Differences
This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
linux:bind [2006/05/10 10:43] a created |
linux:bind [2015/08/12 14:46] (current) zagi |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== BIND (is there anyting else?) ====== | ====== BIND (is there anyting else?) ====== | ||
- | **Speedup tips** | + | ==== DNSSEC ==== |
- | | + | |
- | | + | dnssec-keygen -f KSK -a 8 -b 4096 -n ZONE domena.org |
- | | + | |
- | > webhoster | + | copy generated files in /etc/bind/keys. |
- | + | ||
- | | + | if you put your keys in / |
- | in /etc/defaults/bind9), | + | |
- | cache has been filled. | + | |
+ | put this in zone domena.org | ||
+ | |||
+ | | ||
+ | auto-dnssec maintain; | ||
+ | key-directory "/ | ||
+ | | ||
+ | |||
+ | use dnssec-dsfromkey to create DS DNS records from **KSK files.** | ||
+ | |||
+ | |||
+ | To enable add to bind.named.options:\\ | ||
+ | |||
+ | |||
+ | dnssec-validation auto; | ||
+ | | ||
+ | | ||
+ | |||
+ | Add DS records at your domain registrar! | ||
+ | |||
+ | |||
+ | check your domain with http:// | ||
+ | |||
+ | |||
+ | https:// | ||
+ | \\ | ||
+ | logging {\\ | ||
+ | ...\\ | ||
+ | category dnssec { null; | ||
+ | |||
+ | |||
+ | ==== Letting bind/named query a specific DNS server for only one specific domain ==== | ||
+ | |||
+ | Add to the file **''/ | ||
+ | |||
+ | < | ||
+ | zone "mydomain.com" | ||
+ | type forward; | ||
+ | forward only; | ||
+ | forwarders { 192.168.0.2; | ||
+ | }; | ||
+ | </ | ||
+ | |||
+ | Of course you need to replace ' | ||
+ | |||
+ | |||
+ | ==== Unsorted ==== | ||
+ | |||
+ | |||
+ | host -t txt -c CHAOS version.bind localhost | ||
+ | |||
+ | named - options {version | ||
+ | |||
+ | host -t txt -c CHAOS hostname.bind localhost | ||
+ | |||
+ | gethostbyname() | ||
+ | |||
+ | |||
+ | ==== audit dns ==== | ||
+ | < | ||
+ | kernel: audit(1209076817.081: | ||
+ | </ | ||
+ | |||
+ | So I had a look in: | ||
+ | '' | ||
+ | |||
+ | and changed this line: | ||
+ | < | ||
+ | / | ||
+ | </ | ||
+ | |||
+ | to this: | ||
+ | < | ||
+ | / | ||
+ | </ | ||
+ | |||
+ | ==== Fixing syntax highlighting in VIM ==== | ||
+ | |||
+ | **~/.vimrc** | ||
+ | < | ||
+ | " BIND zone | ||
+ | au BufNewFile, | ||
+ | " BIND configuration | ||
+ | au BufNewFile, | ||
+ | </ | ||