Debian, diverse probleme.

Va salut si din nou va solicit ajutorul;
Pe serverul de mai sus, a fost schimbat ip-ul (care cica era fix).
acum serverul de mail este cazut..., cand se trimite un mail din exterior (de ex. de pe yahoo) imi spune: No MX or A records for domeniu.ro;
Joi, am intrat pe rotdl.ro si am pus ns.domeniu.ro cu ip-ul nou la nameservers,dar nici pana astazi nu s-a replicat;

consider ca pe undeva prin setari trebuie sa pun noul ip, dar care ar fi fisierele mai exact?
Mai mult de atat, pe server sunt instalate mai multe programe(postfix, exim4, courier, bind, etc)....

sau o varianta ma gandeam sa dezinstalez tot ce tine de mail si sa refac de la zero server de mail... astfel incat data viitoare nu mai stau sa bibilesc.

In bind ai facut modificarea pentru ca mail.domeniu.tld sau mx.domeniu.tld sau whatever sa pointeze catre noul IP?
In main.cf si master.cf te-ai uitat sa vezi daca apare pe undeva IPul vechi si sa il pui pe cel nou?

Din eroare de mai sus vad ca e o problema de dns nu de mail.

am reinstalat BIND-ul, este ok sa urmaresc tutorialul? http://howtounix.inf...-bind-on-Ubuntu
eu am pus la rotld.ro, ns.domeniul.ro

# This is the zone definition for reverse DNS. replace 0.168.192 with your network address in reverse notation - e.g my network address is 192.168.0
zone "0.168.192.in-addr.arpa"

unde 0.168.192, este ip-ul extern alocat dar pus invers ...

Trebuie sa ai ceva de genul:

$ORIGIN domeniu.tld
IN NS ns1
IN NS ns2
IN MX 5 mail1
IN MX 10 mail2

ns1 IN A $IP
ns2 IN A $IP
mail1 IN A $IP
mail2 IN A $IP

am facut o alta prostie acum, a disparut hostname-ul si nu mai pot porni vncserverul

root@(none):~# hostname
(none)
root@(none):~# tightvncserver
sh: Syntax error: "(" unexpected
sh: Syntax error: "(" unexpected
sh: Syntax error: "(" unexpected
sh: Syntax error: "(" unexpected
Couldn't start Xtightvnc; trying default font path.
Please set correct fontPath in the tightvncserver script.
sh: Syntax error: "(" unexpected
sh: Syntax error: "(" unexpected
Couldn't start Xtightvnc process.

Am modificat /etc/resolv.conf cu

root@(none):~# cat /etc/resolv.conf
# Generated by NetworkManager
search domeniu.ro
nameserver 92.81.109.xxx

:
si  ; apoi am dat comanda

root@(none):~# dig domeniu.ro
;; reply from unexpected source: 192.168.1.1#53, expected 92.81.109.xxx#53
;; reply from unexpected source: 192.168.1.1#53, expected 92.81.109.xxx#53
; <<>> DiG 9.7.3 <<>> domeniu.ro
;; global options: +cmd
;; connection timed out; no servers could be reached

Asta din cauza ca in named.conf.local, am pus ip-ul extern si trebuia pus ip-ul local ?!?

Edited by Ingerik, 01 June 2014 - 17:52.

hostname il setezi adaugand in /etc/hostname numele pe care vrei sa il atribui masinii respective. Pune cache-urile de la google si apoi da si tu host -t ns domeniu.tld sau dig @8.8.8.8 domeniu.tld in ns si vezi ce reply primesti.

rezolva cu hostname-ul, ms

iar pentru restul:

root@mailserver:~# host -t ns domeniu.tld
;; reply from unexpected source: 192.168.1.1#53, expected 92.81.109.xxx#53
;; connection timed out; no servers could be reached

si

root@mailserver:~# dig @8.8.8.8 domeniu.tld in ns
; <<>> DiG 9.7.3 <<>> @8.8.8.8 domeniu.tld in ns
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;domeniu.tld.					  IN	  NS
;; AUTHORITY SECTION:
.					   1799	IN	  SOA	 a.root-servers.net. nstld.verisi					gn-grs.com. 2014060100 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sun Jun  1 19:03:30 2014
;; MSG SIZE  rcvd: 101

Ingerik, on 01 iunie 2014 - 18:06, said:

Problema ta este acolo, ai bind configurat sa raspunda cu un IP privat in loc de cel care trebuie adica cel public.

Pai ii pun ip-ul local sau cel extern, cand configurez bind-ul?

Eu l-am pus pe cel extern...

Edited by Ingerik, 01 June 2014 - 20:21.

Hmmm, daca nu faci nat pui IP public, daca server-ul ala e in spatele unui nat pui IPul privat. Nu stiu cum e topologia acolo nici nu stiu exact ce s-a intamplat.

Ip-ul extern este fix (romtelecom) si este 92.81.xyz.zyx. In routerul huawei am dezactivat firewall si am pus dmz-ul pe ip-ul serverul 192.168.1.100

IP-ul serverul: 192.168.1.100
Netmask: 255.255.252.0
Gateway: 192.168.1.1

Apoi pe server Debian 6.0 cu BIND9 si avem asa:

/etc/hosts

127.0.0.1	 mailserver	 localhost.localdomain localhost
92.81.xyz.zyx mailserver.domeniu.ro	 mailserver
92.81.xyz.zyx ns.domeniu.ro	 ns
92.81.xyz.zyx mail.domeniu.ro mail
# The following lines are desirable for IPv6 capable hosts
::1	 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

/etc/resolv.conf

# Generated by NetworkManager
search domeniu.ro
nameserver 92.81.xyz.zyx

/etc/bind/named.conf

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

/etc/bind/named.conf.local

//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "domeniu.ro" {
	 type master;
	 file "/etc/bind/zones/domeniu.ro.db";
	 };

/etc/bind $nano named.conf.options

 options {
	 directory "/var/cache/bind";
	 // If there is a firewall between you and nameservers you want
	 // to talk to, you may need to fix the firewall to allow multiple
	 // ports to talk. See http://www.kb.cert.org/vuls/id/800113
	 // If your ISP provided one or more IP addresses for stable
	 // nameservers, you probably want to use them as forwarders.
	 // Uncomment the following block, and insert the addresses replacing
	 // the all-0's placeholder.
	 // forwarders {
	 //	 92.81.xyz.zyx
	 //	 193.231.100.xxx;
	 //	 193.231.100.yyy;
	 // };
	 auth-nxdomain no; # conform to RFC1035
	 listen-on { any; };
};

UNDE 92.81.xyz.zyx, este ip-ul extern fix; iar 193.231.100.xxx si 192.231.100.yyy este DNS oferit de Romtelecom

Apoi
/etc/bind $ mkdir zones
/etc/bind $ cd zones

/etc/bind/zones $ nano domeniu.ro.db

$TTL 86400
$ORIGIN domeniu.ro. IN SOA ns.domeniu.ro. admin.domeniu.ro. (
			 2014060201	 ; Serial
			 10800		 ; Refresh
			 3600		 ; Retry
			 3600000		 ; Expire
			 86400 )	 ; Minimum
	 IN	 NS			 ns.domeniu.ro
	 IN	 MX	 10	 mail.domeniu.ro.
	 IN	 MX	 20	 domeniu.ro.
	 IN	 A			 92.81..xyz.zyx

$ ORIGIN domeniu.ro.
www	 IN	 A	 92.81.xyz.zyx
mail IN	 A	 92.81.xyz.zyx
ns	 IN	 A	 92.81.xyz.zyx
root IN	 A	 92.81.xyz.zyx

Pe rotld.ro este pus la domeniu un singur nameserver si anume ns.domeniu.ro
--Nume Server: ns.domeniu.ro
--Adresa de ip a serverului: 92.81.xyz.zyx

Cand dau comanda, dig domeniu.ro

;; reply from unexpected source: 192.168.1.1#53, expected 92.81.xyz.zyx#53
;; reply from unexpected source: 192.168.1.1#53, expected 92.81.xyz.zyx#53
; <<>> DiG 9.7.3 <<>> domeniu.ro
;; global options: +cmd
;; connection timed out; no servers could be reached

root@mailserver:~# host -t ns domeniu.tld
;; reply from unexpected source: 192.168.1.1#53, expected 92.81.xyz.zyx#53
;; connection timed out; no servers could be reached

root@mailserver:~# dig @8.8.8.8 domeniu.tld in ns
; <<>> DiG 9.7.3 <<>> @8.8.8.8 domeniu.tld in ns
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15005
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;domeniu.tld.					 IN	 NS
;; AUTHORITY SECTION:
.					 1799 IN	 SOA	 a.root-servers.net. nstld.verisign-grs.com. 2014060200 1800 900 604800 86400
;; Query time: 145 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Jun 2 13:05:05 2014
;; MSG SIZE rcvd: 101

Edited by Ingerik, 02 June 2014 - 12:35.

Daca vrei poti sa imi dai pe PM si regulile de FW si IPul direct conectat pentru a ma uita si eu pe ele. Asta ca sa nu le faci publice pe forum.