BIND: Configurando o arquivo named.conf

From Wiki
Revision as of 22:39, 5 February 2013 by Ebasso (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Edite o arquivo /etc/named.conf e adicione as entradas como abaixo: 


acl "updateServers" { 192.168.1.10; 192.168.1.5; };


# Para fins de seguranca ao atualizar o DNS
key DHCP_UPDATER {
        algorithm HMAC-MD5.SIG-ALG.REG.INT;
        #algorithm       hmac-md5;
        secret "======== utilizar a chave do arquivo rndc.key ============";
};

options {
       directory "/var/named";
	dump-file "/var/named/data/cache_dump.db";
       statistics-file "/var/named/data/named_stats.txt";
       /*
        * If there is a firewall between you and nameservers you want
        * to talk to, you might need to uncomment the query-source
        * directive below.  Previous versions of BIND always asked
        * questions using port 53, but BIND 8.1 uses an unprivileged
        * port by default.
       */
       // query-source address * port 53;
       listen-on { 127.0.0.1; 192.168.1.10; };
};

logging { 
       channel seguranca {
            file "/var/log/namedlog" versions 6 size 50m;
            print-time yes;
            print-severity	yes;
            print-category yes;
       };
       category security { seguranca; };
       category notify   { seguranca; };

};
// 
// a caching only nameserver config
// 
controls {
       inet 127.0.0.1 
       allow { localhost; } 
       keys { DHCP_UPDATER; };
};

zone "." IN {
       type hint;
	file "named.ca";
};

zone "localdomain" IN {
       type master;
	file "localdomain.zone";
       allow-update { none; };
};

zone "meudominio.com.br" IN {
       type master;
	file "meudominio.com.br.zone";
       allow-update { updateServers; };
};

zone "1.168.192.in-addr.arpa" IN {
       type master;
	file "192.168.1.zone";
       allow-update { updateServers; };
};

zone "localhost" IN {
       type master;
	file "localhost.zone";
       allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
       type master;
	file "named.local";
       allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
       type master;
       file "named.ip6.local";
       allow-update { none; };
};

zone "255.in-addr.arpa" IN {
       type master;
	file "named.broadcast";
       allow-update { none; };
};

zone "0.in-addr.arpa" IN {
       type master;
	file "named.zero";
       allow-update { none; };
};

# Zonas utilizadas pelo Active Directory

zone "_msdcs.meudominio.com.br" {
       type master;
	file "_msdcs.meudominio.com.br";
       allow-update { updateServers; };
};

zone "_sites.meudominio.com.br" {
       type master;
	file "_sites.meudominio.com.br";
       allow-update { updateServers; };
};

zone "_tcp.meudominio.com.br" {
	 type master;
	file "_tcp.meudominio.com.br";
	 allow-update { updateServers; };
};

zone "_udp.meudominio.com.br" {
	type master;
	file "_udp.meudominio.com.br";
	allow-update { updateServers; };
};

Salve e Feche o arquivo

Ver também



Retrieved from "https://ebasso.net/wiki/index.php?title=BIND:_Configurando_o_arquivo_named.conf&oldid=1716"