0

我有一个 bind9 服务器正在运行以请求i.example.com. 当我像这样从名称服务器向其自己的公共 IP 发出请求时,nslookup ns1.i.example.com xxx.xxx.xxx.xxx我得到了预期的答案:

Server:         xxx.xxx.xxx.xxx
Address:        xxx.xxx.xxx.xxx#53

Name:   ns1.i.example.com
Address: xxx.xxx.xxx.xxx

如果我从办公室计算机发出请求,我不会得到任何答案:

C:\Users\user>nslookup ns1.i.example.com xxx.xxx.xxx.xxx
DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  xxx.xxx.xxx.xxx

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out

Nmap 显示可以从办公室计算机访问端口 53:

PORT   STATE         SERVICE
53/udp open|filtered domain

在我的 bind9 选项中,我也在监听我的公共 IP 地址:

dnssec-validation auto;

listen-on-v6 { any; };
listen-on port 53 { 127.0.0.1; xxx.xxx.xxx.xxx; };
allow-query {
        any;
};
allow-recursion { any; };

另外,我没有设置任何 iptables 规则。

任何想法如何解决这一问题?

4

1 回答 1

3

除了我的 iptables 规则之外,我的 VPS 提供商 IONOS 还拥有额外的防火墙。在管理面板中打开端口 53 确实解决了问题。

于 2021-03-13T10:38:48.240 回答