Re: Nameserver

From: Alejandro Calbazana (acalbaza_at_calbazana.com)
Date: 03/07/04

  • Next message: Rodolfo J. Paiz: "Re: Nameserver"
    To: <redhat-list@redhat.com>
    Date: Sun, 7 Mar 2004 14:06:38 -0500
    
    

    Thanks! I was able to get things set up and working so far as I can tell.
    I spent some time with the HOW TO along w/ your docs.

    I set up 2 zones. The local zone and the zone for my internal network.
    After adding the proper hosts and NS entries, everything else fell into
    place.

    A few questions remain though... If I am running a nameserver locally, does
    resolv.conf become irrelevant on the machine running named? Since this
    machine is also my gateway to the Internet, do I still need to specify
    entries in /etc/resolv.conf for external names or can I point it to itself?
    (I know I must do this on the client end, but what about the server end)?
    Still fuzzy on this one... Also, how do things work if the host entry in
    the zone file has a dynamic IP (not likely, just curious how this works
    out...)?

    Some security questions immediately come to mind as I type :) I am
    wondering how I can block external traffic using my machine as a resolver.
    I suppose I can control this through iptables, but I was wondering if named
    provided anything special for this. No big deal... I'll research this one
    later...

    Thanks Again,

    Alejandro

    ----- Original Message -----
    From: "Rodolfo J. Paiz" <rpaiz@simpaticus.com>
    To: <redhat-list@redhat.com>
    Sent: Saturday, March 06, 2004 10:01 PM
    Subject: Re: Nameserver

    > At 23:17 3/5/2004, you wrote:
    > >Hello,
    > >
    > >I'd like to set up BIND locally to resolve names between machines on my
    > >local LAN. I was also thinking on taking advantage of such a setup to
    cache
    > >entries for outbound traffic. The to-be nameserver machine also serves
    as a
    > >gateway for Internet traffic so, I am using my provider's nameservers as
    the
    > >primary nameserver.
    > >
    > >Is such a setup possible? I just want to resolve local names and cache
    > >entries going outbound while still using my providers nameservers.
    >
    > Sure, it's easy as pie. The first thing to do is to install the very
    latest
    > updated version of the "bind" RPM, and also install the
    > "caching-nameserver" RPM. Right there you will have the local caching
    > nameserver part completely configured. "chkconfig named on" and "service
    > named start" and you're on your way, with the only remaining step being to
    > configure your local machines to point to this box as their DNS server.
    >
    > Step two, creating a local domain, is not that hard either. All you need
    to
    > do is to add one "zone" to BIND. This involves writing a couple of lines
    in
    > /etc/named.conf and writing the zonefile itself, which is pretty easy when
    > you've done it before but can be confusing to the newbie. My best advice,
    > if you want good and quick results, would be to install Webmin
    > (www.webmin.com) on this system and use that to create the local zone you
    > want. Or you can read the DNS HOWTO at The Linux Documentation Project
    > (www.tldp.org) in order to get a lot more detail.
    >
    > If you really have no idea how DNS works, then I can offer a very small
    bit
    > of help: a "DNS First Steps" document I posted on my website. You can
    reach
    > this doc from www.simpaticus.com/linux and it will help clear up some of
    > the terms and concepts for you. Of course, it could improve in MANY ways
    > and is just a first draft so far, so please give feedback and feel free to
    > ask me more questions so I can make the doc better.
    >
    > Do you have a domain name registered on the Internet which you'd like to
    > use, or are these strictly "internal-only" names?
    >
    >
    > --
    > Rodolfo J. Paiz
    > rpaiz@simpaticus.com
    > http://www.simpaticus.com
    >
    >
    > --
    > redhat-list mailing list
    > unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    > https://www.redhat.com/mailman/listinfo/redhat-list
    >
    >

    -- 
    redhat-list mailing list
    unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
    https://www.redhat.com/mailman/listinfo/redhat-list
    

  • Next message: Rodolfo J. Paiz: "Re: Nameserver"

    Relevant Pages

    • Re: DNS domain name same as AD domain
      ... Or should I change the DNS domain first to something else? ... For any host name that you wish to have access from both your internal network and from the external Internet you need scenario 1, although it is the most DNS-intensive over time. ... Each DNS zone is authoritative for the zone of that name so therefore the external DNS zone and internal AD/DNS zone will NOT replicate with each other thereby prevent internal company records to be visible to the outside Internet. ...
      (microsoft.public.windows.server.dns)
    • Re: .com versus.local
      ... DNS and public names on the internet etc but I have never had someone ... All DNS entries are help at the ISP. ... external Internet you need scenario 1, although it is the most DNS-intensive ... Each DNS zone is authoritative for the zone of that name so ...
      (microsoft.public.windows.server.dns)
    • Re: AD DNS naming
      ... my e-mail and Site Internet." ... infrastructure (mostly with respect to DNS and VPN). ... If you do not select this option and go with scenario 2 ... Each DNS zone is authoritative for the zone of that ...
      (microsoft.public.windows.server.dns)
    • Re: How many Global Catalog Servers are needed?
      ... make for an AD DNS FQDN domain name, ... external Internet you need scenario 1, although it is the most DNS-intensive ... Each DNS zone is authoritative for the zone of that name so ...
      (microsoft.public.windows.server.active_directory)
    • Re: Domain naming strategies
      ... a delegation to an unreachable internal dns server. ... my e-mail and Site Internet." ... network and from the external Internet you need scenario 1, ... Each DNS zone is authoritative for the zone of that name so ...
      (microsoft.public.windows.server.active_directory)