book

DNS & BIND Cookbook

Name: DNS & BIND Cookbook
Author: Cricket Liu
ISBN: 9780596004101

by Cricket Liu

October 2002

Intermediate to advanced

240 pages

6h 58m

English

O'Reilly Media, Inc.

Read now

Unlock full access

A Note Regarding Supplemental Files
Preface
Platform and VersionOrganizationAudienceOther Books and ResourcesConventions Used in This BookComments and QuestionsAcknowledgments
1. Getting Started
IntroductionFinding More Information About DNS and BINDAsking Questions You Can’t Find Answers ToGetting a List of Top-Level DomainsChecking Whether a Domain Name Is RegisteredRegistering a Domain NameRegistering Name ServersRegistering a Reverse-Mapping DomainTransferring Your Domain Name to Another RegistrarChoosing a Version of BINDFinding Out Which Version of BIND You’re RunningGetting BINDBuilding and Installing BINDGetting a Precompiled Version of BINDCreating a named.conf FileConfiguring a Name Server as the Primary Master for a ZoneConfiguring a Name Server as a Slave for a ZoneConfiguring a Name Server as Authoritative for Multiple ZonesStarting a Name ServerStopping a Name ServerStarting named at Boot Time
2. Zone Data
IntroductionCreating a Zone Data FileAdding a HostAdding an AliasAdding a Mail DestinationMaking the Domain Name of Your Zone Point to Your Web ServerPointing a Domain Name to a Particular URLSetting Up Round Robin Load DistributionAdding a Domain Name in a Subdomain Without Creating a New ZonePreventing Remote Name Servers from Caching a Resource RecordAdding a Multihomed HostUpdating a Name Server’s Root Hints FileUsing a Single Data File for Multiple ZonesUsing Multiple Data Files for a Single ZoneResetting Your Zone’s Serial NumberMaking Manual Changes to a Dynamically Updated ZoneMoving a HostMapping Any Domain Name in a Zone to a Single IP AddressAdding Similar RecordsMaking Your Services Easy to FindStoring the Location of a Host in DNSFiltering a Host Table into Zone Data Files
3. BIND Name Server Configuration
IntroductionConfiguring a Name Server to Work with ndcConfiguring a Name Server to Work with rndcUsing rndc with a Remote Name ServerAllowing “Illegal” Characters in Domain NamesDividing a Large named.conf File into Multiple FilesOrganizing Zone Data Files in Different DirectoriesConfiguring a Name Server as Slave for All of Your ZonesFinding an Offsite Slave Name Server for Your ZoneProtecting a Slave Name Server from AbuseAllowing Dynamic UpdatesConfiguring a Name Server to Forward Dynamic UpdatesNotifying a Slave Name Server Not in a Zone’s NS RecordsLimiting NOTIFY MessagesConfiguring a Name Server to Forward Queries to Another Name ServerConfiguring a Name Server to Forward Some Queries to Other Name ServersConfiguring a Name Server Not to Forward Certain QueriesReturning Different Answers to Different QueriersDetermining the Order in Which a Name Server Returns AnswersSetting Up a Slave Name Server for a Zone in Multiple ViewsDisabling CachingLimiting the Memory a Name Server UsesConfiguring IXFRLimiting the Size of the IXFR Log FileConfiguring a Name Server to Listen Only on Certain Network InterfacesRunning a Name Server on an Alternate PortSetting Up a Root Name ServerReturning a Default RecordConfiguring DNS to Let Clients Find the Closest ServerHandling Dialup Connections
4. Electronic Mail
IntroductionConfiguring a Backup Mail Server in DNSConfiguring Multiple Mail Servers in DNSConfiguring Mail to Go to One Server and the Web to AnotherConfiguring DNS for “Virtual” Email AddressesConfiguring DNS So a Mail Server and the Email It Sends Pass Anti-Spam Tests
5. BIND Name Server Operations
IntroductionFiguring Out How Much Memory a Name Server Will NeedTesting a Name Server’s ConfigurationViewing a Name Server’s CacheFlushing (Clearing) a Name Server’s CacheModifying Zone Data Without Restarting the Name ServerAdding or Removing Zones Without Restarting or Reloading the Name ServerInitiating a Zone TransferRestarting a Name Server Automatically If It DiesRestarting a Name Server with the Same ArgumentsControlling Multiple named Processes with rndcControlling Multiple named Processes with ndcFinding Out Who’s Querying a Name ServerMeasuring a Name Server’s PerformanceMeasuring Queries for Records in Particular ZonesMonitoring a Name ServerLimiting Concurrent Zone TransfersLimiting Concurrent TCP ClientsLimiting Concurrent Recursive ClientsDynamically Updating a ZoneSending Dynamic Updates to a Particular Name ServerSetting Prerequisites in a Dynamic UpdateSending TSIG-Signed Dynamic UpdatesSetting Up a Backup Primary Master Name ServerPromoting a Slave Name Server to the Primary MasterRunning Multiple Primary Master Name Servers for the Same ZoneCreating a Zone ProgrammaticallyMigrating from One Domain Name to Another
6. Delegation and Registration
IntroductionDelegating a SubdomainDelegating a Subdomain of a Reverse-Mapping ZoneDelegating Reverse-Mapping for Networks with Non-Octet MasksDelegating Reverse-Mapping for Networks Smaller than a /24Checking DelegationMoving a Name ServerChanging Your Zone’s Name Servers
7. Security
IntroductionConcealing a Name Server’s VersionConfiguring a Name Server to Work with a Firewall (or Vice Versa)Setting Up a Hidden Primary Master Name ServerSetting Up a Stealth Slave Name ServerConfiguring an Authoritative-Only Name ServerConfiguring a Caching-Only Name ServerRunning a Name Server in a chroot( ) JailRunning the Name Server as a User Other than RootDefining a TSIG KeySecuring Zone TransfersRestricting the Queries a Name Server AnswersPreventing a Name Server from Querying a Particular Remote Name ServerPreventing a Name Server from Responding to DNS Traffic from Certain NetworksProtecting a Name Server from Spoofing
8. Interoperability and Upgrading
IntroductionUpgrading from BIND 4 to BIND 8 or 9Upgrading from BIND 8 to BIND 9Configuring a Name Server to Accommodate a Slave Running BIND 4Configuring a BIND Name Server to Accommodate a Slave Running the Microsoft DNS ServerConfiguring a BIND Name Server as a Slave to a Microsoft DNS ServerPreventing Windows Computers from Trying to Update Your ZonesHandling Windows Registration with a BIND Name ServerHandling Active Directory with a Name ServerConfiguring a DHCP Server to Update a BIND Name Server

9. Resolvers and Programming
IntroductionConfiguring a Resolver to Query a Remote Name ServerConfiguring a Resolver to Resolve Single-Label Domain NamesConfiguring a Resolver to Append Multiple Domain Names to ArgumentsSorting Multiple Addresses in a ResponseChanging the Resolver’s TimeoutConfiguring the Order in Which a Resolver Uses DNS, /etc/hosts, and NISLooking Up Records ProgrammaticallyTransferring a Zone ProgrammaticallyUpdating a Zone ProgrammaticallySigning Queries and Dynamic Updates with TSIG Programmatically
10. Logging and Troubleshooting
IntroductionFinding a Syntax Error in a named.conf FileFinding a Syntax Error in a Zone Data FileSending Log Messages to a Particular FileDiscarding a Category of MessagesDetermining Which Category a Message Is InSending syslog Output to Another HostLogging Dynamic UpdatesRotating Log FilesLooking Up Records with digReverse-Mapping an Address with digTransferring a Zone Using digTracing Name Resolution Using dig
11. IPv6
IntroductionConfiguring a Name Server to Listen for Queries on an IPv6 InterfaceConfiguring a Name Server to Send Queries from a Particular IPv6 AddressAdding a Host with an IPv6 InterfaceConfiguring rndc to Work Over IPv6
Index
About the Author
Colophon
Copyright

Overview

The DNS & BIND Cookbook presents solutions to the many problems faced by network administrators responsible for a name server. Following O'Reilly's popular problem-and-solution cookbook format, this title is an indispensable companion to DNS & BIND, 4th Edition, the definitive guide to the critical task of name server administration. The cookbook contains dozens of code recipes showing solutions to everyday problems, ranging from simple questions, like, "How do I get BIND?" to more advanced topics like providing name service for IPv6 addresses. It's full of BIND configuration files that you can adapt to your sites requirements.With the wide range of recipes in this book, you'll be able to

Check whether a name is registered
Register your domain name and name servers
Create zone files for your domains
Protect your name server from abuse
Set up back-up mail servers and virtual email addresses
Delegate subdomains and check delegation
Use incremental transfer
Secure zone transfers
Restrict which queries a server will answer
Upgrade to BIND 9 from earlier version
Perform logging and troubleshooting
Use IPv6

and much more.These recipes encompass all the day-to-day tasks you're faced with when managing a name server, and many other tasks you'll face as your site grows. Written by Cricket Liu, a noted authority on DNS, and the author of the bestselling DNS & BIND and DNS on Windows 2000, the DNS & BIND Cookbook belongs in every system or network administrator's library.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 0596004109Errata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills