This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
build:dns [2007/05/31 11:59] 71.10.176.218 Updated per installation of Debian 4.0 on Bud. (CMB) |
build:dns [2015/02/27 01:08] (current) SLUUG Administration [Installation] Added warning that this is obsolete. |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== DNS ====== | ====== DNS ====== | ||
- | We are running a caching name server on the server, bound to the loopback interface only. | + | We are running a caching name server on the server, bound to the loopback interface only. Public nameservers use BuddyNS, for which are using: |
- | We decided to use bind 9, as it is well supported now. (Note that Debian's default is bind 8, if you just say "bind".) We also decided to put it into a chroot jail, as it's pretty simple to do and well-documented. This will protect us from most bind and DNS exploits. | + | <code rootshell> |
+ | ;; NS (nameserver) records -- we're using BuddyNS as our primary DNS provider | ||
+ | @ IN NS b.ns.buddyns.com. | ||
+ | @ IN NS c.ns.buddyns.com. | ||
+ | @ IN NS d.ns.buddyns.com. | ||
+ | @ IN NS e.ns.buddyns.com. | ||
+ | </code> | ||
+ | |||
+ | Zone files are maintained in: | ||
+ | |||
+ | <code rootshell> | ||
+ | /etc/named/zones | ||
+ | </code> | ||
+ | |||
+ | If a change is made, be sure to update the serial in the zone file, then "rndc" to reload named. | ||
+ | |||
+ | We decided to use BIND 9, as it is well supported now. (Note that the default in Debian 5.0 is BIND 8, if you just say "bind".) We also decided to put it into a chroot jail, as it's pretty simple to do and well-documented. This will protect us from most BIND and DNS exploits. | ||
Note that we do not cover in this document the DNS services that maintain the SLUUG.ORG domain name. The [[domains | domain name info]] is documented on a separate page. | Note that we do not cover in this document the DNS services that maintain the SLUUG.ORG domain name. The [[domains | domain name info]] is documented on a separate page. | ||
===== Installation ===== | ===== Installation ===== | ||
+ | |||
+ | **Everything from here to the end probably only applies to the old bud server and doesn't apply now that bud had been replaced by by amber running a different Linux configuration.** | ||
First, install the required packages: | First, install the required packages: | ||
Line 31: | Line 49: | ||
ln -sf /var/lib/named/var/cache/bind /var/cache/bind | ln -sf /var/lib/named/var/cache/bind /var/cache/bind | ||
</code> | </code> | ||
- | |||
===== Configuration ===== | ===== Configuration ===== | ||