...
Code Block |
---|
|
apt-get install service-network-dns-bindinstall bind9 |
Code Block |
---|
title | Create directory for PID file |
---|
|
mkdir -p /var/named
chown -R namedbind:namedbind /var/named
|
Create your own '/etc/bind/named.conf' (see examples below)
Code Block |
---|
|
sudo svcadm enable dns/serverbind9
|
Code Block |
---|
title | Check service status |
---|
|
svcs -xv
|
...
Code Block |
---|
title | Example /etc/bind/named/.conf |
---|
|
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones"; |
Code Block |
---|
title | Example /etc/bind/named.conf.options |
---|
|
options {
directory "/var/cache/bind";
pid-file "/var/named/named.pid";
query-source address * port 53;
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
forwarders {
10.50.0.2 8.8.8.8;
};
10.2.208.10;
//========================================================================
}; // If BIND logs error messages about empty-zones-enable yes;
the root key being expired,
auth-nxdomain no; // you #will conformneed to RFC1035 update your keys. See https://www.isc.org/bind-keys
// listen-on-v6 { any; };========================================================================
// dnssec-validation auto;
listen-on port 53 { any; };auth-nxdomain no; # conform to RFC1035
allowlisten-on-queryv6 { anynone; };
allowlisten-transferon { "none"any; };
}; |
Code Block |
---|
title | Example /etc/bind/named.conf.local |
---|
|
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
view "internal" {
match-clients
{ 172.16.0.0/16; }; // local clients
include "/etc/bind/zones.rfc1918";
include "/etc/bind/named.internal";
include "/etc/bind/named.external";
};
view "external" {
match-clients { "any"; }; // must be in the last clause
include "/etc/bind/named.external";
};
//view "default" {
// zone "example.com" {
// type master;
// zone file will return www.example.com with default (worldwide) IP
// file "view/master.example.com.default";
// };
//};
logging {
category lame-servers {null; };
}; |