Bind
Configuration
named.conf
For an internet DNS server:
//Tripany
include "/etc/bind/slaves.conf";
// Recursion is allowing other hosts to look up domain names not hosted / cached by this bind server
acl "recursehosts" {
127.0.0.1; 212.61.33.42; localhost; 82.94.91.75; 82.92.214.79; 195.64.90.139; 82.94.91.75; 31.160.12.68; 188.204.140.220;
};
include "/etc/bind/named.conf.options";
view "recursehosts" {
match-clients { recursehosts; };
recursion yes;
allow-transfer { "slaves"; };
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/named.conf.db";
};
view "outside" {
match-clients { any; };
recursion no;
allow-transfer { "slaves"; };
zone "." {
type hint;
file "/etc/bind/db.root";
};
// edns-udp-size 1400;
include "/etc/bind/named.conf.db";
};
Otherwise use default
named.conf.options
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
213.75.63.36;
213.75.63.70;
};
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
# Turned off because most DNSSEC secured zones are incorrectly configured. This leads to flooding of the syslog with (no valid RRSIG) errors
# dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
# Turned off because KPN doesn't support ipv6. This leads to flooding of the syslog with (network unreachable) errors
# listen-on-v6 { any; };
# Not needed because Debian default directory is now linked to /var/named by hand
# directory "/var/named";
};
For an internet nameserver add:
allow-recursion { recursehosts; };
allow-query-cache { recursehosts; };
named.conf.local
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "ops.tripnet.int" in {
type master;
file "soa/ops.tripnet.int";
notify yes;
};
zone "net.tripnet.int" in {
type master;
file "soa/net.tripnet.int";
notify yes;
};
zone "internal.tripnet.int" in {
type master;
file "soa/internal.tripnet.int";
notify yes;
allow-update {localhost;};
};
zone "tripnet.int" in {
type master;
file "soa/tripnet.int";
notify yes;
};
zone "0.0.10.in-addr.arpa" in {
type master;
file "rev/10.0.0.rev";
notify yes;
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "rev/localhost.rev";
};
zone "0.168.192.in-addr.arpa" in {
type master;
file "rev/192.168.0.rev";
notify yes;
};
zone "1.168.192.in-addr.arpa" in {
type master;
file "rev/192.168.1.rev";
notify yes;
allow-update {localhost;};
};
zone "100.168.192.in-addr.arpa" in {
type master;
file "rev/192.168.100.rev";
notify yes;
allow-update {localhost;};
};
example /var/named/soa/internal.tripnet.int
@ IN SOA router.tripnet.int. root.router.tripnet.int. (
2001072027 ; serial, todays date + todays serial
10800 ; refresh
3600 ; retry
604800 ; expire
86400 ) ; minimum TTL
;
IN NS router.tripnet.int.
IN NS tripserv.tripnet.int.
IN MX 10 router.tripnet.int.
;
; Netwerk locaal ip 192.168. netmask 255.255.255.0
;
lindy 10 IN A 192.168.0.20 ;Cl=3
marylene 10 IN A 192.168.0.21 ;Cl=3
amber 10 IN A 192.168.0.22 ;Cl=3
yvette 10 IN A 192.168.0.23 ;Cl=3
crystel 10 IN A 192.168.0.24 ;Cl=3
treske 10 IN A 192.168.0.25 ;Cl=3
sharon 10 IN A 192.168.0.26 ;Cl=3
serena 10 IN A 192.168.0.27 ;Cl=3
treske-ii 10 IN A 192.168.0.28 ;Cl=3
catherine 10 IN A 192.168.0.29 ;Cl=3
marjolein 10 IN A 192.168.0.30 ;Cl=3
maggotbox 10 IN A 192.168.0.31 ;Cl=3
example /var/named/rev/192.168.0.rev
0.168.192.in-addr.arpa. IN SOA router.tripnet.int. root.router.tripnet.int. (
2002083046 ; serial
8H ; refresh
2H ; retry
1W ; expire
1D ; minimum
)
IN NS router.tripnet.int.
IN NS tripserv.tripnet.int.
IN MX 10 router.tripnet.int.
1 IN PTR router.ops.tripnet.int.
2 IN PTR tripserv.ops.tripnet.int.
3 IN PTR tripevo.ops.tripnet.int.
4 IN PTR tripdev.ops.tripnet.int.
5 IN PTR tripraid.ops.tripnet.int.
6 IN PTR tripbook.ops.tripnet.int.
8 IN PTR tripenclosure.ops.tripnet.int.
9 IN PTR soap.tripnet.int.
slaves.conf
// Slave servers
acl "slaves" {
//
87.233.134.184; // Moondust machine
213.193.253.120; // ns-01.etryx.com
213.239.175.248; // ns-02.etryx.com
// 82.92.214.79; // old ns2.euhost.nl
// 82.95.80.17; // old ns2.euhost.nl
212.61.33.42;
// 82.94.91.75; // tripany.com machine
// 31.160.12.69; // ns2.euhost.nl
188.204.140.220; // ns2.euhost.nl
127.0.0.1;
localhost;
};
Adding a new domain
New Domain: www.domain.com
212.61.33.42
Add the following in /etc/bind/named.conf.db
zone "domain.com" in {
type master;
file "soa/domain.com";
notify yes;
};
Add the following in /var/named/soa/domain.com
@ IN SOA ns1.euhost.nl. root.ns1.euhost.nl. (
2011103102 ; serial FORMAT: YYYYMMDDXX
14800 ; refresh
3600 ; retry
604800 ; expire
86400 ; minimum
)
IN NS ns1.euhost.nl.
IN NS ns2.euhost.nl.
IN MX 10 mail.tripany.com.
IN A 188.204.140.195
; Standard
localhost IN A 188.204.140.195
www IN A 188.204.140.195
ftp IN A 188.204.140.195
ssh -l USERNAME ns2.euhost.nl
Add the following in /etc/bind/named.conf.db
zone "domain.com" in {
type master;
file "soa/domain.com";
notify yes;
};
rndc reload;tail -f /var/log/messages
Quit the SSH back to 212.61.33.42
Again: rndc reload;tail -f /var/log/messages