DNS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationDNS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now!
  #1  
Old January 25th, 2004, 06:50 PM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
DNS for a Dummy

Hi there,

well hopefully I am not a complete dummy. I managed to setup two LAMP servers so far and everything works just fine. I've come to point now where I have to get some structure into all the domains I or my clients own.

Therefore I started a new partnership with a new registrar. I do need a DNS setup allowing wildcard entries, meaning I need to be able to resolve a subdomain in my httpd.conf and not before.

Unfortunately my new regsitrar doesn't allow that on his DNS servers, so they told me a workaround would be to run my own Primary DNS server and use their DNS server(s) a secondary.

And here I am...

- I have two machines with BIND9 installed on both.
- I bought O'Reillys "BIND & DNS Cookbook" which confuses me more than it helps currently.
- As far as I understand it would be enough to configure one of the two machines as a DNS?
- How do I configure BIND9 to run in general?
- I have about 200 domains and each domain should point to either IP of server1 or IP of server2.

Could somebody give me an idea how to establish that and what would be the best way of configuring BIND9?

Any help is highly appreciated and in case I should explain something more in detail I will be more than happy to do so!

Thanks and best regards,

ASchweti

Reply With Quote
  #2  
Old January 26th, 2004, 11:46 AM
trininox trininox is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2004
Posts: 42 trininox User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 5
Send a message via ICQ to trininox Send a message via AIM to trininox
http://www.dollardns.net/bind/

just to save SilentRage some typing
You have two external Ip's for these two machines i assume, otherwise having two wont be of much help

should help you out since thats the example of how SilentRage has his setup and his works, i use his service for a few domains until i get my new systems setup.

dont have any need for subdomains so i just have *.domain.com setup in my apache conf to resolve to the main document of the site.

once i get my own domain this will be interesting to know myself. beyond those example files, I'm sure SilentRage can elaborate on it more, or u can gather it from the other threads here.
__________________
-Trininox
http://gto.dynu.com

Last edited by SilentRage : June 19th, 2004 at 11:17 AM. Reason: Updated DollarDNS link

Reply With Quote
  #3  
Old January 26th, 2004, 12:26 PM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hi,

yep, of course I have two static IP addresses for each machine. To be exact I have even more if needed.

What I would need to know is the procedure how to get the DNS server up and running without screwing anything up.

I would like to have something like ns1.mydomain.com, acting as a primary DNS. The DNS server of my provider should act as a backup.

Since I host quite a few domains already I would need to understand the following procedure in general:

1. A client asks for a domain
2. I register this domain with my provider
3. During registration I set ns1.mydomain.com as the primary DNS server and my providers' as the secondary
4. Add the appropriate configuration to my DNS
5. Done

Thanks in advance for any further input!

Regards,

ASchweti

Reply With Quote
  #4  
Old January 26th, 2004, 05:52 PM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 27 m 56 sec
Reputation Power: 77
perhaps trininox would also like to show aschweti some links to other topics where I've given people overviews over BIND and detailed instructions on how to set it up. I ignore "hold my hand" topics now since I've already "held" other people's "hands".
__________________
Send me a private message if you would like me to setup your DNS for you for a price of your choosing. This is the preferred method if your DNS needs to be fixed/setup fast and you don't have the time to bounce messages back and forth on a forum. Also, check out these links:

Whois Direct | DNS Crawler | NS Trace | Compare Free DNS Hosts

Reply With Quote
  #5  
Old January 26th, 2004, 06:19 PM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hi SilentRage,

I didn't want to request somebody holding my hand. I am sorry if my post sounded that way. I am very much willing to learn how to configure BIND myself.

I currently read an article from http://www.swelltech.com/support/webminguide/ch08.html and as I said I've bought the O'reilly Cookbook for DNS & Bind. My problem is that everything I've read so far doesn't cover the real basics, especially for my current situation.

So setting up something like ns1.mydomain.com at a stage where I am about to move mydomain.com to the new registrar where I would have to setup ns1.mydomain.com as the DNS to resolve mydomain.com will put me in trouble in my opinion. It's just that I am so unsure about certain things, that I hoped to get some support here.

So please except my excuse if that was not the right way doing it...

Best regards,

ASchweti

Reply With Quote
  #6  
Old January 27th, 2004, 12:52 AM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 27 m 56 sec
Reputation Power: 77
All I ask is that you try to set it up yourself, and then ask more specific questions like "what does this error mean" or "why does this happen" or "how do I accomplish this specific task" or something besides "How do I configure BIND9 to run in general?".

Read some other topics below for help for general questions.

Reply With Quote
  #7  
Old January 28th, 2004, 08:20 PM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hi SilentRage,

OK you are right. I see the point, so I just gave it a try and jumped into the cold water.

So please give me a second chance now...

I installed BIND 9.2.3 from source on a SUSE 8.1 machine now and everything seems to work fine.

I changed the DNS servers for one test domain by using my providers admin panel. This change is in progress now...

I added the test domain and reloaded BIND. Now I have one question. When I do a "dig @my_IP_address testdomain.de" should I already see the new DNS servers?

Here are my real conf files and the dig output I get. Do they look alright.

named.conf
Code:
options {
	directory "/home/named/etc";
	version "DIGITAL FOR YOU - DNS Server"
	pid-file "/home/named/var/run/named.pid";
	recursion yes;
	allow-transfer { 195.20.224.97; };
	allow-recursion { localhost; };
	notify no;
	};

zone "." {
	type hint;
	file "/home/named/etc/db.cache";
	};


zone "rsd-solar.de" {
	type master;
	file "/home/named/etc/namedb/pz/rsd-solar.de.hosts";
	};


rsd-solar.de.hosts
Code:
rsd-solar.de.	SOA	ns.digital4u.de (	; ns is the primary server
			dns			; contact email
			2004012906		; Serial
			10800			; Refresh
			3600			; Retry
			604800		; Expire
			38400  )		; Minimum Cache TTL

		NS	ns.digital4u.de.
		NS	ns.schlund.de.

		MX	10 mail.digital4u.de

*		A	146.82.72.71


dig output from "dig @213.23.97.246 rsd-solar.de" where 213.23.97.246 is my IP where BIND is installed
Code:
; <<>> DiG 9.2.0 <<>> @213.23.97.246 rsd-solar.de
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43439
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;rsd-solar.de.                  IN      A

;; ANSWER SECTION:
rsd-solar.de.           83740   IN      A       213.23.97.246

;; AUTHORITY SECTION:
rsd-solar.de.           83740   IN      NS      ns.schlund.de.
rsd-solar.de.           83740   IN      NS      ns2.schlund.de.

;; ADDITIONAL SECTION:
ns.schlund.de.          83740   IN      A       195.20.224.97
ns2.schlund.de.         83740   IN      A       212.227.123.3

;; Query time: 165 msec
;; SERVER: 213.23.97.246#53(213.23.97.246)
;; WHEN: Wed Jan 28 18:19:19 2004
;; MSG SIZE  rcvd: 121


I hope it is OK, that I ask you these questions? In case something is obviously wrong I would like to correct it right away, instead of always waiting 24 to 48 hours until the changes should been taken into affect...

Thanks and best regards,

ASchweti

PS: I've added "allow-transfer { 195.20.224.97; };", because my provider asked me to allow zone transfers (AXFR) for ns.schlund.de [ IP = 195.20.224.97 ]. Hope that was correct???

Last edited by aschweti : January 28th, 2004 at 08:45 PM.

Reply With Quote
  #8  
Old January 28th, 2004, 09:27 PM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 27 m 56 sec
Reputation Power: 77
everything looks good enough to eat. The dig for your primary name server IP should return the information that will be available when your registrar updates the name server information for your domain. Remember that the info you gave the registrar should match the NS records you specify for that domain.

Reply With Quote
  #9  
Old January 29th, 2004, 03:18 AM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hi SilentRage,

that sounds good! I have a couple more questions if you don't mind.

I am wondering about the following line in my rsd-solar.de.hosts file:

Code:
rsd-solar.de.	SOA	ns.digital4u.de (	; ns is the primary server


1. Could I replace rsd-solar.de. with an @? So does the @ always indicate what I defined as "zone" in my named.conf?

2. Isn't here a dot missing for ns.digital4u.de? Wouldn't that mean ns.digital4u.de.rsd-solar.de and do I need that anyhow as I have the two NS record further down? I took that from a sample zone file.

3. Do I always need a MX entry? My mail server runs on the same IP and machine. So I can enter either mail.digital4u.de, www.digital4u.de, etc. as POP and SMTP server doesn't make any difference as long as it points to my IP.

Thank you for your patience!!!

Reply With Quote
  #10  
Old January 29th, 2004, 07:48 AM
SilentRage's Avatar
SilentRage SilentRage is offline
DNS/BIND Guru
Dev Shed Specialist (4000 - 4499 posts)
 
Join Date: Jun 2003
Location: OH, USA
Posts: 4,193 SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level)SilentRage User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 1 Week 5 Days 14 h 27 m 56 sec
Reputation Power: 77
You should have a MX record to recieve mail.

Yes, you're missing the period.

@ represents the last "$ORIGIN". The default $ORIGIN is what you defined to be the zone in named.conf. So you can either change it to @ or leave it - doesn't matter.

A blank host name (such as your NS records) just means to use the last specified host. So it doesn't matter if you choose @ or "rsd-solar.de." cause the NS records will still apply to the same host.

Reply With Quote
  #11  
Old January 29th, 2004, 12:59 PM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hi SilentRage,

big trouble in little Germany

It seems that the secondary can't get the zone data which is why my requested update failed.

Doing a "dig @ns.digital4u.de rsd-solar.de AXFR I get the following:

Code:
; <<>> DiG 9.2.0 <<>> @ns.digital4u.de rsd-solar.de AXFR
;; global options:  printcmd
; Transfer failed.


Doing a "dig rsd-solar.de" locally I get:

Code:
suse:/usr/local/src/bind # dig rsd-solar.de

; <<>> DiG 9.2.3 <<>> rsd-solar.de
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39686
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;rsd-solar.de.                  IN      A

;; ANSWER SECTION:
rsd-solar.de.           172800  IN      A       146.82.72.71

;; AUTHORITY SECTION:
rsd-solar.de.           172800  IN      NS      ns.digital4u.de.
rsd-solar.de.           172800  IN      NS      ns.schlund.de.

;; ADDITIONAL SECTION:
ns.digital4u.de.        43189   IN      A       213.23.97.246
ns.schlund.de.          86389   IN      A       195.20.224.97

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Jan 29 19:53:16 2004
;; MSG SIZE  rcvd: 130


which is correct!

Doing it from the outside like "dig @ns.digital4u.de rsd-solar.de" I get:

Code:
[root@www root]# dig @ns.digital4u.de rsd-solar.de

; <<>> DiG 9.2.0 <<>> @ns.digital4u.de rsd-solar.de
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21933
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;rsd-solar.de.                  IN      A

;; ANSWER SECTION:
rsd-solar.de.           172800  IN      A       146.82.72.71

;; AUTHORITY SECTION:
rsd-solar.de.           172800  IN      NS      ns.digital4u.de.
rsd-solar.de.           172800  IN      NS      ns.schlund.de.

;; Query time: 164 msec
;; SERVER: 213.23.97.246#53(ns.digital4u.de)
;; WHEN: Thu Jan 29 10:55:32 2004
;; MSG SIZE  rcvd: 98


My provider told me that I should see the correct info right away. More important is in my opinion, that I get this "Transfer Failed" message...

Any idea?

Thanks and best regards,

ASchweti

Reply With Quote
  #12  
Old January 29th, 2004, 05:38 PM
aschweti aschweti is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 9 aschweti User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Hi SilentRage,

it seems to work now. Don't ask me why. I totally reinstalled BIND. I went back to BIND8 cause I was not sure if BIND9 worked properly on my SUSE 8.1 machine.

The secondary DNS from my provider already updated its records, so tomorrow morning I will know if the update at the DENIC went through as well, which didn't work today.

Thanks for now...

Best regards,

ASchweti

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationDNS > DNS for a Dummy


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump