☰

收到来自 8.8.8.8 的 SERVFAIL 回复，正在尝试下一个服务器

tag-icon • tag-icon 14.04 server dns bind hostname
收到来自 8.8.8.8 的 SERVFAIL 回复，正在尝试下一个服务器

一切都从 digitalocean 的 vps 和 ispconfig 的以下文档开始https://www.howtoforge.com/perfect-server-ubuntu-14.04-apache2-php-mysql-pureftpd-bind-dovecot-ispconfig-3完成所有安装过程后，我通过 ispconfig 界面添加了我的域，并使用 ispconfig 创建的域名服务器更新了我的域名服务器。

我的问题是我无法找到解决方案，当我尝试 nslookup crisubogdan.com 时出现以下错误：

root@sv:~# nslookup crisubogdan.com
;; Got SERVFAIL reply from 8.8.8.8, trying next server
Server:         8.8.4.4
Address:        8.8.4.4#53

** server can't find crisubogdan.com: SERVFAIL

当我尝试挖掘 crisubogdan.com 时出现以下错误：

root@sv:~# dig crisubogdan.com

; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> crisubogdan.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 46265
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;crisubogdan.com.               IN      A

;; Query time: 3028 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Mon Feb 16 14:12:45 EST 2015
;; MSG SIZE  rcvd: 44

有关 bind 的一些信息：

/etc/bind/named.conf 代码：

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

/etc/bind/named.conf.options 代码：

options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you may need to fix the firewall to allow multiple
    // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

    // If your ISP provided one or more IP addresses for stable
    // nameservers, you probably want to use them as forwarders.
    // Uncomment the following block, and insert the addresses replacing
    // the all-0's placeholder.

    // forwarders {
    //      0.0.0.0;
    // };

    //========================================================================
    // If BIND logs error messages about the root key being expired,
    // you will need to update your keys.  See https://www.isc.org/bind-keys
    //========================================================================
    // dnssec-validation auto;

/etc/bind/named.conf.local代码：

zone "crisubogdan.com" {
    type master;
    allow-transfer {none;};
    file "/etc/bind/pri.crisubogdan.com";
};
zone "craftedfreebies.com" {
    type master;
    allow-transfer {none;};
    file "/etc/bind/pri.craftedfreebies.com";
};

/etc/bind/named.conf.default-zones 代码：

// prime the server with knowledge of the root servers
zone "." {
        type hint;
        file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
        type master;
        file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
        type master;
        file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
        type master;
        file "/etc/bind/db.0";
};

/etc/bind/pri.crisubogdan.com 代码：

$TTL        3600
@       IN      SOA     ns1.crisubogdan.com. contact.crisubogdan.com. (
                        2015020808       ; serial, todays date + todays serial #
                        7200              ; refresh, seconds
                        540              ; retry, seconds
                        604800              ; expire, seconds
                        86400 )            ; minimum, seconds
;

crisubogdan.com. 3600 A        178.62.241.109
mail 3600 A        178.62.241.109
ns1.crisubogdan.com. 3600 A        178.62.241.109
ns2.crisubogdan.com. 3600 A        178.62.241.109
www 3600 A        178.62.241.109
crisubogdan.com. 3600      MX    10   mail.crisubogdan.com.
crisubogdan.com. 3600      NS        ns1.crisubogdan.com.
crisubogdan.com. 3600      NS        ns2.crisubogdan.com.

/etc/resolv.conf 代码：

# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 8.8.8.8
nameserver 8.8.4.4

我不知道为什么会出现这个错误，如果你能帮助我结束近 8 天的与 vps 绑定错误的斗争。

谢谢。

答案1

正如评论中所讨论的。OP 需要在其域名注册商处注册名称服务器。

OP 能够确认 BIND 服务器报告了正确的 DNS 信息：

nslookup crisubogdan.com 127.0.0.1

这将在 127.0.0.1 (localhost) 上运行查找。由于报告正确，因此问题很可能出在注册商上，要么是名称服务器未注册，要么是域名未使用正确的名称服务器。

相关内容