Setting Up Bind9 Test

[David Demland]

Lisa and Michael,

 

Thank you for your input. I did not think about the rndc so I reloaded just for the heck of it. Yet I am still not getting Metasploit to show the recursive call working. Here is the named.conf.options file:

 

options {

                directory "/var/cache/bind";

                dump-file "/var/cache/bind/data/cache_dump.db";

                statistics-file "/var/cache/bind/data/named_stats.txt";

                recursion yes;

                auth-nxdomain no;    # conform to RFC1035

                allow-recursion { any; };

                allow-query { any; };

                //  allow-query-cache { any; };

                listen-on port 53 { any; };

};

 

I was unable to get the allow-query-cache line to load, I am not sure what I did wrong.

 

I did find the same pages and I have been through them, but I do not see what I am missing. What else am I missing?

 

Thank You,

 

David

 

P.S.

 

Lisa – thank you so much for yesterday. You have really given my class a lot to talk about. I am looking forward to class this week with them to see what else is said.

 

From: plug-discuss-bounces at lists.plug.phoenix.az.us [mailto:plug-discuss-bounces at lists.plug.phoenix.az.us] On Behalf Of Lisa Kachold
Sent: Sunday, August 14, 2011 4:48 PM
To: Main PLUG discussion list
Subject: Re: Setting Up Bind9 Test

 

Hi David!

Nice to see you on Saturday!  

Bind9 can be fussy (rndc controls everything).

You ARE changing the right item to turn recursion on. 
http://www.eukhost.com/forums/f15/turning-off-dns-recursion-bind-2283/

But you can also do this in a Bind9 ACL using the "Views" feature:
http://www.bind9.net/manual/bind/9.3.1/Bv9ARM.ch07.html
http://oreilly.com/pub/a/oreilly/networking/news/views_0501.html

Are you restarting named after a change? "/etc/init.d/named restart"
If you have rndc are you reloading?  "rdnc reload"

Do you have logging turned on, so you can see what is happening?  
https://help.ubuntu.com/community/BIND9ServerHowto

Are you editing the right file?  There's a chroot?  "locate named.conf"



On Sun, Aug 14, 2011 at 10:27 AM, David Demland <demland at cox.net> wrote:

I am trying to set up a DNS poisoning test as an example for my class. I have setup both an Ubuntu 6.10 and 10.10 server. When I use my Backtrack system to check the DNS server I get a message “This server is not replying to recursive requests”. I have added “allow-recursion { any; };” to my configuration file. Yet the Backtrack system still fails. What do I have to do to allow on the DNS server for the Backtrack system to do the recursive request?

 

Thank you for your help,

 

David


---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss




-- 
(602) 791-8002  Android
(623) 239-3392 Skype
(623) 688-3392 Google Voice
**
HomeSmartInternational.com
















  _____  

No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1392 / Virus Database: 1520/3834 - Release Date: 08/14/11

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20110814/c789e5cb/attachment.html>