DNS server - Revision history

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-08-08T14:26:53Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 10:26, 8 August 2025
Line 159:		Line 159:

	systemctl start named		systemctl start named

			Check if it is running:

			systemctl status named

	Useful(?) commands:		Useful(?) commands:

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-21T19:01:07Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 15:01, 21 April 2025
Line 145:		Line 145:

	# Generated by NetworkManager		# Generated by NetworkManager
			#
			search jlab.org clontest.com
			nameserver 192.168.10.1
			nameserver 129.57.90.255
			nameserver 129.57.32.101
			#
	#search jlab.org acc.jlab.org		#search jlab.org acc.jlab.org
	#nameserver 129.57.90.255		#nameserver 129.57.90.255
	#nameserver 129.57.32.101		#nameserver 129.57.32.101
	~~search clontest.com~~
	~~nameserver 192.168.10.1~~

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-21T18:57:15Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 14:57, 21 April 2025
Line 20:		Line 20:
	listen-on port 53 { 192.168.10.1; };		listen-on port 53 { 192.168.10.1; };
	## listen-on-v6 port 53 { ::1; };		## listen-on-v6 port 53 { ::1; };
	directory "/var/named";		directory "/var/named";
	dump-file "/var/named/data/cache_dump.db";		dump-file "/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";		statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";		memstatistics-file "/var/named/data/named_mem_stats.txt";
Line 39:		Line 39:
	reduce such attack surface		reduce such attack surface
	*/		*/
	## recursion yes;		recursion yes;
	recursion no;		## recursion no;
	//		//
	dnssec-enable yes;		## dnssec-enable yes;
	dnssec-validation yes;		## dnssec-validation yes;
			dnssec-enable no;
			dnssec-validation no;
	//		//
	/* Path to ISC DLV key */		/* Path to ISC DLV key */
Line 52:		Line 54:
	pid-file "/run/named/named.pid";		pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";		session-keyfile "/run/named/session.key";
			forwarders { 129.57.90.255; 129.57.32.101; 129.57.32.100; };
	};		};
	//		//
	logging {		logging {
	channel default_debug {		channel default_debug {
	file "data/named.run";		file "data/named.run";
	severity dynamic;		severity dynamic;
	};		};
	};		};
	//		//

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-18T17:47:35Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 13:47, 18 April 2025
Line 42:		Line 42:
	recursion no;		recursion no;
	//		//
	dnssec-enable yes;		dnssec-enable yes;
	dnssec-validation yes;		dnssec-validation yes;
	//		//
	/* Path to ISC DLV key */		/* Path to ISC DLV key */

Boiarino at 17:46, 18 April 2025

2025-04-18T17:46:56Z

← Older revision		Revision as of 13:46, 18 April 2025
Line 14:		Line 14:
	//		//
	// See the BIND Administrator's Reference Manual (ARM) for details about the		// See the BIND Administrator's Reference Manual (ARM) for details about the
	// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html		// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html
			//
	options {		options {
	## listen-on port 53 { 127.0.0.1; };		## listen-on port 53 { 127.0.0.1; };
	listen-on port 53 { 192.168.10.1; };		listen-on port 53 { 192.168.10.1; };
	listen-on-v6 port 53 { ::1; };		## listen-on-v6 port 53 { ::1; };
	directory "/var/named";		directory "/var/named";
	dump-file "/var/named/data/cache_dump.db";		dump-file "/var/named/data/cache_dump.db";
Line 27:		Line 27:
	secroots-file "/var/named/data/named.secroots";		secroots-file "/var/named/data/named.secroots";
	## allow-query { localhost; };		## allow-query { localhost; };
	allow-query { ~~localhost;~~ 192.168.10.0/24;};		allow-query { 192.168.10.0/24; };
			//
	/*		/*
	- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.		- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
Line 41:		Line 41:
	## recursion yes;		## recursion yes;
	recursion no;		recursion no;
			//
	dnssec-enable yes;		dnssec-enable yes;
	dnssec-validation yes;		dnssec-validation yes;
			//
	/* Path to ISC DLV key */		/* Path to ISC DLV key */
	bindkeys-file "/etc/named.root.key";		bindkeys-file "/etc/named.root.key";
			//
	managed-keys-directory "/var/named/dynamic";		managed-keys-directory "/var/named/dynamic";
			//
	pid-file "/run/named/named.pid";		pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";		session-keyfile "/run/named/session.key";
	};		};
			//
	logging {		logging {
	channel default_debug {		channel default_debug {
Line 60:		Line 60:
	};		};
	};		};
			//
	zone "clontest.com" {		zone "clontest.com" {
	type master;		type master;
	file "clontest.com";		file "clontest.com";
	};		};
			//
	zone "10.168.192.IN-ADDR.ARPA" {		zone "10.168.192.IN-ADDR.ARPA" {
	type master;		type master;
	file "10.168.192.in-addr.arpa.db";		file "10.168.192.in-addr.arpa.db";
	};		};
			//
	include "/etc/named.rfc1912.zones";		include "/etc/named.rfc1912.zones";
	include "/etc/named.root.key";		include "/etc/named.root.key";
			//

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-18T17:13:36Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 13:13, 18 April 2025
Line 151:		Line 151:

	systemctl start named		systemctl start named

			Useful(?) commands:

			rndc managed-keys status
			rndc managed-keys refresh

	== old Solaris instructions ==		== old Solaris instructions ==

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-18T14:33:40Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 10:33, 18 April 2025
Line 88:		Line 88:
	A 192.168.10.1		A 192.168.10.1
	AAAA ::1		AAAA ::1

	~~test4~~.clontest.com. IN A 192.168.10.5		test5.clontest.com. IN A 192.168.10.5
	~~test1~~.clontest.com. IN A 192.168.10.4		test6.clontest.com. IN A 192.168.10.6


Line 105:		Line 105:
	86400 ; Negative Cache TTL		86400 ; Negative Cache TTL
	)		)
			;
	@ IN NS clontest.com.		@ IN NS clontest.com.
			;
	5~~.10.168.192~~ IN PTR ~~test4~~.clontest.com.		; in following statements, only last digit of the IP is specified in the beginning of each line !!!
	~~4.10.168.192~~ IN PTR ~~test1~~.clontest.com.		; other three digits already specified in ORIGIN line above !!!
			;
			5 IN PTR test5.clontest.com.
			6 IN PTR test6.clontest.com.


Line 116:		Line 119:
	named-checkzone clontest.com clontest.com		named-checkzone clontest.com clontest.com
	named-checkzone 10.168.192.in-addr.arpa 10.168.192.in-addr.arpa.db		named-checkzone 10.168.192.in-addr.arpa 10.168.192.in-addr.arpa.db

			If reverse zone is set correctly, command
			dig -x 192.168.10.6 +noall +ans +nottlunits
			suppose to return
			6.10.168.192.in-addr.arpa. 86400 IN PTR test6.clontest.com.
			and nslookup in both directions suppose to work:

			> nslookup 192.168.10.6
			6.10.168.192.in-addr.arpa name = test6.clontest.com.

			> nslookup test6
			Server: 192.168.10.1
			Address: 192.168.10.1#53

			Name: test6.clontest.com
			Address: 192.168.10.6

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-17T21:18:50Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 17:18, 17 April 2025
Line 93:		Line 93:


	File ''10.168.192.in-addr.arpa.db'':		File ''/var/named/10.168.192.in-addr.arpa.db'':

	$ORIGIN 10.168.192.in-addr.arpa.		$ORIGIN 10.168.192.in-addr.arpa.

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-17T20:39:08Z

Setting DNS server on local machine (RHEL7)

@@ Line 110: / Line 110: @@
 .10.168.192  IN     PTR	test4.clontest.com.
 .10.168.192  IN     PTR	test1.clontest.com.
@@ Line 118: / Line 116: @@
   named-checkzone clontest.com clontest.com
   named-checkzone 10.168.192.in-addr.arpa 10.168.192.in-addr.arpa.db
 == old Solaris instructions ==

Boiarino: /* Setting DNS server on local machine (RHEL7) */

2025-04-17T20:37:08Z

Setting DNS server on local machine (RHEL7)

← Older revision		Revision as of 16:37, 17 April 2025
Line 91:		Line 91:
	test4.clontest.com. IN A 192.168.10.5		test4.clontest.com. IN A 192.168.10.5
	test1.clontest.com. IN A 192.168.10.4		test1.clontest.com. IN A 192.168.10.4


			File ''10.168.192.in-addr.arpa.db'':

			$ORIGIN 10.168.192.in-addr.arpa.
			$TTL 86400
			; Reverse DNS zone for 192.168.10.0/24
			@ IN SOA clontest.com. boiarino.jlab.org. (
			2025041702 ; Serial
			28800 ; Refresh
			7200 ; Retry
			360000 ; Expire
			86400 ; Negative Cache TTL
			)

			@ IN NS clontest.com.

			5.10.168.192 IN PTR test4.clontest.com.
			4.10.168.192 IN PTR test1.clontest.com.