Cette partie va nous servir à résoudre les noms de domaine, mais aussi à résoudre chaque nom de machine si le serveur dhcp a pu l'obtenir.
+-----------+
| |
INTERNET ---------- (DHCP) eth0 -| SERVEUR |- eth1 (10.9.0.0/22) --- Réseau local pour les installs
| |
+-----------+
Installez bind9
aptitude install bind9
Ajoutez les lignes suviantes à votre configuration /etc/bind/named.conf
include "/etc/bind/rndc.key";
Zone locales
/etc/bind/named.conf.local
zone "lq" {
type master;
file "/var/lib/bind/lq.hosts";
allow-update { key "rndc-key"; };
};
zone "9.10.in-addr.arpa" {
type master;
file "/var/lib/bind/10.9.rev";
allow-update { key "rndc-key"; };
};
Créez la zone reverse /var/lib/bind/10.9.rev comme suit
$ttl 38400
9.10.in-addr.arpa. IN SOA billig.lq. root.localhost. (
1341155341
10800
3600
604800
38400 )
9.10.in-addr.arpa. IN NS billig.lq.
Créez la zone .lq. /var/lib/bind/lq.hosts
$ttl 38400
lq. IN SOA billig.lq. root.localhost. (
1341155297
10800
3600
604800
38400 )
lq. IN NS billig.lq.
Configurez le fichier /etc/bind/named.conf.options
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// forwarders {
// 0.0.0.0;
// };
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { none; };
managed-keys-directory "/etc/bind";
recursion yes;
allow-recursion {
127.0.0.1;
10.9.0.0/22;
};
allow-query {
127.0.0.1;
10.9.0.0/22;
};
};
Ajoutez (Si vous le souhaitez), les option de log à la toute fin du fichier named.conf.options. (Pensez à créer le répertoire /var/log/named/ avec les droits d'écriture pour le groupe bind)
logging {
channel default_file {
file "/var/log/named/default.log";
severity dynamic;
print-time yes;
};
channel general_file {
file "/var/log/named/general.log";
severity dynamic;
print-time yes;
};
channel database_file {
file "/var/log/named/database.log";
severity dynamic;
print-time yes;
};
channel security_file {
file "/var/log/named/security.log";
severity dynamic;
print-time yes;
};
channel config_file {
file "/var/log/named/config.log";
severity dynamic;
print-time yes;
};
channel resolver_file {
file "/var/log/named/resolver.log";
severity dynamic;
print-time yes;
};
channel xfer-in_file {
file "/var/log/named/xfer-in.log";
severity dynamic;
print-time yes;
};
channel xfer-out_file {
file "/var/log/named/xfer-out.log";
severity dynamic;
print-time yes;
};
channel notify_file {
file "/var/log/named/notify.log";
severity dynamic;
print-time yes;
};
channel client_file {
file "/var/log/named/client.log";
severity dynamic;
print-time yes;
};
channel unmatched_file {
file "/var/log/named/unmatched.log";
severity dynamic;
print-time yes;
};
channel queries_file {
file "/var/log/named/queries.log";
severity dynamic;
print-time yes;
};
channel network_file {
file "/var/log/named/network.log";
severity dynamic;
print-time yes;
};
channel update_file {
file "/var/log/named/update.log";
severity dynamic;
print-time yes;
};
channel dispatch_file {
file "/var/log/named/dispatch.log";
severity dynamic;
print-time yes;
};
channel dnssec_file {
file "/var/log/named/dnssec.log";
severity dynamic;
print-time yes;
};
channel lame-servers_file {
file "/var/log/named/lame-servers.log";
severity dynamic;
print-time yes;
};
category lame-servers {
lame-servers_file;
};
category dnssec {
dnssec_file;
};
category dispatch {
dispatch_file;
};
category update {
update_file;
};
category network {
network_file;
};
category queries {
queries_file;
};
category unmatched {
unmatched_file;
};
category client {
client_file;
};
category notify {
notify_file;
};
category xfer-out {
xfer-out_file;
};
category xfer-in {
xfer-in_file;
};
category resolver {
resolver_file;
};
category config {
config_file;
};
category security {
security_file;
};
category database {
database_file;
};
category general {
general_file;
};
category default {
default_file;
};
};
Redémarrez votre serveur bind