开发者

Bind zones good practices

I'm relatively new to Bind/DNS zones but have been reading a lot into it lately and was passed a link to check the DNS out. I ran the checks which can be seen via: http://intodns.com/empireconqueror.com

The issue is there seems to be a lot of issues still wrong with the zone, there seems to be no information regarding those errors on the Internet so I come here seeking help.

My options are as follows:

options {
    directory "/var/cache/bind";

    // If there is a firewall between you and nameservers you want
    // to talk to, you may need to fix the firewall to allow multiple
    // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

    // If your ISP provided one or more IP addresses for stable
    // nameservers, you probably want to use them as forwarders.
    // Uncomment the following block, and insert the addresses replacing
    // the all-0's placeholder.

    //forwarders {
    //      199.115.230.239;
    //};

    allow-query {
            any;
    };

    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };

    allow-recursion { localhost; };
};

And for the actual zone options:

include "/etc/bind/named.conf.options";

view "external-in" in {
    match-clients { any; };
    allow-query { none; };
    allow-query-cache { none; };
    recursion no;
    additional-from-auth yes;
    additional-from-cache yes;

    include "/etc/bind/named.conf.default-zones";开发者_如何学C
};

Here's a master zone example:

zone "empireconqueror.com" {
    type master;
    file "/ect/bind/db.empireconqueror.com";
};

Database file:

$TTL    86400
$ORIGIN empireconqueror.com.
@       IN      SOA     ns2.webserverhome.com. hostmaster.empireconqueror.com. (
                          2002022401
                          28800
                          7200
                          864000
                          86400
                         )
; Root site
    IN      A       199.115.230.240

; Nameservers
    IN      NS      ns1.webserverhome.com.
    IN      NS      ns2.webserverhome.com.

; Aliases
www     IN      CNAME   empireconqueror.com.
fb      IN      CNAME   empireconqueror.com.
mail    IN      CNAME   ghs.google.com.

; MX Records
    IN      MX      1       aspmx.l.google.com.
    IN      MX      5       alt1.aspmx.l.google.com.
    IN      MX      5       alt2.aspmx.l.google.com.
    IN      MX      10      aspmx2.googlemail.com.
    IN      MX      10      aspmx3.googlemail.com.

Many thanks for helping out, Shaun


the problem is that that ns1.webserverhome.com and n2.webserverhome.com doesn't seem to exist in a zone file, or answer. You will need to fix that problem first. if you own webserverhome.com as well, you need to go to registrar and add DNS glue records or build NS based on webserverhome.com). Without them, you cannot reference the nameservers from other zones.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜