Dotaz: Spravne nastaveni DNS

[Pheek]

Dobry den, chtel by se poradit stim jak spravne nastavit DNS na serveru, vec se ma tak ze mam server na kterem bezi posta stim ze jen nekde jinde u poskytovale domeny domenovy kos ze ktere ho postu stahuji na svuj server a ten dal postu tridi uzivatelum, vse funguje tak jak ma, jedine co se zmenilo v nastaveni je to ze na serveru bezi jeste i webrozhrani pro pristup k poste, tudiz se zmenil MX zaznam u poskytovale na mou verejnou adresu serveru (webmail.domena.cz). Takze kdyz zadam wemail.domena.cz tak mi to leze na muj server a ja muzu na postu. Server postu jeste odesila. Kdyz jsem si dal test DNS tak mi to vypsalo tohle:

Check results for domena.cz

Starting zone checks for domena.cz
Checking zone name
Checking existence of zone

    -> domena.cz.	86400	IN	SOA	domena.cz. root.domena.cz. (
					2008081600	; Serial
					10800	; Refresh
					1800	; Retry
					1209600	; Expire
					604800 )	; Minimum TTL

Checking NS records

    -> domena.cz.	86400	IN	NS	domena.cz.

### Error: Each domain should have at least 2 nameservers  [see RFC1912:2.8 for details]
Checking nameserver authority and synchronization
### Error: Nameserver server doesn't have any valid A records
### Error: Nameserver domena.cz doesn't have any valid A records
Decided to use server (81.114.200.11) for zone check
Checking whether server knows an A record for its own name
### Error: no matching A record found
Checking whether server is able to reverse-map its own IP address

    -> 11.200.114.81.in-addr.arpa.	603351	IN	PTR	ipk043.customer.customer.cz.
    -> ipk043.customer.customer.cz.	597042	IN	A	81.114.200.11

### Warning: 81.114.200.11 for server points back to ipk043.customer.customer.cz  [see RFC1912:2.1 for details]
Checking connectivity with other nameservers

    -> www.ucw.cz.	78643	IN	CNAME	jabberwock.ucw.cz.
    -> jabberwock.ucw.cz.	15920	IN	A	89.250.246.4
    -> atrey.karlin.mff.cuni.cz.	28570	IN	A	195.113.26.193
    -> www.google.com.	166613	IN	CNAME	www.l.google.com.
    -> www.l.google.com.	158	IN	A	209.85.135.147
    -> www.l.google.com.	158	IN	A	209.85.135.104
    -> www.l.google.com.	158	IN	A	209.85.135.99
    -> www.l.google.com.	158	IN	A	209.85.135.103

Checking mapping of localhost

    -> localhost.	604800	IN	A	127.0.0.1
    -> 1.0.0.127.in-addr.arpa.	604800	IN	PTR	localhost.

Fetching zone data for domena.cz
Parsing zone data
Checking consistency of zone records

    domena.cz.	86400	IN	NS	domena.cz.

### Error: Nameserver domena.cz doesn't have any valid A records

    domena.cz.	86400	IN	SOA	domena.cz. root.domena.cz. (
					2008081600	; Serial
					10800	; Refresh
					1800	; Retry
					1209600	; Expire
					604800 )	; Minimum TTL

### Error: No A record for zone origin
Hostmaster e-mail address is root@domena.cz

    -> domena.cz.	86400	IN	MX	10 mail.domena.cz.
    -> mail.domena.cz.	86400	IN	A	192.168.2.10

### Warning: Private addresses shouldn't occur in public zones  [see RFC1918 for details]
### Error: mail.domena.cz (192.168.2.10) has no reverse record  [see RFC1912:2.1 for details]

    domena.cz.	86400	IN	MX	10 mail.domena.cz.
    -> mail.domena.cz.	86400	IN	A	192.168.2.10
    imap.domena.cz.	86400	IN	CNAME	domena.cz.

### Warning: Possibly incorrect overlapping CNAME

    -> domena.cz.	86400	IN	MX	10 mail.domena.cz.
    -> domena.cz.	86400	IN	NS	domena.cz.
    -> domena.cz.	86400	IN	SOA	domena.cz. root.domena.cz. (
					2008081600	; Serial
					10800	; Refresh
					1800	; Retry
					1209600	; Expire
					604800 )	; Minimum TTL
    mail.domena.cz.	86400	IN	A	192.168.2.10
    ns.domena.cz.	86400	IN	A	192.168.2.10
    server.domena.cz.	86400	IN	CNAME	mail.domena.cz.
    -> mail.domena.cz.	86400	IN	A	192.168.2.10
    smtp.domena.cz.	86400	IN	CNAME	domena.cz.

### Warning: Possibly incorrect overlapping CNAME

    -> domena.cz.	86400	IN	MX	10 mail.domena.cz.
    -> domena.cz.	86400	IN	NS	domena.cz.
    -> domena.cz.	86400	IN	SOA	domena.cz. root.domena.cz. (
					2008081600	; Serial
					10800	; Refresh
					1800	; Retry
					1209600	; Expire
					604800 )	; Minimum TTL
    webmail.domena.cz.	86400	IN	A	192.168.2.10

    www.domena.cz.	86400	IN	A	217.11.242.144
    -> 14.24.111.200.in-addr.arpa.	78643	IN	PTR	server20.poskytovatel.cz.
    -> server20.poskytovatel.cz.	271	IN	A	217.11.242.144

### Warning: 200.111.24.14 for www.domena.cz points back to server20.poskytovatel.cz  [see RFC1912:2.1 for details]
Summary: 7 errors, 5 warnings

Tady jsou me konfiguraky:

named.conf

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind/README.Debian for information on the 
// structure of BIND configuration files in Debian for BIND versions 8.2.1 
// and later, *BEFORE* you customize this configuration file.
//

include "/etc/bind/named.conf.options";

// reduce log verbosity on issues outside our control
logging {
	category lame-servers { null; };
	category cname { null; };
};

// prime the server with knowledge of the root servers
zone "." {
        type hint;
        file "/etc/bind/db.root";
};

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
        type master;
        file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
        type master;
        file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
        type master;
        file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
        type master;
        file "/etc/bind/db.255";
};

zone "domena.cz" {
        type master;
        file "/etc/bind/named.domena.cz";

// add local zone definitions here
include "/etc/bind/named.conf.local";

named.domena.cz

;
; BIND data file for local loopback interface
;
$TTL 86400
@ IN SOA domena.cz. root.domena.cz. (
2008081600 ; Serial
10800 ; Refresh
1800 ; Retry
1209600	; Expire
604800 ) ; Negative Cache TTL

@ IN NS domena.cz.
@ IN MX 10 mail.domena.cz.
ns IN A 192.168.2.10
mail IN A 192.168.2.10  
webmail IN A 192.168.2.10  
www IN A 200.111.24.14
smtp IN CNAME domena.cz.
imap IN CNAME domena.cz.
server IN CNAME mail.domena.cz. 

Mohl by mi prosim nekdo poradit co kde je nastavene spatne?

Odpovědi

[Pavel]

Cely zonovy soubor je blbe (chybne definovan NS, CNAME smtp a imap nebude fungovat,...)
www.linux.org/docs/ldp/howto/DNS-HOWTO-5.html

[Pheek]

Mohl by jste mi prosim poradit jak ho predelat, co je tam spatne, popripade proc? Mockrat dekuji.

[Pheek]

Je zvlastni ze mi to funguje, mohl by mi prosim nekdo rict co mam spatne?

[Ripper]

Za 1. nelíbí se mu, že má jen jeden nameserver, píše, že každá doména (zóna) by neměla mít méně než dva DNS servery.

Za 2. si upravte ten zónový soubor v doméně takto:

@ IN NS domena.cz. změňte na @ IN NS ns.domena.cz.
 

Přidejte si tam tento záznam: @ IN A 192.168.2.10

Máte také reverzní zónu?

[Pheek]

Pokud zmenim @ IN NS domena.cz. na @ IN NS ns.domena.cz. tak mi test vubec neprobehne, pokud to vratim zpet tak to probehne s chybama. K tomu prvnimu bodu, mam jen jeden server a nevim jak udelat to abych mel na jednom serveru pro jednu domenu dva DNS servery.

[Pheek]

Takze uz probehl, trvalo mu to tak asi 2 min, pokud to mam podle predesle konfigurace tak je to do par sekund.

[Pheek]

Reverzni mam nastaveny takhle:

$TTL 86400
@ IN SOA 2.168.192.in-addr.arpa. root.domena.cz. (
2008081600 ; Serial
10800 ; Refresh
1800 ; Retry
1209600	; Expire
604800 ) ; Negative Cache TTL

@ IN NS ns.domena.cz.
@ IN MX 10 mail.domena.cz.

10 IN PTR ns.domena.cz.
10 IN PTR mail.domena.cz.
10 IN PTR webmail.domena.cz.
14.24.111.200 IN PTR www.domena.cz.

[Pheek]

Mohl by mi prosim nekdo poradit jak udelat dve dns na jednom serveru?

[Pheek]

Napadlo me vytvorit si virtualni sitovku takze pokud je DNS povesena na eth0 192.168.2.10, tak treba eth0:1 192168.2.9 a na tu povesit druhou dns, ale nevim jak na to abych na tehle adrese fungovala druha dns a jestli je to vubec tehle mozne!