Hallo!
Habe das ganze wie folgt angepasst:
Code:
$TTL 1d
stephan-titz.com. IN SOA h1385133.stratoserver.net. briefe.stephan-titz.de. (
2008042000
10800
3600
1400000
304800 )
stephan-titz.com. IN NS h1385133.stratoserver.net.
stephan-titz.com. IN NS slv2.1und1.de.
stephan-titz.com. IN A 85.214.128.18
*.stephan-titz.com. IN A 85.214.128.18
stephan-titz.com. IN MX 10 mail
*.stephan-titz.com. IN MX 10 mail
Habe die Doamin als DE und COM. Experimentiere momentan aber nur mit der COM Domain.
Bei mir kann ich zwei named.conf finden:
Code:
./etc/named.conf
./var/lib/named/etc/named.conf
Werde mich mal auf die "./etc/named.conf" beziehen, da diese beim Starten geladen wird:
Code:
Apr 20 19:04:24 h1385133 named[30114]: loading configuration from '/etc/named.conf'
Hier der komplette Inahlt:
Code:
# Copyright (c) 2001-2004 SuSE Linux AG, Nuernberg, Germany.
# All rights reserved.
#
# Author: Frank Bodammer, Lars Mueller <lmuelle@suse.de>
#
# /etc/named.conf
#
# This is a sample configuration file for the name server BIND 9. It works as
# a caching only name server without modification.
#
# A sample configuration for setting up your own domain can be found in
# /usr/share/doc/packages/bind/sample-config.
#
# A description of all available options can be found in
# /usr/share/doc/packages/bind/misc/options.
options {
# The directory statement defines the name server's working directory
directory "/var/lib/named";
# Write dump and statistics file to the log subdirectory. The
# pathenames are relative to the chroot jail.
dump-file "/var/log/named_dump.db";
statistics-file "/var/log/named.stats";
# The forwarders record contains a list of servers to which queries
# should be forwarded. Enable this line and modify the IP address to
# your provider's name server. Up to three servers may be listed.
#forwarders { 192.0.2.1; 192.0.2.2; };
# Enable the next entry to prefer usage of the name server declared in
# the forwarders section.
#forward first;
# The listen-on record contains a list of local network interfaces to
# listen on. Optionally the port can be specified. Default is to
# listen on all interfaces found on your system. The default port is
# 53.
listen-on port 53 { 127.0.0.1; };
allow-recursion { 127.0.0.1/8; };
# The listen-on-v6 record enables or disables listening on IPv6
# interfaces. Allowed values are 'any' and 'none' or a list of
# addresses.
listen-on-v6 { any; };
# The next three statements may be needed if a firewall stands between
# the local server and the internet.
#query-source address * port 53;
#transfer-source * port 53;
#notify-source * port 53;
# The allow-query record contains a list of networks or IP addresses
# to accept and deny queries from. The default is to allow queries
# from all hosts.
#allow-query { 127.0.0.1; };
# If notify is set to yes (default), notify messages are sent to other
# name servers when the the zone data is changed. Instead of setting
# a global 'notify' statement in the 'options' section, a separate
# 'notify' can be added to each zone definition.
notify no;
};
# To configure named's logging remove the leading '#' characters of the
# following examples.
#logging {
# # Log queries to a file limited to a size of 100 MB.
# channel query_logging {
# file "/var/log/named_querylog"
# versions 3 size 100M;
# print-time yes; // timestamp log entries
# };
# category queries {
# query_logging;
# };
#
# # Or log this kind alternatively to syslog.
# channel syslog_queries {
# syslog user;
# severity info;
# };
# category queries { syslog_queries; };
#
# # Log general name server errors to syslog.
# channel syslog_errors {
# syslog user;
# severity error;
# };
# category default { syslog_errors; };
#
# # Don't log lame server messages.
# category lame-servers { null; };
#};
# The following zone definitions don't need any modification. The first one
# is the definition of the root name servers. The second one defines
# localhost while the third defines the reverse lookup for localhost.
zone "." in {
type hint;
file "root.hint";
};
zone "localhost" in {
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
};
# Include the meta include file generated by createNamedConfInclude. This
# includes all files as configured in NAMED_CONF_INCLUDE_FILES from
# /etc/sysconfig/named
include "/etc/named.conf.include";
# You can insert further zone records for your own domains below or create
# single files in /etc/named.d/ and add the file names to
# NAMED_CONF_INCLUDE_FILES.
# See /usr/share/doc/packages/bind/README.SUSE for more details.
include "/usr/local/sa24/etc/hosts";
include "/usr/local/sa24/etc/hosts"; ==> Ist leer!
Kann leider kein "allow_transfer" finden!
Würde es von der Syntax her passen, wenn ich es so angebe:
Code:
allow_transfer { 212.227.123.29; };
Habe mir das mal von den anderen Schreibweisen abgeschaut.
Würde das ganze dann in options unterbringen! Wäre das richtig?
Mh, werde da jetzt mal auf Fehlersuche gehen, warum "named" nicht erreichbar ist. Vielleicht weil ich schon an den Nameserverangaben von 1und1 etwas abgeändert habe? Laut 1und1 war das nicht richtig: "Die Domain-Beantragung hatte Fehler"
ps aux sagt mir:
mh.... named ist nicht gestartet! Obwohl ich immer "nur" rcnamed restart verwendet habe! Ok, nicht gestartet ist nicht gestartet!
Jetzt ist named geladen:
Code:
named 30114 0.2 0.5 31220 2980 ? Ssl 19:04 0:00 /usr/sbin/named -t /var/lib/named -u named
Das ganze so wie es aussieht auch fehlerfrei:
Code:
Apr 20 19:04:24 h1385133 named[30114]: running
Apr 20 19:04:24 h1385133 named[30114]: zone localhost/IN: loaded serial 42
Apr 20 19:04:24 h1385133 named[30114]: zone schule-ratgeber.de/IN: loaded serial 2008042000
Apr 20 19:04:24 h1385133 named[30114]: /var/lib/named//schule-ratgeber.de.hosts:13: file does not end with newline
Apr 20 19:04:24 h1385133 named[30114]: zone stephan-titz.com/IN: loaded serial 2008042000
Apr 20 19:04:24 h1385133 named[30114]: /var/lib/named//stephan-titz.com.hosts:13: file does not end with newline
Apr 20 19:04:24 h1385133 named[30114]: zone 0.0.127.in-addr.arpa/IN: loaded serial 42
Apr 20 19:04:24 h1385133 named[30114]: command channel listening on 127.0.0.1#953
Apr 20 19:04:24 h1385133 named[30114]: listening on IPv4 interface lo, 127.0.0.1#53
Apr 20 19:04:24 h1385133 named[30114]: no IPv6 interfaces found
Apr 20 19:04:24 h1385133 named[30114]: loading configuration from '/etc/named.conf'
Apr 20 19:04:24 h1385133 named[30114]: found 1 CPU, using 1 worker thread
Apr 20 19:04:24 h1385133 named[30114]: starting BIND 9.3.2 -t /var/lib/named -u named
netstat -npl liefert folgende Ergebnisse
Code:
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 3076/couriertcpd
tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 3127/couriertcpd
tcp 0 0 127.0.0.1:10024 0.0.0.0:* LISTEN 3363/amavisd (maste
tcp 0 0 0.0.0.0:65000 0.0.0.0:* LISTEN 3070/sshd
tcp 0 0 127.0.0.1:10025 0.0.0.0:* LISTEN 9536/exim
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 3135/mysqld
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 9584/couriertcpd
tcp 0 0 0.0.0.0:22222 0.0.0.0:* LISTEN 3402/httpd2-prefork
tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN 16432/spamd.pid
tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 9567/couriertcpd
tcp 0 0 0.0.0.0:22223 0.0.0.0:* LISTEN 3276/xinetd
tcp 0 0 127.0.0.1:111 0.0.0.0:* LISTEN 3157/portmap
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 26591/httpd2-prefor
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 30114/named
tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 3270/vsftpd
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 30114/named
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 9536/exim
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 26591/httpd2-prefor
tcp 0 0 0.0.0.0:55227 0.0.0.0:* LISTEN 3276/xinetd
udp 0 0 127.0.0.1:53 0.0.0.0:* 30114/named
udp 0 0 0.0.0.0:33341 0.0.0.0:* 30114/named
udp 108324 0 0.0.0.0:68 0.0.0.0:* 2815/dhcpcd
udp 0 0 127.0.0.1:111 0.0.0.0:* 3157/portmap
udp 0 0 85.214.128.18:123 0.0.0.0:* 3301/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:* 3301/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 3301/ntpd
Active UNIX domain sockets (only servers)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 2 [ ACC ] STREAM LISTENING 9152 3363/amavisd (maste /var/spool/amavis/amavisd.sock
unix 2 [ ACC ] STREAM LISTENING 5962 2240/resmgrd /var/run/.resmgr_socket
unix 2 [ ACC ] STREAM LISTENING 5923 2212/acpid /var/run/acpid.socket
unix 2 [ ACC ] STREAM LISTENING 5872 2197/dbus-daemon /var/run/dbus/system_bus_socket
unix 2 [ ACC ] STREAM LISTENING 6211 2307/hald @/var/run/hald/dbus-wxmX7dc8AP
unix 2 [ ACC ] STREAM LISTENING 8722 3135/mysqld /var/lib/mysql/mysql.sock
unix 2 [ ACC ] STREAM LISTENING 8994 3321/nscd /var/run/nscd/socket
unix 2 [ ACC ] STREAM LISTENING 38441 9597/authdaemond /var/run/authdaemon.courier-imap/socket.tmp
unix 2 [ ACC ] STREAM LISTENING 6210 2307/hald @/var/run/hald/dbus-nBDWxJZn07
Ist das normal das named auf mehreren Ports lauscht?
Ein "Portscan" mit dem von SA24 integrierten Tool liefert folgendes Ergebnis:
Code:
Scanning 127.0.0.1 - Ports: 1 - 65535
21 ftp ftp File Transfer [Control] online
25 smtp smtp Simple Mail Transfer online
53 domain domain Domain Name Server online
80 www-http www-http World Wide Web HTTP online
110 pop3 pop3 Post Office Protocol - Version 3 online
111 sunrpc sunrpc SUN Remote Procedure Call online
143 imap imap Internet Message Access Protocol online
443 https https http protocol over TLS/SSL online
783 spamd spamd Spamassassin-Daemon online
953 rndc rndc BIND remote config online
993 imaps imaps imap4 protocol over TLS/SSL online
995 pop3s pop3s pop3 protocol over TLS/SSL online
3306 mysql mysql Mysql online
10024 unknown unknown online
10025 unknown unknown online
22222 SA24 SA24 ServerAdmin24 Apache online
22223 SA24d SA24d ServerAdmin24 Daemon online
55227 unknown unknown online
65000 unknown unknown online
Port 53 scheint ok!
Ein "dig" liefert bei mir das gleiche Ergebnis wie bei dir! Obwohl ja jetzt named korrekt läuft! Als du den Test gemacht hast, war er ja vielleicht tatsächlich aus.
Code:
dig @h1385133.stratoserver.net stephan-titz.com any
; <<>> DiG 9.3.2 <<>> @h1385133.stratoserver.net stephan-titz.com any
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
Eine Firewall ist sonst nicht an!
NACHTRAG:
nmap 127.0.0.1 -v liefert folgendes Ergebnis:
Code:
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-04-20 19:27 CEST
Initiating SYN Stealth Scan against localhost (127.0.0.1) [1680 ports] at 19:27
Discovered open port 80/tcp on 127.0.0.1
Discovered open port 21/tcp on 127.0.0.1
Discovered open port 53/tcp on 127.0.0.1
Discovered open port 443/tcp on 127.0.0.1
Discovered open port 25/tcp on 127.0.0.1
Discovered open port 995/tcp on 127.0.0.1
Discovered open port 3306/tcp on 127.0.0.1
Discovered open port 111/tcp on 127.0.0.1
Discovered open port 143/tcp on 127.0.0.1
Discovered open port 783/tcp on 127.0.0.1
Discovered open port 110/tcp on 127.0.0.1
Discovered open port 953/tcp on 127.0.0.1
Discovered open port 993/tcp on 127.0.0.1
The SYN Stealth Scan took 0.14s to scan 1680 total ports.
Host localhost (127.0.0.1) appears to be up ... good.
Interesting ports on localhost (127.0.0.1):
Not shown: 1667 closed ports
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
111/tcp open rpcbind
143/tcp open imap
443/tcp open https
783/tcp open spamassassin
953/tcp open rndc
993/tcp open imaps
995/tcp open pop3s
3306/tcp open mysql
Nmap finished: 1 IP address (1 host up) scanned in 0.166 seconds
Raw packets sent: 1680 (73.920KB) | Rcvd: 3373 (141.692KB)
nmap h1385133.stratoserver.net -v
Code:
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-04-20 19:30 CEST
Initiating SYN Stealth Scan against h1385133.stratoserver.net (85.214.128.18) [1680 ports] at 19:30
Discovered open port 25/tcp on 85.214.128.18
Discovered open port 80/tcp on 85.214.128.18
Discovered open port 443/tcp on 85.214.128.18
Discovered open port 21/tcp on 85.214.128.18
Discovered open port 3306/tcp on 85.214.128.18
Discovered open port 995/tcp on 85.214.128.18
Discovered open port 110/tcp on 85.214.128.18
Discovered open port 993/tcp on 85.214.128.18
Discovered open port 143/tcp on 85.214.128.18
The SYN Stealth Scan took 0.13s to scan 1680 total ports.
Host h1385133.stratoserver.net (85.214.128.18) appears to be up ... good.
Interesting ports on h1385133.stratoserver.net (85.214.128.18):
Not shown: 1671 closed ports
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
993/tcp open imaps
995/tcp open pop3s
3306/tcp open mysql
Nmap finished: 1 IP address (1 host up) scanned in 0.159 seconds
Raw packets sent: 1680 (73.920KB) | Rcvd: 3369 (141.516KB)
Port 53 scheint nicht erreichbar zu sein!
Was ist denn da los?
NACHTRAG 2:
Beim Start von Named hatten wir doch noch einen Fehler:
Code:
Apr 20 19:04:24 h1385133 named[30114]: /var/lib/named//stephan-titz.com.hosts:13: file does not end with newline
Werde das noch schnell abändern und einen Nachtrag 3 posten!
NACHTRAG 3:
named ist wohl jetzt fehlerfrei gestartet:
Code:
Apr 20 19:40:08 h1385133 named[31383]: running
Apr 20 19:40:08 h1385133 named[31383]: zone localhost/IN: loaded serial 42
Apr 20 19:40:08 h1385133 named[31383]: zone schule-ratgeber.de/IN: loaded serial 2008042000
Apr 20 19:40:08 h1385133 named[31383]: zone stephan-titz.com/IN: loaded serial 2008042000
Apr 20 19:40:08 h1385133 named[31383]: zone 0.0.127.in-addr.arpa/IN: loaded serial 42
Apr 20 19:40:08 h1385133 named[31383]: command channel listening on 127.0.0.1#953
Apr 20 19:40:08 h1385133 named[31383]: listening on IPv4 interface lo, 127.0.0.1#53
Apr 20 19:40:08 h1385133 named[31383]: no IPv6 interfaces found
Apr 20 19:40:08 h1385133 named[31383]: loading configuration from '/etc/named.conf'
Apr 20 19:40:08 h1385133 named[31383]: found 1 CPU, using 1 worker thread
Apr 20 19:40:08 h1385133 named[31383]: starting BIND 9.3.2 -t /var/lib/named -u named
Gruß,
Gammla
