Trying to figure out/understand this BIND/DNS thing

MasterC · 09-20-2003, 01:00 AM

Hi

I've recently been dinkin around with DNS a bit, just to figure out how things work and stuff. Anyway...

I've setup djbdns, but really didn't feel comfortable with it, and quickly removed my work and moved onto BIND. Now I've got Bind installed, and have read the TLDP DNS HOW-TO, yet still don't quite understand what I am doing or how to setup other machines on my network to use the server's DNS. Here's what I've done/tried:

I've got BIND setup on "192.168.1.25" and from that box I can dig, ping, and lynx my way around, and afterwards, dig reports things much faster (showing me the DNS is working, at least that's my understanding). On this same box, in my /etc/resolv.conf I've got:
nameserver 192.168.1.25
search curvins.com
(curvins.com is actually what I have, that's not an example).
So then, after all these things work, I am happy. Even though I don't fully understand what I did, or how it works (yet), I am happy to see that things are working. So then I move onto another box on my network, and (here's where I screw up

) I assume that by editing /etc/resolv.conf to mirror the above's:
nameserver 192.168.1.25
search curvins.com
That it will pick it up and start working. But no dice.

If anyone can break things down a bit more to me, that'd be great. However, I am more concerned right now with getting the other machines on my LAN to use the BIND DNS on 192.168.1.25 (named "cooler") as their DNS. I think I'll learn as I go how things actually work.

Thanks for any info!

Cool

sashhoney · 09-20-2003, 02:28 AM

first of all ur (2) linux box should only have that 'name server' entry. no 'search' entry is required in /etc/resolve.conf' file.

in 'named.conf' file of ur DNS server u should add following 'options{}' entry if the entries r not already there-
(a) u should use allow-query option to allow (2) machine to use ur name server.
(b) if u r using two ethernet cards and want to use both ethernet cards for DNS service, then u should use listen-on to specify cards.

for further detail about named.conf entries try 'man named.conf'

MasterC · 09-20-2003, 03:25 AM

Thank you for the fast reply

I setup the allow-query option, however it doesn't seem to work, I still cannot ping, dig, lynx outside my network.

Here's the syntax, maybe that's my problem:

Code:

allow-query {
                192.168.1.50;
        };

Or for the full deal:

Code:

options {
        directory "/var/bind";

        // uncomment the following lines to turn on DNS forwarding,
        // and change the forwarind ip address(es) :
        forward first;
        forwarders {
                4.2.2.5
                4.2.2.6;
        };

        listen-on-v6 { none; };
        listen-on { 127.0.0.1; };

        // to allow only specific hosts to use the DNS server:
        allow-query {
                192.168.1.50;
        };

        // if you have problems and are behind a firewall:
        //query-source address * port 53;
        pid-file "/var/run/named/named.pid";
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localhost" IN {
        type master;
        file "pri/localhost.zone";
        allow-update { none; };
        notify no;
};

zone "127.in-addr.arpa" IN {
        type master;
        file "pri/127.zone";
        allow-update { none; };
        notify no;
};

I'll be readin up on the man page, but if anything looks blatently incorrect, I'd appreciate any info

Thanks again!

Cool

EyesOnly · 09-20-2003, 03:48 AM

Bind/DNS is quite complex. I've set it up a while ago, and its working fine now.

I read the DNS-howto, you should do a google search on it, I'm not sure were to find it.

This howto has a step by step guide on installing a DNS server, and everything is explained in it. Might help you a bit too, it was very helpfull too me anyway

MasterC · 09-20-2003, 03:53 AM

Thank you for your reply

I actually read over that thing, followed along trying to 'soak up' some information, but it seemed very complex and not really aimed at one without a lot of 'networking knowledge' or one looking to gain some. I guess just practicing with it a few times, figure out how things work more (follow the manual more) and reading:
The BIND Adminstrator Reference Manual will help me get the hang of it. I still can't get my second machine to use the DNS server on the '192.168.1.25' box (cooler), but again, maybe I'll figure that out as well.

If anyone has any additional pointers or comments, please feel free to add. Thank you for the replies so far

Cool

Buzer · 09-20-2003, 09:00 AM

Quote:

Originally posted by MasterC

Code:

listen-on { 127.0.0.1; };

That should be:

Code:

        listen-on { 192.168.1.25; };

becose otherwise it will just listen querys coming to 127.0.0.1, not to 192.168.1.25 or that is how I have understood it. At least it is worth of try.

MasterC · 09-20-2003, 12:02 PM

Thank you for the response!

I've changed that as posted above, and it had no negative effect on the 'localhost' ping/lynx/dig but when I edit the other boxes resolv.conf to:
nameserver 192.168.1.25
Again I get nothing. Put my ISP's nameserver back, and it works just fine again.

Thank for the suggestion, and I'll try plugging through the Adminstrator Manual a bit more tonight to see if I can suss this thing out. If anyone has any more suggestions, please, let your voice be heard

Thanks again!

Cool

MasterC · 09-21-2003, 12:52 PM

Just wondering if anyone had any more suggestions or ideas on getting this to work?

Cool

david_ross · 09-21-2003, 01:28 PM

I see your e-mails are still bouncing.

I'm not that great with DNS but I think you need additional files to reference DNS servers on the internet. The howto page I beleive you want is:
http://langfeldt.net/DNS-HOWTO/BIND-9/DNS-HOWTO-3.html

MasterC · 09-21-2003, 02:07 PM

Thanks David, I'll take a look at that

And yeah, I still get that, it's certainly odd (the bounce).

Cool

david_ross · 09-21-2003, 02:26 PM

I've just had a look at your MX record and it seems to point to a record of mail.curvins.com yet there is no A record for mail.curvins.com

MasterC · 09-21-2003, 02:43 PM

Ah, I wasn't sure if I had to do that or not, I've been having some issues with my zone comprehension, and was testing some stuff out. I'll put an A record up now, thank you David!

Cool