问题描述
我在 Ubuntu 中有一个 bind9。它可以很好地解析我实验室域 xutilab.local 的 DNS 名称,但是如果我请求类似 www.google.com
这是named.conf.options文件:
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to,you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers,you probably want to use them as forwarders.
// Uncomment the following block,and insert the addresses replacing
// the all-0's placeholder.
allow-query {
any;
};
forwarders {
8.8.8.8;
};
//========================================================================
// If BIND logs error messages about the root key being expired,// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
notify yes;
allow-transfer { any; };
这里缺少任何选项吗?
非常感谢。
解决方法
在此块(选项)内,尝试添加:
allow-recursion { any; };
allow-query { any; };
allow-query-cache { any; };
,
我终于发现问题出在我的路由器上,它有一个与 DNS 安全相关的选项。禁用它,Bind9 能够以当前配置正常转发请求。
谢谢!