Dúvidas ao Montar Servidor DNS

icefusion
(usa Debian)

Enviado em 08/10/2009 - 08:19h

Eu gostaria de Configurar um servidor dns para que eu pudesse acessar meu servidor web (tenho um Apache, MySQl e PHP Instalado) via nome ao inves de acessar via ip, pois desenvolverei um sistema erp em php e utilizarei esse server para o sistema.

Deposide pesquisas e ajuda no forum me falaram para configurar um servidor DNS.
Configurei com ajuda de alguns amigos e tb com ajuda de algumas literaturas, inclusive com os livros do morimoto.
Gostaria de saber se tem mais algo que eu precise configurar. Segue os Confs!!
*Obs.: Tenho o Debian Lenny Instalado.

-------------------------------------------------------------


NAMED.CONF

include "/etc/bind/named.conf.options";

zone "." {
type hint;
file "/etc/bind/db.root";
};

zone "localhost" {
type master;
file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" {
type master;
file "/etc/bind/db.127";
};

zone "0.in-addr.arpa" {
type master;
file "/etc/bind/db.0";
};

zone "255.in-addr.arpa" {
type master;
file "/etc/bind/db.255";
};

zone "enio.com"{
type master;
file "/etc/bind/db.enio.com";
};

zone "1.168.192.in-addr.arpa"{
type master;
file "/etc/bind/db.1.168.192";
};

include "/etc/bind/named.conf.local";

-------------------------------------------

DB.1.168.192

$TTL 86400
@ IN SOA hades.enio.com. root.hades.enio.com. (
2009100705 ;serial
7200 ;refresh
7200 ;retry
604800 ;expire
86400 ;minimo
)
@ IN NS hades.enio.com.
3 IN PTR hades.enio.com.

-------------------------------------------
DB.ENIO.COM

$TTL 86400
@ IN SOA hades.enio.com. root.hades.enio.com. (
2009100705 ;serial
7200 ;refresh
7200 ;retry
604800 ;expire
86400 ;minimo
)

@ IN NS hades.enio.com.
@ IN A 192.168.1.3

hades A 192.168.1.3
intranet A 192.168.1.3
www A 192.168.1.3
--------------------------------------------------

DB.ROOT


. 3600000 IN NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4
;A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:BA3E::2:30
;
; formerly NS1.ISI.EDU
;
. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 192.228.79.201
;
; formerly C.PSI.NET
;
. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12
;
; formerly TERP.UMD.EDU
;
. 3600000 NS D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET. 3600000 A 128.8.10.90
;
; formerly NS.NASA.GOV
;
. 3600000 NS E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10
;
; formerly NS.ISC.ORG
. 3600000 NS F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241
;F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f
;
; formerly NS.NIC.DDN.MIL
;
. 3600000 NS G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4
;
; formerly AOS.ARL.ARMY.MIL
;
. 3600000 NS H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET. 3600000 A 128.63.2.53
;H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::803f:235
;
; formerly NIC.NORDU.NET
;
. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17
;
; operated by VeriSign, Inc.
;
. 3600000 NS J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30
;J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:C27::2:30
;
; operated by RIPE NCC
;
. 3600000 NS K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129
;K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1
;
; operated by ICANN
;
. 3600000 NS L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42
;
; operated by WIDE
;
. 3600000 NS M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33
;M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35

; # # # # HINTS# # # # #

;; ANSWER SECTION:

. 518400 IN NS C.ROOT-SERVERS.NET.

. 518400 IN NS B.ROOT-SERVERS.NET.

. 518400 IN NS F.ROOT-SERVERS.NET.

. 518400 IN NS E.ROOT-SERVERS.NET.

. 518400 IN NS M.ROOT-SERVERS.NET.

. 518400 IN NS K.ROOT-SERVERS.NET.

. 518400 IN NS D.ROOT-SERVERS.NET.

. 518400 IN NS L.ROOT-SERVERS.NET.

. 518400 IN NS J.ROOT-SERVERS.NET.

. 518400 IN NS I.ROOT-SERVERS.NET.

. 518400 IN NS H.ROOT-SERVERS.NET.

. 518400 IN NS G.ROOT-SERVERS.NET.

. 518400 IN NS A.ROOT-SERVERS.NET.



;; ADDITIONAL SECTION:

A.ROOT-SERVERS.NET. 3600000 IN A 198.41.0.4

;A.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:503:ba3e::2:30

B.ROOT-SERVERS.NET. 3600000 IN A 192.228.79.201

C.ROOT-SERVERS.NET. 3600000 IN A 192.33.4.12
D.ROOT-SERVERS.NET. 3600000 IN A 128.8.10.90

E.ROOT-SERVERS.NET. 3600000 IN A 192.203.230.10

F.ROOT-SERVERS.NET. 3600000 IN A 192.5.5.241

;F.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:500:2f::f

G.ROOT-SERVERS.NET. 3600000 IN A 192.112.36.4

H.ROOT-SERVERS.NET. 3600000 IN A 128.63.2.53

;H.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:500:1::803f:235

I.ROOT-SERVERS.NET. 3600000 IN A 192.36.148.17

J.ROOT-SERVERS.NET. 3600000 IN A 192.58.128.30

;J.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:503:c27::2:30

; End of File

----------------------------------------------------------------------------

icefusion
(usa Debian)

Enviado em 08/10/2009 - 08:34h

só uma alteração

em db.enio.com

DB.ENIO.COM

$TTL 86400
@ IN SOA hades.enio.com. root.hades.enio.com. (
2009100705 ;serial
7200 ;refresh
7200 ;retry
604800 ;expire
86400 ;minimo
)

@ IN NS hades.enio.com.
@ IN A 192.168.1.3

hades IN A 192.168.1.3
intranet IN A 192.168.1.3
www IN A 192.168.1.3

magnolinux
(usa Debian)

Enviado em 08/10/2009 - 08:52h

o basico é isso aí mesmo, vai funcionar normal, resolver de ip para nome e reverso, mais vc depois pode ir implementando um pouco mais de segurança, como colocar o bind em um chroot, configurar o recurso de view.

abraço..

icefusion
(usa Debian)

Enviado em 08/10/2009 - 09:56h

gostaria de um artigo para q eu pudesse implementar esses recursos :D...se puder me indicar!

magnolinux
(usa Debian)

Enviado em 08/10/2009 - 10:28h

Da uma olhada nesses dois artigos aqui do vol
http://www.vivaolinux.com.br/artigo/Recurso-de-Views-no-Bind/
http://www.vivaolinux.com.br/artigo/Configurando-BIND-9-+-chroot-sem-misterios/

Seria bom vc baixar a documentação ofical do bind e dar uma olhada.

abraços