional - improved performance additional-from-cache no; // optional - minimal performance change }; // ----------------------- Logging ----------------------- // log to /var/log/named/zytrax-named all events from info UP in severity (no debug) // uses 3 files in rotation swaps files when size reaches 250K // failure messages up to this point are in (syslog) /var/log/messages logging{ channel custom_log{ file "/var/log/bind9_info.log" versions 3 size 250k; severity debug; }; category default{ custom_log; }; }; // ----------------------- Zones ----------------------- zone "biotechnics.ro" in{ type master; file "/etc/bind/db.biotechnics.ro"; allow-transfer { 141.85.169.100; }; also-notify {141.85.169.100; }; allow-query { any; }; }; 

区域文件

 $ORIGIN . $TTL 36000 ; 10 hours biotechnics.ro IN SOA ns1.biotechnics.ro. admin.biotechnics.ro. ( 2013021201 ; serial 28800 ; refresh (8 hours) 7200 ; retry (2 hours) 604800 ; expire (1 week) 86400 ; minimum (1 day) ) NS ns1.biotechnics.ro. NS ns2.biotechnics.ro. A 81.181.152.23 $ORIGIN biotechnics.ro. ftp A 81.181.152.23 ns1.biotechnics.ro. A 89.36.94.53 ns2.biotechnics.ro. A 141.85.169.100 www A 81.181.152.23 

我检查了什么

  • 有防火墙没有问题(我暂时禁用它)
  • 从主机内部挖掘工作
  • 从奴隶工作挖
  • 把recursion是的; 并不能解决问题
  • Netstat显示端口53正在使用UDP和TCP命名
  • named-checkconf和named-checkzone问题没有警告。

可能是什么问题? 有任何想法吗? 我不明白发生了什么,为什么不是我的主机回复查询。

[后来编辑]奴隶是在Debian 4.0上,工作得很好(你可以在上面的dns解决scheme中看到)。