Lisa and Michael,
Thank you for your input. I did not think about the rndc so I reloaded just for the heck of it. Yet I am still not getting Metasploit to show the recursive call working. Here is the named.conf.options file:
options {
directory "/var/cache/bind";
dump-file "/var/cache/bind/data/cache_dump.db";
statistics-file "/var/cache/bind/data/named_stats.txt";
recursion yes;
auth-nxdomain no; # conform to RFC1035
allow-recursion { any; };
allow-query { any; };
// allow-query-cache { any; };
listen-on port 53 { any; };
};
I was unable to get the allow-query-cache line to load, I am not sure what I did wrong.
I did find the same pages and I have been through them, but I do not see what I am missing. What else am I missing?
Thank You,
David
P.S.
Lisa – thank you so much for yesterday. You have really given my class a lot to talk about. I am looking forward to class this week with them to see what else is said.
From:
plug-discuss-bounces@lists.plug.phoenix.az.us [
mailto:plug-discuss-bounces@lists.plug.phoenix.az.us] On Behalf Of Lisa Kachold
Sent: Sunday, August 14, 2011 4:48 PM
To: Main PLUG discussion list
Subject: Re: Setting Up Bind9 Test
Hi David!
Nice to see you on Saturday!
Bind9 can be fussy (rndc controls everything).
You ARE changing the right item to turn recursion on.
http://www.eukhost.com/forums/f15/turning-off-dns-recursion-bind-2283/
But you can also do this in a Bind9 ACL using the "Views" feature:
http://www.bind9.net/manual/bind/9.3.1/Bv9ARM.ch07.html
http://oreilly.com/pub/a/oreilly/networking/news/views_0501.html
Are you restarting named after a change? "/etc/init.d/named restart"
If you have rndc are you reloading? "rdnc reload"
Do you have logging turned on, so you can see what is happening?
https://help.ubuntu.com/community/BIND9ServerHowto
Are you editing the right file? There's a chroot? "locate named.conf"
On Sun, Aug 14, 2011 at 10:27 AM, David Demland <
demland@cox.net> wrote:
I am trying to set up a DNS poisoning test as an example for my class. I have setup both an Ubuntu 6.10 and 10.10 server. When I use my Backtrack system to check the DNS server I get a message “This server is not replying to recursive requests”. I have added “allow-recursion { any; };” to my configuration file. Yet the Backtrack system still fails. What do I have to do to allow on the DNS server for the Backtrack system to do the recursive request?
Thank you for your help,
David
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
--
(602) 791-8002 Android
(623) 239-3392 Skype
(623) 688-3392 Google Voice
**
HomeSmartInternational.com
_____
No virus found in this message.
Checked by AVG -
www.avg.com
Version: 10.0.1392 / Virus Database: 1520/3834 - Release Date: 08/14/11
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)