Howto check Bind9 zone files and main configuration?

**sfsolutions** · May 29th 2017

Hello,

when i try to check a zone.

Code

root@cp:~# named-checkzone marktstart.com /etc/bind/named.conf
/etc/bind/named.conf:2: unknown RR type 'This'
dns_master_load: /etc/bind/named.conf:3: unexpected end of line
dns_master_load: /etc/bind/named.conf:3: unexpected end of input
/etc/bind/named.conf:5: unknown RR type 'structure'
/etc/bind/named.conf:6: unknown RR type 'this'
dns_master_load: /etc/bind/named.conf:7: unexpected end of line
dns_master_load: /etc/bind/named.conf:7: unexpected end of input
dns_master_load: /etc/bind/named.conf:10: syntax error
dns_master_load: /etc/bind/named.conf:10: isc_lex_gettoken() failed: unbalanced quotes
dns_master_load: /etc/bind/named.conf:10: unbalanced quotes
dns_master_load: /etc/bind/named.conf:11: syntax error
dns_master_load: /etc/bind/named.conf:11: isc_lex_gettoken() failed: unbalanced quotes
dns_master_load: /etc/bind/named.conf:11: unbalanced quotes
dns_master_load: /etc/bind/named.conf:12: syntax error
dns_master_load: /etc/bind/named.conf:12: isc_lex_gettoken() failed: unbalanced quotes
dns_master_load: /etc/bind/named.conf:12: unbalanced quotes
dns_master_load: /etc/bind/named.conf:13: syntax error
dns_master_load: /etc/bind/named.conf:13: isc_lex_gettoken() failed: unbalanced quotes
dns_master_load: /etc/bind/named.conf:13: unbalanced quotes
/etc/bind/named.conf:15: unknown RR type 'imscp'
/etc/bind/named.conf:16: unknown RR type 'imscp'
zone marktstart.com/IN: loading from master file /etc/bind/named.conf failed: unknown class/type
zone marktstart.com/IN: not loaded due to errors.

Display More

I see this in one ubuntu 14.04 install and a 16.04 install.

And i-mscp version from 1.3.14 till 1.4.4

Any ideas ?

thx and best wishes

Niels

**Nuxwin** · May 29th 2017

@sfsolutions

You should really consider to read the NAMED-CHECKZONE(8) man page. Your command is wrong.

With i-MSCP 1.4.x branch for which zone files are now dumped in raw format and for which zone location has changed: https://github.com/i-MSCP/imsc…rrata.md#dns-server-bind9

Shell-Script

root@devuan:~# named-checkzone -f raw bbox.nuxwin.com /var/cache/bind/imscp/master/bbox.nuxwin.com.dbzone bbox.nuxwin.com/IN: 'bbox.nuxwin.com' found SPF/TXT record but no SPF/SPF record found, add matching type SPF recordzone bbox.nuxwin.com/IN: 'devuan.bbox.nuxwin.com' found SPF/TXT record but no SPF/SPF record found, add matching type SPF recordzone bbox.nuxwin.com/IN: 'panel.bbox.nuxwin.com' found SPF/TXT record but no SPF/SPF record found, add matching type SPF recordzone bbox.nuxwin.com/IN: loaded serial 2017052909OKroot@devuan:~#

Note: Here, the warnings about SPF are expected. SPF records are deprecated but older versions of Bind9 are not aware of that fact

With current stable or older i-MSCP versions the command is identical but without the -f raw option and the root directory for zone files is simply /var/cache/bind

Now, for all i-MSCP versions you can also simply do:

Shell-Script

root@devuan:~# named-checkzone bbox.nuxwin.com /etc/imscp/bind/working/bbox.nuxwin.com.dbzone bbox.nuxwin.com/IN: 'bbox.nuxwin.com' found SPF/TXT record but no SPF/SPF record found, add matching type SPF recordzone bbox.nuxwin.com/IN: 'devuan.bbox.nuxwin.com' found SPF/TXT record but no SPF/SPF record found, add matching type SPF recordzone bbox.nuxwin.com/IN: 'panel.bbox.nuxwin.com' found SPF/TXT record but no SPF/SPF record found, add matching type SPF recordzone bbox.nuxwin.com/IN: loaded serial 2017052909OKroot@devuan:~#

In which case, there is no need to specify the zone file format

For viewing all records from a specific zone, you can also do:

Shell-Script

root@devuan:~# dig axfr bbox.nuxwin.com; <<>> DiG 9.9.5-9+deb8u11-Debian <<>> axfr bbox.nuxwin.com;; global options: +cmdbbox.nuxwin.com. 10800 IN SOA ns1.bbox.nuxwin.com. hostmaster.bbox.nuxwin.com. 2017052909 10800 3600 1209600 3600bbox.nuxwin.com. 10800 IN A <ip>bbox.nuxwin.com. 10800 IN NS ns1.bbox.nuxwin.com.bbox.nuxwin.com. 10800 IN TXT "v=spf1 a mx -all"bbox.nuxwin.com. 10800 IN MX 10 mail.bbox.nuxwin.com.devuan.bbox.nuxwin.com. 10800 IN TXT "v=spf1 include:bbox.nuxwin.com -all"devuan.bbox.nuxwin.com. 10800 IN MX 10 mail.devuan.bbox.nuxwin.com.devuan.bbox.nuxwin.com. 60 IN A <ip>ftp.devuan.bbox.nuxwin.com. 10800 IN A <ip>imap.devuan.bbox.nuxwin.com. 10800 IN A <ip>mail.devuan.bbox.nuxwin.com. 10800 IN A <ip>pop.devuan.bbox.nuxwin.com. 10800 IN A <ip>pop3.devuan.bbox.nuxwin.com. 10800 IN A <ip>relay.devuan.bbox.nuxwin.com. 10800 IN A <ip>smtp.devuan.bbox.nuxwin.com. 10800 IN A <ip>www.devuan.bbox.nuxwin.com. 10800 IN CNAME devuan.bbox.nuxwin.com.ftp.bbox.nuxwin.com. 10800 IN A <ip>imap.bbox.nuxwin.com. 10800 IN A <ip>mail.bbox.nuxwin.com. 10800 IN A <ip>ns1.bbox.nuxwin.com. 10800 IN A <ip>panel.bbox.nuxwin.com. 10800 IN TXT "v=spf1 include:bbox.nuxwin.com -all"panel.bbox.nuxwin.com. 10800 IN MX 10 mail.panel.bbox.nuxwin.com.panel.bbox.nuxwin.com. 10800 IN A <ip>ftp.panel.bbox.nuxwin.com. 10800 IN A <ip>imap.panel.bbox.nuxwin.com. 10800 IN A <ip>mail.panel.bbox.nuxwin.com. 10800 IN A <ip>pop.panel.bbox.nuxwin.com. 10800 IN A <ip>pop3.panel.bbox.nuxwin.com. 10800 IN A <ip>relay.panel.bbox.nuxwin.com. 10800 IN A <ip>smtp.panel.bbox.nuxwin.com. 10800 IN A <ip>www.panel.bbox.nuxwin.com. 10800 IN CNAME panel.bbox.nuxwin.com.pop.bbox.nuxwin.com. 10800 IN A <ip>pop3.bbox.nuxwin.com. 10800 IN A <ip>relay.bbox.nuxwin.com. 10800 IN A <ip>smtp.bbox.nuxwin.com. 10800 IN A <ip>www.bbox.nuxwin.com. 10800 IN CNAME bbox.nuxwin.com.bbox.nuxwin.com. 10800 IN SOA ns1.bbox.nuxwin.com. hostmaster.bbox.nuxwin.com. 2017052909 10800 3600 1209600 3600;; Query time: 0 msec;; SERVER: 127.0.0.1#53(127.0.0.1);; WHEN: Mon May 29 20:59:53 CEST 2017;; XFR size: 37 records (messages 1, bytes 876)root@devuan:~#

Now, if you want check your /etc/bind/named.conf:

Shell-Script

root@devuan:~# named-checkconf -p -z /etc/bind/named.conf
zone bbox.nuxwin.com/IN: loaded serial 2017052909
zone panel.bbox.nuxwin.com/IN: loaded serial 2017052909
zone localhost/IN: loaded serial 2
zone 127.in-addr.arpa/IN: loaded serial 1
zone 0.in-addr.arpa/IN: loaded serial 1
zone 255.in-addr.arpa/IN: loaded serial 1
options {
directory "/var/cache/bind";
listen-on {
"any";
};
listen-on-v6 {
"none";
};
version "i-MSCP DNS Server";
allow-query-cache {
"localhost";
};
allow-recursion {
"localhost";
};
auth-nxdomain no;
dnssec-enable no;
dnssec-validation no;
minimal-responses yes;
allow-transfer {
"none";
};
check-spf ignore;
};
zone "bbox.nuxwin.com" {
type master;
file "imscp/master/bbox.nuxwin.com.db";
allow-transfer {
"localhost";
};
masterfile-format raw;
notify yes;
};
zone "panel.bbox.nuxwin.com" {
type master;
file "imscp/master/panel.bbox.nuxwin.com.db";
allow-transfer {
"localhost";
};
masterfile-format raw;
notify yes;
};
zone "." {
type hint;
file "/etc/bind/db.root";
};
zone "localhost" {
type master;
file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};
managed-keys {
"dlv.isc.org." initial-key 257 3 5 "BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2
brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+
1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5
ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk
Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM
QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt
TDN0YUuWrBNh";
"." initial-key 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF
FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX
bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD
X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz
W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS
Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq
QxA+Uk1ihz0=";
};
root@devuan:~#

Display More

See the NAMED-CHECKCONF(8) man page.

**sfsolutions** · May 30th 2017

Many thanks for the clarification

Howto check Bind9 zone files and main configuration?

Share

Daily visitors