Securing-Optimizing-RH-Linux-1_2_231
Comments and suggestions concerning this book should be mailed to gmourani@videotron.ca
© Copyright 1999-2000 Gerhard Mourani and Open Network Architecture ®
231
Don’t forget to copy the db.cache file to the “/var/named/” directory on your server where you’re
installing DNS server after retrieving it over the Internet.
NOTE: Internal addresses like 192.168.1/24 are not included in the DNS configuration files for
security reason. It is very important that DNS doesn't exist between hosts on the corporate
network and external hosts.
Primary master name Server
A primary master name server for a zone reads the data for the zone from a file on it’s host and
are authoritative for that zone.
The necessary files to setup a primary master name server are:
named.conf
db.127.0.0
db.208.164.186
db.openarch
db.cache
named script
Configuration of the “/etc/named.conf” file for a master name server
Use this configuration for the server machine on your network that acts as a master name server.
After compiling DNS, you need to set up a primary domain name for your server. We'll use
“openarch.com” as an example domain, and assume you are using IP network address of
208.164.186.0. To do this, add the following lines to your “/etc/named.conf”.
Create the named.conf file (touch /etc/named.conf) and add:
options {
directory "/var/named";
fetch-glue no;
recursion no;
allow-query { 208.164.186/24; 127.0.0/8; };
allow-transfer { 208.164.186.2; };
transfer-format many-answers;
};
// These files are not specific to any zone
zone "." in {
type hint;
file "db.cache";
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "db.127.0.0";
};
// These are our primary zone files
zone "openarch.com" in {
type master;
file "db.openarch";
};
zone "186.164.208.in-addr.arpa" in {
type master;
file "db.208.164.186";
};