Administrace komentářů

eth0 --> firewall --> inet (192.168.0.0/255.255.255.0)

eth1 --> subnet1 (192.168.1.0/255.255.255.0)

eth2 --> subnet2 (192.168.2.0/255.255.255.0)

Jako DNS server jsem pouzil BIND a zplodil nasledujici:

named.conf

options {
	directory "/var/bind";
	auth-nxdomain no;
	forward first;
	forwarders {
	dns1.isp.cz;
        dns2.isp.cz;
};

        listen-on { 
	127.0.0.1;
	192.168.1/24;
	192.168.2/24;
	192.168.0/24;
};

	allow-query {
	127.0.0.1;
	192.168.1/24;
	192.168.2/24;
	192.168.0/24;
};
	allow-transfer {
	none;
};

	query-source address * port 53;
	pid-file "/var/run/named/named.pid";
};

zone "." IN {
	type hint;
	file "named.ca";
};

zone "localhost" IN {
	type master;
	file "pri/localhost.zone";
	allow-update { none; };
	notify no;
};

zone "127.in-addr.arpa" IN {
	type master;
	file "pri/127.zone";
	allow-update { none; };
	notify no;
};

zone "mydomain.local" {
	type master;
	file "pri/mydomain.zone";
	allow-update { localhost; key rndckey; };
};

zone "168.192.in-addr.arpa" {
	type master;
	file "pri/192.zone";
	allow-update { localhost; key rndckey; };
};

include "/etc/bind/rndc.key";

$TTL 86400	; 1 day
@ IN SOA 	168.192.in-addr.arpa. server.mydomain.local. (
		2004032105 ; serial (YYYYMMDDnn)
		3600 	; refresh
		1800	; retry
		1209600	; expiry
		10800 	; minimum
		)
	IN NS	server.mydomain.local.
 
100.0	IN PTR	server.mydomain.local.
100.1	IN PTR	server.mydomain.local.
100.2	IN PTR	server.mydomain.local.
254.0	IN PTR	firewall.mydomain.local.
1.1	IN PTR	net01.mydomain.local.
2.1	IN PTR	net02.mydomain.local.
3.1	IN PTR	net03.mydomain.local.
4.1	IN PTR	net04.mydomain.local.
5.1	IN PTR	net05.mydomain.local.
6.1	IN PTR	net06.mydomain.local.
7.1	IN PTR	net07.mydomain.local.
8.1	IN PTR	net08.mydomain.local.
1.2	IN PTR	office01.mydomain.local.
2.2	IN PTR	office02.mydomain.local.

$TTL 86400	; 1 day
@	IN SOA	server.mydomain.local. root.server.mydomain.local. (
		2004032104 ; ID (YYYYMMDDnn)
		3600      ; refresh
		1800       ; retry
		1209600     ; expire
		10800      ; minimum
		)
	IN NS	server.mydomain.local.
	IN MX	10 mail.mydomain.local.
server	IN A		192.168.0.100
	IN A		192.168.1.100
        IN A		192.168.2.100
firewall	IN A	192.168.0.254
net01	IN A		192.168.1.1
net02	IN A		192.168.1.2
net03	IN A		192.168.1.3
net04	IN A		192.168.1.4
net05	IN A		192.168.1.5
net06	IN A		192.168.1.6
net07	IN A		192.168.1.7
net08	IN A		192.168.1.8
office01	IN A	192.168.2.1
office02	IN A	192.168.2.2
gateway	IN CNAME	server
gw	IN CNAME	server
ns	IN CNAME	server
dhcp	IN CNAME	server
mail	IN CNAME	server
pop3	IN CNAME	server
smtp	IN CNAME	server
imap	IN CNAME	server
www	IN CNAME	server
mysql	IN CNAME	server
ldap	IN CNAME	server

Pri testovani vsechno funguje, nicmene pro jistotu: vidite nekdo nejaky problem, nebo byste to udelali jinak? Diky za nazory.