Step by Step
TM
Linux Guide.
Page 274
could be defined as a master with a standard reverse map format.
3. A single masters IP address is used specifying
ns1.mydomain.com.
6.4 Caching Only DNS Server
The functionality of the Caching Only name server was
previously described
.
Caching Only Name Server Configuration
The BIND DNS configuration provides the following functionality:
1. The name server is not a master or slave for any domain
2. provides caching services for all domains
3. provides recursive query services for all resolvers
The BIND named.conf is as follows click to look at any file:
CACHING NAME SERVER for MYDOMAIN, INC. maintained by: me myself alone
CHANGELOG: 1. 9 july 2003 - did something
2. 16 july 2003 - did something else 3. 23 july 2003 - did something more
options { directory varnamed;
version statement for security to avoid hacking known weaknesses
version not currently available; disables all zone transfer requests
allow-transfer{none}; };
log to varlogzytrax-named all events from info UP in severity no debug
defaults to use 3 files in rotation BIND 8.x logging MUST COME FIRST in this file
Step by Step
TM
Linux Guide.
Page 275
BIND 9.x parses the whole file before using the log failure messages up to this point are in syslog
varlogmessages logging{
channel mydomain_log{ file varlognamedmydomain.log versions 3;
severity info; };
category default{ mydomain_log;
}; };
required zone for recursive queries zone . {
type hint; file
root.servers ;
}; required local host domain
zone localhost in{ type master;
file
pri.localhost ;
allow-update{none;}; };
localhost reverse map zone 0.0.127.in-addr.arpa in{
type master; file
localhost.rev allow-update{none;};
};
Notes:
1. The Caching only name server contains no zones other
than localhost with master or slave types. 2.
The reverse map zone has been omitted since it assumed that an external body ISP etc has the master domain
DNS and is therefore also responsible for the reverse map. It could be added if required for local operational
reasons.
Step by Step
TM
Linux Guide.
Page 276
6.5 Forwarding a.k.a. Proxy, Client, Remote DNS Server
The functionality of the Forwarding name server was
previously described .
Forwarding Name Server Configuration
The BIND DNS configuration provides the following functionality:
1. The name server is not a master or slave for any domain
2. provides caching services for all domains
3. forwards all queries to a remote DNS from all local
resolvers Global forwarding
The BIND named.conf is as follows click to look at any file: FORWARDING CACHING NAME SERVER for MYDOMAIN,
INC. maintained by: me myself alone
CHANGELOG: 1. 9 july 2003 - did something
2. 16 july 2003 - did something else 3. 23 july 2003 - did something more
options { directory varnamed;
version statement for security to avoid hacking known weaknesses
version not currently available; forwarders {10.0.0.1; 10.0.0.2;};
forward only; disables all zone transfer requests
allow-transfer{none}; };
log to varlogzytrax-named all events from info UP in severity no debug
defaults to use 3 files in rotation BIND 8.x logging MUST COME FIRST in this file
Step by Step
TM
Linux Guide.
Page 277
BIND 9.x parses the whole file before using the log failure messages up to this point are in syslog varlogmessages
logging{ channel mydomain_log{
file varlognamedmydomain.log versions 3; severity info;
}; category default{
mydomain_log; };
}; required local host domain
zone localhost in{ type master;
file
pri.localhost ;
allow-update{none;}; };
localhost reverse map zone 0.0.127.in-addr.arpa in{
type master; file
localhost.rev ;
allow-update{none;}; };
Notes:
1. The Forwarding name server typically contains no zones
other than localhost with master or slave types. 2.
The reverse map zone has been omitted since it assumed that an external body ISP etc has the master domain
DNS and is therefore also responsible for the reverse map. It could be added if required for local operational
reasons.
3. The
forward option must be used in conjunction with a
forwarders option . The value only will override
recursive query behaviour. 4.
Since all queries are forwarded the root servers zone type hint can be omitted.
5. Forwarding can be done on a zone basis in which case the
values defined override the global options.
Step by Step
TM
Linux Guide.
Page 278
6.6 Stealth a.k.a. Split or DMZ DNS Server
