Versatile, Classic, Complete Name Server Software

Why Use BIND?

BIND 9 logo

  • BIND 9 is transparent open source. If your organization needs some functionality that is not in BIND 9, you can modify it, and contribute the new feature back to the the community by sending us your source. Download a tarball from the ISC web site or, or a binary from your operating system repository.
  • BIND 9 has evolved to be a very flexible, full-featured DNS system. Whatever your application is, BIND 9 most likely has the required features.
  • As the first, oldest, and most commonly deployed solution, there are more network engineers who are already familiar with BIND 9 than with any other system. Help is available via our community mailing list, or you may subscribe for expert, confidential, 24×7 support from the ISC team.

Getting Started

BIND 9 is distributed as source code, with executables provided for Windows. You download the code from this website, unpack the archive, and build it for whatever system you plan to run it on.  You will need a UNIX system with an ANSI C compiler, basic POSIX support, and a 64 bit integer type. BIND 9 runs and is supported on a very wide variety of new and old operating systems, including most UNIX and LINUX variants, and some Windows platforms.

Most users run BIND 9 on CentOS, Red Hat Enterprise Linux, Debian, Fedora, FreeBSD, Solaris, Ubuntu or Windows. The most up-to-date versions of BIND 9 are always available from ISC on our website and ftp server. Most operating systems also offer BIND 9 packages for their users. These may be built with a different set of defaults than the standard BIND 9 distribution and some of them add a version number of their own that does not map exactly to the BIND 9 version.

For configuration assistance, and overall understanding of how to use BIND 9, the BIND Administrative Reference Manual (ARM) is the primary tool. Resolver users may find Getting started for Recursive Resolvers to be useful. Windows users may find the explanation of the versions available for Windows useful. There are a number of excellent books on BIND. Ron Hutchinson’s DNS for Rocket Scientists is generously posted on the Internet at and can be a very helpful on-line reference tool. Our partners at Men and Mice run a very good series of hands-on training classes. For more information, see the Men and Mice web site.


BIND 9 User mailing list

Clarification on what DNS is... On Sun, 25 Aug 2019, m3047 wrote: > On Sat, 24 Aug 2019, J Doe wrote: >> [...] Is it possible to re-write a response on a reverse lookup ? For >> instance, if I considered a “bad domain”, can I write a RPZ >> [...]
Sun, Aug 25, 2019
Source: BIND-users Forum on Nabble
Yes. See below. Another respondent expresses concerns about the danger of IP address blocking. The RPZ implementation (in BIND) includes options for setting triggers on the address returned with A and AAAA RRs (rpz-ip) and nameserver address (nsip). These kinds of actions are functionally distinct from triggers based on the query [...]
Sun, Aug 25, 2019
Source: BIND-users Forum on Nabble
tl,dr: someone please explain why using this as my rpz zone does NOT block everything for * $ cat db.test-rpz $ORIGIN rpz.test. $TTL 1s @ IN SOA localhost. admin ( 2019082405 6h 15 1d 1s ) IN NS localhost. CNAME . * CNAME . CNAME . ; ======== end but using [...]
Sat, Aug 24, 2019
Source: BIND-users Forum on Nabble

Last modified: December 5, 2018 at 2:24 pm