DNS zone file help

mnm_mc · 11-25-2006, 02:20 AM

is there anyone who knows about DNS? i was given some advice by a freebsd user and told to edit the named.conf file which I did a bit does anyone have time to help me like one on one? thanks Mike drop me an email if you can help its this i am having difficulty with I thought by just enabling DNS it would work....i was sure wrong the match-clients { any; }; allow-recursion { IP numbers };

Halp!!!

zaichik · 11-25-2006, 07:09 AM

Part of the point of the public forums is so that everyone can benefit from the resolutions of people's problems. We should try to resolve this here if we can.

Can you provide some more information? Distribution? Are you running BIND? What is your network like (briefly)? Do you want to provide resolution for all hosts, or just some? Is this going to be an authoritative nameserver, or just a cacheing only?

mnm_mc · 11-25-2006, 11:19 AM

Thanks thats a good point, I am running suse 10.1 and I retried some information from this site:

http://en.opensuse.org/Suse_DNS_10.0_server

My network is that I am on has two routers and one auto sense switch (linksys) the ports are forwarded 53, I have a "always on " connection cable modem.

I have had a webserver running great off the linux box and also a mail server (axigen) the mail server is no longer running on there as the trial ran out.
I want this machine to be an authoritive nameserver, I realize I need two IPs but I thought there would be a problem running dns because of the subnet on the side of our management server (cable plant) the class C is 207.34.157/24 and the other subnet is 207.34.153/28

i have most if not all the networking modules installed as I have a network that lets me connect using samba.

I am not to sure if BIND is running or is this yet another module that needs to be installed and configured? i though if dns is running that BIND is also running?

this is where it gets confusing......

Our subscribers side gets handed out dhcp for each cable modem on the /24 subnet, hence I am using that, I also am subscribed to no-ip.com to force the A and MX records etc to point to my IP ihave my domain hosted at Network solutions.

here is part of the named.conf file that is unmodified, it was suggested that I use:
match-clients { any; }
allow-recursion [ 207...etc etc}; when i added that is screwed up the dns and it wouldnt start but below is the unmodified conf file that works, I am thinking i need to add zones and IP somewhere but i really don`t know....

zone "." in {
type hint;
file "root.hint";
};

zone "localhost" in {
type master;
file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
};
# Include the meta include file generated by createNamedConfInclude. This
# includes all files as configured in NAMED_CONF_INCLUDE_FILES from
# /etc/sysconfig/named

include "/etc/named.conf.include";
logging {
category queries { log_syslog; };
channel log_syslog { syslog; };
category xfer-in { log_syslog; };
category xfer-out { log_syslog; };
category default { log_syslog; };
};
zone "mctech-computers.com" in {
file "master/mctech-computers.com";
type master;

well thats alot of stuff...anyways I appreciate any ones help! thanks Mike

zaichik · 11-27-2006, 08:00 AM

Hi,

For starters, we can leave

Code:

match-clients{ any; };

out, since not having it at all is the same as saying "any". For the allow-recursion, it seems like you only want to allow recursive queries from hosts on your subnets 207.34.157/24 and 207.34.153/28. So, your allow-recursion statement in named.conf would be

Code:

allow-recursion{ 207.34.157/24; 207.34.153/28; };

You should be able to check the syntax of named.conf with named-checkconf.

BIND is the nameserver package you are running. There are others, although BIND is the standard. Just checking.

Finally, you will need zone files. According to your link, Suse keeps zone files in /var/lib/named by default. You need to indicate each zone that you are going to answer for in named.conf, as you have done for mctech-computers.com:

Code:

zone "mctech-computers.com" in {
   file "master/mctech-computers.com";
   type master;
};

This indicates that you will answer queries for mctech-computers.com. The nameserver is the master, and the zone file is located at master/mctech-computers.com (so probably the full path is /var/lib/named/master/mctech-computers.com). The syntax of the zone files can be checked with

Code:

named-checkzone zone_name /path/to/zone_file

There is a great guide to DNS and BIND here.

Let me know if you have more questions--I'll try to answer sooner this time.

mnm_mc · 11-27-2006, 03:28 PM

awesome post thanks!

well the allow-recursion was suggested by a guy running freebsd, he gave me a list of subnets to ad as well as adding my subnet, it is a good example espcialy when I do not totally understand the subject.

the file is similar to the file in suse,so using "any" will have the same effect? so adding my subnet is not really needed only if I use that command?

the dns connection is refused from searching for it on the root servers but I don`t know if my isp blocks the ports for me to run my own dns on the /24 subnet.

I do have control over the whole plant and can use either subnet but for now I am trying the /24 subnet.

I will continue to tweak it but may end up posting my conf file or named file for more help...thanks! Mike