topic Re: question about BIND 9 in Operating System - Linux

question about BIND 9

'chris' — Thu, 11 Mar 2004 17:16:16 GMT

hi

is it possible to put as forwarders
3 DNS IP addresses from the ISP
at named.conf from BIND 9
by "forward only" server ?

regards
chris

Re: question about BIND 9

Stuart Browne — Thu, 11 Mar 2004 18:23:36 GMT

Using a section in named.conf like:

options {
forwarders {
ip.ad.on.e;
ip.ad.tw.o;
ip.ad.thr.ee;
};
};

should do it.

Re: question about BIND 9

'chris' — Thu, 11 Mar 2004 18:37:13 GMT

sorry a mistake, because my question was
not so clearly.
I know how to put to named.conf
my collegue says by "forward only" DNS server
I cannot put more than 2 IP addresses.
and only by "resolver" I can put more than 2.
is it true ?

Re: question about BIND 9

Stuart Browne — Thu, 11 Mar 2004 19:08:00 GMT

Neither the '/etc/resolv.conf', or '/etc/named.conf' using 'forwarders' whilst running Bind have that limitation that I'm aware of.

Re: question about BIND 9

'chris' — Sun, 28 Mar 2004 17:53:16 GMT

hi stuart

I did a test with a resolver:

# cat /etc/resolv.conf
nameserver 192.168.5.1
nameserver 192.168.5.2
nameserver 192.168.5.3
nameserver 192.168.5.4

# ping something

# tcpdump -nl port 53
tcpdump: listening on eth0
00:45:06.365654 192.168.1.1.32841 > 192.168.5.1.53: 51545+ A? something. (27) (DF)
00:45:11.375117 192.168.1.1.32842 > 192.168.5.2.53: 51545+ A? something. (27) (DF)
00:45:14.385090 192.168.1.1.32843 > 192.168.5.3.53: 51545+ A? something. (27) (DF)
00:45:20.395042 192.168.1.1.32841 > 192.168.5.1.53: 51545+ A? something. (27) (DF)
00:45:25.405048 192.168.1.1.32842 > 192.168.5.2.53: 51545+ A? something. (27) (DF)
00:45:28.415041 192.168.1.1.32843 > 192.168.5.3.53: 51545+ A? something. (27) (DF)

how you can see the nameserver 192.168.5.4
will NOT be asked.
so by resolver will be limited up to 3 nameserver.

greetings
chris

Re: question about BIND 9

Stuart Browne — Sun, 28 Mar 2004 18:46:48 GMT

Wow, I'd never seen that before..

"man resolv.conf" produces this:

... Up to MAXNS (see ) name servers may be listed, one per keyword.

"grep MAXNS /usr/include/resolv.h" returns:

#define MAXNS 3

So you are absolutely correct.

In the configuration you are listing however, this is querying (up to MAXNS)remote name servers, not using forwarders in a BIND configuration.