Skip to content
Snippets Groups Projects
Commit d382e28d authored by Goik Martin's avatar Goik Martin
Browse files

DNS config update

parent 69ce3858
No related branches found
No related tags found
No related merge requests found
...@@ -8,13 +8,6 @@ ...@@ -8,13 +8,6 @@
xmlns:db="http://docbook.org/ns/docbook"> xmlns:db="http://docbook.org/ns/docbook">
<title><xref linkend="glo_DNS"/></title> <title><xref linkend="glo_DNS"/></title>
<programlisting language="none">TODO:
Zeller:
</programlisting>
<section xml:id="sdiDnsPrelim"> <section xml:id="sdiDnsPrelim">
<title>Preliminaries</title> <title>Preliminaries</title>
...@@ -46,15 +39,45 @@ Zeller: ...@@ -46,15 +39,45 @@ Zeller:
</listitem> </listitem>
</itemizedlist> </itemizedlist>
<programlisting language="none">apt-get install bind9 bind9utils <glosslist>
<glossentry>
<glossterm>Install server and utilities</glossterm>
<glossdef>
<programlisting language="none">apt-get install bind9 bind9utils</programlisting>
</glossdef>
</glossentry>
<glossentry>
<glossterm>Configure server startup</glossterm>
<glossdef>
<para>Turn off IPv6. Hint from
<filename>/etc/init.d/bind9</filename>:</para>
<programlisting language="none"># Don't modify this line, change or create /etc/default/bind9.
OPTIONS=""</programlisting>
<para>Thus modify <filename>/etc/default/bind9</filename>:</para>
<programlisting language="none">OPTIONS="<emphasis role="bold">-4</emphasis> -u bind"</programlisting>
<tip>
<para>Most (if not all) server configuration changes require a
daemon restart or at least a configuration file reloading to
become effective:</para>
<programlisting language="none">service bind9 reload</programlisting>
</tip>
</glossdef>
</glossentry>
------------------------------------------------------------------------- <glossentry>
vi /etc/default/bind9 <glossterm>Global options in
# startup options for the server <filename>/etc/bind/named.conf.options</filename></glossterm>
OPTIONS="-4 -u bind"
------------------------------------------------------------------------- <glossdef>
vim /etc/bind/named.conf.options <programlisting language="none">options {
options {
directory "/var/cache/bind"; directory "/var/cache/bind";
recursion yes; # enables resursive queries recursion yes; # enables resursive queries
...@@ -86,10 +109,21 @@ options { ...@@ -86,10 +109,21 @@ options {
auth-nxdomain no; # conform to RFC1035 auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; }; listen-on-v6 { any; };
}; };</programlisting>
------------------------------------------------------------------------- </glossdef>
vim /etc/bind/named.conf.local </glossentry>
zone "mi.hdm-stuttgart.de" {
<glossentry>
<glossterm>Configuring zones</glossterm>
<glossdef>
<glosslist>
<glossentry>
<glossterm><filename>/etc/bind/named.conf.local
</filename></glossterm>
<glossdef>
<programlisting language="none">zone "mi.hdm-stuttgart.de" {
type master; type master;
file "/etc/bind/zones/db.mi.hdm-stuttgart.de"; # zone file path file "/etc/bind/zones/db.mi.hdm-stuttgart.de"; # zone file path
}; };
...@@ -97,10 +131,16 @@ zone "mi.hdm-stuttgart.de" { ...@@ -97,10 +131,16 @@ zone "mi.hdm-stuttgart.de" {
zone "75.62.141.in-addr.arpa" { zone "75.62.141.in-addr.arpa" {
type master; type master;
file "/etc/bind/zones/db.141.62.75"; # 141.62.75.0/16 class-C subnet file "/etc/bind/zones/db.141.62.75"; # 141.62.75.0/16 class-C subnet
}; };</programlisting>
------------------------------------------------------------------------- </glossdef>
vim /etc/bind/zones/db.mi.hdm-stuttgart.de </glossentry>
;
<glossentry>
<glossterm><filename>/etc/bind/zones/db.mi.hdm-stuttgart.de
</filename></glossterm>
<glossdef>
<programlisting language="none">;
; BIND data file ; BIND data file
; ;
$TTL 604800 $TTL 604800
...@@ -118,12 +158,20 @@ $TTL 604800 ...@@ -118,12 +158,20 @@ $TTL 604800
; name servers - A records ; name servers - A records
ns4.mi.hdm-stuttgart.de. IN A 141.62.75.104 ns4.mi.hdm-stuttgart.de. IN A 141.62.75.104
www4.mi.hdm-stuttgart.de. IN A 141.62.75.104 www4.mi.hdm-stuttgart.de. IN A 141.62.75.104</programlisting>
-------------------------------------------------------------------------
vim /etc/bind/zones/db.141.62.75
; <tip>
; BIND reverse data file <para>Read about the <parameter>Serial</parameter>
parameter.</para>
</tip>
</glossdef>
</glossentry>
<glossentry>
<glossterm><filename>/etc/bind/zones/db.141.62.75</filename></glossterm>
<glossdef>
<programlisting language="none">; BIND reverse data file
; ;
$TTL 604800 $TTL 604800
@ IN SOA ns4.mi.hdm-stuttgart.de. root.mi.hdm-stuttgart.de. ( @ IN SOA ns4.mi.hdm-stuttgart.de. root.mi.hdm-stuttgart.de. (
...@@ -138,8 +186,13 @@ $TTL 604800 ...@@ -138,8 +186,13 @@ $TTL 604800
IN NS ns4.mi.hdm-stuttgart.de. IN NS ns4.mi.hdm-stuttgart.de.
; PTR Records ; PTR Records
104 IN PTR sdi4a.mi.hdm-stuttgart.de. ; 141.62.75.104:w 104 IN PTR sdi4a.mi.hdm-stuttgart.de. ; 141.62.75.104</programlisting>
</programlisting> </glossdef>
</glossentry>
</glosslist>
</glossdef>
</glossentry>
</glosslist>
</section> </section>
<section xml:id="sdiDnsExercises"> <section xml:id="sdiDnsExercises">
...@@ -269,8 +322,9 @@ $TTL 604800 ...@@ -269,8 +322,9 @@ $TTL 604800
sending a mail to <code>xy123@mi.hdm-stuttgart.de</code> won't work sending a mail to <code>xy123@mi.hdm-stuttgart.de</code> won't work
since the HdM's mail filters will deliver these mails to the MI mail since the HdM's mail filters will deliver these mails to the MI mail
server <code>mail.mi.hdm-stuttgart.de</code> rather than to server <code>mail.mi.hdm-stuttgart.de</code> rather than to
<code>mail.hdm-stuttgart.de</code> . In addition both servers will <code>mail.hdm-stuttgart.de</code> (and you probably have no account on
reject mails having destination addresses differing from this particular machine). In addition both servers will reject mails
having destination addresses differing from
<code>...@hdm-stuttgart.de</code> or <code>...@hdm-stuttgart.de</code> or
<code>...@mi.hdm-stuttgart.de</code> respectively.</para> <code>...@mi.hdm-stuttgart.de</code> respectively.</para>
</section> </section>
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment