|
|
| Line 1: |
Line 1: |
| == Sissejuhatus ==
| | Vale lk |
| | |
| Me oleme ISP ja meil on vaja teha master ja slave nimeserverid. Master server on selle jaoks, et hoida meie enda domeeni tsoonifaile ja slave server on selleks, et hoida klientide tsoonifaile ja lubada tsoonifailide vahetust.
| |
| | |
| == Meeskonnaliikmed ==
| |
| | |
| Urmo Laaneots, Karet Rikko, Ott Pärnoja, Markus Kont, Siim Kängsepp, Taavi Salumets, Juhan Liiva
| |
| | |
| | |
| == Nimeserveri installeerimine ja seadistamine ==
| |
| | |
| <pre>
| |
| sudo -i
| |
| apt-get install bind9
| |
| </pre>
| |
| | |
| <pre>
| |
| nano /etc/hosts
| |
| </pre>
| |
| | |
| Failis muutke 127.0.1.1 aadressiga algavat rida, muudatus võiks välja näha järgmine:
| |
| | |
| <pre>
| |
| 127.0.1.1 ns.vork.ee ns
| |
| </pre>
| |
| | |
| Muutke ka /etc/hostname faili.
| |
| | |
| <pre>
| |
| nano /etc/hostname
| |
| </pre>
| |
| | |
| Seal muutke nimi ns-ks.
| |
| | |
| Järgmiseks muutke faili /etc/bind/named.conf.options .
| |
| <pre>
| |
| nano /etc/bind/named.conf.options
| |
| </pre>
| |
| Kommenteerige sisse forwarders sektsioon ja sinna kirjutage ISP DNS serveri IP aadress.
| |
| Muudetud fail peaks välja nägema järgmine:
| |
| | |
| <pre>
| |
| options {
| |
| directory "/var/cache/bind";
| |
| | |
| // If there is a firewall between you and nameservers you want
| |
| // to talk to, you may need to fix the firewall to allow multiple
| |
| // ports to talk. See http://www.kb.cert.org/vuls/id/800113
| |
| | |
| // If your ISP provided one or more IP addresses for stable
| |
| // nameservers, you probably want to use them as forwarders.
| |
| // Uncomment the following block, and insert the addresses replacing
| |
| // the all-0's placeholder.
| |
| | |
| forwarders {
| |
| 192.168.6.123;
| |
| };
| |
| | |
| auth-nxdomain no; # conform to RFC1035
| |
| listen-on-v6 { any; };
| |
| };
| |
| | |
| </pre>
| |
| | |
| Nüüd muutke faili /etc/bind/named.conf.default-zones
| |
| <pre>
| |
| nano /etc/bind/named.conf.default-zones
| |
| </pre>
| |
| Siia faili võiks lisada järgmised tsoonid :
| |
| <pre>
| |
| zone "vork.ee" {
| |
| type master;
| |
| file "/var/lib/bind/vork.ee.zone";
| |
| allow-transfer { 192.168.6.124; };
| |
| };
| |
| </pre>
| |
| Oma masinas laborit tehes tuleb pöördteisendus tsooni(6.168.192.in-addr.arpa) puhul panna nimi vastama oma võrgule.
| |
| | |
| Eelnevalt loodud tsoonid viitavad failidele, mis neid tsoone kirjeldavad. Selleks et neid faile luua, võtame aluseks olemasoleva localhost tsooni faili ja kopeerime seda.
| |
| <pre>
| |
| cp /etc/bind/db.127 /etc/bind/db.6.168.192.in-addr.arpa
| |
| cp /etc/bind/db.local /var/lib/bind/vork.ee.zone
| |
| </pre>
| |
| | |
| '''Peale muudatuse tegemist tsoonifailis tuleb tõsta Seriali numbrit ühe võrra, et muudatused hakkaksid kehtima.'''
| |
| | |
| Nüüd muudame vork.ee.zone faili
| |
| <pre>
| |
| nano /var/lib/bind/vork.ee.zone
| |
| </pre>
| |
| | |
| Muudetud fail on selline:
| |
| | |
| <pre>
| |
| ;
| |
| ; Zone file for linux.bogus
| |
| ;
| |
| ; The full zone file
| |
| ;
| |
| $TTL 900
| |
| @ IN SOA vork.ee. hostmaster.vork.ee. (
| |
| 2011102603 ; serial, todays date + todays serial #
| |
| 28800 ; refresh, seconds
| |
| 7200 ; retry, seconds
| |
| 864000 ; expire, seconds
| |
| 900 ) ; minimum, seconds
| |
| | |
| IN NS ns.vork.ee.
| |
| IN MX 10 mail.vork.ee.
| |
| IN A 192.168.6.123
| |
| $ORIGIN vork.ee.
| |
| www IN A 192.168.6.123
| |
| ns IN A 192.168.6.123
| |
| mail IN A 192.168.6.123
| |
| ns2 IN A 192.168.6.122
| |
| </pre>
| |
| | |
| Failis olevate kirjete kohta võib selgitusi saada [http://www.zytrax.com/books/dns/ch8/ siit]
| |
| | |
| Nüüd muudke db.6.168.192.in-addr.arpa faili:
| |
| <pre>
| |
| nano /etc/bind/db.6.168.192.in-addr.arpa
| |
| </pre>
| |
| | |
| Muudetud fail võiks välja näha selline:
| |
| <pre>
| |
| | |
| </pre>
| |
| | |
| Kui tsoonifailid on olemas, siis tuleb muuta resolv.conf faili:
| |
| <pre>
| |
| nano /etc/resolv.conf
| |
| </pre>
| |
| Nimeserveri aadress tuleb seal muuta enda serveri aadressiks. Fail näeb peale muutmist välja järgmine:
| |
| <pre>
| |
| #domain localdomain
| |
| #search localdomain
| |
| nameserver 192.168.6.124
| |
| </pre>
| |
| | |
| Nüüd tuleks BIND9 teenus taaskäivitada järgmise käsuga:
| |
| <pre>
| |
| /etc/init.d/bind9 restart
| |
| </pre>
| |
| | |
| Kui tsooni muutate ja on soov ainult seda tsooni uuesti laadida, siis on võimalik kasutada rndc käsku.
| |
| | |
| Süntaks oleks järgmine:
| |
| | |
| <pre>
| |
| rndc reload <tsoon>
| |
| </pre>
| |
| | |
| Näiteks:
| |
| <pre>
| |
| rndc reload too.ee
| |
| </pre>
| |
| | |
| == Mis läks valesti ==
| |
| Urmo kustutas ära /etc/bind kausta. Kuidas tagasi sai? Loe siit: [http://ubuntuforums.org/showthread.php?t=1375580 http://ubuntuforums.org/showthread.php?t=1375580]
| |
| | |
| Vaata seda: [http://samcaldwell.net/index.php/technical-articles/3-how-to-articles/99-how-do-i-setup-a-secure-bind9-dns-server-in-debianubuntu-linux-using-chroot jama]
| |
| | |
| Meie teeme selle järgi: [https://help.ubuntu.com/community/BIND9ServerHowto https://help.ubuntu.com/community/BIND9ServerHowto]
| |
| | |
| | |
| RESOLVED HACK vastu: [http://jazzymarketing.com/main/lc/0904/open-resolver-securing-bind-server http://jazzymarketing.com/main/lc/0904/open-resolver-securing-bind-server]
| |
| | |
| | |
| Nimeserveri kaitsemiseks vajalik dokument: [http://books.google.com/books?id=_m4WvNCNXT0C&pg=PT115&lpg=PT115&dq=how+to+flush+a+name+from+nameserver+bind&source=bl&ots=YQYa0GXrIf&sig=U-W4pQE4haBFljuS-XkAy0wc3PU&hl=en&ei=W8fEToGWH8HRhAervPnbDQ&sa=X&oi=book_result&ct=result&resnum=3&ved=0CCYQ6AEwAg#v=onepage&q&f=false http://books.google.com/books?id=_m4WvNCNXT0C&pg=PT115&lpg=PT115&dq=how+to+flush+a+name+from+nameserver+bind&source=bl&ots=YQYa0GXrIf&sig=U-W4pQE4haBFljuS-XkAy0wc3PU&hl=en&ei=W8fEToGWH8HRhAervPnbDQ&sa=X&oi=book_result&ct=result&resnum=3&ved=0CCYQ6AEwAg#v=onepage&q&f=false]
| |
