Bind Configuration in Chroot Environment
\n Wriiten by Babar Zahoor<\/p>\n
Dated:12-01-2010<\/p>\n
Pupose: Configuration of DNS (Bind) server in chroot environment.<\/p>\n
OS CentOS 5.4 X86_64<\/p>\n
————————————-
\nPlease Install the bind packages
\n————————————-<\/p>\n
[root@ns1 ~]# yum install bind bind-utils bind-*
\nLoaded plugins: fastestmirror
\nLoading mirror speeds from cached hostfile
\n * addons: virror.hanoilug.org
\n * extras: ftp.hostrino.com
\n * updates: ftp.hostrino.com
\naddons <\/p>\n
| 951 B 00:00
\nextras <\/p>\n
| 1.1 kB 00:00
\nftp <\/p>\n
| 2.1 kB 00:00
\nupdates <\/p>\n
| 1.9 kB 00:00
\nupdates\/primary_db <\/p>\n
| 444 kB 00:00
\nSetting up Install Process
\nPackage 30:bind-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-utils-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-sdb-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-chroot-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-devel-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-devel-9.3.6-4.P1.el5_4.1.i386 already installed and latest version
\nPackage 30:bind-libs-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-libs-9.3.6-4.P1.el5_4.1.i386 already installed and latest version
\nPackage 30:bind-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-utils-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-libbind-devel-9.3.6-4.P1.el5_4.1.x86_64 already installed and latest version
\nPackage 30:bind-libbind-devel-9.3.6-4.P1.el5_4.1.i386 already installed and latest version
\nNothing to do<\/p>\n
———————————————-
\nPlease Configure Static IP and Default Gateway
\n———————————————-<\/p>\n
[root@ns1 ~]# vi \/etc\/sysconfig\/network-scripts\/ifcfg-eth0
\nDEVICE=eth0
\nBOOTPROTO=static
\nIPADDR=192.168.1.100
\nNETMASK=255.255.255.0
\nONBOOT=yes
\nHWADDR=00:16:36:73:7e:4f<\/p>\n
wq!<\/p>\n
[root@ns1 ~]# ifconfig
\neth0 Link encap:Ethernet HWaddr 00:16:36:73:7E:4F
\n inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0
\n inet6 addr: fe80::216:36ff:fe73:7e4f\/64 Scope:Link
\n UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
\n RX packets:1641 errors:0 dropped:0 overruns:0 frame:0
\n TX packets:950 errors:0 dropped:0 overruns:0 carrier:0
\n collisions:0 txqueuelen:1000
\n RX bytes:192907 (188.3 KiB) TX bytes:117111 (114.3 KiB)<\/p>\n
lo Link encap:Local Loopback
\n inet addr:127.0.0.1 Mask:255.0.0.0
\n inet6 addr: ::1\/128 Scope:Host
\n UP LOOPBACK RUNNING MTU:16436 Metric:1
\n RX packets:105 errors:0 dropped:0 overruns:0 frame:0
\n TX packets:105 errors:0 dropped:0 overruns:0 carrier:0
\n collisions:0 txqueuelen:0
\n RX bytes:10213 (9.9 KiB) TX bytes:10213 (9.9 KiB)<\/p>\n
[root@ns1 ~]#
\n[root@ns1 ~]# vi \/etc\/sysconfig\/network
\nNETWORKING=yes
\nNETWORKING_IPV6=no
\nHOSTNAME=dns.companydns.org
\nGATEWAY=192.168.1.1<\/p>\n
wq!<\/p>\n
——————————————————————————————————————–
\nNow we are going to configure the named service please copy the files content and modify with your network settings
\n——————————————————————————————————————–<\/p>\n
[root@ns1 ~]#
\n[root@ns1 ~]# cd \/var\/named\/chroot\/
\n[root@ns1 chroot]# ll
\ntotal 24
\ndrwxr-x— 2 root named 4096 Dec 1 00:00 dev
\ndrwxr-x— 2 root named 4096 Jan 4 04:42 etc
\ndr-xr-xr-x 85 root root 0 Jan 11 22:41 proc
\ndrwxr-x— 6 root named 4096 Dec 1 00:00 var
\n[root@ns1 chroot]#<\/p>\n
——————————-
\nNow create zone file named.conf
\n——————————-<\/p>\n
[root@ns1 chroot]# vi etc\/named.conf<\/p>\n
options
\n{
\n directory “\/var\/named”; \/\/ the default
\n dump-file “data\/cache_dump.db”;
\n statistics-file “data\/named_stats.txt”;
\n memstatistics-file “data\/named_mem_stats.txt”;<\/p>\n
};<\/p>\n
zone “.” IN {
\n type hint;
\n file “named.root”;
\n};<\/p>\n
zone “localhost” IN {
\n type master;
\n file “localhost.fwd”;
\n allow-update { none; };
\n};<\/p>\n
zone “0.0.127.in-addr.arpa” IN {
\n type master;
\n file “localhost.rev”;
\n allow-update { none; };
\n};<\/p>\n
zone “companydns.org” IN {
\n type master;
\n file “companydns.org.fwd”;
\n allow-update { none; };
\n};<\/p>\n
zone “1.168.192.in-addr.arpa” IN {
\n type master;
\n file “companydns.org.rev”;
\n allow-update { none; };
\n};<\/p>\n
wq!<\/p>\n
[root@ns1 chroot]# cd var\/named<\/p>\n
[root@ns1 named]#<\/p>\n
————————–
\nNow create named.root file
\n————————–<\/p>\n
[root@ns1 named]#<\/p>\n
First We confiure named.root file for root dns<\/p>\n
[root@ns1 named]# vi named.root
\n. 6D IN NS A.ROOT-SERVERS.NET.
\n. 6D IN NS B.ROOT-SERVERS.NET.
\n. 6D IN NS C.ROOT-SERVERS.NET.
\n. 6D IN NS D.ROOT-SERVERS.NET.
\n. 6D IN NS E.ROOT-SERVERS.NET.
\n. 6D IN NS F.ROOT-SERVERS.NET.
\n. 6D IN NS G.ROOT-SERVERS.NET.
\n. 6D IN NS H.ROOT-SERVERS.NET.
\n. 6D IN NS I.ROOT-SERVERS.NET.
\n. 6D IN NS J.ROOT-SERVERS.NET.
\n. 6D IN NS K.ROOT-SERVERS.NET.
\n. 6D IN NS L.ROOT-SERVERS.NET.
\n. 6D IN NS M.ROOT-SERVERS.NET.
\nA.ROOT-SERVERS.NET. 6D IN A 198.41.0.4
\nB.ROOT-SERVERS.NET. 6D IN A 192.228.79.201
\nC.ROOT-SERVERS.NET. 6D IN A 192.33.4.12
\nD.ROOT-SERVERS.NET. 6D IN A 128.8.10.90
\nE.ROOT-SERVERS.NET. 6D IN A 192.203.230.10
\nF.ROOT-SERVERS.NET. 6D IN A 192.5.5.241
\nG.ROOT-SERVERS.NET. 6D IN A 192.112.36.4
\nH.ROOT-SERVERS.NET. 6D IN A 128.63.2.53
\nI.ROOT-SERVERS.NET. 6D IN A 192.36.148.17
\nJ.ROOT-SERVERS.NET. 6D IN A 192.58.128.30
\nK.ROOT-SERVERS.NET. 6D IN A 193.0.14.129
\nL.ROOT-SERVERS.NET. 6D IN A 199.7.83.42
\nM.ROOT-SERVERS.NET. 6D IN A 202.12.27.33<\/p>\n
wq!<\/p>\n
———————————————————————————————————————————-
\nNow create zone db files one by one localhost.fwd and the localhost.rev are must then your network zone files forward and reverse
\n———————————————————————————————————————————-<\/p>\n
[root@ns1 named]# vi localhost.fwd
\n$ORIGIN localhost.
\n$TTL 86400
\n@ IN SOA ns1.companydns.org. hostmaster.companydns.org. (
\n 20100104 ; Serial number
\n 3H ; Refresh 1 day
\n 15M ; Retry 2 hours
\n 1W ; Expire 41.67 days
\n 1D ) ; Minimum TTL 2 days<\/p>\n
@ IN NS dns.companydns.org.<\/p>\n
localhost. IN A 127.0.0.1<\/p>\n
wq! ##### Save the file after copying the content from here. #####<\/p>\n
[root@ns1 named]# vi localhost.rev
\n$ORIGIN 0.0.127.in-addr.arpa.
\n$TTL 86400
\n@ IN SOA ns1.companydns.org. hostmaster.companydns.org. (
\n 20100104 ; Serial number
\n 3H ; Refresh 1 day
\n 15M ; Retry 2 hours
\n 1W ; Expire 41.67 days
\n 1D ) ; Minimum TTL 2 days<\/p>\n
@ IN NS ns1.companydns.org.<\/p>\n
1.0.0.127.in-addr.arpa. IN PTR localhost.<\/p>\n
wq!<\/p>\n
[root@ns1 named]# vi companydns.org.fwd
\n$ORIGIN companydns.org.
\n$TTL 86400
\n@ IN SOA ns1.companydns.org. hostmaster.companydns.org. (
\n 20100104 ; Serial number
\n 3H ; Refresh 1 day
\n 15M ; Retry 2 hours
\n 1W ; Expire 41.67 days
\n 1D ) ; Minimum TTL 2 days<\/p>\n
@ IN NS ns1.companydns.org.<\/p>\n
ns1.companydns.org. IN A 192.168.1.100
\nftp.companydns.org. IN A 192.168.1.101
\nwww.companydns.org. IN A 192.168.1.102
\nclient3.companydns.org. IN A 192.168.1.103
\nclient4.companydns.org. IN A 192.168.1.104<\/p>\n
wq!<\/p>\n
[root@ns1 named]# vi companydns.org.rev
\n$ORIGIN 1.168.192.in-addr.arpa.
\n$TTL 86400
\n@ IN SOA ns1.companydns.org. root.companydns.org. (
\n 20100104 ; Serial number
\n 3H ; Refresh 1 day
\n 15M ; Retry 2 hours
\n 1W ; Expire 41.67 days
\n 1D ) ; Minimum TTL 2 days<\/p>\n
@ IN NS ns1.companydns.org.<\/p>\n
100.1.168.192.in-addr.arpa. IN PTR ns1.companydns.org.
\n101.1.168.192.in-addr.arpa. IN PTR ftp.companydns.org.
\n102.1.168.192.in-addr.arpa. IN PTR www.companydns.org.
\n103.1.168.192.in-addr.arpa. IN PTR client1.companydns.org.
\n104.1.168.192.in-addr.arpa. IN PTR clinet2.companydns.org.<\/p>\n
wq!<\/p>\n
[root@ns1 ~]# vi \/etc\/resolv.conf
\nsearch companydns.org
\nnameserver 192.168.1.100<\/p>\n
wq!<\/p>\n
—————————————————————–
\nConfiguration has been done now start “\/etc\/init.d\/named” service
\n—————————————————————–<\/p>\n
[root@ns1 ~]# \/etc\/init.d\/named start
\nStarting named: [ OK ]
\n[root@ns1 ~]# dig yahoo.com<\/p>\n
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.1 <<>> yahoo.com
\n;; global options: printcmd
\n;; Got answer:
\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46559\n;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 7, ADDITIONAL: 2\n\n;; QUESTION SECTION:\n;yahoo.com. IN A\n\n;; ANSWER SECTION:\nyahoo.com. 21600 IN A 209.191.93.53\nyahoo.com. 21600 IN A 69.147.114.224\nyahoo.com. 21600 IN A 209.131.36.159\n\n;; AUTHORITY SECTION:\nyahoo.com. 172800 IN NS ns1.yahoo.com.\nyahoo.com. 172800 IN NS ns2.yahoo.com.\nyahoo.com. 172800 IN NS ns3.yahoo.com.\nyahoo.com. 172800 IN NS ns4.yahoo.com.\nyahoo.com. 172800 IN NS ns5.yahoo.com.\nyahoo.com. 172800 IN NS ns6.yahoo.com.\nyahoo.com. 172800 IN NS ns8.yahoo.com.\n\n;; ADDITIONAL SECTION:\nns6.yahoo.com. 172800 IN A 202.43.223.170\nns8.yahoo.com. 172800 IN A 202.165.104.22\n\n;; Query time: 643 msec\n;; SERVER: 192.168.1.100#53(192.168.1.100)\n;; WHEN: Tue Jan 12 03:01:01 2010\n;; MSG SIZE rcvd: 233\n\n[root@ns1 ~]#\n\n--------------------------------------------------\nNow please open ports for named server for network\n--------------------------------------------------\n\n[root@ns1 ~]# iptables -A INPUT -p tcp -m multiport --dport 53,953 -j ACCEPT\n[root@ns1 ~]# iptables -A INPUT -p udp -m multiport --dport 53,953 -j ACCEPT\n[root@ns1 ~]#\n[root@ns1 ~]# \/etc\/init.d\/iptables save\nSaving firewall rules to \/etc\/sysconfig\/iptables: [ OK ]\n[root@ns1 ~]#\n[root@ns1 ~]# dig ns1.companydns.org\n\n; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.1 <<>> ns1.companydns.org
\n;; global options: printcmd
\n;; Got answer:
\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29732\n;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0\n\n;; QUESTION SECTION:\n;ns1.companydns.org. IN A\n\n;; ANSWER SECTION:\nns1.companydns.org. 86400 IN A 192.168.1.100\n\n;; AUTHORITY SECTION:\ncompanydns.org. 86400 IN NS ns1.companydns.org.\n\n;; Query time: 1 msec\n;; SERVER: 192.168.1.100#53(192.168.1.100)\n;; WHEN: Tue Jan 12 03:13:33 2010\n;; MSG SIZE rcvd: 66\n\n[root@ns1 ~]#\n[root@ns1 ~]# dig www.companydns.org\n\n; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.1 <<>> www.companydns.org
\n;; global options: printcmd
\n;; Got answer:
\n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10800\n;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1\n\n;; QUESTION SECTION:\n;www.companydns.org. IN A\n\n;; ANSWER SECTION:\nwww.companydns.org. 86400 IN A 192.168.1.102\n\n;; AUTHORITY SECTION:\ncompanydns.org. 86400 IN NS ns1.companydns.org.\n\n;; ADDITIONAL SECTION:\nns1.companydns.org. 86400 IN A 192.168.1.100\n\n;; Query time: 1 msec\n;; SERVER: 192.168.1.100#53(192.168.1.100)\n;; WHEN: Tue Jan 12 03:14:09 2010\n;; MSG SIZE rcvd: 86\n\n[root@ns1 ~]#\n\n\n\n\n\n<\/p>\n","protected":false},"excerpt":{"rendered":"
Bind Configuration in Chroot Environment Wriiten by Babar Zahoor<\/p>\n
Dated:12-01-2010<\/p>\n
Pupose: Configuration of DNS (Bind) server in chroot environment.<\/p>\n
OS CentOS 5.4 X86_64<\/p>\n
————————————- Please Install the bind packages ————————————-<\/p>\n
[root@ns1 ~]# yum install bind bind-utils bind-* Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * addons: virror.hanoilug.org * extras: ftp.hostrino.com * updates: ftp.hostrino.com […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/198"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=198"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/198\/revisions"}],"predecessor-version":[{"id":199,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/198\/revisions\/199"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}