BIND : Configure for External Network |
Install BIND to Configure DNS (Domain Name System) Server to provide Name or Address Resolution service for Clients. | |
| [1] | Install BIND. |
| root@dlp:~# apt -y install bind9 bind9utils |
| [2] | On this example, Configure BIND for External Network. The example follows is for the case that External network is [172.16.0.80/29], Domain name is [srv.world], Replace them to your own environment. ( Actually, [172.16.0.80/29] is for private IP addresses, though. ) |
root@dlp:~# vi /etc/bind/named.conf include "/etc/bind/named.conf.options"; include "/etc/bind/named.conf.local"; include "/etc/bind/named.conf.root-hints"; // add include "/etc/bind/named.conf.external-zones"; root@dlp:~# vi /etc/bind/named.conf.options options {
directory "/var/cache/bind";
// add : receive queries from all hosts
allow-query { any; };
// network range you allow to transfer zone files to clients
// add secondary DNS servers if it exist
allow-transfer { localhost; };
// add : not allow recursion
recursion no;
dnssec-validation auto;
listen-on port 53 { any; };
// if not listen IPV6, change [any] to [none]
listen-on-v6 { any; };
};
root@dlp:~# vi /etc/bind/named.conf.external-zones // create new // add zones for your network and domain name zone "srv.world" IN { type primary; file "/etc/bind/srv.world.wan"; allow-update { none; }; }; zone "0.16.172.in-addr.arpa" IN { type primary; file "/etc/bind/0.16.172.db"; allow-update { none; }; }; root@dlp:~# vi /etc/default/named # if you don't use IPv6 and also suppress logs for IPv6 related, possible to change # set BIND to use only IPv4 OPTIONS="-u bind -4 " |
| [3] | Next, Configure Zone Files for each Zone you set in [named.conf] above. To Configure Zone Files, refer to here. |
No comments:
Post a Comment