Bonjour à tous,
J’ai un serveur chez OVH avec Lenny d’installé dessus. Je viens de me rende compte que le serveur n’écoutait pas sur le port 53. Évidemment, j’ai coupé Iptables pour retester mais ça ne change rien.
Voici mon named.conf
1 // This is the primary configuration file for the BIND DNS server named.
2 //
3 // Please read /usr/share/doc/bind9/README.Debian.gz for information on the
4 // structure of BIND configuration files in Debian, *BEFORE* you customize
5 // this configuration file.
6 //
7 // If you are just adding zones, please do that in /etc/bind/named.conf.local
8
9 include "/etc/bind/named.conf.options";
10
11 // prime the server with knowledge of the root servers
12 zone "." {
13 type hint;
14 file "/etc/bind/db.root";
15 };
16
17 // be authoritative for the localhost forward and reverse zones, and for
18 // broadcast zones as per RFC 1912
19
20 zone "localhost" {
21 type master;
22 file "/etc/bind/db.local";
23 };
24
25 zone "127.in-addr.arpa" {
26 type master;
27 file "/etc/bind/db.127";
28 };
29
30 zone "0.in-addr.arpa" {
31 type master;
32 file "/etc/bind/db.0";
33 };
34
35 zone "255.in-addr.arpa" {
36 type master;
37 file "/etc/bind/db.255";
38 };
39
40 zone "domaine.fr" IN {
41 type master;
42 file "/etc/bind/db.domaine.fr";
43 allow-transfer { ip.dns.ovh; };
44 allow-query { any; };
45 };
46
47 zone "domaine.net" IN {
48 type master;
49 file "/etc/bind/db.domaine.net";
50 allow-transfer { ip.dns.ovh; };
51 allow-query { any; };
52 };
53
54 zone "domaine.com" IN {
55 type master;
56 file "/etc/bind/db.domaine.com";
57 allow-transfer { ip.dns.ovh; };
58 allow-query { any; };
59 };
60
61 zone "xxx.xxx.xxx.in-addr.arpa" IN {
62 type master;
63 file "/etc/bind/db.rev4.net";
64 allow-transfer { ip.dns.ovh; };
65 allow-query { any; };
66 };
67
68 ################IPv6########################
69
70 // RFC 3152
71
72 zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.int" {
73 type master;
74 file "/etc/bind/localhost-v6";
75 };
76
77 zone "0.0.d.1.4.1.0.0.2.ip6.int" {
78 type master;
79 file "/etc/bind/db.rev6.net";
80 };
81
82 ###########################################
83
84 include "/etc/bind/named.conf.local";
85 include "/etc/bind/rndc.key";
86 controls {
87 inet * allow { 127.0.0.1; } keys { "rndc-key"; };
88 };
89
90 ###############LOGS#################
91
92 logging {
93
94 channel log_default {
95 file "/var/log/bind/log_default" versions 4 size 10m;
96 severity info;
97 print-category yes;
98 print-severity yes;
99 print-time yes;
100 };
101
102 channel log_security {
103 file "/var/log/bind/log_security" versions 4 size 10m;
104 severity info;
105 print-category yes;
106 print-severity yes;
107 print-time yes;
108 };
109
110 channel xfer-in_channel {
111 file "/var/log/bind/xfer-in.log" versions 4 size 10m;
112 severity info;
113 print-category yes;
114 print-severity yes;
115 print-time yes;
116 };
117
118 channel xfer-out_channel {
119 file "/var/log/bind/xfer-out.log" versions 4 size 10m;
120 severity info;
121 print-category yes;
122 print-severity yes;
123 print-time yes;
124 };
125
126 channel querylog {
127 file "/var/log/bind/log_queries" versions 4 size 10m;
128 print-severity no;
129 print-time yes;
130 };
131
132 #category default { default_syslog; ch_default; };
133 category default { log_default; };
134 category security { log_security; };
135 category xfer-in { xfer-in_channel; };
136 // category xfer-in { null; };
137 category xfer-out { xfer-out_channel; };
138 category queries { querylog; };
139 category "unmatched" { "null"; };
140 category lame-servers { null; };
141 };
et mon named.conf.option
1 options {
2 directory "/var/cache/bind";
3
4 // If there is a firewall between you and nameservers you want
5 // to talk to, you may need to fix the firewall to allow multiple
6 // ports to talk. See http://www.kb.cert.org/vuls/id/800113
7
8 // If your ISP provided one or more IP addresses for stable
9 // nameservers, you probably want to use them as forwarders.
10 // Uncomment the following block, and insert the addresses replacing
11 // the all-0's placeholder.
12
13 // forwarders {
14 // 0.0.0.0;
15 // };
16
17 version "Non disponible";
18
19 //edns-udp-size 512;
20
21 //max-udp-size 512;
22
23 notify no;
24
25 statistics-file "/var/log/bind/named-stats.log";
26
27 auth-nxdomain no; # conform to RFC1035
28 listen-on-v6 { ::1; };
29 listen-on { mon.ip; };
30 listen-on port 53 { 127.0.0.1; mon.ip; };
31 allow-recursion { 127.0.0.1; };
32 allow-query { localhost; };
33 };
et voici le résultat de zonecheck (AFNIC)
ZoneCheck: mondomaine.fr.
Information sur la Zone
Zone mondomaine.fr.
Primaire ns1.mondomaine. mon.ipv4, mon.ipv6
Secondaire sdns1.ovh.net. 213.251.188.140
Progression
Progression Tests Vitesse Temps
0 --.-- N/A
présence d’un enregistrement SOA (IP=213.251.188.140)
Résultat des tests
---- fatal ----
f: Le serveur n’écoute pas ou ne répond pas en UDP sur le port 53
* Réf: IETF RFC1035 (p.32 4.2. Transport)
The DNS assumes that messages will be transmitted as datagrams or in a byte stream carried by a virtual circuit. While virtual circuits can be used for any DNS activity, datagrams are preferred for queries due to their lower overhead and better performance.
* ns1.mondomaine.fr./mon.ipv6
f: [TEST présence d’un enregistrement SOA]: échec du serveur (IN/SOA: mondeomaine.)
* sdns1.ovh.net./213.251.188.140
f: Le serveur n’écoute pas ou ne répond pas en TCP sur le port 53
* Réf: IETF RFC1035 (p.32 4.2. Transport)
The DNS assumes that messages will be transmitted as datagrams or in a byte stream carried by a virtual circuit. While virtual circuits can be used for any DNS activity, datagrams are preferred for queries due to their lower overhead and better performance.
* ns1.mondomaine./mon.ipv4
Statut final
ÉCHEC
Avez vous une idée du problème? Ca fait un moment que je cherche sans résultat.
Je vous remercie d’avance