Setting up my own DNS and hit a couple of snags...

Stefan Puiu stefan.puiu at gmail.com
Thu Aug 11 05:50:18 UTC 2005


On 8/10/05, Mikey <mikeyNO at spam.segel.com> wrote:
> I have two major issues.
>=20
>=20
> Issue 1:
>         I've set up my domain to have two name servers.
> I've created aliases NS1 and NS2 for these servers.  My network is small
> (Its a Class C CIDR block) and some of my boxes serve double duty.
> One is my main Database server the other is my firewall.
>=20
> So I have address records for my firewall-outside and dbrack01.
> I created CNAMES so that NS1 points to firewall-outside (Machine A) and
> NS2 points to dbrack01(Machine B) .
>=20
> I plan on making dbrack01 a slave to my NS1 box.
>=20
> The issue is that using a CNAME for the name server is not a good idea
> according to the RFCs. Please note that I've got a small network so I
> don't anticipate too much traffic.

This might be your problem - the right hand side (rdata) of an NS
record *can't* be a CNAME (alias); use the host's real name, or add A
records for NS1/NS2 pointing to the same IP. I believe your local
resolver will not be able to contact your nameservers because of this.
Check the archives, it's been discussed many times before, with more
comprehensive explanations about why you shouldn't do it.



More information about the bind-users mailing list