Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i have been working on setup a server for my internal network, so far i have a working isc-dhcp-server that can upgrade a chrooted BIND9 (on the same machine), i need to add some static entries on the DNS, so users can resolve the websites that resides in our DMZ.

What i had tryed all ready was to modify the /etc/bind/named.conf.local with this info:

// Do any local configuration here

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

        algorithm HMAC-MD5.SIG-ALG.REG.INT;
        secret "MySuperSecretHash"; (this is not the real value BTW)

zone "quality.internal" IN {
        type master;
        file "/var/lib/bind/quality.internal.db";
        allow-update { key DHCP_UPDATER; };

zone "" {
        type master;
        file "/var/lib/bind/";
        allow-update { key DHCP_UPDATER; };

logging {
        channel query.log {
                file "/var/log/named/query.log";
                severity debug 3;

        category queries { query.log; };

then i added this 2 entries:

zone "ourserver.internal" IN {
        type master;
        file "/var/lib/bind/ourserver.internal.db";

zone "" {
        type master;
        file "/var/lib/bind/";

So.. i created the files ourserver.internal.db and placed them BOTH in /var/lib/bind/ and changed the permisions so the bind user can access them, restated the service... when i do a NSLOOKUP www.ourserver.internal i get:


** server can't find www.ourserver.internal: NXDOMAIN

BUT when i do a reverse lookup....

Address: name = www.ourserver.internal

I do not understand what's wrong. Some help with this will save me from installing a new DNS server at the DMZ JUST to host internal site names-

TY in advance

BTW: the server i'm using has Ubuntu Server 11.10 fully patched.

share|improve this question
up vote 0 down vote accepted

Okay.. looks like after all it was an issue with the /var/lib/bind/ourserver.internal.db file, started from scratch and now it's resolving fast and error free! :), actually i'm leaving here the example i took from other web site:

;BIND data file for
$TTL    604800
@       IN      SOA (
                            2007011501        ; Serial
                                  7200        ; Refresh
                                   120        ; Retry
                               2419200        ; Expire
                                604800)        ; Default TTL
@        IN        NS
@        IN        NS    IN    MX        10    IN    A
ns1                IN    A
ns2                IN    A
www                IN    CNAME
mail               IN    A
ftp                IN    CNAME       IN    TXT      "v=spf1 ip4: a mx ~all"
mail               IN    TXT      "v=spf1 a -all"
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.