On 2021-06-07 15:34, Michael Butash wrote:
It sounds like bind doesn't like or is loading your zone file for
keiththewebguy.com [1], you should be able to nslookup/host/dig
pointing at the local server first to make sure it works, and then see
it externally from anywhere outside via the same.  Next is to make
sure you point your registrar's glue records to point over to your
server with proper name server and soa records.  They need to know how
to phone home via the glue's to find where to reference the domain
from.  Until you can resolve your domain even from the same box, don't
worry about outside.  Debug bind logs first, plenty of how-to's out
there to follow.


Got the DNS to work, thanks!!


Honestly, hosting DNS is far more hassle than worth I found long ago -
better off using your registrar dns, where I used to use godaddy for
DNS, and now google.  I'm not too proud to let them have an easy
button ui for me these days.  Also, DNS can be highly abused to
generate a lot of traffic at times, so as much as even cox might say
"unlimited", it's all fun and games until you run over their
perception of "expected use", which you never know, particularly with
bind vulnerabilities.  Lots of small udp packets cause issues for
firewalls and routers (particularly soho hardware kit), best to leave
this sort of thing to a real isp imho.  I've seen folks self-host dns
as an experiment and get massive bills for doing so over the years
several times.


I'm 100% with you.  Appreciate your feedback.

I checked with Cox and there would never be any additional changes since I'm on a commercial account. I do have a limited in bandwidth so anything over my bandwidth will be denied.

I'm doing this to learn. I have a friend that owns a data center and I suspect his DNS machines have a user interface and it is all point, click, type in a value or string... etc.

I would never do anything like this for a production website.

In a day or two I will be moving onto setting up and configuring Postfix and Dovecot.

Thank You For Your Feedback!!

Keith


-mb

On Mon, Jun 7, 2021 at 12:38 PM Keith Smith via PLUG-discuss
<[email protected]> wrote:

Hi,

I need some help with Bind.

I have a Cox Business account that allows me to run servers with no
blocked ports.

I have an old laptop configure running BIND 9 and Apache.

I can see the default Apache page if I enter my IP into a browser.
So
Apache seems to be working.

My domain is KeithTheWebGuy.com.
My public IP is 98.191.108.149
I've port forwarded both 80 and 53.
I have a VPS that was serving KeithTheWebGuy.com and so I took the
zone
file from there and modified it with my public IP.
Apache is configured for KeithTheWebGuy.com so I think.

When I try to go to KeithTheWebGuy.com I get a message the site
cannot
be reached.

I'm thinking I have a BIND issue.

If I issue dig keiththewebguy.com [1] at the command line I get:

--
; <<>> DiG 9.16.1-Ubuntu <<>> keiththewebguy.com [1]
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 16506
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;keiththewebguy.com [1].            IN      A

;; Query time: 32 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Mon Jun 07 19:30:59 UTC 2021
;; MSG SIZE  rcvd: 47
--

No IP is returned.

If I "dig google.com [2]"  An IP is returned.

; <<>> DiG 9.16.1-Ubuntu <<>> google.com [2]
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56676
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;google.com [2].                    IN      A

;; ANSWER SECTION:
google.com [2].             63      IN      A       172.217.11.174

;; Query time: 8 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Mon Jun 07 19:32:12 UTC 2021
;; MSG SIZE  rcvd: 55

- - - -

Any help much appreciated.

Keith

---------------------------------------------------
PLUG-discuss mailing list - [email protected]
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss


Links:
------
[1] http://keiththewebguy.com
[2] http://google.com
---------------------------------------------------
PLUG-discuss mailing list - [email protected]
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss

Reply via email to