Merhaba

Ubuntu üzerine Bind9 kurulumu yaptım.

Versiyon 9.18.1( Stable Release)

İç networkteki kullanıcı bilgisayarlarının Dns ip adresleri ise bu sunucu olarak gösteriyorum.

Fakat çok yoğum bir şekilde sunucu üzerinde query-errors log'u almaktayım.

Öncelikle named.conf dosyası şu şekilde ;

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
//include "/etc/bind/named.conf.default-zones";

logging {

     channel queries_log {
          file "/var/log/named/queries" versions 10 size 40m;
          print-time yes;
          print-category yes;
          print-severity yes;
          severity dynamic;
     };

channel default_log {
          file "/var/log/named/default" versions 3 size 20m;
          print-time yes;
          print-category yes;
          print-severity yes;
          severity info;
     };
channel query-errors_log {
          file "/var/log/named/query-errors" versions 3 size 10m;
          print-time yes;
          print-category yes;
          print-severity yes;
          severity dynamic;
     };


category queries          { queries_log    ;   };
category default          { default_debug  ;   };
category query-errors     {query-errors_log;   };


};








named.conf.options;

acl "trusted" {
127.0.0.1; //localhost
192.168.0.0/16; //internal


dnssec-validation auto;
auth-nxdomain no;


forwarders {
195.175.39.39;
4.2.2.6;
8.8.8.8;
};

listen-on port 53 {
127.0.0.1 ; // localhost
192.168.1.40 ; //ic_Bacak_ip
};

listen-on-v6 { any; };

recursion yes ;
allow-recursion {trusted; };





Ve query_errors.log

02-Jan-2023 21:55:39.570 query-errors: info: client @0x7fbcf40cfa58 192.168.1.a#54180 (www.google-analytics.com): view internal: query failed (timed out) for www.google-analytics.com/IN/A at query.c:7649

02-Jan-2023 21:55:39.570 query-errors: info: client @0x7fbd2412e548 192.168.1.b#52776 (event.wps.com): view internal: query failed (timed out) for event.wps.com/IN/A at query.c:7649

02-Jan-2023 21:55:40.206 query-errors: info: client @0x7fbd241708c8 192.168.1.c#53351 (mail.google.com): view external: query failed (timed out) for mail.google.com/IN/HTTPS at query.c:7649

02-Jan-2023 21:55:40.206 query-errors: info: client @0x7fbcec0228f8 192.168.1.c#54204 (mail.google.com): view external: query failed (timed out) for mail.google.com/IN/A at query.c:7649




Fakat Dns sunucusu üzerinde  dig komutu ile  aynı anda çözümleme yapılabiliyor.

root@abcdefg:/etc/bind# dig mail.google.com

; <<>> DiG 9.18.1-1ubuntu1.2-Ubuntu <<>> mail.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12013
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 1e292618b33d23820100000063b329807cc0874a8d2373d8 (good)
;; QUESTION SECTION:
;mail.google.com. IN A

;; ANSWER SECTION:
mail.google.com. 261 IN A 172.217.171.229

;; Query time: 55 msec
;; SERVER: 192.168.1.40#53(192.168.1.40) (UDP)
;; WHEN: Mon Jan 02 21:59:12 +03 2023
;; MSG SIZE rcvd: 88


Firewall üzerinde 53 ile ilgili tüm portlar açık.Nitekim filtrelese hiç gelmez.Dakikada  50 sorguya cevap veriyorsa 10 sorguya hata üstteki hatayı çeviriyor.Konfigurasyon sorunu gibi.

named sunucunun durumu

named.service - BIND Domain Name Server
Loaded: loaded (/lib/systemd/system/named.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2022-11-29 21:57:12 +03; 1 month 3 days ago
Docs: man:named(8)
Main PID: 11928 (named)
Tasks: 34 (limit: 18870)
Memory: 549.1M
CPU: 4h 40min 9.984s
CGroup: /system.slice/named.service
L¦11928 /usr/sbin/named -u bind

Kas 29 21:57:12 abcdefg named[11928]: automatic empty zone: view external: A.E.F.IP6.ARPA
Kas 29 21:57:12 abcdefg named[11928]: automatic empty zone: view external: B.E.F.IP6.ARPA
Kas 29 21:57:12 abcdefg named[11928]: automatic empty zone: view external: 8.B.D.0.1.0.0.2.IP6.ARPA
Kas 29 21:57:12 abcdefg named[11928]: automatic empty zone: view external: EMPTY.AS112.ARPA
Kas 29 21:57:12 abcdefg named[11928]: automatic empty zone: view external: HOME.ARPA
Kas 29 21:57:12 abcdefg named[11928]: configuring command channel from '/etc/bind/rndc.key'
Kas 29 21:57:12 abcdefg named[11928]: command channel listening on 127.0.0.1#953
Kas 29 21:57:12 abcdefg named[11928]: configuring command channel from '/etc/bind/rndc.key'
Kas 29 21:57:12 abcdefg named[11928]: command channel listening on ::1#953
Kas 29 21:57:12 abcdefg systemd[1]: Started BIND Domain Name Server.

İşin içinden çıkamadım.

Yardımlarını rica ediyorum.




Saygılarımla