<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.3.2">
</HEAD>
<BODY>
On Thu, 2005-12-29 at 15:35 -0500, Jim Perrin wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">On 12/29/05, Sam Drinkard <<A HREF="mailto:sam@wa4phy.net">sam@wa4phy.net</A>> wrote:</FONT>
<FONT COLOR="#000000">> Do we have anyone here who is a bind/dns wizard? I've been under the impression my dns setup which I've used for so many years on a bsd machine is now considered lame. If there is someone who would not mind taking a look at my configuration to see where I'm missing something, or where the difference lies between bind 9 and previous bind 8 configs? I'd prefer to do this off list via direct e-mail. The zone is very small, and the files are small too..</FONT>
<FONT COLOR="#000000">I don't consider myself an expert, but I'd be willing to help. I would</FONT>
<FONT COLOR="#000000">prefer to do it on-list if it's at all possible for a couple reasons.</FONT>
<FONT COLOR="#000000">1. It may help others who have questions about bind but haven't asked yet.</FONT>
<FONT COLOR="#000000">2. It will provide (assuming this is a productive thread) a reference</FONT>
<FONT COLOR="#000000">to link people to in the future.</FONT>
<FONT COLOR="#000000">3. Help from multiple people can be offered, so you get the best</FONT>
<FONT COLOR="#000000">overall advice via discussion style suggestion/revision. There's</FONT>
<FONT COLOR="#000000">probably something I'll miss that another person might pick up on. (</FONT>
<FONT COLOR="#000000">Someone else has done it, and done it better)</FONT>
<FONT COLOR="#000000">The only real downside is that your network topography is moderately</FONT>
<FONT COLOR="#000000">exposed. This can be mitigated by cleansing the files of domain names</FONT>
<FONT COLOR="#000000">etc, or it may be a completely internal home network and won't matter.</FONT>
<FONT COLOR="#000000">my $0.02.</FONT>
<FONT COLOR="#000000">--</FONT>
<FONT COLOR="#000000">Jim Perrin</FONT>
<FONT COLOR="#000000">System Architect - UIT</FONT>
<FONT COLOR="#000000">Ft Gordon & US Army Signal Center</FONT>
<FONT COLOR="#000000">_______________________________________________</FONT>
</PRE>
</BLOCKQUOTE>
<BR>
Ok.. I don't have a problem doing it on list. Just thought it might be more appropriate off list, but I agree, there may be others it might help. I'll start out by just throwing the whole mess in here since they are relatively short files. Not a home network, but a single server in a co-lo site. Here we go...<BR>
<BR>
First, the config file, which is from bind8 of the old BSD machine which worked without problems, and was not considered lame, and I, being the lazy type, just used the same configuration files throughout. My upstream DNS are listed in the zone file, but there are some problems with them also, according to dns reports.<BR>
<BR>
<BR>
// $Id: named.conf,v 1.5 1998/12/23 06:06:13 dillon Exp $<BR>
//<BR>
// Refer to the named(8) man page for details. If you are ever going<BR>
// to setup a primary server, make sure you've understood the hairy<BR>
// details of how DNS is working. Even with simple mistakes, you can<BR>
// break connectivity for affected parties, or cause huge amount of<BR>
// useless Internet traffic.<BR>
<BR>
options {<BR>
directory "/var/named";<BR>
<BR>
// In addition to the "forwarders" clause, you can force your name<BR>
// server to never initiate queries of its own, but always ask its<BR>
// forwarders only, by enabling the following line:<BR>
//<BR>
// forward only;<BR>
<BR>
// If you've got a DNS server around at your upstream provider, enter<BR>
// its IP address here, and enable the line below. This will make you<BR>
// benefit from its cache, thus reduce overall DNS traffic in the Internet.<BR>
<BR>
<BR>
/*<BR>
* If there is a firewall between you and nameservers you want<BR>
* to talk to, you might need to uncomment the query-source<BR>
* directive below. Previous versions of BIND always asked<BR>
* questions using port 53, but BIND 8.1 uses an unprivileged<BR>
* port by default.<BR>
*/<BR>
// query-source address * port 53;<BR>
<BR>
/*<BR>
* If running in a sandbox, you may have to specify a different<BR>
* location for the dumpfile.<BR>
*/<BR>
// dump-file "s/named_dump.db";<BR>
dump-file "/var/named/data/cache_dump.db";<BR>
statistics-file "/var/named/data/named_stats.txt";<BR>
};<BR>
<BR>
// Note: the following will be supported in a future release.<BR>
/*<BR>
host { any; } {<BR>
topology {<BR>
127.0.0.0/8;<BR>
};<BR>
};<BR>
*/<BR>
<BR>
// Setting up secondaries is way easier and the rough picture for this<BR>
// is explained below.<BR>
//<BR>
// If you enable a local name server, don't forget to enter 127.0.0.1<BR>
// into your /etc/resolv.conf so this server will be queried first.<BR>
// Also, make sure to enable it in /etc/rc.conf.<BR>
<BR>
zone "." IN {<BR>
type hint;<BR>
file "named.ca";<BR>
};<BR>
<BR>
zone "0.0.127.IN-ADDR.ARPA" {<BR>
type master;<BR>
file "localhost.rev";<BR>
};<BR>
<BR>
zone "wa4phy.net" {<BR>
type master;<BR>
file "wa4phynet";<BR>
};<BR>
<BR>
zone "158.104.216.in-addr.arpa" {<BR>
type master;<BR>
file "wa4phy.rev";<BR>
};<BR>
<BR>
<BR>
Next, the zone file, which is called "wa4phynet"<BR>
<BR>
$TTL 3600<BR>
@ IN SOA wa4phy.net. root.wa4phy.net. (<BR>
2005112501 ; Serial, todays date + todays serial #<BR>
8H ; Refresh, seconds<BR>
2H ; retry, seconds<BR>
1W ; expire, seconds<BR>
1D ) ; minimum, seconds<BR>
@ IN NS 216.104.158.222<BR>
@ IN NS 216.104.128.37<BR>
@ IN NS 216.104.128.38<BR>
<BR>
wa4phy.net. A 216.104.158.222<BR>
vortex.wa4phy.net. A 216.104.158.222<BR>
ns.wa4phy.net. A 216.104.158.222<BR>
localhost A 127.0.0.1<BR>
MX 10 wa4phy.net. ;Primary Mail Exchanger<BR>
MX 20 smtp7.bagger.usbn.net. ;Secondary MX<BR>
<BR>
www CNAME wa4phy.net.<BR>
ftp CNAME wa4phy.net.<BR>
<BR>
<BR>
Next the reverse zone<BR>
<BR>
$TTL 3600<BR>
@ IN SOA wa4phy.net. root.wa4phy.net. (<BR>
2005112501 ; Serial<BR>
28800 ; Refresh<BR>
7200 ; Retry<BR>
604800 ; Expire<BR>
86400 ) ; Minimum TTL<BR>
@ IN NS wa4phy.net.<BR>
<BR>
222 PTR wa4phy.net.<BR>
<BR>
And last, the localhost.rev file<BR>
<BR>
@ IN SOA wa4phy.net. root.vortex.wa4phy.net. (<BR>
2005112501 ;Serial<BR>
3600 ; Refresh<BR>
900 ; Retry<BR>
3600000 ; Expire<BR>
3600 ) ; minimum<BR>
IN NS wa4phy.net.<BR>
1 IN PTR localhost.wa4phy.net.<BR>
<BR>
<BR>
I'm sure the formatting is not going to be right from the looks of things, but maybe it's close.<BR>
<BR>
<BR>
<BR>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
Snowman
</TD>
</TR>
</TABLE>
</BODY>
</HTML>