{"id":696,"date":"2013-04-02T19:12:28","date_gmt":"2013-04-02T17:12:28","guid":{"rendered":"http:\/\/blog.rabahi.net\/?page_id=696"},"modified":"2014-08-04T17:39:06","modified_gmt":"2014-08-04T15:39:06","slug":"srv-dns","status":"publish","type":"page","link":"https:\/\/blog.rabahi.net\/?page_id=696","title":{"rendered":"srv-dns"},"content":{"rendered":"

Prerequiste<\/h1>\n

I assume that you have a Centos installation.<\/p>\n

Installation<\/h1>\n

You can copy\/paste this script and use it to configure automatically your server.<\/p>\n

  1. #!\/bin\/bash<\/span><\/div><\/li>
  2.  <\/div><\/li>
  3. echo<\/span> "install bind"<\/span><\/div><\/li>
  4. dnf -y<\/span> install<\/span>  bind<\/span> bind-libs bind-utils<\/div><\/li>
  5.  <\/div><\/li>
  6. echo<\/span> "start service named at boot"<\/span><\/div><\/li>
  7. systemctl enable<\/span> named.service<\/div><\/li>
  8.  <\/div><\/li>
  9. echo<\/span> "get current network interface"<\/span><\/div><\/li>
  10. currentDevice<\/span>=`<\/span>nmcli d |<\/span> grep<\/span> connected |<\/span> awk<\/span> '{split($1,a,"\\t"); print a[1]}'<\/span>`<\/span><\/div><\/li>
  11.  <\/div><\/li>
  12. echo<\/span> "add service name (port 53) to firewall"<\/span><\/div><\/li>
  13. firewall-cmd --permanent<\/span> --add-port<\/span>=53<\/span>\/<\/span>tcp<\/div><\/li>
  14. firewall-cmd --reload<\/span><\/div><\/li>
  15.  <\/div><\/li>
  16. echo<\/span> "create my-domain.local.fwd"<\/span><\/div><\/li>
  17. cat<\/span> ><\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.fwd <<<\/span> "EOF"<\/span><\/div><\/li>
  18. $ORIGIN<\/span> my-domain.local.<\/div><\/li>
  19.  <\/div><\/li>
  20. $TTL<\/span> 3D<\/div><\/li>
  21.  <\/div><\/li>
  22. @<\/span>       SOA     dns.my-domain.local.     root.my-domain.local. (<\/span>12<\/span> 4h 1h 1w 1h)<\/span><\/div><\/li>
  23.  <\/div><\/li>
  24. @<\/span>       IN      NS      dns.my-domain.local.<\/div><\/li>
  25.  <\/div><\/li>
  26. dns.my-domain.local.     IN      A       mylocalIP<\/div><\/li>
  27.  <\/div><\/li>
  28. www                                     IN      A       mylocalIP<\/div><\/li>
  29.  <\/div><\/li>
  30. EOF<\/div><\/li>
  31.  <\/div><\/li>
  32. mylocalIP<\/span>=`<\/span>hostname<\/span> -I`<\/span><\/div><\/li>
  33. sed<\/span> -i<\/span> "s\/mylocalIP\/$mylocalIP<\/span>\/g"<\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.fwd<\/div><\/li>
  34.  <\/div><\/li>
  35. echo<\/span> "create my-domain.local.rev"<\/span><\/div><\/li>
  36. cat<\/span> ><\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.rev <<<\/span> "EOF"<\/span><\/div><\/li>
  37. $ORIGIN<\/span> mylocalIP3.mylocalIP2.mylocalIP1.in-addr.arpa.<\/div><\/li>
  38.  <\/div><\/li>
  39. $TTL<\/span> 3D<\/div><\/li>
  40.  <\/div><\/li>
  41. @<\/span>       SOA     dns.my-domain.local.     root.my-domain.local. (<\/span>12<\/span> 4h 1h 1w 1h)<\/span><\/div><\/li>
  42.  <\/div><\/li>
  43. @<\/span>       IN      NS      dns.my-domain.local.<\/div><\/li>
  44.  <\/div><\/li>
  45. mylocalIP4     IN      PTR     dns.my-domain.local.<\/div><\/li>
  46.  <\/div><\/li>
  47. EOF<\/div><\/li>
  48.  <\/div><\/li>
  49. mylocalIP1<\/span>=`<\/span>hostname<\/span> -I<\/span> |<\/span> cut<\/span> -d: -f2<\/span> |<\/span> cut<\/span> -d. -f1<\/span>|<\/span> awk<\/span> '{ print $1}'<\/span>`<\/span><\/div><\/li>
  50. mylocalIP2<\/span>=`<\/span>hostname<\/span> -I<\/span> |<\/span> cut<\/span> -d: -f2<\/span> |<\/span> cut<\/span> -d. -f2<\/span>|<\/span> awk<\/span> '{ print $1}'<\/span>`<\/span><\/div><\/li>
  51. mylocalIP3<\/span>=`<\/span>hostname<\/span> -I<\/span> |<\/span> cut<\/span> -d: -f2<\/span> |<\/span> cut<\/span> -d. -f3<\/span>|<\/span> awk<\/span> '{ print $1}'<\/span>`<\/span><\/div><\/li>
  52. mylocalIP4<\/span>=`<\/span>hostname<\/span> -I<\/span> |<\/span> cut<\/span> -d: -f2<\/span> |<\/span> cut<\/span> -d. -f4<\/span>|<\/span> awk<\/span> '{ print $1}'<\/span>`<\/span><\/div><\/li>
  53.  <\/div><\/li>
  54. sed<\/span> -i<\/span> "s\/mylocalIP1\/$mylocalIP1<\/span>\/g"<\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.rev<\/div><\/li>
  55. sed<\/span> -i<\/span> "s\/mylocalIP2\/$mylocalIP2<\/span>\/g"<\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.rev<\/div><\/li>
  56. sed<\/span> -i<\/span> "s\/mylocalIP3\/$mylocalIP3<\/span>\/g"<\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.rev<\/div><\/li>
  57. sed<\/span> -i<\/span> "s\/mylocalIP4\/$mylocalIP4<\/span>\/g"<\/span> \/<\/span>var\/<\/span>named\/<\/span>my-domain.local.rev<\/div><\/li>
  58.  <\/div><\/li>
  59. echo<\/span> "Now add zone to named.conf"<\/span><\/div><\/li>
  60. cat<\/span> >><\/span> \/<\/span>etc\/<\/span>named.conf <<<\/span> "EOF"<\/span><\/div><\/li>
  61. zone "my-domain.local"<\/span> {<\/span><\/div><\/li>
  62.         type<\/span> master;<\/div><\/li>
  63.         file<\/span> "my-domain.local.fwd"<\/span>;<\/div><\/li>
  64. }<\/span>;<\/div><\/li>
  65. zone "mylocalIP3.mylocalIP2.mylocalIP1.in-addr.arpa"<\/span> {<\/span><\/div><\/li>
  66.         type<\/span> master;<\/div><\/li>
  67.         file<\/span> "my-domain.local.rev"<\/span>;<\/div><\/li>
  68. }<\/span>;<\/div><\/li>
  69. EOF<\/div><\/li>
  70.  <\/div><\/li>
  71. sed<\/span> -i<\/span> "s\/mylocalIP1\/$mylocalIP1<\/span>\/g"<\/span> \/<\/span>etc\/<\/span>named.conf<\/div><\/li>
  72. sed<\/span> -i<\/span> "s\/mylocalIP2\/$mylocalIP2<\/span>\/g"<\/span> \/<\/span>etc\/<\/span>named.conf<\/div><\/li>
  73. sed<\/span> -i<\/span> "s\/mylocalIP3\/$mylocalIP3<\/span>\/g"<\/span> \/<\/span>etc\/<\/span>named.conf<\/div><\/li>
  74.  <\/div><\/li>
  75. echo<\/span> "Now enable query from all network (WARNING you should have a look at this to improve your network security!)"<\/span><\/div><\/li>
  76. sed<\/span> -i<\/span> "s\/\\(listen-on port\\)\/\\\/\\\/\\1\/g"<\/span> \/<\/span>etc\/<\/span>named.conf<\/div><\/li>
  77. sed<\/span> -i<\/span> "s\/\\(listen-on-v6 port\\)\/\\\/\\\/\\1\/g"<\/span> \/<\/span>etc\/<\/span>named.conf<\/div><\/li>
  78. sed<\/span> -i<\/span> "s\/\\(allow-query\\)\/\\\/\\\/\\1\/g"<\/span> \/<\/span>etc\/<\/span>named.conf<\/div><\/li>
  79.  <\/div><\/li>
  80.  <\/div><\/li>
  81. echo<\/span> "start service"<\/span><\/div><\/li>
  82. systemctl restart named.service<\/div><\/li>
  83.  <\/div><\/li><\/ol><\/pre>\n","protected":false},"excerpt":{"rendered":"
    Prerequiste I assume that you have a Centos installation. Installation You can copy\/paste this script and use it to configure automatically your server.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":677,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-696","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=696"}],"version-history":[{"count":5,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/696\/revisions"}],"predecessor-version":[{"id":1033,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/696\/revisions\/1033"}],"up":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/677"}],"wp:attachment":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}