bind cant start after updating webmin 1930 GeoIP DB not available error KINDLY URGENTLY HELP ME

atleast · November 15, 2019, 10:16pm

I upgraded webmin’s latest ver after many months from 1900 to 1932 today and it stopped DNS BIND 9.11 and complained of
“This domain has email enabled, but none of the MX records point to it. Either the MX records should be corrected, or the email feature disabled if mail is hosted externally.” + ProFTPD virtual FTP : No ProFTPD virtual server found
I then disabled mail service for all 4 domains and also ProFTPD from all domains

I am on a Centos 7* and have similar install on another machine but i hv not upgraded to webmin 1932 fear of getting into problems.
I am very desperate as i can not find any way to fix the following issue.
After i tried to start BIND BUT it gives following :
GeoIP City (IPv4) (type 2) DB not available

I have restarted RNDC a few times but to no avail.

Nov 15 16:09:01 um-2277 bash: zone localhost.localdomain/IN: loaded serial 0
Nov 15 16:09:01 um-2277 bash: zone localhost/IN: loaded serial 0
Nov 15 16:09:01 um-2277 bash: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
Nov 15 16:09:01 um-2277 bash: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Nov 15 16:09:01 um-2277 bash: zone 0.in-addr.arpa/IN: loaded serial 0
Nov 15 16:09:01 um-2277 bash: /var/named/domone.com.hosts:21: ignoring out-of-zone data (um-2277)
Nov 15 16:09:01 um-2277 bash: zone domone.com/IN: loaded serial 1518478438
Nov 15 16:09:01 um-2277 bash: /var/named/dom2.com.hosts:15: ignoring out-of-zone data (www)
Nov 15 16:09:01 um-2277 bash: zone dom2.com/IN: loaded serial 1519348436
Nov 15 16:09:01 um-2277 bash: /var/named/dom3.com.hosts:15: ignoring out-of-zone data (www)
Nov 15 16:09:01 um-2277 bash: zone dom3.com/IN: loaded serial 1519411691
Nov 15 16:09:01 um-2277 bash: /var/named/dom4.com.hosts:15: ignoring out-of-zone data (www)
Nov 15 16:09:01 um-2277 bash: zone dom4.com/IN: loaded serial 1519429126
Nov 15 16:09:01 um-2277 bash: /var/named/dom5.com.hosts:15: ignoring out-of-zone data (www)
Nov 15 16:09:01 um-2277 bash: zone dom5.com/IN: loaded serial 1519437476
Nov 15 16:09:01 um-2277 named[3709]: starting BIND 9.11.4-P2-RedHat-9.11.4-9.P2.el7 (Extended Support Version) id:7107deb
Nov 15 16:09:01 um-2277 named[3709]: running on Linux x86_64 3.10.0-1062.4.3.el7.x86_64 #1 SMP Wed Nov 13 23:58:53 UTC 2019
Nov 15 16:09:01 um-2277 named[3709]: built with ‘–build=x86_64-redhat-linux-gnu’ ‘–host=x86_64-redhat-linux-gnu’ ‘–program-prefix=’ ‘–disable-dependency-tracking’ ‘–prefix=/usr’ ‘–exec-prefix=/usr’ ‘–bindir=/usr/bin’ ‘–sbindir=/usr/sbin’ ‘–sysconfdir=/etc’ ‘–datadir=/usr/share’ ‘–includedir=/usr/include’ ‘–libdir=/usr/lib64’ ‘–libexecdir=/usr/libexec’ ‘–sharedstatedir=/var/lib’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–with-python=/usr/bin/python’ ‘–with-libtool’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-ipv6’ ‘–enable-filter-aaaa’ ‘–enable-rrl’ ‘–with-pic’ ‘–disable-static’ ‘–includedir=/usr/include/bind9’ ‘–with-geoip’ ‘–with-libidn’ ‘–enable-openssl-hash’ ‘–enable-native-pkcs11’ ‘–with-pkcs11=/usr/lib64/pkcs11/libsofthsm2.so’ ‘–with-dlopen=yes’ ‘–with-dlz-ldap=yes’ ‘–with-dlz-postgres=yes’ ‘–with-dlz-mysql=yes’ ‘–with-dlz-filesystem=yes’ ‘–with-dlz-bdb=yes’ ‘–with-gssapi=yes’ ‘–disable-isc-spnego’ ‘–with-lmdb=no’ ‘–with-atf=yes’ ‘–enable-fixed-rrset’ ‘–with-tuning=large’ ‘–with-docbook-xsl=/usr/share/sgml/docbook/xsl-stylesheets’ ‘–enable-full-report’ ‘build_alias=x86_64-redhat-linux-gnu’ ‘host_alias=x86_64-redhat-linux-gnu’ ‘CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic’ 'LDFLAGS=-Wl,-z,relro ’ ‘CPPFLAGS= -DDIG_SIGCHASE’
Nov 15 16:09:01 um-2277 named[3709]: running as: named -u named -c /etc/named.conf
Nov 15 16:09:01 um-2277 named[3709]: compiled by GCC 4.8.5 20150623 (Red Hat 4.8.5-39)
Nov 15 16:09:01 um-2277 named[3709]: compiled with OpenSSL version: OpenSSL 1.0.2k 26 Jan 2017
Nov 15 16:09:01 um-2277 named[3709]: linked to OpenSSL version: OpenSSL 1.0.2k-fips 26 Jan 2017
Nov 15 16:09:01 um-2277 named[3709]: compiled with libxml2 version: 2.9.1
Nov 15 16:09:01 um-2277 named[3709]: linked to libxml2 version: 20901
Nov 15 16:09:01 um-2277 named[3709]: compiled with zlib version: 1.2.7
Nov 15 16:09:01 um-2277 named[3709]: linked to zlib version: 1.2.7
Nov 15 16:09:01 um-2277 named[3709]: threads support is enabled
Nov 15 16:09:01 um-2277 named[3709]: ----------------------------------------------------
Nov 15 16:09:01 um-2277 named[3709]: BIND 9 is maintained by Internet Systems Consortium,
Nov 15 16:09:01 um-2277 named[3709]: Inc. (ISC), a non-profit 501©(3) public-benefit
Nov 15 16:09:01 um-2277 named[3709]: corporation. Support and training for BIND 9 are
Nov 15 16:09:01 um-2277 named[3709]: available at https://www.isc.org/support
Nov 15 16:09:01 um-2277 named[3709]: ----------------------------------------------------
Nov 15 16:09:01 um-2277 named[3709]: adjusted limit on open files from 4096 to 1048576
Nov 15 16:09:01 um-2277 named[3709]: found 24 CPUs, using 24 worker threads
Nov 15 16:09:01 um-2277 named[3709]: using 23 UDP listeners per interface
Nov 15 16:09:01 um-2277 named[3709]: using up to 21000 sockets
Nov 15 16:09:01 um-2277 named[3709]: loading configuration from ‘/etc/named.conf’
Nov 15 16:09:01 um-2277 named[3709]: reading built-in trust anchors from file ‘/etc/named.iscdlv.key’
Nov 15 16:09:01 um-2277 named[3709]: initializing GeoIP Country (IPv4) (type 1) DB
Nov 15 16:09:01 um-2277 named[3709]: GEO-106FREE 20180327 Build 1 Copyright © 2018 MaxMind Inc All Rights Reserved
Nov 15 16:09:01 um-2277 named[3709]: initializing GeoIP Country (IPv6) (type 12) DB
Nov 15 16:09:01 um-2277 named[3709]: GEO-106FREE 20180605 Build 1 Copyright © 2018 MaxMind Inc All Rights Reserved
Nov 15 16:09:01 um-2277 named[3709]: GeoIP City (IPv4) (type 2) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP City (IPv4) (type 6) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP City (IPv6) (type 30) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP City (IPv6) (type 31) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP Region (type 3) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP Region (type 7) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP ISP (type 4) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP Org (type 5) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP AS (type 9) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP Domain (type 11) DB not available
Nov 15 16:09:01 um-2277 named[3709]: GeoIP NetSpeed (type 10) DB not available
Nov 15 16:09:01 um-2277 named[3709]: using default UDP/IPv4 port range: [32768, 60999]
Nov 15 16:09:01 um-2277 named[3709]: using default UDP/IPv6 port range: [32768, 60999]
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv4 interface lo, 127.0.0.1#53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv4 interface eno1, 69.61.xx.x #53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv4 interface eno1:1, 69.61.xx.x#53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv4 interface eno1:2, 69.61.xx.xx#53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv4 interface eno1:3, 69.61.xx.xx#53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv4 interface eno1:4, 69.61.79.110#53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: listening on IPv6 interface lo, ::1#53
Nov 15 16:09:01 um-2277 named[3709]: binding TCP socket: address in use
Nov 15 16:09:01 um-2277 named[3709]: unable to listen on any configured interfaces
Nov 15 16:09:01 um-2277 named[3709]: loading configuration: failure
Nov 15 16:09:01 um-2277 named[3709]: exiting (due to fatal error)
Nov 15 16:09:01 um-2277 systemd: named.service: control process exited, code=exited status=1
Nov 15 16:09:01 um-2277 systemd: Failed to start Berkeley Internet Name Domain (DNS).
Nov 15 16:09:01 um-2277 systemd: Unit named.service entered failed state.
Nov 15 16:09:01 um-2277 systemd: named.service failed.

Eric · November 15, 2019, 10:31pm

Howdy,

I suspect the issue you’re seeing is in regards to these errors:


binding TCP socket: address in use
unable to listen on any configured interfaces

Regarding the Geo IP errors, it should be safe to ignore those, additional details on that are here:

https://askubuntu.com/questions/952973/bind-dns-server-complains-about-geoip

The key would be to determine why BIND is unable to listen on port 53.

You may want to try stopping BIND, and then ensure that it really does quit out. I’d also suggest reviewing that no other DNS server is running in it’s place.

Once you’re sure that port 53 UDP is available, try starting BIND back up again.

-Eric

atleast · November 16, 2019, 12:03am

Dear Eric
I was able to start after i searched on processes and found dnsmasq process that i killed.
NOW I had port 53 on TCP like i have on another of similar server. ON THIS machine in trouble i had for some reason also TCP which i changed to UDP as another of my recent one had 53 UDP. SO after doing that i also deleted 953 and now after killing dnsmasq i was able to start the service.

Now to give you more hard time KINDLY tell me why did after updating to 1930 webmin it forced me to remove mail service as it said:
This domain has email enabled, but none of the MX records point to it. Either the MX records should be corrected, or the email feature disabled if mail is hosted externally.
SO i promptly disabled from virtualmin the mail service and still i could not work as i kept seeing that error of geoip.
Can i now enable mail service on two domains?
I APPRECIATE SO much and send you blessings and lots of affection for your good work and helping always everyone

atleast · November 16, 2019, 12:20am

Dear Eric
You are my lifeline. I so much appreciate that you took time to respond.
You mean to say BIND is not listening on 53? I have enabled port 53 and 953 and also DNS service on firewalld
How do i find if BIND is running as I tried do but i cant kill these processes as it says no such process. Kindly review what i did:
nmap localhost PORT STATE SERVICE 21/tcp open ftp 25/tcp open smtp 53/tcp open domain 80/tcp open http 110/tcp open pop3 143/tcp open imap 443/tcp open https 465/tcp open smtps 587/tcp open submission 783/tcp open spamassassin 993/tcp open imaps 995/tcp open pop3s 3306/tcp open mysql 8000/tcp open http-


rndc stats

WARNING: key file (/etc/rndc.key) exists, but using default configuration file (/etc/rndc.conf)

rndc: connect failed: 127.0.0.1#953: connection refused

ps ax |grep named

17123 ?        S      0:00 sh -c ( ps ax |grep named) 2>&1

17124 ?        S      0:00 sh -c ( ps ax |grep named) 2>&1

17126 ?        S      0:00 grep named

ps ax |grep bind

17138 ?        S      0:00 sh -c ( ps ax |grep bind) 2>&1

17139 ?        S      0:00 sh -c ( ps ax |grep bind) 2>&1

17141 ?        S      0:00 grep bind

kill -9 17138

sh: line 0: kill: (17138) - No such process

kill -9 17139

sh: line 0: kill: (17139) - No such process

kill -9 17141

sh: line 0: kill: (17141) - No such process


service named status

Redirecting to /bin/systemctl status named.service

● named.service - Berkeley Internet Name Domain (DNS)

Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)

Active: failed (Result: exit-code) since Fri 2019-11-15 18:11:28 EST; 30min ago

Process: 16063 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=1/FAILURE)

Process: 16059 ExecStartPre=/bin/bash -c if [ ! “$DISABLE_ZONE_CHECKING” == “yes” ]; then /usr/sbin/named-checkconf -z “$NAMEDCONF”; else echo “Checking of zone files is disabled”; fi (code=exited, status=0/SUCCESS)

Nov 15 18:11:28 onedomain.com named[16064]: listening on IPv4 interface eno1:4, 69.00.00.10#53 Nov 15 18:11:28 onedomain.com named[16064]: binding TCP socket: address in use Nov 15 18:11:28 onedomain.com named[16064]: listening on IPv6 interface lo, ::1#53 Nov 15 18:11:28 onedomain.com named[16064]: binding TCP socket: address in use Nov 15 18:11:28 onedomain.com named[16064]: unable to listen on any configured interfaces Nov 15 18:11:28 onedomain.com named[16064]: loading configuration: failure Nov 15 18:11:28 onedomain.com systemd[1]: named.service: control process exited, code=exited status=1 Nov 15 18:11:28 onedomain.com systemd[1]: Failed to start Berkeley Internet Name Domain (DNS). Nov 15 18:11:28 onedomain.com systemd[1]: Unit named.service entered failed state. Nov 15 18:11:28 onedomain.com systemd[1]: named.service failed.

atleast · November 16, 2019, 12:22am

Is there any way to upgrade to webmin 1930 from 1900 without causing any issues? I was not updating for long time and now i think i need to. But today’s update caused me this issue as virtualmin was giving errors of dns mail related. I was able to enable mail for the domain after restart of bind. Thanks Eric. All ok.