config probs

David Botham dns at botham.net
Fri Aug 23 16:20:35 UTC 2002


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> -----Original Message-----
> From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org]
> On Behalf Of Norb Ryan
> Sent: Thursday, August 22, 2002 9:26 PM
> To: comp-protocols-dns-bind at isc.org
> Subject: config probs
> 
> 
> i posted last week and made progress as a result of the answers. 
> thanks. i'm still having trouble getting this named server
> communicating with the world outside my little network.
> 
> static ip 64.81.199.192 assigned by my isp Speakeasy
> domain name nrr3.org from Network Solutions
> Linksys 4 port router (befsr41) with firmware 1.42.7
> redhat 7.3 server running dns-bind 9.2.0
> server's hostname is ursuline.nrr3.org - ip address is 192.168.1.2.
> the router forwards port 53 to ursuline, the server, at
> 192.168.1.2.  

Are you allowing/forwarding both tcp and udp?


> dhcp is turned on in the router - it starts handing out ips at
> 192.168.1.100.
> set up an entry on ns1.granitecanyon.com as a secondary name
> server.  
> 
> the concept that i'm having trouble with is the relationships
> between the server's ip 192.168.1.2, the static ip 64.81.199.192
> and the zone data files.   any suggestions?
> 
> here is what i have configured:
> ----------------------------------------------------------------
> /etc/named.conf
> ----------------------------------------------------------------
> ## named.conf - configuration for bind
> #
> # Generated automatically by bindconf, alchemist et al.
> 
> 
> options {
> 	directory "/var/named/";
>         allow-query { any; };
	query-source address * port 53;
#above line forces bi-direction traffic on port 53
> };
> 
> zone  "nrr3.org" in {
>         type master;
>         file "db.nrr3.org";
>         allow-transfer {
>            216.254.95.2;
>            216.231.41.2;
>            205.166.226.38;
>         };
> 
> };
> 
> zone  "199.81.64.in-addr.arpa" in{
>         type master;
>         file "db.199.81.64";
> };
> 
> #zone  "1.168.192.in-addr.arpa" in {
> #        type master;
> #        file "db.192.168.1";
> #};
> 
> zone  "0.0.127.in-addr.arpa" in {
>         type master;
>         file "db.127.0.0";
> };
> 
> zone  "." {
> 	type hint;
> 	file  "named.ca";
> };
> 
> controls {
>         inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
> };
> 
> key "rndc-key" {
>         algorithm hmac-md5;
>         secret "xxxxxxxxxxx";
> };
> 
> -------------------------------------------------------------
> /var/named/db.nrr3.org
> -------------------------------------------------------------
> $TTL 12h
> nrr3.org. IN SOA ursuline.nrr3.org. hostmaster.nrr3.org. (
>                       5        ; Serial
>                       12h      ; Refresh after 12 hours
>                       1h       ; Retry after 1 hour
>                       1w       ; Expire after 1 week
>                       12h)      ; Negative caching TTL of 12 hours
> ;
> ; Name servers
> nrr3.org. IN NS  ursuline.nrr3.org.
> 
> localhost.nrr3.org.  IN A    64.81.199.192
> ursuline.nrr3.org.   IN A    64.81.199.192
> 
> ;
> ; Aliases
> ;
> urs                  IN A    64.81.199.192
> 
> www                  IN CNAME  urs
> 
> -----------------------------------------------------------------
> /var/named/db.199.81.64
> -----------------------------------------------------------------
> $TTL 12h
> 199.81.64.in-addr.arpa. IN SOA ursuline.nrr3.org. 
> hostmaster.nrr3.org.( 
>                  2       ; Serial
>                  12h     ; Refresh after 12 hours
>                  1h      ; Retry after 1 hour
>                  1w      ; Expire after 1 week
>                  12h)    ; Negative caching TTL of 12 hours
> 
> ;
> ; Name servers
> ;
> 199.81.64.in-addr.arpa.  IN NS  ursuline.nrr3.org.
> 
> ;
> ; Addresses point to canonical name
> ;
> 192.199.81.64.in-addr.arpa.  IN PTR ursuline.nrr3.org.
> 
> 
> 
> - end of posting

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQA/AwUBPWZg01q85iiiMQ4EEQKI1gCdHGFtb3neV8cPrumWSYzQbpo9py0AoOeo
D9WcPlJwMGBLJJn1SmDeGuwn
=ipVf
-----END PGP SIGNATURE-----



More information about the bind-users mailing list