We have a Bind server sitting on Ubuntu. It's a pretty basic setup. However we're having a silly issue that I am not sure is the server incorrectly configured, or if it's a problem on the interwebs. It's worth mentioning that the image below is after weeks and in some cases months.
Here is an example of what we see on What's my DNS:
Here is an example of the config file for said site:
$ttl 38400
somewebsite.net. IN SOA ns1.ourserver.com. email.somewebsite.com. (
1486765992
10800
3600
604800
38400 )
somewebsite.net. IN NS ns1.ourserver.com.
somewebsite.net. IN A xxx.xxx.xxx.34
www.somewebsite.net. IN A xxx.xxx.xxx.34
mail.somewebsite.net. IN A xxx.xxx.xxx.14
webmail.somewebsite.net. IN A xxx.xxx.xxx.14
somewebsite.net. IN MX 10 mx1.ourmxserver.com.
somewebsite.net. IN MX 20 mx2.ourmxserver.com.
Now I can see requests come in watching the server using the following command
tcpdump -vvv -s 0 -l -n port 53
which leads me to believe the problem is elsewhere? Can some areas work and not others with a bad config file?
A tidbit of info .. We changed the servers we had our NS1 and NS2 pointed to a few months ago, and it seems that some of the sites never "followed" completely IE the image. Could this be a bind server related issue? Is my configuration wrong/incomplete?
EDIT
I've also checked the named-checkconf -z
and checkzone
-- And they check out:
zone somesite.com/IN: loaded serial 1486765992
OK