Keep state on udp ruleset as well.
>> mmm ok thanks, forgot you could keep state on udp. Out of interest, given that noone will be performing zone transfers from me, how often would tcp requests typically be made to port 53 (ie requests made to my named server externally)? Am I to understand that it is only 'broken' resolvers that submit DNS resolution requests on port 53 via TCP?
1) Rename your localhost.rev to db.127 and change that in named.conf accordingly
I was following the FreeBSD named setup instructions in handbook
- the unfortunate naming convention used in the 'make-localhost' sh script seems an oddity for FreeBSD.
2) Create a new zone record named db.localhost or whatever.
>> Thanks, corrected.
3) There are many reasons to set your hostname to ns1.munk.nu instead of munkboxen.mine.nu
>> I currently set:
[2:18:59] munk@freebie /etc/namedb# hostname
[2:20:47] munk@freebie /etc/namedb# cat /etc/hosts
220.127.116.11 ns1 freebie munkboxen.mine.nu munkboxen www.console-pimps.net \
munk.nu freebie.munk.nu www.munk.nu ns1.munk.nu freebie.munk.nu
18.104.22.168 sparky \
22.214.171.124 winnie winnie.munk.nu
and this is a real mess.
('console-pimps.net' is another domain I'm running from this machine as well!!!)
Should I set 'hostname ns1.munk.nu'? Should I trim /etc/hosts?
4) Drop mail.munk.nu and use ns1.munk.nu as your MX because ns1.munk.nu is glued at roots.
>> I had untold issues with
Sep 8 12:03:30 freebie sm-mta: g88C3TMi086699: SYSERR(root): mail.munk.nu. config error: mail loops back to me (MX problem?)
*UNTIL* I echoed "munk.nu" to /etc/mail/local-host-names. After this all was fine.
I will be moving to djbdns soon because I don't like the way BIND cobbles all the DNS features together as one - recursive resolution, caching, zone transfers, etc... - and would prefer to use djbdns (I did set it up for a while and found the caching name service / dns-cache and the main named tinydns to be sweet
. BIND does seem very 'clutzy' and open to attack by piling so much functionality into one single daemon.
One very quick question, I can't for the life of me (really daft this I'm sure) work out how to assign a zone record for 'munk.nu' using BIND (ie when I type in 'host munk.nu' I want it to resolve to 126.96.36.199). Can you clarify how this is done?
Really glad you got to this thread freebsd
Thanks a lot.