Gentoo Archives: gentoo-user

From: Uwe Thiem <uwix@××××.na>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] DNS Expert Required
Date: Sun, 26 Mar 2006 11:09:09
Message-Id: 200603261301.39179.uwix@iway.na
In Reply to: [gentoo-user] DNS Expert Required by Hiren Dave
1 On 26 March 2006 10:01, Hiren Dave wrote:
2
3 Alright, I'll bite. ;-)
4
5 Some small errors.
6
7 > server1.guru.com (192.168.0.2) Primary DNS Server
8 > server2.guru.com (192.168.0.3) Secondary DNS Server
9 >
10 > => Here is my configuration file for server1.guru.com machine.
11 >
12 > #######################/etc/resolve.conf##############################
13 > domain guru.com
14 > search server1.guru.com server2.guru.com
15
16 search guru.com
17
18 (the search string gets appended to non-qualified names)
19
20 > nameserver 192.168.0.2
21 > nameserver 192.168.0.3
22 > ######################################################################
23 > ####################/var/named/chroot/etc/named.conf##################
24 > options {
25 > directory "/var/named";
26 > dump-file "/var/named/data/cache_dump.db";
27 > statistics-file "/var/named/data/named_stats.txt";
28 > allow-transfer { 192.168.0.3; 192.168.0.1; };
29 > allow-query { 192.168.0.0/24; localhost; };
30 > allow-recursion { 192.168.0.0/24; localhost; };
31 > };
32
33 allow-tansfer: take out 192.168.0.1; it's unnecessary.
34
35 [ snip ]
36
37 > zone "server1.guru.com" IN {
38
39 make this: zone "guru.com" IN {
40
41 > type master;
42 > file "server1.guru.com.zone";
43
44 make this: file "guru.com"; (not strictly necessary)
45
46 > allow-query { any; };
47
48 In the general options, you restrict queries to your local network. Why do you
49 now allow queries from anywhere?
50
51 > allow-update { key rndckey; };
52 > };
53
54
55
56 > #include "/etc/rndc.key";
57 > ######################################################################
58 > #######/var/named/chroot/var/named/server1.guru.com.zone##############
59
60 make the file "guru.co"
61
62 > $TTL 86400
63 > @ IN SOA server1.guru.com. root.server1.guru.com. (
64
65 BTW, *not* a good idea to make "root" the technical contact for your domain.
66
67 Now most stuff below can be much easier.
68 > 1 ; serial
69 > 300 ; refresh (5 minutes)
70 > 10 ; retry (10 seconds)
71 > 86400 ; expire (1 day)
72 > 600 ; minimum (10 minutes)
73 > )
74 >
75 > @ IN NS server1.guru.com.
76 > @ IN MX 10 server1.guru.com.
77 >
78 > server1.guru.com. IN A 192.168.0.2
79 > server2.guru.com. IN A 192.168.0.3
80 > win2k.guru.com. IN A 192.168.0.1
81 >
82 > www1 CNAME server1.guru.com.
83 > www2 CNAME server2.guru.com.
84 > www3 CNAME win2k.guru.com.
85 >
86 > server2 IN MX 0 server1.guru.com.
87 > win2k IN MX 0 server1.guru.com.
88
89 The lines above can now look this way:
90
91 IN NS server1.guru.com.
92 IN NS server2.guru.com.
93
94 IN MX 10 server1.guru.co.
95 *.guru.com IN MX 10 server1.guru.com.
96
97 server1 IN A 192.168.0.2
98 server2 IN A 192.168.0.3
99 win2k IN A 192.168.0.1
100
101 www1 CNAME server1
102 www2 CNAME server2
103 www3 CNAME win2k
104
105 (Note where I put a fullstop at the end of a name and where not. It's
106 important. Your MX statements above are contradictory. So I don't know
107 exactly which box your email server is and if you really have more than one.
108 If so you have to adjust my two MX entries above.)
109
110 Adjust server2 accordingly.
111
112 I cannot guarantee that I caught all mistakes. Just try it out.
113
114 Uwe
115
116 --
117 Why do consumers keep buying products they will live to curse?
118 --
119 gentoo-user@g.o mailing list

Replies

Subject Author
Re: [gentoo-user] DNS Expert Required Hiren Dave <hiren2k4@×××××.com>