Nameserver fully visible on the web ?

[David Botham]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> -----Original Message-----
> From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org]
> On Behalf Of Gary Stark
> Sent: Tuesday, August 13, 2002 7:53 PM
> To: comp-protocols-dns-bind at isc.org
> Subject: Nameserver fully visible on the web ?
> 
> 
> 
> I'm in the process of setting up a new box, and I'm  a Linux
> newbie.  
> 
> The box is running with an IP address of 192.168.0.60, and sits
> behind a firewall that's configured to permit access on ports 25,
> 53 and 80 (amongst others) to 192.168.0.60. My static IP address is
> 203.19.70.28  
> 
> I have a nameserver set up for TrollCookies.com, and the zone file
> is as follows:
> 
> $ttl 38400
> TrollCookies.com. IN SOA ns1. MrSpyder.RedbacksWeb.com. (

Probably would be a good idea to use an fqdn in the dname for your
name server like this:

TrollCookies.com. IN SOA ns1TrollCookies.com.
MrSpyder.RedbacksWeb.com. (

>    1029204830
>    10800
>    3600
>    604800
>    38400 )
> TrollCookies.com. IN NS 203.19.70.28

Right hand data for an NS RR MUST be a domain name, not an IP
address.  Try this:

TrollCookies.com. IN NS ns1.TrollCookies.com.

Also, it is RFC compliant to have two name servers.  Find someone to
be a slave for your zone...



> www.TrollCookies.com. IN A 203.19.70.28
> forum.TrollCookies.com. IN A 203.19.70.28
> giulietta.TrollCookies.com. IN A 203.19.70.28
> ns1.TrollCookies.com. IN A 203.19.70.28
> ns2.TrollCookies.com. IN A 203.19.70.28

Not really a second (slave) name server, but, nice try...


> TrollCookies.com. IN MX 10 giulietta.TrollCookies.com
                                                        ^.
You forgot the trailing dot "." at the end of the above line.  It
should read:

TrollCookies.com. IN MX 10 giulietta.TrollCookies.com.

Fix the stuff here and see if your problems go away, if not, write
back.

BTW, you supplied a good amount of detail in your message.  Others
should use this message as an example and not anonymize their
information.

Hope this helps,

Dave...


> gary.TrollCookies.com. IN A 203.19.70.28
> mail.TrollCookies.com. IN A 203.19.70.28
> 
> 
> If I dialup to an ISP and try to access www.trollcookies.com, I get
> the correct page. No problems thus far.
> 
> But if I try to send email to gstark at trollcookies.com, I get error
> messages from the SMTP server saying that there's no MX record.
> 
>         Unable to deliver message to the following address(es).
> 
>         <gstark at trollcookies.com>:
>         Sorry, I couldn't find a mail exchanger or IP address.
> (#5.4.4)  
> 
> or
> 
>        Unable to deliver the message due to a communications
> failure 
>        The MTS-ID of the original message is: c=US;a=
>        ;p=RedbacksWeb;l=GIULIA0208132344QPS26AVQ
>        MSEXCH:IMS:RedbacksWeb:REDBACKSWEB:GIULIA 3902 (000B099C)
> Host 
>        Unknown
> 
> 
> 
> Obviously something is amiss in my setup, but I'm not seeing what
> it is. Could somebody please point me to what I'm missing here?
> 
> 
> --
> g.
> Gary Stark
> gstark at RedbacksWeb.com
> http://RedbacksWeb.com
> 


-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQA/AwUBPVqES1q85iiiMQ4EEQI/sgCdF+YH8SHo9j5FRbSS7gGVj9QZ724AoOou
RwkR2OkvRI7Zo05xczyQUEC8
=5Scf
-----END PGP SIGNATURE-----