BIND
Update Needed
This page needs to be updated
This is somewhat out of date and will be even more so when we move to the 10.5.0.0/16 subnet.
BIND | |
---|---|
![]() | |
Installed on | sown-auth2, sown-gw |
Was installed on | sown-auth, sown-vpn |
Website | http://www.isc.org/index.pl?/sw/bind/index.php |
BIND is used as the domain naming service by SOWN. It is installed on sown-auth2 and sown-gw the sown-home nodes for use in the network.
The internal master DNS configuration is held on sown-auth2. sown-gw slaves against it.
The external DNS is configuration is held by Total Web Solutions Ltd
There are two zones, 'sown.org.uk' and 'users.sown.org.uk'. The zone file for 'users.sown.org.uk' is generated from the database when a new user logs in.
The `named.conf.local' file on the slave servers look as so:
zone "sown.org.uk" { type slave; masters { 10.13.0.239; }; file "/var/cache/bind/db.sown.org"; }; zone "users.sown.org.uk" { type slave; masters { 10.13.0.239; }; file "/var/cache/bind/db.users.sown.org.uk"; }; zone "13.10.in-addr.arpa" { type slave; masters { 10.13.0.239; }; file "/var/cache/bind/db.10.13"; }; zone "0.13.10.in-addr.arpa" { type slave; masters { 10.13.0.239; }; file "/var/cache/bind/db.10.13.0"; }; zone "7.f.0.d.0.0.0.3.6.0.1.0.0.2.ip6.arpa" { type slave; masters { 10.13.0.239; }; file "/var/cache/bind/db.ip6ptr"; };
The 10.13.0 reverse-zone holds all the servers, whereas 10.13 holds all the users.
The `sown.org.uk` zone file imports a 'nodes-fragment', which contains 'A' records for all the sown@home nodes.
The dns server runs in a chroot jail.
Bind Cache Query Problem
This was a problem which occurred on Auth when we upgraded the machine on 22nd August 2009
The following was added to named.conf.options
acl "trusted" { 10.13.0.0/16; 152.78.0.0/16; localhost; localnets; }; options { allow-query { any; }; allow-recursion { trusted; }; allow-query-cache { trusted; }; };