[LUGOS] lokalni DNS
Iztok Umek
iztok at si-con.com
Sat May 26 09:02:36 CEST 2007
Boštjan Jerko wrote:
> Živjo!
>
> Na lokalni mreži (navzven imam NAT na ADSL) imam postavljen web in
> poštni strežnik. Imam tudi notranji DNS strežnik (Debian z Bind 9).
> Če hočem z notebook-om na mail strežnik, hoče iti na zunanji WAN in ne
> do notranjega poštnega strežnika.
> Glede na to, da na notebook-u ne želim dodajati kakšnih rout, bi rad
> zadevo rešil z DNS strežnikom.
>
> Sedaj se mučim z vpisom v DNS, pa mi ne gre in ne gre.
>
> Prosim za nasvet, kaj vpisati za statično povezavo domene z lokalnim
> IPjem.
Kaj naj ti recem? Nastaviti moras split view.
Evo en link kako to uredit:
http://www.knowplace.org/pages/howtos/split_view_with_bind_9_howto.php
Example named.conf
// This is the primary configuration file for the BIND DNS server named.
// This is for example only
acl "dns_slaves" {
172.16.1.2; # IP of the slave DNS nameserver
172.16.101.2 # ditto
};
acl "lan_hosts" {
192.168.0.0/24; # network address of your local LAN
127.0.0.1; # allow loop back
};
options { # this section sets the default options
directory "/etc/namedb" # directory where the zone files will reside
listen-on {
192.168.0.1; # IP address of the local interface to listen
127.0.0.1; # ditto
};
auth-nxdomain no; # conform to RFC1035
allow-query { any; }; # allow anyone to issue queries
recursion no; # disallow recursive queries unless over-ridden below
version "0"; # obscures version reporting - can't hurt
};
key "rndc-key" {
algorithm hmac-md5;
secret "nOzUd7+Hwdq6k6CQq7SbDw=="; # DO NOT USE THIS KEY - example only
};
controls {
inet 127.0.0.1 allow { localhost; }
keys { rndc-key; };
};
view "internal" {
match-clients { lan_hosts; }; # match hosts in acl "lan_hosts" above
recursion yes; # allow recursive queries
notify no; # disable AA notifies
// prime the server with knowledge of the root servers
zone "." {
type hint;
file "db.root";
};
// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912
zone "localhost" {
type master;
file "db.local";
};
zone "127.in-addr.arpa" {
type master;
file "db.127";
};
zone "0.in-addr.arpa" {
type master;
file "db.0";
};
zone "255.in-addr.arpa" {
type master;
file "db.255";
};
zone "example.com" {
type master;
file "internal/example.com.zone";
};
};
view "external" {
// "localnets" and "any" are special reserved words
// "localnets" mean any network address (as opposed to host address) configured
// on the local network interfaces - "!" means to negate
match-clients { !localnets; any; };
recursion no; # disallow recursive queries
allow-transfer { dns_slaves; }; # allow "hosts in act "dns_slaves" to transfer zones
zone "example.com" {
type master;
file "external/example.com.zone";
};
};
More information about the lugos-list
mailing list