DNS Server Installation in CentOS 6.5/6.4/6.3

Scenario
Primary(Master) DNS Server Details:
Operating System : CentOS 6.5 server
Hostname : masterdns.sysvn.local
IP Address : 192.168.1.100/24
Secondary(Slave) DNS Server Details:
Operating System : CentOS 6.5 server
Hostname : secondarydns.sysvn.local
IP Address : 192.168.1.101/24
Client Details:
Operating System : CentOS 6.5 Desktop
Hostname : Client.sysvn.local
IP Address : 192.168.1.102/24
Setup Primary(Master) DNS Server
[root@masterdns ~]# yum install bind* -y
1. Configure DNS Server
Add the lines as shown below in ‘/etc/named.conf’ file
[root@masterdns ~]# vi /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
options {
listen-on port 53 { 127.0.0.1; 192.168.1.100; }; ### Master DNS IP ###
listen-on-v6 port 53 { ::1; };
directory “/var/named”;
dump-file “/var/named/data/cache_dump.db”;
statistics-file “/var/named/data/named_stats.txt”;
memstatistics-file “/var/named/data/named_mem_stats.txt”;
allow-query { localhost; 192.168.1.0/24; }; ### IP Range ###
allow-transfer{ localhost; 192.168.1.101; }; ### Slave DNS IP ###
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file “/etc/named.iscdlv.key”;
managed-keys-directory “/var/named/dynamic”;
};
logging {
channel default_debug {
file “data/named.run”;
severity dynamic;
};
};
zone “.” IN {
type hint;
file “named.ca”;
};
zone”sysvn.local” IN {
type master;
file “forward.sysvn”;
allow-update { none; };
};
zone”1.168.192.in-addr.arpa” IN {
type master;
file “reverse.sysvn”;
allow-update { none; };
};
include “/etc/named.rfc1912.zones”;
include “/etc/named.root.key”;
2. Create Zone files
Create forward and reverse zone files which we mentioned in the ‘/etc/named.conf’ file.
2.1 Create Forward Zone
Create forward.sysvn file in the ‘/var/named’ directory.
[root@masterdns ~]# vi /var/named/forward.sysvn
$TTL 86400
@ IN SOA masterdns.sysvn.local. root.sysvn.local. (
2011071001 ;Serial
3600 ;Refresh
1800 ;Retry
604800 ;Expire
86400 ;Minimum TTL
)
@ IN NS masterdns.sysvn.local.
@ IN NS secondarydns.sysvn.local.
@ IN A 192.168.1.100
@ IN A 192.168.1.101
@ IN A 192.168.1.102
masterdns IN A 192.168.1.100
secondarydns IN A 192.168.1.101
client IN A 192.168.1.102
2.2 Create Reverse Zone
Create reverse.sysvn file in the ‘/var/named’ directory.
[root@masterdns ~]# vi /var/named/reverse.sysvn
$TTL 86400
@ IN SOA masterdns.sysvn.local. root.sysvn.local. (
2011071001 ;Serial
3600 ;Refresh
1800 ;Retry
604800 ;Expire
86400 ;Minimum TTL
)
@ IN NS masterdns.sysvn.local.
@ IN NS secondarydns.sysvn.local.
@ IN PTR sysvn.local.
masterdns IN A 192.168.1.100
secondarydns IN A 192.168.1.101
client IN A 192.168.1.102
100 IN PTR masterdns.sysvn.local.
101 IN PTR secondarydns.sysvn.local.
102 IN PTR client.sysvn.local.
3. Start the DNS service
[root@masterdns ~]# service named start
Starting named: [ OK ]
[root@masterdns ~]# chkconfig named on
4. Adjust iptables to allow DNS server from outside of the network
Add the lines as shown below in ‘/etc/sysconfig/iptables’ file.
[root@masterdns ~]# vi /etc/sysconfig/iptables
# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p udp -m state –state NEW –dport 53 -j ACCEPT
-A INPUT -p tcp -m state –state NEW –dport 53 -j ACCEPT
-A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state –state NEW -m tcp -p tcp –dport 22 -j ACCEPT
-A INPUT -j REJECT –reject-with icmp-host-prohibited
-A FORWARD -j REJECT –reject-with icmp-host-prohibited
COMMIT
5. Restart iptables
[root@masterdns ~]# service iptables restart
iptables: Flushing firewall rules: [ OK ]
iptables: Setting chains to policy ACCEPT: filter [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
6. Test DNS configuration and zone files for any syntax errors
[root@masterdns ~]# named-checkconf /etc/named.conf
[root@masterdns ~]# named-checkzone sysvn.local /var/named/forward.sysvn
zone sysvn.local/IN: loaded serial 2011071001
OK
[root@masterdns ~]# named-checkzone sysvn.local /var/named/reverse.sysvn
zone sysvn.local/IN: loaded serial 2011071001
OK
7. Test DNS Server
[root@masterdns ~]# dig masterdns.sysvn.local
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6 <<>> masterdns.sysvn.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49834
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; QUESTION SECTION:
;masterdns.sysvn.local.INA
;; ANSWER SECTION:
masterdns.sysvn.local. 86400INA192.168.1.100
;; AUTHORITY SECTION:
sysvn.local.86400INNSsecondarydns.sysvn.local.
sysvn.local.86400INNSmasterdns.sysvn.local.
;; ADDITIONAL SECTION:
secondarydns.sysvn.local. 86400 INA192.168.1.101
;; Query time: 6 msec
;; SERVER: 192.168.1.100#53(192.168.1.100)
;; WHEN: Thu Mar 7 13:07:56 2013
;; MSG SIZE rcvd: 114
[root@masterdns ~]# nslookup sysvn.local
Server:192.168.1.100
Address:192.168.1.100#53
Name:sysvn.local
Address: 192.168.1.102
Name:sysvn.local
Address: 192.168.1.100
Name:sysvn.local
Address: 192.168.1.101
Now the Primary DNS server is ready to use.
Setup Secondary(Slave) DNS Server
[root@secondarydns ~]# yum install bind* -y
1. Configure Slave DNS Server
Open the main configuration file ‘/etc/named.conf’ and add the lines as shown below.
[root@secondarydns ~]# vi /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
options {
listen-on port 53 { 127.0.0.1; 192.168.1.101; };
listen-on-v6 port 53 { ::1; };
directory “/var/named”;
dump-file “/var/named/data/cache_dump.db”;
statistics-file “/var/named/data/named_stats.txt”;
memstatistics-file “/var/named/data/named_mem_stats.txt”;
allow-query { localhost; 192.168.1.0/24; };
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file “/etc/named.iscdlv.key”;
managed-keys-directory “/var/named/dynamic”;
};
logging {
channel default_debug {
file “data/named.run”;
severity dynamic;
};
};
zone “.” IN {
type hint;
file “named.ca”;
};
zone”sysvn.local” IN {
type slave;
file “slaves/sysvn.fwd”;
masters { 192.168.1.100; };
};
zone”1.168.192.in-addr.arpa” IN {
type slave;
file “slaves/sysvn.rev”;
masters { 192.168.1.100; };
};
include “/etc/named.rfc1912.zones”;
include “/etc/named.root.key”;
2. Start the DNS Service
[root@secondarydns ~]# service named start
Generating /etc/rndc.key: [ OK ]
Starting named: [ OK ]
[root@secondarydns ~]# chkconfig named on
Now the forward and reverse zones are automatically replicated from Master DNS server to ‘/var/named/slaves/’ in Secondary DNS server.
[root@secondarydns ~]# ls /var/named/slaves/
sysvn.fwd sysvn.rev
[root@secondarydns ~]# cat /var/named/slaves/sysvn.fwd
$ORIGIN .
$TTL 86400; 1 day
sysvn.localIN SOAmasterdns.sysvn.local. root.sysvn.local. (
2011071001 ; serial
3600 ; refresh (1 hour)
1800 ; retry (30 minutes)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
NS masterdns.sysvn.local.
NS secondarydns.sysvn.local.
A192.168.1.100
A192.168.1.101
A192.168.1.102
$ORIGIN sysvn.local.
clientA192.168.1.102
masterdnsA192.168.1.100
secondarydnsA192.168.1.101
[root@secondarydns ~]# cat /var/named/slaves/sysvn.rev
$ORIGIN .
$TTL 86400; 1 day
1.168.192.in-addr.arpaIN SOAmasterdns.sysvn.local. root.sysvn.local. (
2011071001 ; serial
3600 ; refresh (1 hour)
1800 ; retry (30 minutes)
604800 ; expire (1 week)
86400 ; minimum (1 day)
)
NS masterdns.sysvn.local.
NS secondarydns.sysvn.local.
PTRsysvn.local.
$ORIGIN 1.168.192.in-addr.arpa.
100PTRmasterdns.sysvn.local.
101PTRsecondarydns.sysvn.local.
102PTRclient.sysvn.local.
clientA192.168.1.102
masterdnsA192.168.1.100
secondarydnsA192.168.1.101
3. Add the DNS Server details to all systems
[root@secondarydns ~]# vi /etc/resolv.conf
# Generated by NetworkManager
search ostechnix.com
nameserver 192.168.1.100
nameserver 192.168.1.101
nameserver 8.8.8.8
4. Test DNS Server
[root@secondarydns ~]# dig masterdns.sysvn.local
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6 <<>> masterdns.sysvn.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21487
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; QUESTION SECTION:
;masterdns.sysvn.local.INA
;; ANSWER SECTION:
masterdns.sysvn.local. 86400INA192.168.1.100
;; AUTHORITY SECTION:
sysvn.local.86400INNSmasterdns.sysvn.local.
sysvn.local.86400INNSsecondarydns.sysvn.local.
;; ADDITIONAL SECTION:
secondarydns.sysvn.local. 86400 INA192.168.1.101
;; Query time: 15 msec
;; SERVER: 192.168.1.100#53(192.168.1.100)
;; WHEN: Thu Mar 7 13:27:57 2013
;; MSG SIZE rcvd: 114
[root@secondarydns ~]# dig secondarydns.sysvn.local
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6 <<>> secondarydns.sysvn.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20958
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; QUESTION SECTION:
;secondarydns.sysvn.local.INA
;; ANSWER SECTION:
secondarydns.sysvn.local. 86400 INA192.168.1.101
;; AUTHORITY SECTION:
sysvn.local.86400INNSmasterdns.sysvn.local.
sysvn.local.86400INNSsecondarydns.sysvn.local.
;; ADDITIONAL SECTION:
masterdns.sysvn.local. 86400INA192.168.1.100
;; Query time: 4 msec
;; SERVER: 192.168.1.100#53(192.168.1.100)
;; WHEN: Thu Mar 7 13:31:53 2013
;; MSG SIZE rcvd: 114
[root@secondarydns ~]# nslookup sysvn.local
Server:192.168.1.100
Address:192.168.1.100#53
Name:sysvn.local
Address: 192.168.1.101
Name:sysvn.local
Address: 192.168.1.102
Name:sysvn.local
Address: 192.168.1.100
Client Side Configuration
Add the DNS server details in ‘/etc/resolv.conf’ file in all client systems
[root@client sysvn]# vi /etc/resolv.conf
# Generated by NetworkManager
search sysvn.local
nameserver 192.168.1.100
nameserver 192.168.1.101
nameserver 8.8.8.8
Test DNS Server
[root@client sysvn]# dig masterdns.sysvn.local
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 <<>> masterdns.sysvn.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19496
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; QUESTION SECTION:
;masterdns.sysvn.local.INA
;; ANSWER SECTION:
masterdns.sysvn.local. 86400INA192.168.1.100
;; AUTHORITY SECTION:
sysvn.local.86400INNSmasterdns.sysvn.local.
sysvn.local.86400INNSsecondarydns.sysvn.local.
;; ADDITIONAL SECTION:
secondarydns.sysvn.local. 86400 INA192.168.1.101
;; Query time: 30 msec
;; SERVER: 192.168.1.100#53(192.168.1.100)
;; WHEN: Thu Mar 7 13:47:55 2013
;; MSG SIZE rcvd: 114
[root@client sysvn]# dig secondarydns.sysvn.local
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 <<>> secondarydns.sysvn.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14852
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 1
;; QUESTION SECTION:
;secondarydns.sysvn.local.INA
;; ANSWER SECTION:
secondarydns.sysvn.local. 86400 INA192.168.1.101
;; AUTHORITY SECTION:
sysvn.local.86400INNSsecondarydns.sysvn.local.
sysvn.local.86400INNSmasterdns.sysvn.local.
;; ADDITIONAL SECTION:
masterdns.sysvn.local. 86400INA192.168.1.100
;; Query time: 8 msec
;; SERVER: 192.168.1.100#53(192.168.1.100)
;; WHEN: Thu Mar 7 13:48:38 2013
;; MSG SIZE rcvd: 114
[root@client sysvn]# dig client.sysvn.local
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 <<>> client.sysvn.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14604
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;client.sysvn.local.INA
;; ANSWER SECTION:
client.sysvn.local.86400INA192.168.1.102
;; AUTHORITY SECTION:
sysvn.local.86400INNSmasterdns.sysvn.local.
sysvn.local.86400INNSsecondarydns.sysvn.local.
;; ADDITIONAL SECTION:
masterdns.sysvn.local. 86400INA192.168.1.100
secondarydns.sysvn.local. 86400 INA192.168.1.101
;; Query time: 5 msec
;; SERVER: 192.168.1.100#53(192.168.1.100)
;; WHEN: Thu Mar 7 13:49:11 2013
;; MSG SIZE rcvd: 137
[root@client sysvn]# nslookup sysvn.local
Server:192.168.1.100
Address:192.168.1.100#53
Name:sysvn.local
Address: 192.168.1.102
Name:sysvn.local
Address: 192.168.1.100
Name:sysvn.local
Address: 192.168.1.101
Now the primary and secondary DNS servers are ready.

Bài liên quan

How to Install Apache, MariaDB and PHP (FBAMP) Stack on FreeBSD

How to Install LAMP Stack on Ubuntu 20.04 Server/Desktop

Commands to check AIX system configuration and users information

Fusionpbx v4 Freeswitch v1.6 CentOS v7 Install Guide

Linux Security: Control access to the su command

Commands to monitor AIX server CPU memory utilization and performance

Unix Commands

Linux Namespace – Routing Instance

Những lệnh cơ bản của YUM

Setting Up DNS Server On CentOS 7

How to install Litespeed Web Server on an Ubuntu 18.04 VPS or Dedicated Server

Logical Volume Manager (LVM) basic commands

Giới thiệu về Debian Linux

How to Install, Run and Delete Applications inside Docker Containers – Part 2

Install OpenLiteSpeed, MariaDB, PHP8.0 on Ubuntu 20.04/18.04 Server

How to Install and Configure Squid Proxy on CentOS 7

MTR – A Network Diagnostic Tool for Linux

Giới thiệu nén và giải nén trên Linux

Giới thiệu Ubuntu Linux

Network Configuration commands in AIX

Setup DNS Server In Ubuntu

How to Setup and Configure Network Bonding or Teaming in RHEL/CentOS 7

Giới thiệu về CentOS

Difference between forward proxy and reverse proxy

OpenSIPS v2 with GUI on Debian v8 MariaDB Apache install guide

prev next