Руководство FreeBSD

2004 г · Проект Русской Документации FreeBSD

www.FreeBSD.org
ftp.FreeBSD.org
net/bind9
.
org.
example.org
org.
foo.example.org.
example.org.
1.2.3.in-addr.arpa
3.2.1.*
example.org.
org.
org.
/dev
example.org
www.FreeBSD.org
ndc
/etc/namedb
/etc/namedb/named.conf
/etc/namedb
/etc/rc.conf
named_enable="YES"

# ndc start

make-localhost
# cd /etc/namedb
# sh make-localhost

/etc/namedb/localhost.rev
/etc/namedb/named.conf
// $FreeBSD$
//
// Refer to the named(8) manual page for details.  If you are ever going
// to setup a primary server, make sure you've understood the hairy
// details of how DNS is working.  Even with simple mistakes, you can
// break connectivity for affected parties, or cause huge amount of
// useless Internet traffic.

options {
        directory "/etc/namedb";

// In addition to the "forwarders" clause, you can force your name
// server to never initiate queries of its own, but always ask its
// forwarders only, by enabling the following line:
//
//      forward only;

// If you've got a DNS server around at your upstream provider, enter
// its IP address here, and enable the line below.  This will make you
// benefit from its cache, thus reduce overall DNS traffic in the
Internet.
/*
        forwarders {
                127.0.0.1;
        };
*/

127.0.0.1
/*
         * If there is a firewall between you and name servers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
        // query-source address * port 53;

        /*
         * If running in a sandbox, you may have to specify a different
         * location for the dumpfile.
         */
        // dump-file "s/named_dump.db";
};

// Note: the following will be supported in a future release.
/*
host { any; } {
        topology {
                127.0.0.0/8;
        };
};
*/

// Setting up secondaries is way easier and the rough picture for this
// is explained below.
//
// If you enable a local name server, don't forget to enter 127.0.0.1
// into your /etc/resolv.conf so this server will be queried first.
// Also, make sure to enable it in /etc/rc.conf.

zone "." {
        type hint;
        file "named.root";
};

zone "0.0.127.IN-ADDR.ARPA" {
        type master;
        file "localhost.rev";
};

zone
"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.INT" {
        type master;
        file "localhost.rev";
};

// NB: Do not use the IP addresses below, they are faked, and only
// serve demonstration/documentation purposes!
//
// Example secondary config entries.  It can be convenient to become
// a secondary at least for the zone where your own domain is in.  Ask
// your network administrator for the IP address of the responsible
// primary.
//
// Never forget to include the reverse lookup (IN-ADDR.ARPA) zone!
// (This is the first bytes of the respective IP address, in reverse
// order, with ".IN-ADDR.ARPA" appended.)
//
// Before starting to setup a primary zone, better make sure you fully
// understand how DNS and BIND works, however.  There are sometimes
// unobvious pitfalls.  Setting up a secondary is comparably simpler.
//
// NB: Don't blindly enable the examples below. :-)  Use actual names
// and addresses instead.
//
// NOTE!!! FreeBSD runs BIND in a sandbox (see named_flags in rc.conf).
// The directory containing the secondary zones must be write accessible
// to BIND.  The following sequence is suggested:
//
//      mkdir /etc/namedb/s
//      chown bind:bind /etc/namedb/s
//      chmod 750 /etc/namedb/s

/*
zone "example.com" {
        type slave;
        file "s/example.com.bak";
        masters {
                192.168.1.1;
        };
};

zone "0.168.192.in-addr.arpa" {
        type slave;
        file "s/0.168.192.in-addr.arpa.bak";
        masters {
                192.168.1.1;
        };
};
*/

named.conf
named.conf
example.org
zone "example.org" {
    type master;
    file "example.org";
};

/etc/namedb/example.org
zone "example.org" {
    type slave;
    file "example.org";
};

example.org
/etc/namedb/example.org
$TTL 3600

example.org. IN SOA ns1.example.org. admin.example.org. (
                        5               ; Serial
                        10800           ; Refresh
                        3600            ; Retry
                        604800          ; Expire
                        86400 )         ; Minimum TTL

; DNS Servers
@       IN NS           ns1.example.org.
@       IN NS           ns2.example.org.

; Machine Names
localhost       IN A    127.0.0.1
ns1             IN A    3.2.1.2
ns2             IN A    3.2.1.3
mail            IN A    3.2.1.10
@               IN A    3.2.1.30

; Aliases
www             IN CNAME        @

; MX Record
@               IN MX   10      mail.example.org.

example.org.
www.example.org.
recordname      IN recordtype  value

example.org. IN SOA ns1.example.org. admin.example.org. (
                        5               ; Serial
                        10800           ; Refresh after 3 hours
                        3600            ; Retry after 1 hour
                        604800          ; Expire after 1 week
                        86400 )         ; Minimum TTL of 1 day

example.org.
ns1.example.org.
@       IN NS           ns1.example.org.

example.org.
localhost       IN A    127.0.0.1
ns1             IN A    3.2.1.2
ns2             IN A    3.2.1.3
mail            IN A    3.2.1.10
@               IN A    3.2.1.30

ns1.example.org
3.2.1.2
example.org
3.2.1.30
www             IN CNAME        @

www
example.org
3.2.1.30
@               IN MX   10      mail.example.org.

mail.example.org
example.org
$TTL 3600

1.2.3.in-addr.arpa. IN SOA ns1.example.org. admin.example.org. (
                        5               ; Serial
                        10800           ; Refresh
                        3600            ; Retry
                        604800          ; Expire
                        3600 )          ; Minimum

@       IN NS   ns1.example.org.
@       IN NS   ns2.example.org.

2       IN PTR  ns1.example.org.
3       IN PTR  ns2.example.org.
10      IN PTR  mail.example.org.
30      IN PTR  example.org.

bind
chroot
/etc/namedb
root
# cd /etc/namedb
# mkdir -p bin dev etc var/tmp var/run master slave
# chown bind:bind slave var/*

# cp /etc/localtime etc
# mv named.conf etc && ln -sf etc/named.conf
# mv named.root master
# sh make-localhost && mv localhost.rev localhost-v6.rev master
# cat > master/named.localhost
$ORIGIN localhost.
$TTL 6h
@   IN  SOA localhost. postmaster.localhost. (
            1   ; serial
            3600    ; refresh
            1800    ; retry
            604800  ; expiration
            3600 )  ; minimum
    IN  NS  localhost.
    IN  A       127.0.0.1
^D

# cd /usr/src/lib/libisc
# make cleandir && make cleandir && make depend && make all
# cd /usr/src/lib/libbind
# make cleandir && make cleandir && make depend && make all
# cd /usr/src/libexec/named-xfer
# make cleandir && make cleandir &&
   make depend && make NOSHARED=yes all
# cp named-xfer /etc/namedb/bin &&
   chmod 555 /etc/namedb/bin/named-xfer

named-xfer
# cd /usr/src/lib/libisc
# make cleandir
# cd /usr/src/lib/libbind
# make cleandir
# cd /usr/src/libexec/named-xfer
# make cleandir

# cd /usr/src && make cleandir && make cleandir

/usr/obj
# rm -fr /usr/obj && mkdir /usr/obj

named-xfer
/usr/libexec
dev/null
# cd /etc/namedb/dev && mknod null c 2 2
# chmod 666 null

/var/run/ndc
/etc/namedb/var/run/ndc
# ln -sf /etc/namedb/var/run/ndc /var/run/ndc

/var/run
crontab
root
log
/etc/rc.conf
chroot
/etc/rc.conf
named_enable="YES"
named_flags="-u bind -g bind -t /etc/namedb /etc/named.conf"

/etc/namedb/etc/named.conf
/etc/namedb/etc/named.conf
options {
        directory "/";
        named-xfer "/bin/named-xfer";
        version "";     // Не выдавайте версию BIND
        query-source address * port 53;
};
// управляющий сокет ndc
controls {
        unix "/var/run/ndc" perm 0600 owner 0 group 0;
};
// Далее следуют зоны:
zone "localhost" IN {
        type master;
        file "master/named.localhost";
        allow-transfer { localhost; };
        notify no;
};
zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "master/localhost.rev";
        allow-transfer { localhost; };
        notify no;
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.int" {
       type master;
       file "master/localhost-v6.rev";
       allow-transfer { localhost; };
       notify no;
};
zone "." IN {
        type hint;
        file "master/named.root";
};
zone "private.example.net" in {
        type master;
        file "master/private.example.net.db";
    allow-transfer { 192.168.10.0/24; };
};
zone "10.168.192.in-addr.arpa" in {
        type slave;
        masters { 192.168.10.2; };
        file "slave/192.168.10.db";
};

/
/etc/namedb
named-xfer
named-xfer
/usr/libexec
slave
bind

Руководство FreeBSD
(FreeBSD Handbook)

23.6. Domain Name System (DNS)

23.6.1. Обзор

23.6.2. Используемая терминология

23.6.3. Причины, по которым вам может понадобиться сервер имён

23.6.4. Как это работает

23.6.5. Запуск BIND

23.6.6. Конфигурационные файлы

23.6.6.1. Использование `make-localhost`

23.6.6.2. `/etc/namedb/named.conf`

23.6.6.3. Файлы зон

23.6.7. Кэширующий сервер имён

23.6.8. Запуск named в песочнице

23.6.9. Безопасность

23.6.10. Дополнительная литература

Руководство FreeBSD(FreeBSD Handbook)

Руководство FreeBSD
(FreeBSD Handbook)