Pages

Showing posts with label DNS Linux. Show all posts
Showing posts with label DNS Linux. Show all posts

ISP’s Primary DNS Server Setup Architecture

ISP’s Server Architecture

Primary DNS Server:

Partition Table Informtion

Filesystem Size Used Avail Use% Mounted on

/dev/sda1 3.0G 667M 2.2G 24% /

tmpfs 252M 0 252M 0% /dev/shm

/dev/sda5 102M 36M 67M 36% /boot

/dev/sda7 2.4G 33M 2.2G 2% /tmp

/dev/sda2 2.0G 96M 1.8G 5% /var

Packages used for DNS: bind-utils-9.3.1-3, bind-chrootenv-9.3.1-3, bind-9.3.1-3, bind-libs-9.3.1-3.2

Configuration file: /etc/named.conf

# Copyright (c) 2001-2004 SuSE Linux AG, Nuernberg, Germany.

# All rights reserved.

#

# Author: Frank Bodammer, Lars Mueller

#

# /etc/named.conf

#

# This is a sample configuration file for the name server BIND 9. It works as

# a caching only name server without modification.

#

# A sample configuration for setting up your own domain can be found in

# /usr/share/doc/packages/bind/sample-config.

#

# A description of all available options can be found in

# /usr/share/doc/packages/bind/misc/options.

options {

# The directory statement defines the name server's working directory

directory "/var/lib/named";

# Write dump and statistics file to the log subdirectory. The

# pathenames are relative to the chroot jail.

dump-file "/var/log/named_dump.db";

statistics-file "/var/log/named.stats";

# The forwarders record contains a list of servers to which queries

# should be forwarded. Enable this line and modify the IP address to

# your provider's name server. Up to three servers may be listed.

#forwarders { 192.0.2.1; 192.0.2.2; };

# Enable the next entry to prefer usage of the name server declared in

# the forwarders section.

#forward first;

# The listen-on record contains a list of local network interfaces to

# listen on. Optionally the port can be specified. Default is to

# listen on all interfaces found on your system. The default port is

# 53.

#listen-on port 53 { 127.0.0.1; };

# The listen-on-v6 record enables or disables listening on IPv6

# interfaces. Allowed values are 'any' and 'none' or a list of

# addresses.

listen-on-v6 { any; };

# The next three statements may be needed if a firewall stands between

# the local server and the internet.

#query-source address * port 53;

#transfer-source * port 53;

#notify-source * port 53;

# The allow-query record contains a list of networks or IP addresses

# to accept and deny queries from. The default is to allow queries

# from all hosts.

#allow-query { 127.0.0.1; };

# If notify is set to yes (default), notify messages are sent to other

# name servers when the the zone data is changed. Instead of setting

# a global 'notify' statement in the 'options' section, a separate

# 'notify' can be added to each zone definition.

notify no;

};

# To configure named's logging remove the leading '#' characters of the

# following examples.

#logging {

# # Log queries to a file limited to a size of 100 MB.

# channel query_logging {

# file "/var/log/named_querylog"

# versions 3 size 100M;

# print-time yes; // timestamp log entries

# };

# category queries {

# query_logging;

# };

#

# # Or log this kind alternatively to syslog.

# channel syslog_queries {

# syslog user;

# severity info;

# };

# category queries { syslog_queries; };

#

# # Log general name server errors to syslog.

# channel syslog_errors {

# syslog user;

# severity error;

# };

# category default { syslog_errors; };

#

# # Don't log lame server messages.

# category lame-servers { null; };

#};

# The following zone definitions don't need any modification. The first one

# is the definition of the root name servers. The second one defines

# localhost while the third defines the reverse lookup for localhost.

zone "." in {

type hint;

file "root.hint";

};

zone "localhost" in {

type master;

file "localhost.zone";

};

zone "0.0.127.in-addr.arpa" in {

type master;

file "127.0.0.zone";

};

zone "ns1" IN {

type master;

file "master/ns1.zone";

allow-transfer {202.125.142.117;};

};

zone "142.125.202.in-addr.arpa" IN {

type master;

file "master/rns1.zone";

};

zone "pucit.edu.pk" IN {

type master;

file "master/pucitedu.zone";

allow-transfer {202.125.142.117;};

};

zone "pucitonline.net" IN {

type master;

file "master/pucitnet.zone";

allow-transfer {202.125.142.117;};

};

zone "mapasha.com" IN {

type master;

file "master/mapasha.zone";

allow-transfer {202.125.142.117;};

};

zone "mtexperts.co.uk" IN {

type master;

file "master/mtexpert.zone";

allow-transfer {202.125.142.117;};

};

zone "agiletechnologies.org" IN {

type master;

file "master/agile.zone";

allow-transfer {202.125.142.117;};

};

zone "ktexperts.com" IN {

type master;

file "master/ktexperts.zone";

allow-transfer {202.125.142.117;};

};

zone "completeislam.com" IN {

type master;

file "master/cislam.zone";

allow-transfer {202.125.142.117;};

};

zone "peace.com.pk" IN {

type master;

file "master/peace.zone";

allow-transfer {202.125.142.117;};

};

zone "ghazisolutions.com" IN {

type master;

file "master/ghazi.zone";

allow-transfer {202.125.142.117;};

};

zone "puran.info" IN {

type master;

file "master/puran.zone";

allow-transfer {202.125.142.117;};

};

zone "nms.pucit" IN {

type master;

file "master/nms.zone";

allow-transfer {202.125.142.117;};

};

zone "pucitonline.com" IN {

type master;

file "master/pucitonline.zone";

Allow-transfer {202.125.142.117;};

};

zone "ngnexporters.com" IN {

type master;

file "master/ngnexporters.zone";

Allow-transfer {202.125.142.117;};

};

# Include the meta include file generated by createNamedConfInclude. This

# includes all files as configured in NAMED_CONF_INCLUDE_FILES from

# /etc/sysconfig/named

include "/etc/named.conf.include";

# You can insert further zone records for your own domains below or create

# single files in /etc/named.d/ and add the file names to

# NAMED_CONF_INCLUDE_FILES.

# See /usr/share/doc/packages/bind/README.SUSE for more details.

/var/lib/named/pucitnet

$TTL 2D

@ IN SOA ns1.pucitonline.net. root.pucitonline.net. (

200312121;

3600;

3600;

3600;

1h );

IN NS ns1

IN NS ns2

ns1 IN A 202.125.142.107

ns2 IN A 202.125.142.117

www IN A 202.125.142.121

pucitonline.net. IN MX 10 mail

mail IN A 202.125.142.115

ftp IN A 202.125.142.121

radius IN A 202.125.142.108

nms IN A 202.125.142.108

/var/lib/named/pucitedu

$TTL 2D

@ IN SOA ns1.pucitonline.net. root.pucitonline.net. (

200312121;

360;

3600;

3600;

1h );

IN NS ns1.pucitonline.net.

IN NS ns2.pucitonline.net.

ns1 IN A 202.125.142.107

ns2 IN A 202.125.142.117

www IN A 202.125.142.121

pucit.edu.pk. IN MX 10 mail

mail IN A 202.125.142.122

ftp IN A 202.125.146.174

flypucit IN A 202.125.142.109

moon IN A 202.125.142.97

library IN A 202.125.142.112

alumni IN A 202.125.142.112

lectures IN A 202.125.142.112

Master & Slave DNS Server Setup in Linux

Scenario:We have a DNS domain "homedomain.com". With master server as homeserver.homedomain.com, with an IP (192.168.1.200). And a slave for this domain as ns2.homedomain.com , with an IP (192.168.1.10).

Master :========
1) /etc/named.conf
options { directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt";
// line below is important to tell slaves about any changes. notify yes;};
controls { inet 127.0.0.1 allow { localhost; } keys { rndckey; };};
//[Various zones skipped ...]
zone "homedomain.com" IN { type master; file "homedomain.com.fwd"; allow-update { none; }; allow-transfer {192.168.1.10;};};
zone "1.168.192.in-addr.arpa" IN { type master; file "homedomain.com.rev"; allow-update { none; }; allow-transfer {192.168.1.10;};};
include "/etc/rndc.key";

2) /var/named/chroot/var/named/homedomain.com.fwd$TTL 86400$ORIGIN homedomain.com.@ IN SOA homeserver.homedomain.com. mkazeem.isb.paknet.com.pk. ( 6 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum
; Note: All master and slave name servers must be mentioned in this zone,; else the "master changed" notifies will NOT reach slave servers !@ IN NS homeserver.homedomain.com.@ IN NS ns2.homedomain.com.
;IPs of our name servers :-homeserver.homedomain.com. IN A 192.168.1.200ns2.homedomain.com. IN A 192.168.1.10
; Normal hosts below this line:-www.homedomain.com. IN A 192.168.1.200
3) /var/named/chroot/var/named/homedomain.com.rev$TTL 86400$ORIGIN 1.168.192.in-addr.arpa.@ IN SOA homeserver.homedomain.com. mkazeem.isb.paknet.com.pk. ( 5 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum
@ IN NS homeserver.homedomain.com.@ IN NS ns2.homedomain.com.200.1.168.192.in-addr.arpa. IN PTR homeserver.homedomain.com.10.1.168.192.in-addr.arpa. IN PTR ns2.homedomain.com.
200.1.168.192.in-addr.arpa. IN PTR www.homedomain.com.


Slave :=======
1) /etc/named.conf
//// named.conf for Red Hat caching-nameserver//
options { directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ // query-source address * port 53;};
//// a caching only nameserver config//controls { inet 127.0.0.1 allow { localhost; } keys { rndckey; };};
//[Zones skipped ...]
zone "homedomain.com" IN { type slave; file "slaves/homedomain.com.fwd"; masters {192.168.1.200;};};
zone "1.168.192.in-addr.arpa" IN { type slave; file "slaves/homedomain.com.rev"; masters {192.168.1.200;};};
include "/etc/rndc.key";
<<<<<<>>>>>>>

Forex Trading