Archive for the 'Bind' Category
Tried to fetch SOA record for domain, but DNS server ns1.somens.org [7x.xx.xx.xxx] returned error code Refused
i am fight with this error more than 3 days but finally i find the solution.
OS: Fedora Core 8
Bind DNS Server:version 9.5.0
how i can install Bind Dns server 9.5.0 ?
its very simple
yum install bind bind-chroot bind-devel bind-utils bind-libs
nano /etc/named.conf
remove this line from options
listen on {127.0.0.1;}
and another important thing is must be allow-query { any; }; :
options {
directory “/var/named”;
dump-file “/var/named/data/cache_dump.db”;
statistics-file “/var/named/data/named_stats.txt”;
memstatistics-file “/var/named/data/named_mem_stats.txt”;
allow-query { any; };
recursion yes;
};
Configuring the rndc tool
[root@server1 named]# whereis rndc-confgen
rndc-confgen: /usr/sbin/rndc-confgen /usr/share/man/man8/rndc-confgen.8.gz
[root@server1 named]# /usr/sbin/rndc-confgen
# Start of rndc.conf
key "rndckey" {
algorithm hmac-md5;
secret "B8O8yW4z4q3Wm4oi8iTi5S==";
};
options {
default-key "rndckey";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf
# Use with the following in named.conf, adjusting the allow list as needed:
key "rndckey" {
algorithm hmac-md5;
secret "B8O8yW4z4q3Wm4oi8iTi5S==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndckey"; };
};
# End of named.conf
however, the secret key will be different
The first section (between # Start of rndc.conf and # End of rndc.conf) is for the rndc.conf file. Copy this into a new file and save it as /etc/rndc.conf. The following is an example /etc/rndc.conf file:
# Start of rndc.conf
key "rndckey" {
algorithm hmac-md5;
secret "B8O8yW4z4q3Wm4oi8iTi5S==";
};
options {
default-key "rndckey";
default-server 127.0.0.1;
default-port 953;
};
# End of rndc.conf
Copy the next section into /etc/named.conf after the options section:
# Use with the following in named.conf, adjusting the allow list as needed:
key “rndckey” {
algorithm hmac-md5;
secret “B8O8yW4z4q3Wm4oi8iQm4Q==”;
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { “rndckey”; };
};
# End of named.conf
and named.conf will be like below;
key “rndckey” {
algorithm hmac-md5;
secret “B8O8yW4z4q3Wm4oi8iQm4Q==”;
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { “rndckey”; };
};
options {
directory “/var/named”;
dump-file “/var/named/data/cache_dump.db”;
statistics-file “/var/named/data/named_stats.txt”;
memstatistics-file “/var/named/data/named_mem_stats.txt”;
allow-query { any; };
recursion yes;
};
logging {
channel default_debug {
file “data/named.run”;
severity dynamic;
};
};
zone “.” IN {
type hint;
file “named.ca”;
};
[root@server1 named]# service named restart
No comments