Hi evrybdy,,
im a system admin and havind lots of troubles with dns setup on my LAN.
Bin trying since 3 days and no result whatsoevr.
Need urgent help on this.
my /etc/named.conf
// (oe) Loosely based on the document below and from production server configurations.
//
http://www.cymru.com/Documents/secur...-template.html
//
// $Id: named.conf 80849 2007-09-06 11:56:48Z oden $
// $HeadURL: svn+ssh://svn.mandriva.com/svn/packages/cooker/bind/current/SOURCES/named.conf $
// secret must be the same as in /etc/rndc.conf
include "/etc/rndc.key";
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { mykey; };
};
// Access lists (ACL's) should be defined here
include "/etc/bogon_acl.conf";
include "/etc/trusted_networks_acl.conf";
// Define logging channels
include "/etc/logging.conf";
options {
version "";
directory "/var/named";
dump-file "/var/tmp/named_dump.db";
pid-file "/var/run/named.pid";
statistics-file "/var/tmp/named.stats";
zone-statistics yes;
// datasize 256M;
coresize 100M;
// fetch-glue no;
// recursion no;
// recursive-clients 10000;
auth-nxdomain yes;
query-source address * port *;
listen-on port 53 { any; };
cleaning-interval 120;
transfers-in 20;
transfers-per-ns 2;
lame-ttl 0;
max-ncache-ttl 10800;
// forwarders { first_public_nameserver_ip; second_public_nameserver_ip; };
// allow-update { none; };
// allow-transfer { any; };
// Prevent DoS attacks by generating bogus zone transfer
// requests. This will result in slower updates to the
// slave servers (e.g. they will await the poll interval
// before checking for updates).
notify no;
// notify explicit;
// also-notify { secondary_name_server };
// Generate more efficient zone transfers. This will place
// multiple DNS records in a DNS message, instead of one per
// DNS message.
transfer-format many-answers;
// Set the maximum zone transfer time to something more
// reasonable. In this case, we state that any zone transfer
// that takes longer than 60 minutes is unlikely to ever
// complete. WARNING: If you have very large zone files,
// adjust this to fit your requirements.
max-transfer-time-in 60;
// We have no dynamic interfaces, so BIND shouldn't need to
// poll for interface state {UP|DOWN}.
interface-interval 0;
// Uncoment these to enable IPv6 connections support
// IPv4 will still work
// listen-on { none; };
// listen-on-v6 { any; };
// allow-query { trusted_networks; };
allow-recursion { trusted_networks; };
// Deny anything from the bogon networks as
// detailed in the "bogon" ACL.
blackhole { bogon; };
};
// workaround stupid stuff... (OE: Wed 17 Sep 2003)
zone "ac" { type delegation-only; };
zone "cc" { type delegation-only; };
zone "com" { type delegation-only; };
zone "cx" { type delegation-only; };
zone "lv" { type delegation-only; };
zone "museum" { type delegation-only; };
zone "net" { type delegation-only; };
zone "nu" { type delegation-only; };
zone "ph" { type delegation-only; };
zone "sh" { type delegation-only; };
zone "tm" { type delegation-only; };
zone "ws" { type delegation-only; };
zone "." IN {
type hint;
file "named.ca";
};
zone "localdomain" IN {
type master;
file "master/localdomain.zone";
allow-update { none; };
};
zone "localhost" IN {
type master;
file "master/localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "reverse/named.local";
allow-update { none; };
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "reverse/named.ip6.local";
allow-update { none; };
};
zone "255.in-addr.arpa" IN {
type master;
file "reverse/named.broadcast";
allow-update { none; };
};
zone "0.in-addr.arpa" IN {
type master;
file "reverse/named.zero";
allow-update { none; };
};
zone "dvicoserv2.com" {
type master;
file "dvicoserv2.com";
};
My /var/named/dvicoserv2.com
@ IN SOA ns1.dvicoserv2.com. admin.dvicoserv2.com. (
2007111917 ; Serial
2H ; Refresh
2H ; Retry
1H ; Expire
1D) ; Min TTL
NS ns1.dvicoserv2.com.
NS ns2.dvicoserv2.com.
NS ns.domain.com.
dvicoserv2.com. MX 5 mail.dvicoserv2.com.
dvicoserv2.com. A 192.168.4.20
localhost A 127.0.0.1
www CNAME dvicoserv2.com.
ftp CNAME dvicoserv2.com.
mail CNAME dvicoserv2.com.
ns1 CNAME dvicoserv2.com.
ns2 CNAME dvicoserv2.com.
Named is running properly with --
ps -aux | grep named
named 14860 0.0 1.1 14316 10552 ? Ss 19:15 0:00 named -u named -t /var/lib/named
But nslookup dvicoserv2.com gave
;; Got recursion not available from 202.56.250.5, trying next server
Server: 202.56.250.5
Address: 202.56.250.5#53
** server can't find dvicoserv2.com: NXDOMAIN
What to do now, actually the only thing that i need is that ive allocated static ip to my server, and i want to set up a dns on it so that other people in the network could simply open it by typing dvicoserv2.com,thats it.
Please help as im very confused with all the manuals.