network unreachable resolving './DNSKEY/IN': 2001:500:200::b#53

Issue

ketika melihat status BIND9 di linux muncul error

[root@iaasweb ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2022-11-24 17:56:24 WIB; 8min ago
  Process: 7104 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 7119 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 7116 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 7121 (named)
   CGroup: /system.slice/named.service
           └─7121 /usr/sbin/named -u named -c /etc/named.conf

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:501:b1f9::30#53
Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:503:d2d::30#53
Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:34::a#53
Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:32::a#53
Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:36::a#53
Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:38::a#53
Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/DS/IN': 2001:503:83eb::30#53
Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/DS/IN': 2001:501:b1f9::30#53
Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/DS/IN': 2001:503:d2d::30#53
Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'com/DNSKEY/IN': 2001:503:83eb::30#53

[root@iaasweb ~]# systemctl status named

● named.service - Berkeley Internet Name Domain (DNS)

Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)

Active: active (running) since Thu 2022-11-24 17:56:24 WIB; 8min ago

Process: 7104 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)

Process: 7119 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)

Process: 7116 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)

Main PID: 7121 (named)

CGroup: /system.slice/named.service

└─7121 /usr/sbin/named -u named -c /etc/named.conf

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:501:b1f9::30#53

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:503:d2d::30#53

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:34::a#53

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:32::a#53

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:36::a#53

Nov 24 18:05:19 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/A/IN': 2001:4860:4802:38::a#53

Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/DS/IN': 2001:503:83eb::30#53

Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/DS/IN': 2001:501:b1f9::30#53

Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'google.com/DS/IN': 2001:503:d2d::30#53

Nov 24 18:05:20 iaasweb.iaas.web.id named[7121]: network unreachable resolving 'com/DNSKEY/IN': 2001:503:83eb::30#53

Solving

Hal tersebut kemungkinan IPv6 tidak terkonfigurasi di Linux, untuk disable IPv6 maka menuju ke file named.conf dengan menambahkan satu baris script sebagai berikut

[root@iaasweb ~]# nano /etc/sysconfig/named
# DISABLE_ZONE_CHECKING  --  By default, service file calls named-checkzone
#                            utility for every zone to ensure all zones are
#                            valid before named starts. If you set this option
#                            to 'yes' then service file doesn't perform those
#                            checks.
OPTIONS="-4"

[root@iaasweb ~]# nano /etc/sysconfig/named

# DISABLE_ZONE_CHECKING -- By default, service file calls named-checkzone

# utility for every zone to ensure all zones are

# valid before named starts. If you set this option

# to 'yes' then service file doesn't perform those

# checks.

OPTIONS="-4"

Restart BIND9 dan cek statusnya

[root@iaasweb ~]# systemctl restart named
[root@iaasweb ~]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2022-11-24 18:08:13 WIB; 39s ago
  Process: 7157 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 7172 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 7169 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 7174 (named)
   CGroup: /system.slice/named.service
           └─7174 /usr/sbin/named -u named -c /etc/named.conf -4

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone localhost.localdomain/IN: loaded serial 0
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0....ial 0
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone localhost/IN: loaded serial 0
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: all zones loaded
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: running
Nov 24 18:08:13 iaasweb.iaas.web.id systemd[1]: Started Berkeley Internet Name Domain (DNS).
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: managed-keys-zone: Key 20326 for zone . acceptance timer complete: ...usted
Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: resolver priming query complete
Nov 24 18:08:48 iaasweb.iaas.web.id named[7174]: client @0x7ff9ec0a9060 10.177.10.10#60748 (google.com): query: goog...0.14)
Hint: Some lines were ellipsized, use -l to show in full.

[root@iaasweb ~]# systemctl restart named

[root@iaasweb ~]# systemctl status named

● named.service - Berkeley Internet Name Domain (DNS)

Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)

Active: active (running) since Thu 2022-11-24 18:08:13 WIB; 39s ago

Process: 7157 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)

Process: 7172 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)

Process: 7169 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)

Main PID: 7174 (named)

CGroup: /system.slice/named.service

└─7174 /usr/sbin/named -u named -c /etc/named.conf -4

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone localhost.localdomain/IN: loaded serial 0

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0....ial 0

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: zone localhost/IN: loaded serial 0

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: all zones loaded

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: running

Nov 24 18:08:13 iaasweb.iaas.web.id systemd[1]: Started Berkeley Internet Name Domain (DNS).

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: managed-keys-zone: Key 20326 for zone . acceptance timer complete: ...usted

Nov 24 18:08:13 iaasweb.iaas.web.id named[7174]: resolver priming query complete

Nov 24 18:08:48 iaasweb.iaas.web.id named[7174]: client @0x7ff9ec0a9060 10.177.10.10#60748 (google.com): query: goog...0.14)

Hint: Some lines were ellipsized, use -l to show in full.

network unreachable resolving ‘./DNSKEY/IN’: 2001:500:200::b#53

Issue

Solving

About iaas

Archives