7.3.2. Configuring BIND and DNS

Procedure 7.4. To Configure Sub-Domain Host Name Resolution:

1. Delete and create the /var/named/dynamic directory:

   # rm -rvf /var/named/dynamic
   # mkdir -vp /var/named/dynamic

   Copy to Clipboard Toggle word wrap
2. Create an initial named database in a new file called /var/named/dynamic/$domain.db, replacing domain with your chosen domain. If the shell syntax is unfamiliar, see the BASH documentation at http://www.gnu.org/software/bash/manual/bashref.html#Here-Documents.

   # cat <<EOF > /var/named/dynamic/${domain}.db
   \$ORIGIN .
   \$TTL 1	; 1 seconds (for testing only)
   ${domain}               IN SOA  ns1.${domain}. hostmaster.${domain}. (
                                   2011112904 ; serial
                                   60         ; refresh (1 minute)
                                   15         ; retry (15 seconds)
                                   1800       ; expire (30 minutes)
                                   10         ; minimum (10 seconds)
                                   )
                           NS      ns1.${domain}.
                           MX      10 mail.${domain}.
   \$ORIGIN ${domain}.
   ns1                     A       127.0.0.1
   EOF

   Copy to Clipboard Toggle word wrap

Procedure 7.5. To Install the DNSSEC Key for a Domain:

1. Create the file /var/named/$domain.key, where domain is your chosen domain:

   # cat <<EOF > /var/named/$domain.keycat <<EOF > /var/named/$domain.keycat <<EOF > /var/named/$domain.key
   key $domain {
     algorithm HMAC-SHA256;
     secret "${KEY}";
   };
   EOF

   Copy to Clipboard Toggle word wrap
2. Set the permissions and SELinux context to the correct values:

   # chgrp named -R /var/named
   # chown named -R /var/named/dynamic
   # restorecon -rv /var/named

   Copy to Clipboard Toggle word wrap

Procedure 7.6. To Configure a New /etc/named.conf File:

1. Create the required file:

   # cat <<EOF > /etc/named.conf
   // named.conf
   //
   // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
   // server as a caching only nameserver (as a localhost DNS resolver only).
   //
   // See /usr/share/doc/bind*/sample/ for example named configuration files.
   //
   
   options {
     listen-on port 53 { any; };
     directory 	"/var/named";
     dump-file 	"/var/named/data/cache_dump.db";
           statistics-file "/var/named/data/named_stats.txt";
           memstatistics-file "/var/named/data/named_mem_stats.txt";
     allow-query     { any; };
     recursion no;
   
     /* Path to ISC DLV key */
     bindkeys-file "/etc/named.iscdlv.key";
   
   };
   
   logging {
           channel default_debug {
                   file "data/named.run";
                   severity dynamic;
           };
   };
   
   // use the default rndc key
   include "/etc/rndc.key";
   
   controls {
     inet 127.0.0.1 port 953
     allow { 127.0.0.1; } keys { "rndc-key"; };
   };
   
   include "/etc/named.rfc1912.zones";
   
   include "$domain.key";
   
   zone "$domain" IN {
     type master;
     file "dynamic/$domain.db";
     allow-update { key $domain ; } ;
   };
   EOF

   Copy to Clipboard Toggle word wrap
2. Set the permissions and SELinux context to the correct values:

   # chown -v root:named /etc/named.conf
   # restorecon /etc/named.conf

   Copy to Clipboard Toggle word wrap