KeyHelp Community

Code: Select all

/etc/bind/named.conf.options

Code: Select all

named-checkconf

Code: Select all

service bind9 restart
service bind9 status

Code: Select all

journalctl -eu bind9

Code: Select all

options {
	directory "/var/cache/bind";

	// If there is a firewall between you and nameservers you want
	// to talk to, you may need to fix the firewall to allow multiple
	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113

	// If your ISP provided one or more IP addresses for stable 
	// nameservers, you probably want to use them as forwarders.  
	// Uncomment the following block, and insert the addresses replacing 
	// the all-0's placeholder.

	// forwarders {
	// 	0.0.0.0;
	// };

	//========================================================================
	// If BIND logs error messages about the root key being expired,
	// you will need to update your keys.  See https://www.isc.org/bind-keys
	//========================================================================
	dnssec-validation auto;

	auth-nxdomain no;    # conform to RFC1035
	listen-on-v6 { any; };

	allow-transfer {
		127.0.0.1;
		localnets;
		server.IP.address;
		server.IPv6.address;
     104.237.137.10;
     65.19.178.10;
     75.127.96.10;
     207.192.70.10;
     109.74.194.10;
     2600:3c00::a;
     2600:3c01::a;
     2600:3c02::a;
     2600:3c03::a;
     2a01:7e00::a;
		};
     also-notify {
     104.237.137.10;
     65.19.178.10;
     75.127.96.10;
     207.192.70.10;
     109.74.194.10;
     2600:3c00::a;
     2600:3c01::a;
     2600:3c02::a;
     2600:3c03::a;
     2a01:7e00::a;
 };

};

Code: Select all

// Vorwärts
zone "host.domain.com" {
  type slave;
  file "/etc/bind/host_domain.conf";
  masters { 192.168.0.1; }; 	//Master Server IP
};
// Umgekehrt
zone "0.168.192.in-addr.arpa" {
  type slave;
  file "/etc/bind/host_domain.rev";
  masters { 192.168.0.1; }; 	//Master Server IP
};

Code: Select all

allow-transfer { none; };

Code: Select all

named-checkconf

Code: Select all

rndc reload

Code: Select all

journalctl -eu bind9

Code: Select all

options {
	directory "/var/cache/bind";

	masterfile-format text;

	version none;
	hostname none;
	server-id none;

	allow-transfer 
	{ 
	1a23:4f5:678:6::1;
	1.2.3.4;
	};

	transfers-out 100;

	notify yes;

	minimal-responses no;
	
	also-notify  		
	{
	1a23:4f5:678:6::1;
	1.2.3.4;
	};

	// forwarders {
	// 	0.0.0.0;
	// };

	dnssec-validation auto;

	listen-on-v6 { any; };
};

Code: Select all

options {
	directory "/var/cache/bind";

	version none;
	hostname none;
	server-id none;

	masterfile-format text;

	allow-transfer {"none";};

	allow-update 
	{ 
	# IPs der Master;
	1.2.3.4;
	# usw.
	};

	// forwarders {
	// 	0.0.0.0;
	// };

	dnssec-validation auto;

	listen-on-v6 { any; };
};

Code: Select all

#!/bin/bash

# ------- 1. Server - HN1-------

MASTER=1.2.3.4
MASTERCONFIG=/etc/bind/named.conf.keyhelp
SLAVECONFIG=/etc/bind/named.hn1.slave
MASTERGLUECONFIG=/etc/bind/named.conf.local
SLAVEGLUECONFIG=/etc/bind/glue.hn1.slave

# >>>> Domains übertragen

echo "Server 1 gestartet."

scp -P 57022 root@$MASTER:$MASTERCONFIG $SLAVECONFIG

sed -i 's/master;/slave;\n  masters { 1.2.3.4; 1a21:5f6:643:32::24; };/g' $SLAVECONFIG

# >>>> Glue / Root Domains übertragen

scp -P 57022 root@$MASTER:$MASTERGLUECONFIG $SLAVEGLUECONFIG

sed -i 's/master;/slave;\n  masters { 1.2.3.4; 1a21:5f6:643:32::24; };/g' $SLAVEGLUECONFIG

sed -i 's/etc\/bind\/keyhelp_domain.conf/etc\/bind\/keyhelp_domains\/hn1_glue_domain.conf/g' $SLAVEGLUECONFIG

echo "Server 1 abgeschlossen."

systemctl restart bind9

echo "Bind neustart abgeschlossen."