Difference between revisions of "Cluster der kan alt/Install DNS server"

From Teknologisk videncenter
Jump to: navigation, search
(5. Create a “rev.0.0.10.in-addr.arpa” file for reverse lookup)
(5. Create a “rev.0.0.10.in-addr.arpa” file for reverse lookup)
 
Line 110: Line 110:
 
'''Note:''' TTL is set for 1 week.
 
'''Note:''' TTL is set for 1 week.
  
=== 5. Create a “rev.0.0.10.in-addr.arpa” file for reverse lookup  ===
+
=== 5. Create a “rev.0.0.10.in-addr.arpa.db” file for reverse lookup  ===
  
Create the rev.0.0.10.in-addr.arpa file <source lang="cli">
+
Create the rev.0.0.10.in-addr.arpa.db file <source lang="cli">
nano /etc/bind/zones/rev.0.0.10.in-addr.arpa
+
sudo nano /etc/bind/zones/rev.0.0.10.in-addr.arpa.db
 
</source> Add the following text <source lang="cli">
 
</source> Add the following text <source lang="cli">
 
$TTL 3D
 
$TTL 3D

Latest revision as of 09:54, 30 October 2014

Install DNS Server

Install DNS server

sudo apt-get install bind9

Configure DNS Server

1. Add domain zone

Edit /etc/bind/named.conf.local

sudo nano /etc/bind/named.conf.local

Add the text below to the bottom of the file

# Domain Zone
zone "dka.local." {
        type master;
        file "/etc/bind/zones/dka.local.db";
};

# For reverse DNS
zone "0.0.10.in-addr.arpa" {
        type master;
        file "/etc/bind/zones/rev.0.0.10.in-addr.arpa.db";
};

2. Add DNS servers from your ISP

Enter the named.conf.options file

sudo nano /etc/bind/named.conf.options

Comment out the following lines

        dnssec-validation auto;

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };

Add the following to the bottom of the file, just above '};'

        forwarders {
                172.16.4.77; # Mercantec DNS
         };

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
        listen-on { any; };

        allow-query { 127.0.0.1; 172.16.4.77/24; 10.0.0.0/24; };

NOTE: Be aware of which IP segment you are in. 172.16.4.77 = Hovedforløb 172.16.2.50,172.16.2.51 = Grundforløb

3. Modify the resolv.conf file

Edit /etc/resolvconf/resolv.conf.d/base file, and add the following lines. Replace 'dka.local' with your own domain.

nameserver 127.0.0.1
nameserver 10.0.0.1
nameserver 172.16.4.77
domain dka.local
search dka.local

You may want to lock down the resolv.conf file, making it immutable.

sudo chattr -f +i /etc/resolv.conf

Any problems with the resolv.conf file, look here

4. Define zones

First make the directory /etc/bind/zones

sudo mkdir /etc/bind/zones

Second make the file dka.local.db (replace with your own domain)

sudo nano /etc/bind/zones/dka.local.db
Add the following text to the newly created file
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     ns.dka.local. root.dka.local. (
                              8         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
@       IN      NS      ns.dka.local.
ns      IN      A       10.0.0.1
cluster IN      A       10.0.0.1
node1   IN      A       10.0.0.11
node2   IN      A       10.0.0.12
node3   IN      A       10.0.0.13
node4   IN      A       10.0.0.14

Note: TTL is set for 1 week.

5. Create a “rev.0.0.10.in-addr.arpa.db” file for reverse lookup

Create the rev.0.0.10.in-addr.arpa.db file
sudo nano /etc/bind/zones/rev.0.0.10.in-addr.arpa.db
Add the following text
$TTL 3D
@       IN      SOA     ns.dka.local. admin.dka.local. (
                2007062001
                28800
                604800
                604800
                86400
)
        IN      NS      ns.dka.local.
1       IN      PTR     ns.dka.local.
1       IN      PTR     cluster.dka.local.
11      IN      PTR     node1.dka.local.
12      IN      PTR     node2.dka.local.
13      IN      PTR     node3.dka.local.
14      IN      PTR     node4.dka.local.

6. Verify domain and DNS entries

Restart the network service
sudo service bind9 restart

Dig

$ dig dka.local

Nslookup

nslookup ns