Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Bind 9 DNS setup
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Mon May 06, 2002 2:12 am    Post subject: Bind 9 DNS setup Reply with quote

I realize that Bind and DNS setup is a very large topic, but I was wondering if anyone here in the Gentoo forums has some experience with it?
I am trying to get my webserver setup to use my registered domain. I have registered a domain and would like to get my server set up to use this domain. I have my domain registered thru networksolutions and I have changed the nameservers to point to my primary and secondary ips that I will run dns on.

I have used the linuxdoc.org dns howto, twice now, but to no avail. Has anyone gotten Bind 9 setup on Gentoo? if so could you point me to a good "new to dns" type of guide that would show me step by step how to set this up?

Thanks,
Andrew

edited on July 21, 2002 to take out the domain names, don't want to leave that up there too long till the site gets running.


Last edited by squanto on Mon Jul 22, 2002 3:00 am; edited 1 time in total
Back to top
View user's profile Send private message
Guest






PostPosted: Mon May 06, 2002 12:55 pm    Post subject: Re: Bind 9 DNS setup Reply with quote

Give djbdns a try.
To tell the truth, I couldn't get BIND working either. :-)
Then someone recommended djbdns and I never looked back.
Back to top
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Mon May 06, 2002 2:34 pm    Post subject: Reply with quote

OK, I will see what I can get going with djbdns, cause the bind people don't seem to like djbdns, and I hadn't really heard anything about it before. BIND seems kind of hardcore, but since most *nix DNS runs Bind, I didn't think it would be that hard to setup. :oops:
-Andrew
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Mon May 06, 2002 4:35 pm    Post subject: Reply with quote

djbdns doesn't comply to the RFC spec for DNS, which is why some folks don't like it. That said, it has proven to be much more secure than BIND has.

The reason BIND is so hard to set up (or at least one of the reasons) is because of the archane, convoluted syntax of its damn config files. Put one '@' in the wrong place and you're hosed. Very not-user-friendly.

If you want to go with BIND, then pick up the DNS and Bind Book by O'Reilly. Absolutely, positively the best book out there on DNS and/or BIND. It will walk you through all the underlying concepts of DNS (which is kind of a fascinating read if you're into that stuff) as well as tell you how to set up a BIND server.

hth

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Mon May 06, 2002 5:50 pm    Post subject: Reply with quote

I was looking to purchase this book, but since I am headded home from college at the end of this week, I don't have my superfast internet connection anymore so I will look into it at the end of the summer, maybe a new version of BIND will be out. :?

Thanks for the suggestion, I did a little reading on djbdns, but since BIND is the standard, I figured it would give me some real world experience to setup BIND vs some other DNS.

Thanks,
Andrew
Back to top
View user's profile Send private message
seaweed
n00b
n00b


Joined: 22 Apr 2002
Posts: 53
Location: NJ, USA

PostPosted: Sat May 11, 2002 8:49 pm    Post subject: Got answers. Need questions. Reply with quote

I have been using BIND for a few years and have a good understanding. If you have specific questions I can assist.

If you are looking to buy the "DNS and BIND" book the latest edition is 4th.
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Sun May 12, 2002 7:28 pm    Post subject: Reply with quote

Thanks, I will probably be asking questions starting at the end of August, cause I am home from school now and don't have a ded connection to the internet anymore. thanks for the help though. I am going to buy the book in about a month or so.

-Andrew
Back to top
View user's profile Send private message
Nitro
Bodhisattva
Bodhisattva


Joined: 08 Apr 2002
Posts: 661
Location: San Francisco

PostPosted: Sun May 12, 2002 10:26 pm    Post subject: Reply with quote

Squanto:
I'd be more then happy to help you with any questions you may have regarding bind/named. I use bind on my webserver and run both the primary and secondary nameservers. If you need help setting it up, let me know.

Just becareful what you read, more times then not, when I was reading about bind, I was acutally reading about the wrong version. ;)

I to tried djbdns after being very pleased with qmail, and was rather disappointed. Only thing I would recommend djbdns for is a caching only DNS server, again that is just my opinion.

I was wondering when we were going to get some actual "server" discussion in this forum. ;)
_________________
- Kyle Manna

Please, please SEARCH before posting.

There are three kinds of people in the world: those who can count, and those who can't.
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Fri Aug 30, 2002 5:41 pm    Post subject: Reply with quote

I am going to purchase the bind book as soon as I get a new computer built. I will almost certainly have questions, so I will post them on the forum / pm you.

Thanks for the help,
Sorry it took so long for me to respond, summer vacation left me with little internet time :lol:

Andrew
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Fri Oct 11, 2002 1:32 am    Post subject: Reply with quote

Seeing as this is an old post of mine, here is another question for you dns gurus out there.

Can I run bind9 on a non standard port?
If so, what needs to be changed? I am behind university firewall, and for ports less than 1024 only port 80 is open to outside world.
I would like to run dns so I don't have to pay someone else to do it for me, and cause I could learn something. I also would like to run my mailserver on a port other than standard, but my impression is that I could do that by modifying the MX tag in bind to use another port?

Thanks!
Back to top
View user's profile Send private message
perra
n00b
n00b


Joined: 10 Jun 2002
Posts: 20
Location: Canberra, Australia

PostPosted: Fri Oct 11, 2002 5:43 am    Post subject: Reply with quote

In named.conf in the "options" there is a statement which might help.

Code:
{ listen-on [port ip_port] { address_mach_list };


Will that do it? I read it in The BIND 9 Administrator Reference Manual from ISC (p. 67).
http://www.nominum.com/resources/documentation/Bv9ARM.pdf

HTH
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Fri Oct 11, 2002 11:57 am    Post subject: Reply with quote

squanto wrote:
Can I run bind9 on a non standard port?

Yes, but it will be largely useless to you unless you configure your DNS clients to contact that port instead of the standard port 53. Any DNS clients that are out of your direct control will likely not work with your DNS server.

squanto wrote:
I would like to run dns so I don't have to pay someone else to do it for me

http://www.zoneedit.com/
http://www.granitecanyon.com/

Or, register (or renew) your domain through register.com and you get free DNS service as part of the registration fee.

squanto wrote:
I also would like to run my mailserver on a port other than standard, but my impression is that I could do that by modifying the MX tag in bind to use another port?

No -- DNS doesn't know about ports -- just IP addresses. To run a mail server on a non-standard port, you need to consult the documentation for your specific mail server. Again, you're going to run into the problem that other SMTP servers will not be able to contact your mail server because they have no way of knowing what port your mail server is running on.

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Fri Oct 11, 2002 1:16 pm    Post subject: Reply with quote

Quote:
Yes, but it will be largely useless to you unless you configure your DNS clients to contact that port instead of the standard port 53. Any DNS clients that are out of your direct control will likely not work with your DNS server.

Does this include the 13 main dns servers for the world?

So, that if I do run on a nonstandard port, and if the 13 main servers can see me and I can see them, when user puts in my domain name, will the be brought to my machine?

Quote:
http://www.zoneedit.com/
http://www.granitecanyon.com/


I checked out zoneedit, and it seems like what I will have to use, or the register.com idea, but the granitecanyon site was not responding. I would rather run my own dns, if possible because I would like to learn how it works.

perra wrote:
In named.conf in the "options" there is a statement which might help.

Code:
{ listen-on [port ip_port] { address_mach_list };


Will that do it? I read it in The BIND 9 Administrator Reference Manual from ISC (p. 67).
http://www.nominum.com/resources/documentation/Bv9ARM.pdf

HTH


I think that is what I need, thanks, I downloaded the pdf.

Thanks for the help!
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Fri Oct 11, 2002 1:46 pm    Post subject: Reply with quote

squanto wrote:
Does this include the 13 main dns servers for the world?

Yes, it includes the root nameservers.

squanto wrote:
So, that if I do run on a nonstandard port, and if the 13 main servers can see me and I can see them, when user puts in my domain name, will the be brought to my machine?

No, not as long as you're running DNS on a non-standard port.

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Fri Oct 11, 2002 3:50 pm    Post subject: Reply with quote

klieber wrote:
squanto wrote:
Does this include the 13 main dns servers for the world?

Yes, it includes the root nameservers.

squanto wrote:
So, that if I do run on a nonstandard port, and if the 13 main servers can see me and I can see them, when user puts in my domain name, will the be brought to my machine?

No, not as long as you're running DNS on a non-standard port.


OK, thanks for the info, better for me to learn about this before I get frustrated with my setup. I will talk with the network guys here at school and see what there is that I can do, if I can get them to open some ports for me or something.

But just curious, cause when I signed up for my domain, I had to give 2 ips for nameserver addresses, I couldn't just append the port number to that address for my ns1 and ns2 and have it work?

Thanks
-Andrew
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Fri Oct 11, 2002 4:01 pm    Post subject: Reply with quote

squanto wrote:
But just curious, cause when I signed up for my domain, I had to give 2 ips for nameserver addresses, I couldn't just append the port number to that address for my ns1 and ns2 and have it work?

No. I know that's not the answer you want to hear, but as long as you have a firewall blocking port 53, what you're trying to do wont work.

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
Hellfire
n00b
n00b


Joined: 09 May 2002
Posts: 54
Location: Madison, WI

PostPosted: Fri Oct 11, 2002 4:13 pm    Post subject: Reply with quote

Quote:
But just curious, cause when I signed up for my domain, I had to give 2 ips for nameserver addresses, I couldn't just append the port number to that address for my ns1 and ns2 and have it work?


While I don't believe that's an RFC issue it is a "best practice" one. DNS drives the internet, without it we're all pretty much boned. Having *at least* 2 available resolvers for every domain is a must. If it's within your means having a 3rd one in an alternate site is even better.

That said, you CAN run your domain with 1 server. ISP-level DNS admins might be pissy about your setup, but I don't think your situation is likely to draw too many complaints.
-h
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Fri Oct 11, 2002 4:18 pm    Post subject: Reply with quote

Hellfire wrote:
That said, you CAN run your domain with 1 server. ISP-level DNS admins might be pissy about your setup, but I don't think your situation is likely to draw too many complaints.

Correct -- you can use 1 server, but it still has to respond on port 53 in order to be useful as a public nameserver.

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
squanto
Guru
Guru


Joined: 20 Apr 2002
Posts: 524
Location: Rochester, NY, USA

PostPosted: Sun Oct 13, 2002 11:28 pm    Post subject: Reply with quote

OK, thanks Klieber. I will try to find out from someone here at my school about opening up the port, since it isn't like there is really that much bandwidth taken up by a dns server, compared to something like a counterstrike or Quake server.

Thanks for the help!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum