Thanks Al,
I will see about figuring that out.
Meanwhile I am able to tail the log when trying to query for that NS record.
This is the only named error.item I see at default settings while attempting
the query.
It’s like it will not add the record unless it already exists on the delegated
server.
Aug 27 20:54:40 NS1 named[35894]: REFUSED unexpected RCODE resolving
'dyn.6ipv.com/NS/IN': 216.218.130.2#53
No errors or anything “interesting” on Bind9 start & stop.
I only see that error when performing the NS query against the problem name.
That IP address is indeed the IP address of the delegated server.
But I also cannot add the zone on that server provider’s system (He.net).
Because it checks MY server for the delegated NS records before it will let me
add the zone there.
Which I can’t get working as detailed above..
I am only trying to get it to work locally first and I can’t even do that,
because Bind9 somehow wants to verify the
zone already exists on the delegated server..
Is there a way I can get this to at least work first this way?
I would like it to be able just serve up the NS record/pointer.
Not check the remote system for sanity before letting me add the record.
This has me stuck as I can’t add the zone on the remote system, AND I can’t
simply add the NS record on my local system.
Thanks.
-Steve
From: Al <aw...@sunnyside.com>
Sent: Wednesday, August 27, 2025 8:13 PM
To: Steve Gladden <st...@michiganbroadband.com>
Subject: Re: Trying simple NS delegation for a subdomain * I cannot get it to
load/work.
this is a job for the log files.
setting up log files for named can be pretty time consuming, but even the
generic setup will probably report what is causing the servfail.
without the logs there isn't any easy way to find out what the problem is.
if you are using views, they should be checked, but again logs are everything
On 8/27/2025 17:01, Steve Gladden wrote:
Hi this is my first post ever.
I’m stuck on a very simple task that I have not been able to get it to work.
I have done this in the past with older versions of BIND but it has been quite
a while.
I’m trying to delegate to an external provider’s nameserver for a “subdomain”
of mine.
The parent zone file works properly and loads and serves everything as expected.
But will not load and serve my NS record pointing an external provider’s DNS.
I can get much more specific as need-be
I am on and up to date version of Debian Server and up to date version of Bind9
named -v
BIND 9.18.28-1~deb12u2-Debian (Extended Support Version) <id:>
This is a generic example of what I am trying to do.
The top two parent NS records load and serve as expected.
As well as the A record of course.
But the delegated NS record at the bottom does not get loaded or served when
queried for it
I am using dig as you may expect to determine this.
I must be totally missing something simple but I am totally stumped on this at
the moment.
$TTL 3600
$ORIGIN domain.com.
@ IN SOA domain.com. admin.domain.com. (
2017090101 ; Serial
10800 ; Refresh
1800 ; Retry
1209600 ; Expire
3600 ; Negative Cache TTL
)
@ IN NS ns1.domain.com.
@ IN NS ns2.domain.com.
@ IN A 1.2.3.4
www IN A 1.2.3.4
$ORIGIN test.domain.com.
@ IN NS ns1.anothernameserver.com.
dig @localhost test.domain.com NS
; <<>> DiG 9.18.28-1~deb12u2-Debian <<>> @localhost test.domain.com ns
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 59084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: fb069e980ad743db0100000068af9952a0efd48210391401 (good)
;; QUESTION SECTION:
;test.domain.com. IN NS
;; Query time: 31 msec
;; SERVER: 127.0.0.1#53(localhost) (UDP)
;; WHEN: Wed Aug 27 19:48:34 EDT 2025
;; MSG SIZE rcvd: 69
Thank you for any pointers..
I have spent about a day searching the web before posting.
Many examples say to do it the way I am doing it.
And I’ve done it before this way.
Not sure what I am missing.
-SteveG
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
