Administrace komentářů

mm-net:/etc/bind# cat named.mm-net.cz
;
; BIND data file for local loopback interface
;
$TTL 86400
@ IN SOA ns1.mm-net.cz. root.mm-net.cz. (
2008081600 ; Serial
10800 ; Refresh
1800 ; Retry
1209600 ; Expire
604800 ) ; Negative Cache TTL

@ IN NS ns1.mm-net.cz.
@ IN NS ns2.mm-net.cz.
@ IN MX 10 mail.mm-net.cz.
ns1 IN A 82.100.10.215
ns2 IN A 82.100.10.216
mail IN A 192.168.10.1
mm-net.cz. IN A 82.100.10.215
www IN CNAME mm-net.cz.
smtp IN CNAME mm-net.cz.

mm-net:/etc/bind# cat named.conf
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind/README.Debian for information on the
// structure of BIND configuration files in Debian for BIND versions 8.2.1
// and later, *BEFORE* you customize this configuration file.
//

include "/etc/bind/named.conf.options";

// reduce log verbosity on issues outside our control
logging {
        category lame-servers { null; };
        category cname { null; };
};

// prime the server with knowledge of the root servers
zone "." {
        type hint;
        file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
        type master;
        file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
        type master;
        file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
        type master;
        file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
        type master;
        file "/etc/bind/db.255";
};

zone "mm-net.cz" {
        type master;
        file "/etc/bind/named.mm-net.cz";
};

// add local zone definitions here
include "/etc/bind/named.conf.local";

mm-net:/etc/bind# cat named.conf.options
options {
        directory "/var/cache/bind";

        // from bind 9:
        //      [fetch-glue] is obsolete. In BIND 8, fetch-glue yes caused the
        //      server to attempt to fetch glue resource records it didn't have
        //      when constructing the additional data section of a response.
        //      This is now considered a bad idea and BIND 9 never does it.
        auth-nxdomain no;
        fetch-glue no;

        // If there is a firewall between you and nameservers you want
        // to talk to, you might need to uncomment the query-source
        // directive below.  Previous versions of BIND always asked
        // questions using port 53, but BIND 8.1 and later use an unprivileged
        // port by default.

        query-source port 53;

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.

        forwarders {
                212.80.66.7;
        };
};

echo 1 > /proc/sys/net/ipv4/ip_forward
ifconfig eth1 192.168.10.1 netmask 255.255.255.0 up
ifconfig eth1:1 82.100.10.193 netmask 255.255.255.192 up
ifconfig eth1:2 82.100.10.215 netmask 255.255.255.192 up // prim dns
ifconfig eth1:3 82.100.10.216 netmask 255.255.255.192 up // sec dns