setup DNS Master zone

['chris']

hi

I've setup Master DNS-Server BIND 9 on linux Debian Sarge
and it seems to work,
but I'm not sure if I've setup the Master Zone of this name server correctly.

short information:
ext.domain.net is the name of this name server
and domain.net is domain of this name server

I've done following using the webmin:

1.) first I've created a new reverse master zone:


zone "205.X.X.in-addr.arpa" {
type master;
notify yes;
file "/etc/bind/205.X.X.rev";
};


2.) next step, I've created a master zone for my dns server ext.domain.net:

zone "domain.net" {
type master;
file "/etc/bind/domain.net.hosts";
notify yes;
allow-query { any; };
};
3.) I've opened the zone master zone: domain.net, clicked on Address and I've put the following:
ext.domain.net. Default 205.X.X.10
domain.net. Default 205.X.X.10
www.domain.net. Default 205.X.X.10


now I have:

# vi domain.net.hosts

$ttl 38400
domain.net. IN SOA ext.domain.net. postmaster.domain.net. (
1141342035
10800
3600
604800
38400 )
domain.net. IN NS ext.domain.net.
ext.domain.net. IN A 205.X.X.10
domain.net. IN A 205.X.X.10

I'll be very happy, if someone could check this entries and let me know.

kind regards
chris

[Ivan Ferreira · Accepted solution]

The first part of step 3 i did not understood, where you configured?

ext.domain.net. Default 205.X.X.10
domain.net. Default 205.X.X.10
www.domain.net. Default 205.X.X.10


Also the last entry for your zone is incorrect:

domain.net. IN A 205.X.X.10

That is wrong, you won't assign an ip address to a domain. That could be for an MX RR, like this:

domain.net. IN MX 10 mail.domain.net.

You didn't post your reverse zone file.

['chris']

in step 3 I wrote what I did using the webmin

and reverse zone is:

# vi 205.X.X.rev

$ttl 38400
X.X.205.in-addr.arpa. IN SOA ext.domain.net. postmaster.domain.net. (
1141342019
10800
3600
604800
38400 )
X.X.205.in-addr.arpa. IN NS ext.domain.net.
10.X.X.205.in-addr.arpa. IN PTR ext.domain.net.

[Ivan Ferreira]

Your reverse zone file seems to be good, considering that you still don't almost any entry. Good luck with your server configuration, use the dig command to test your server.

['chris']

thanks a lot !

should I remove:

domain.net. IN A 205.X.X.10

from the master zone ?

greetings
chris

[Ivan Ferreira]

Yes, you should remove that line.

['chris']

but, if I remove this line, nslookup is not working anymore:

# nslookup domain.net
Server: 127.0.0.1
Address: 127.0.0.1#53

*** Can't find domain.net: No answer

before was working well.

[Ivan Ferreira]

Your nslookup query is wrong. Instead of nsloookup you should use dig, and you should ask for a specific DNS Resource Record, not just ask for the domain, like this:

To query the Name Server for domain.net
dig domain.net NS

To query the address for ext.domain.net
dig ext.domain.net

Check the answer section.

['chris']

I could not connect to the webserver http://domain.net anymore.
before was working.

ext:~# dig domain.net NS

; <<>> DiG 9.2.4 <<>> domain.net NS
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28666
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;domain.net. IN NS

;; ANSWER SECTION:
domain.net. 38400 IN NS ext.domain.net.

;; ADDITIONAL SECTION:
ext.domain.net. 38400 IN A 205.X.X.10

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Mar 10 16:50:19 2006
;; MSG SIZE rcvd: 64


ext:~# dig ext.domain.net

; <<>> DiG 9.2.4 <<>> ext.domain.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49420
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ext.domain.net. IN A

;; ANSWER SECTION:
ext.domain.net. 38400 IN A 205.X.X.10

;; AUTHORITY SECTION:
domain.net. 38400 IN NS ext.domain.net.

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Mar 10 16:50:45 2006
;; MSG SIZE rcvd: 64

[Ivan Ferreira]

Ok, now I understand, you want to connect to your web server without specifying the host name. I haven't think about that. If this is what you want, do not remove that line.

Sorry for the wrong support.