Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
linux:bind [2010/08/03 16:03] greebo |
linux:bind [2015/08/12 14:46] (current) zagi |
||
---|---|---|---|
Line 3: | Line 3: | ||
==== DNSSEC ==== | ==== DNSSEC ==== | ||
- | add to bind.named.options: | + | dnssec-keygen -a 7 -b 2048 -n ZONE domena.org |
+ | dnssec-keygen -f KSK -a 8 -b 4096 -n ZONE domena.org | ||
- | dnssec-enable yes; | + | copy generated files in / |
- | dnssec-validation yes; | + | |
+ | if you put your keys in / | ||
- | ===== Speedup tips ===== | + | put this in zone domena.org |
- | | + | |
- | | + | |
- | > But Now, in contrary the local dns is slower than a custom DNS by my | + | |
- | > webhoster :-( | + | |
- | | + | |
- | You should use BIND 9, disable lookups over IPv6 (OPTIONS=" | + | |
- | in /etc/defaults/bind9), and you need to wait a bit until the local | + | |
- | | + | |
- | ===== Letting bind/named query a specific DNS server for only one specific domain | + | use dnssec-dsfromkey to create DS DNS records from **KSK files.** |
+ | |||
+ | |||
+ | To enable add to bind.named.options: | ||
+ | |||
+ | |||
+ | dnssec-validation auto; | ||
+ | dnssec-enable yes; | ||
+ | dnssec-lookaside auto; | ||
+ | |||
+ | Add DS records at your domain registrar! | ||
+ | |||
+ | |||
+ | check your domain with http:// | ||
+ | |||
+ | |||
+ | https:// | ||
+ | \\ | ||
+ | logging {\\ | ||
+ | ...\\ | ||
+ | category dnssec { null; | ||
+ | |||
+ | |||
+ | ==== Letting bind/named query a specific DNS server for only one specific domain ==== | ||
Add to the file **''/ | Add to the file **''/ | ||
Line 36: | Line 56: | ||
- | ===== Unsorted | + | ==== Unsorted ==== |
Line 48: | Line 68: | ||
- | === audit dns === | + | ==== audit dns ==== |
- | kernel: audit(1209076817.081: | + | < |
- | \\ | + | kernel: audit(1209076817.081: |
- | So I had a look in:\\ | + | </ |
- | / | + | |
- | \\ | + | So I had a look in: |
- | and changed this line:\\ | + | '' |
- | / | + | |
- | \\ | + | and changed this line: |
- | to this:\\ | + | < |
- | / | + | / |
+ | </ | ||
+ | |||
+ | to this: | ||
+ | < | ||
+ | / | ||
+ | </ | ||
+ | |||
+ | ==== Fixing syntax highlighting in VIM ==== | ||
+ | |||
+ | **~/ | ||
+ | < | ||
+ | " BIND zone | ||
+ | au BufNewFile, | ||
+ | " BIND configuration | ||
+ | au BufNewFile, | ||
+ | </ | ||