Getting bind9rndc: connect failed: 127.0.0.1#953: connection refused

    Hello


    I have instaled the latest i-mscp from the github and I have been trying to harden my server and the named.options but when I do and restart bind9 I get the error:-


    bind9rndc: connect failed: 127.0.0.1#953: connection refused


    I am adding this bellow options {


    allow-recursion { localnets; };


    Then when restarting bind9 I get errors.


    I never had this problem with previous versions or the stable 1.0.3.0


    Thanks in advance for your help :shy:

    Edited once, last by veg-grower ().


    Hello;


    Are you sure about filename ? it's named.conf.options normally.


    By default, i-MSCP set it as follow:



    Here, you must set both allow-recursion and allow-query-cache to localnets and restart bind.


    Thank you for using i-MSCP

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

    SSH key for online support

    Edited once, last by Nuxwin ().

    Thanks Nuxwin


    You are correct it is /etc/bind/named.conf.options or 'named.conf.options' :blush: I even had it written down on my tutorial for setting up my VPS :blush: Its been a long Day! :rolleyes:


    Thanks for you advice with the localnets. This was on a Debian 6 32bit OS This is what I have added to 'named.conf.options' -


    Code
    1. // Protecting server against common attacks allow-recursion { localhost; }; allow-query-cache { localhost; };


    and changed to:-


    Code
    1. // Protecting server against common attacks
    2. allow-recursion { localhost; localnets;};
    3. allow-query-cache { localhost; localnets;};


    Then I restarted Bind:-


    /etc/init.d/bind9 restart


    And all worked ok without errors :shy:


    More info I found interesting can be located here:-
    BIND 9 DNS Security - National Security Agency


    http://www.nsa.gov/ia/_files/vtechrep/I733-004R-2010.pdf


    Thanks for your help and advice Nuxwin most appreciated.

    Edited once, last by veg-grower ().