View Single Post
  #10 (permalink)  
Old 02-05-2010, 04:22 PM
martinezjr martinezjr is offline
Intermediate Member
 
Posts: 22
Default

Quote:
Originally Posted by ArcaneMagus View Post
Are you trying to setup the Zimbra server to be it's own DNS server, with recursive queries going out to the 10.100.177.205 one? Or are you trying to setup the Zimbra server to use the 10.100.177.205 server as it's only DNS server and have that server work for all internal queries?
I have split Zimbra into different servers as I only have low end desktops:
3 Dell GX240's
-each
--1.6G CPU
--1.2G RAM
--Fedora11
-1 with ldap and BIND9 as DNS master (bcldap)
-1 with store, logger, snmp, apache and BIND9 DNS slave (bcmailbox)
-1 with mta (bcmta)


Quote:
Also just as a note:
In your record file you are missing the "." at the end of the primary DNS server part of the SOA, that is why it is returning "bcldap.hcjbc.org.hcjbc.org." rather then "bcldap.hcjbc.org.".
ok done

Quote:
Also you currently have your MX records setup for the servers FQDN. This is fine if your email addresses will be in the form of user@bcmailbox.hcjbc.org, however it is a problem if you are trying to do addresses like user@hcjbc.org. If you want addresses like that you need to set the MX record on just hcjbc.org, not bcmailbox.hcjbc.org. So the lines would look like this (if you are going with the internal dns server not split dns):
Code:
hcjbc.org.	380000	IN	MX	10 10.100.177.200
hcjbc.org.	380000	IN	MX	1 10.100.177.210
With how it is currently setup you have 1 MX record for addresses like user@bcmta.hcjbc.org. that has a priority of 1 (out of the 1 record), and then you have another record for addresses like user@bcmailbox.hcjbc.org. that has a priority of 10 (out of the 1 record). Addresses like user@hcjbc.org have no MX record associated with them right now.
Done
Quote:
Also your PTR records that you have in there are useless and will never be used unless you manually query for them. The proper way to do PTR records would be to create another zone file for the 177.100.10.in-addr.arpa zone. It should look something like the following:
Code:
$TTL 2D
@               IN SOA          bcldap.hcjbc.org. hcjbc.yahoo.com. (
                                2009091300      ; serial
                                3H              ; refresh
                                1H              ; retry
                                1W              ; expiry
                                1D )            ; minimum

          IN NS   bcldap.hcjbc.org.
200       IN PTR  bcmailbox.hcjbc.org.
205       IN PTR  bcldap.hcjbc.org.
210       IN PTR  bcmta.hcjbc.org.
You lost me on this section. I do not remember setting up PTR records.

Quote:
You also have your firewall (10.100.177.5) in there as an authoritative NS for your domain... is that meant to be there?
For some reason, if I do not have this as one of the ns, I will not have external access from the machines. I use IPCop as my router/firewall/proxy/urlfilter/dhcp/ntp server. I disabled the DHCP, and now I can access the internet. I will be changing bcldap to bcdc as it will have to be the DHCP and DNS and NTP server now. And making a new bcldap.

I can now get dig to respond for my mx records.

Code:
[martinezjr@bcldap ~]$ host -v hcjbc.org
Trying "hcjbc.org"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52246
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;hcjbc.org.			IN	A

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	SOA	bcldap.hcjbc.org. hcjbc.yahoo.com. 1264874199 10800 3600 604800 38400

Received 85 bytes from 10.100.177.205#53 in 8 ms
Trying "hcjbc.org"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24493
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;hcjbc.org.			IN	AAAA

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	SOA	bcldap.hcjbc.org. hcjbc.yahoo.com. 1264874199 10800 3600 604800 38400

Received 85 bytes from 10.100.177.205#53 in 1 ms
Trying "hcjbc.org"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44689
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;hcjbc.org.			IN	MX

;; ANSWER SECTION:
hcjbc.org.		380000	IN	MX	10 10.100.177.200.hcjbc.org.

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	NS	10.100.177.205.
hcjbc.org.		38400	IN	NS	10.100.177.200.

Received 114 bytes from 10.100.177.205#53 in 1 ms

[martinezjr@bcldap ~]$ dig mx hcjbc.org

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-9.P3.fc11 <<>> mx hcjbc.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18602
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;hcjbc.org.			IN	MX

;; ANSWER SECTION:
hcjbc.org.		380000	IN	MX	10 10.100.177.200.hcjbc.org.

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	NS	10.100.177.200.
hcjbc.org.		38400	IN	NS	10.100.177.205.

;; Query time: 2 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Fri Feb  5 18:23:08 2010
;; MSG SIZE  rcvd: 114

[martinezjr@bcldap ~]$
Reply With Quote